From 2ff608b9e1b4a40c3da7db0e9c501ef0245512c1 Mon Sep 17 00:00:00 2001 From: Jakub Hadvig Date: Tue, 14 Jul 2026 19:23:58 +0200 Subject: [PATCH 1/2] CONSOLE-5209: Promote IngressComponentRouteLabels to Default --- ...fig-operator_01_ingresses-Default.crd.yaml | 546 ---------------- ..._01_ingresses-DevPreviewNoUpgrade.crd.yaml | 598 ------------------ ..._config-operator_01_ingresses-OKD.crd.yaml | 546 ---------------- ...01_ingresses-TechPreviewNoUpgrade.crd.yaml | 598 ------------------ ..._10_config-operator_01_ingresses.crd.yaml} | 1 - features.md | 17 +- features/features.go | 2 +- ...fig-operator_01_ingresses-Default.crd.yaml | 546 ---------------- ..._01_ingresses-DevPreviewNoUpgrade.crd.yaml | 598 ------------------ ..._config-operator_01_ingresses-OKD.crd.yaml | 546 ---------------- ...01_ingresses-TechPreviewNoUpgrade.crd.yaml | 598 ------------------ ..._10_config-operator_01_ingresses.crd.yaml} | 1 - .../featureGate-4-10-Hypershift-Default.yaml | 31 +- .../featureGate-4-10-Hypershift-OKD.yaml | 31 +- ...eatureGate-4-10-SelfManagedHA-Default.yaml | 45 +- .../featureGate-4-10-SelfManagedHA-OKD.yaml | 45 +- 16 files changed, 92 insertions(+), 4657 deletions(-) delete mode 100644 config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-Default.crd.yaml delete mode 100644 config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-DevPreviewNoUpgrade.crd.yaml delete mode 100644 config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-OKD.crd.yaml delete mode 100644 config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-TechPreviewNoUpgrade.crd.yaml rename config/v1/zz_generated.crd-manifests/{0000_10_config-operator_01_ingresses-CustomNoUpgrade.crd.yaml => 0000_10_config-operator_01_ingresses.crd.yaml} (99%) delete mode 100644 payload-manifests/crds/0000_10_config-operator_01_ingresses-Default.crd.yaml delete mode 100644 payload-manifests/crds/0000_10_config-operator_01_ingresses-DevPreviewNoUpgrade.crd.yaml delete mode 100644 payload-manifests/crds/0000_10_config-operator_01_ingresses-OKD.crd.yaml delete mode 100644 payload-manifests/crds/0000_10_config-operator_01_ingresses-TechPreviewNoUpgrade.crd.yaml rename payload-manifests/crds/{0000_10_config-operator_01_ingresses-CustomNoUpgrade.crd.yaml => 0000_10_config-operator_01_ingresses.crd.yaml} (99%) diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-Default.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-Default.crd.yaml deleted file mode 100644 index 70c87e6e48b..00000000000 --- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-Default.crd.yaml +++ /dev/null @@ -1,546 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - api-approved.openshift.io: https://github.com/openshift/api/pull/470 - api.openshift.io/merged-by-featuregates: "true" - include.release.openshift.io/ibm-cloud-managed: "true" - include.release.openshift.io/self-managed-high-availability: "true" - release.openshift.io/bootstrap-required: "true" - release.openshift.io/feature-set: Default - name: ingresses.config.openshift.io -spec: - group: config.openshift.io - names: - kind: Ingress - listKind: IngressList - plural: ingresses - singular: ingress - scope: Cluster - versions: - - name: v1 - schema: - openAPIV3Schema: - description: |- - Ingress holds cluster-wide information about ingress, including the default ingress domain - used for routes. The canonical name is `cluster`. - - Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). - properties: - apiVersion: - description: |- - APIVersion defines the versioned schema of this representation of an object. - Servers should convert recognized schemas to the latest internal value, and - may reject unrecognized values. - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources - type: string - kind: - description: |- - Kind is a string value representing the REST resource this object represents. - Servers may infer this from the endpoint the client submits requests to. - Cannot be updated. - In CamelCase. - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds - type: string - metadata: - type: object - spec: - description: spec holds user settable values for configuration - properties: - appsDomain: - description: |- - appsDomain is an optional domain to use instead of the one specified - in the domain field when a Route is created without specifying an explicit - host. If appsDomain is nonempty, this value is used to generate default - host values for Route. Unlike domain, appsDomain may be modified after - installation. - This assumes a new ingresscontroller has been setup with a wildcard - certificate. - type: string - componentRoutes: - description: |- - componentRoutes is an optional list of routes that are managed by OpenShift components - that a cluster-admin is able to configure the hostname and serving certificate for. - The namespace and name of each route in this list should match an existing entry in the - status.componentRoutes list. - - To determine the set of configurable Routes, look at namespace and name of entries in the - .status.componentRoutes list, where participating operators write the status of - configurable routes. - A maximum of 250 component routes may be configured. - items: - description: ComponentRouteSpec allows for configuration of a route's - hostname and serving certificate. - properties: - hostname: - description: hostname is the hostname that should be used by - the route. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - name: - description: |- - name is the logical name of the route to customize. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of status.componentRoutes if the route is to be customized. - maxLength: 256 - minLength: 1 - type: string - namespace: - description: |- - namespace is the namespace of the route to customize. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of status.componentRoutes if the route is to be customized. - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - type: string - servingCertKeyPairSecret: - description: |- - servingCertKeyPairSecret is a reference to a secret of type `kubernetes.io/tls` in the openshift-config namespace. - The serving cert/key pair must match and will be used by the operator to fulfill the intent of serving with this name. - If the custom hostname uses the default routing suffix of the cluster, - the Secret specification for a serving certificate will not be needed. - properties: - name: - description: name is the metadata.name of the referenced - secret - type: string - required: - - name - type: object - required: - - hostname - - name - - namespace - type: object - maxItems: 250 - type: array - x-kubernetes-list-map-keys: - - namespace - - name - x-kubernetes-list-type: map - domain: - description: |- - domain is used to generate a default host name for a route when the - route's host name is empty. The generated host name will follow this - pattern: "..". - - It is also used as the default wildcard domain suffix for ingress. The - default ingresscontroller domain will follow this pattern: "*.". - - Once set, changing domain is not currently supported. - type: string - x-kubernetes-validations: - - message: domain is immutable once set - rule: self == oldSelf - loadBalancer: - description: |- - loadBalancer contains the load balancer details in general which are not only specific to the underlying infrastructure - provider of the current cluster and are required for Ingress Controller to work on OpenShift. - properties: - platform: - description: |- - platform holds configuration specific to the underlying - infrastructure provider for the ingress load balancers. - When omitted, this means the user has no opinion and the platform is left - to choose reasonable defaults. These defaults are subject to change over time. - properties: - aws: - description: aws contains settings specific to the Amazon - Web Services infrastructure provider. - properties: - type: - description: |- - type allows user to set a load balancer type. - When this field is set the default ingresscontroller will get created using the specified LBType. - If this field is not set then the default ingress controller of LBType Classic will be created. - Valid values are: - - * "Classic": A Classic Load Balancer that makes routing decisions at either - the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See - the following for additional details: - - https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb - - * "NLB": A Network Load Balancer that makes routing decisions at the - transport layer (TCP/SSL). See the following for additional details: - - https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb - enum: - - NLB - - Classic - type: string - required: - - type - type: object - type: - description: |- - type is the underlying infrastructure provider for the cluster. - Allowed values are "AWS", "Azure", "BareMetal", "GCP", "Libvirt", - "OpenStack", "VSphere", "oVirt", "KubeVirt", "EquinixMetal", "PowerVS", - "AlibabaCloud", "Nutanix" and "None". Individual components may not support all platforms, - and must handle unrecognized platforms as None if they do not support that platform. - enum: - - "" - - AWS - - Azure - - BareMetal - - GCP - - Libvirt - - OpenStack - - None - - VSphere - - oVirt - - IBMCloud - - KubeVirt - - EquinixMetal - - PowerVS - - AlibabaCloud - - Nutanix - - External - type: string - type: object - type: object - requiredHSTSPolicies: - description: |- - requiredHSTSPolicies specifies HSTS policies that are required to be set on newly created or updated routes - matching the domainPattern/s and namespaceSelector/s that are specified in the policy. - Each requiredHSTSPolicy must have at least a domainPattern and a maxAge to validate a route HSTS Policy route - annotation, and affect route admission. - - A candidate route is checked for HSTS Policies if it has the HSTS Policy route annotation: - "haproxy.router.openshift.io/hsts_header" - E.g. haproxy.router.openshift.io/hsts_header: max-age=31536000;preload;includeSubDomains - - - For each candidate route, if it matches a requiredHSTSPolicy domainPattern and optional namespaceSelector, - then the maxAge, preloadPolicy, and includeSubdomainsPolicy must be valid to be admitted. Otherwise, the route - is rejected. - - The first match, by domainPattern and optional namespaceSelector, in the ordering of the RequiredHSTSPolicies - determines the route's admission status. - - If the candidate route doesn't match any requiredHSTSPolicy domainPattern and optional namespaceSelector, - then it may use any HSTS Policy annotation. - - The HSTS policy configuration may be changed after routes have already been created. An update to a previously - admitted route may then fail if the updated route does not conform to the updated HSTS policy configuration. - However, changing the HSTS policy configuration will not cause a route that is already admitted to stop working. - - Note that if there are no RequiredHSTSPolicies, any HSTS Policy annotation on the route is valid. - items: - properties: - domainPatterns: - description: |- - domainPatterns is a list of domains for which the desired HSTS annotations are required. - If domainPatterns is specified and a route is created with a spec.host matching one of the domains, - the route must specify the HSTS Policy components described in the matching RequiredHSTSPolicy. - - The use of wildcards is allowed like this: *.foo.com matches everything under foo.com. - foo.com only matches foo.com, so to cover foo.com and everything under it, you must specify *both*. - items: - type: string - minItems: 1 - type: array - includeSubDomainsPolicy: - description: |- - includeSubDomainsPolicy means the HSTS Policy should apply to any subdomains of the host's - domain name. Thus, for the host bar.foo.com, if includeSubDomainsPolicy was set to RequireIncludeSubDomains: - - the host app.bar.foo.com would inherit the HSTS Policy of bar.foo.com - - the host bar.foo.com would inherit the HSTS Policy of bar.foo.com - - the host foo.com would NOT inherit the HSTS Policy of bar.foo.com - - the host def.foo.com would NOT inherit the HSTS Policy of bar.foo.com - enum: - - RequireIncludeSubDomains - - RequireNoIncludeSubDomains - - NoOpinion - type: string - maxAge: - description: |- - maxAge is the delta time range in seconds during which hosts are regarded as HSTS hosts. - If set to 0, it negates the effect, and hosts are removed as HSTS hosts. - If set to 0 and includeSubdomains is specified, all subdomains of the host are also removed as HSTS hosts. - maxAge is a time-to-live value, and if this policy is not refreshed on a client, the HSTS - policy will eventually expire on that client. - properties: - largestMaxAge: - description: |- - The largest allowed value (in seconds) of the RequiredHSTSPolicy max-age - This value can be left unspecified, in which case no upper limit is enforced. - format: int32 - maximum: 2147483647 - minimum: 0 - type: integer - smallestMaxAge: - description: |- - The smallest allowed value (in seconds) of the RequiredHSTSPolicy max-age - Setting max-age=0 allows the deletion of an existing HSTS header from a host. This is a necessary - tool for administrators to quickly correct mistakes. - This value can be left unspecified, in which case no lower limit is enforced. - format: int32 - maximum: 2147483647 - minimum: 0 - type: integer - type: object - namespaceSelector: - description: |- - namespaceSelector specifies a label selector such that the policy applies only to those routes that - are in namespaces with labels that match the selector, and are in one of the DomainPatterns. - Defaults to the empty LabelSelector, which matches everything. - properties: - matchExpressions: - description: matchExpressions is a list of label selector - requirements. The requirements are ANDed. - items: - description: |- - A label selector requirement is a selector that contains values, a key, and an operator that - relates the key and values. - properties: - key: - description: key is the label key that the selector - applies to. - type: string - operator: - description: |- - operator represents a key's relationship to a set of values. - Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: |- - values is an array of string values. If the operator is In or NotIn, - the values array must be non-empty. If the operator is Exists or DoesNotExist, - the values array must be empty. This array is replaced during a strategic - merge patch. - items: - type: string - type: array - x-kubernetes-list-type: atomic - required: - - key - - operator - type: object - type: array - x-kubernetes-list-type: atomic - matchLabels: - additionalProperties: - type: string - description: |- - matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels - map is equivalent to an element of matchExpressions, whose key field is "key", the - operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - type: object - x-kubernetes-map-type: atomic - preloadPolicy: - description: |- - preloadPolicy directs the client to include hosts in its host preload list so that - it never needs to do an initial load to get the HSTS header (note that this is not defined - in RFC 6797 and is therefore client implementation-dependent). - enum: - - RequirePreload - - RequireNoPreload - - NoOpinion - type: string - required: - - domainPatterns - type: object - type: array - type: object - status: - description: status holds observed values from the cluster. They may not - be overridden. - properties: - componentRoutes: - description: |- - componentRoutes is where participating operators place the current route status for routes whose - hostnames and serving certificates can be customized by the cluster-admin. - items: - description: ComponentRouteStatus contains information allowing - configuration of a route's hostname and serving certificate. - properties: - conditions: - description: |- - conditions are used to communicate the state of the componentRoutes entry. - - Supported conditions include Available, Degraded and Progressing. - - If available is true, the content served by the route can be accessed by users. This includes cases - where a default may continue to serve content while the customized route specified by the cluster-admin - is being configured. - - If Degraded is true, that means something has gone wrong trying to handle the componentRoutes entry. - The currentHostnames field may or may not be in effect. - - If Progressing is true, that means the component is taking some action related to the componentRoutes entry. - items: - description: Condition contains details for one aspect of - the current state of this API Resource. - properties: - lastTransitionTime: - description: |- - lastTransitionTime is the last time the condition transitioned from one status to another. - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. - format: date-time - type: string - message: - description: |- - message is a human readable message indicating details about the transition. - This may be an empty string. - maxLength: 32768 - type: string - observedGeneration: - description: |- - observedGeneration represents the .metadata.generation that the condition was set based upon. - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date - with respect to the current state of the instance. - format: int64 - minimum: 0 - type: integer - reason: - description: |- - reason contains a programmatic identifier indicating the reason for the condition's last transition. - Producers of specific condition types may define expected values and meanings for this field, - and whether the values are considered a guaranteed API. - The value should be a CamelCase string. - This field may not be empty. - maxLength: 1024 - minLength: 1 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ - type: string - status: - description: status of the condition, one of True, False, - Unknown. - enum: - - "True" - - "False" - - Unknown - type: string - type: - description: type of condition in CamelCase or in foo.example.com/CamelCase. - maxLength: 316 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ - type: string - required: - - lastTransitionTime - - message - - reason - - status - - type - type: object - type: array - x-kubernetes-list-map-keys: - - type - x-kubernetes-list-type: map - consumingUsers: - description: consumingUsers is a slice of ServiceAccounts that - need to have read permission on the servingCertKeyPairSecret - secret. - items: - description: ConsumingUser is an alias for string which we - add validation to. Currently only service accounts are supported. - maxLength: 512 - minLength: 1 - pattern: ^system:serviceaccount:[a-z0-9]([-a-z0-9]*[a-z0-9])?:[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ - type: string - maxItems: 5 - type: array - currentHostnames: - description: |- - currentHostnames is the list of current names used by the route. Typically, this list should consist of a single - hostname, but if multiple hostnames are supported by the route the operator may write multiple entries to this list. - items: - description: Hostname is a host name as defined by RFC-1123. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - minItems: 1 - type: array - defaultHostname: - description: defaultHostname is the hostname of this route prior - to customization. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - name: - description: |- - name is the logical name of the route to customize. It does not have to be the actual name of a route resource - but it cannot be renamed. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of spec.componentRoutes if the route is to be customized. - maxLength: 256 - minLength: 1 - type: string - namespace: - description: |- - namespace is the namespace of the route to customize. It must be a real namespace. Using an actual namespace - ensures that no two components will conflict and the same component can be installed multiple times. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of spec.componentRoutes if the route is to be customized. - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - type: string - relatedObjects: - description: relatedObjects is a list of resources which are - useful when debugging or inspecting how spec.componentRoutes - is applied. - items: - description: ObjectReference contains enough information to - let you inspect or modify the referred object. - properties: - group: - description: group of the referent. - type: string - name: - description: name of the referent. - type: string - namespace: - description: namespace of the referent. - type: string - resource: - description: resource of the referent. - type: string - required: - - group - - name - - resource - type: object - minItems: 1 - type: array - required: - - defaultHostname - - name - - namespace - - relatedObjects - type: object - type: array - x-kubernetes-list-map-keys: - - namespace - - name - x-kubernetes-list-type: map - defaultPlacement: - description: |- - defaultPlacement is set at installation time to control which - nodes will host the ingress router pods by default. The options are - control-plane nodes or worker nodes. - - This field works by dictating how the Cluster Ingress Operator will - consider unset replicas and nodePlacement fields in IngressController - resources when creating the corresponding Deployments. - - See the documentation for the IngressController replicas and nodePlacement - fields for more information. - - When omitted, the default value is Workers - enum: - - ControlPlane - - Workers - - "" - type: string - type: object - required: - - spec - type: object - served: true - storage: true - subresources: - status: {} diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-DevPreviewNoUpgrade.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-DevPreviewNoUpgrade.crd.yaml deleted file mode 100644 index 860bde0fb25..00000000000 --- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-DevPreviewNoUpgrade.crd.yaml +++ /dev/null @@ -1,598 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - api-approved.openshift.io: https://github.com/openshift/api/pull/470 - api.openshift.io/merged-by-featuregates: "true" - include.release.openshift.io/ibm-cloud-managed: "true" - include.release.openshift.io/self-managed-high-availability: "true" - release.openshift.io/bootstrap-required: "true" - release.openshift.io/feature-set: DevPreviewNoUpgrade - name: ingresses.config.openshift.io -spec: - group: config.openshift.io - names: - kind: Ingress - listKind: IngressList - plural: ingresses - singular: ingress - scope: Cluster - versions: - - name: v1 - schema: - openAPIV3Schema: - description: |- - Ingress holds cluster-wide information about ingress, including the default ingress domain - used for routes. The canonical name is `cluster`. - - Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). - properties: - apiVersion: - description: |- - APIVersion defines the versioned schema of this representation of an object. - Servers should convert recognized schemas to the latest internal value, and - may reject unrecognized values. - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources - type: string - kind: - description: |- - Kind is a string value representing the REST resource this object represents. - Servers may infer this from the endpoint the client submits requests to. - Cannot be updated. - In CamelCase. - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds - type: string - metadata: - type: object - spec: - description: spec holds user settable values for configuration - properties: - appsDomain: - description: |- - appsDomain is an optional domain to use instead of the one specified - in the domain field when a Route is created without specifying an explicit - host. If appsDomain is nonempty, this value is used to generate default - host values for Route. Unlike domain, appsDomain may be modified after - installation. - This assumes a new ingresscontroller has been setup with a wildcard - certificate. - type: string - componentRoutes: - description: |- - componentRoutes is an optional list of routes that are managed by OpenShift components - that a cluster-admin is able to configure the hostname and serving certificate for. - The namespace and name of each route in this list should match an existing entry in the - status.componentRoutes list. - - To determine the set of configurable Routes, look at namespace and name of entries in the - .status.componentRoutes list, where participating operators write the status of - configurable routes. - A maximum of 250 component routes may be configured. - items: - description: ComponentRouteSpec allows for configuration of a route's - hostname and serving certificate. - properties: - hostname: - description: hostname is the hostname that should be used by - the route. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - labels: - additionalProperties: - description: |- - LabelValue is the value part of a Kubernetes label. - A label value must be either empty or 1-63 characters, consisting of - alphanumeric characters, '-', '_', or '.', starting and ending with - an alphanumeric character. - maxLength: 63 - minLength: 0 - type: string - x-kubernetes-validations: - - message: label values must be valid Kubernetes label values - (at most 63 characters, alphanumeric, '-', '_', or '.', - must start and end with alphanumeric) - rule: self == "" || self.matches('^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9])?$') - description: |- - labels defines additional labels to be applied to the route created - for the component. These labels are used by the IngressController to - determine which routes it should manage. Changing labels may cause the - route to be reassigned to a different IngressController. - When omitted, no additional labels are applied to the component route. - When specified, labels must contain at least one entry, up to a maximum of 8. - Label keys must be valid qualified names, consisting of a name segment and - an optional prefix separated by a slash (/). The name segment must be at most - 63 characters in length and must consist only of alphanumeric characters, - dashes (-), underscores (_), and dots (.), and must start and end with - alphanumeric characters. The prefix, if specified, must be a DNS subdomain: - at most 253 characters in length, consisting of dot-separated segments where - each segment starts and ends with an alphanumeric character. - Label values must be either empty or 1-63 characters, consisting of - alphanumeric characters, dashes (-), underscores (_), or dots (.), - starting and ending with an alphanumeric character. - Keys with the "kubernetes.io/", "k8s.io/", and "openshift.io/" prefixes are reserved and may not be used. - maxProperties: 8 - minProperties: 1 - type: object - x-kubernetes-map-type: granular - x-kubernetes-validations: - - message: label keys must be between 1 and 63 characters in - length - rule: self.all(key, key.size() <= 63 && key.size() > 0) - - message: label keys must be valid qualified names, consisting - of an optional DNS subdomain prefix of up to 253 characters - followed by a slash and a name segment of 1-63 characters, - that consists only of alphanumeric characters, dashes, underscores, - and dots, and must start and end with an alphanumeric character - rule: self.all(key, key.matches('^([a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*\\/)?[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9])?$') - && key.size() <= 253) - - message: kubernetes.io/, k8s.io/, and openshift.io/ prefixed - label keys are reserved and may not be used - rule: self.all(key, !key.startsWith('kubernetes.io/') && !key.startsWith('k8s.io/') - && !key.startsWith('openshift.io/')) - name: - description: |- - name is the logical name of the route to customize. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of status.componentRoutes if the route is to be customized. - maxLength: 256 - minLength: 1 - type: string - namespace: - description: |- - namespace is the namespace of the route to customize. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of status.componentRoutes if the route is to be customized. - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - type: string - servingCertKeyPairSecret: - description: |- - servingCertKeyPairSecret is a reference to a secret of type `kubernetes.io/tls` in the openshift-config namespace. - The serving cert/key pair must match and will be used by the operator to fulfill the intent of serving with this name. - If the custom hostname uses the default routing suffix of the cluster, - the Secret specification for a serving certificate will not be needed. - properties: - name: - description: name is the metadata.name of the referenced - secret - type: string - required: - - name - type: object - required: - - hostname - - name - - namespace - type: object - maxItems: 250 - type: array - x-kubernetes-list-map-keys: - - namespace - - name - x-kubernetes-list-type: map - domain: - description: |- - domain is used to generate a default host name for a route when the - route's host name is empty. The generated host name will follow this - pattern: "..". - - It is also used as the default wildcard domain suffix for ingress. The - default ingresscontroller domain will follow this pattern: "*.". - - Once set, changing domain is not currently supported. - type: string - x-kubernetes-validations: - - message: domain is immutable once set - rule: self == oldSelf - loadBalancer: - description: |- - loadBalancer contains the load balancer details in general which are not only specific to the underlying infrastructure - provider of the current cluster and are required for Ingress Controller to work on OpenShift. - properties: - platform: - description: |- - platform holds configuration specific to the underlying - infrastructure provider for the ingress load balancers. - When omitted, this means the user has no opinion and the platform is left - to choose reasonable defaults. These defaults are subject to change over time. - properties: - aws: - description: aws contains settings specific to the Amazon - Web Services infrastructure provider. - properties: - type: - description: |- - type allows user to set a load balancer type. - When this field is set the default ingresscontroller will get created using the specified LBType. - If this field is not set then the default ingress controller of LBType Classic will be created. - Valid values are: - - * "Classic": A Classic Load Balancer that makes routing decisions at either - the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See - the following for additional details: - - https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb - - * "NLB": A Network Load Balancer that makes routing decisions at the - transport layer (TCP/SSL). See the following for additional details: - - https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb - enum: - - NLB - - Classic - type: string - required: - - type - type: object - type: - description: |- - type is the underlying infrastructure provider for the cluster. - Allowed values are "AWS", "Azure", "BareMetal", "GCP", "Libvirt", - "OpenStack", "VSphere", "oVirt", "KubeVirt", "EquinixMetal", "PowerVS", - "AlibabaCloud", "Nutanix" and "None". Individual components may not support all platforms, - and must handle unrecognized platforms as None if they do not support that platform. - enum: - - "" - - AWS - - Azure - - BareMetal - - GCP - - Libvirt - - OpenStack - - None - - VSphere - - oVirt - - IBMCloud - - KubeVirt - - EquinixMetal - - PowerVS - - AlibabaCloud - - Nutanix - - External - type: string - type: object - type: object - requiredHSTSPolicies: - description: |- - requiredHSTSPolicies specifies HSTS policies that are required to be set on newly created or updated routes - matching the domainPattern/s and namespaceSelector/s that are specified in the policy. - Each requiredHSTSPolicy must have at least a domainPattern and a maxAge to validate a route HSTS Policy route - annotation, and affect route admission. - - A candidate route is checked for HSTS Policies if it has the HSTS Policy route annotation: - "haproxy.router.openshift.io/hsts_header" - E.g. haproxy.router.openshift.io/hsts_header: max-age=31536000;preload;includeSubDomains - - - For each candidate route, if it matches a requiredHSTSPolicy domainPattern and optional namespaceSelector, - then the maxAge, preloadPolicy, and includeSubdomainsPolicy must be valid to be admitted. Otherwise, the route - is rejected. - - The first match, by domainPattern and optional namespaceSelector, in the ordering of the RequiredHSTSPolicies - determines the route's admission status. - - If the candidate route doesn't match any requiredHSTSPolicy domainPattern and optional namespaceSelector, - then it may use any HSTS Policy annotation. - - The HSTS policy configuration may be changed after routes have already been created. An update to a previously - admitted route may then fail if the updated route does not conform to the updated HSTS policy configuration. - However, changing the HSTS policy configuration will not cause a route that is already admitted to stop working. - - Note that if there are no RequiredHSTSPolicies, any HSTS Policy annotation on the route is valid. - items: - properties: - domainPatterns: - description: |- - domainPatterns is a list of domains for which the desired HSTS annotations are required. - If domainPatterns is specified and a route is created with a spec.host matching one of the domains, - the route must specify the HSTS Policy components described in the matching RequiredHSTSPolicy. - - The use of wildcards is allowed like this: *.foo.com matches everything under foo.com. - foo.com only matches foo.com, so to cover foo.com and everything under it, you must specify *both*. - items: - type: string - minItems: 1 - type: array - includeSubDomainsPolicy: - description: |- - includeSubDomainsPolicy means the HSTS Policy should apply to any subdomains of the host's - domain name. Thus, for the host bar.foo.com, if includeSubDomainsPolicy was set to RequireIncludeSubDomains: - - the host app.bar.foo.com would inherit the HSTS Policy of bar.foo.com - - the host bar.foo.com would inherit the HSTS Policy of bar.foo.com - - the host foo.com would NOT inherit the HSTS Policy of bar.foo.com - - the host def.foo.com would NOT inherit the HSTS Policy of bar.foo.com - enum: - - RequireIncludeSubDomains - - RequireNoIncludeSubDomains - - NoOpinion - type: string - maxAge: - description: |- - maxAge is the delta time range in seconds during which hosts are regarded as HSTS hosts. - If set to 0, it negates the effect, and hosts are removed as HSTS hosts. - If set to 0 and includeSubdomains is specified, all subdomains of the host are also removed as HSTS hosts. - maxAge is a time-to-live value, and if this policy is not refreshed on a client, the HSTS - policy will eventually expire on that client. - properties: - largestMaxAge: - description: |- - The largest allowed value (in seconds) of the RequiredHSTSPolicy max-age - This value can be left unspecified, in which case no upper limit is enforced. - format: int32 - maximum: 2147483647 - minimum: 0 - type: integer - smallestMaxAge: - description: |- - The smallest allowed value (in seconds) of the RequiredHSTSPolicy max-age - Setting max-age=0 allows the deletion of an existing HSTS header from a host. This is a necessary - tool for administrators to quickly correct mistakes. - This value can be left unspecified, in which case no lower limit is enforced. - format: int32 - maximum: 2147483647 - minimum: 0 - type: integer - type: object - namespaceSelector: - description: |- - namespaceSelector specifies a label selector such that the policy applies only to those routes that - are in namespaces with labels that match the selector, and are in one of the DomainPatterns. - Defaults to the empty LabelSelector, which matches everything. - properties: - matchExpressions: - description: matchExpressions is a list of label selector - requirements. The requirements are ANDed. - items: - description: |- - A label selector requirement is a selector that contains values, a key, and an operator that - relates the key and values. - properties: - key: - description: key is the label key that the selector - applies to. - type: string - operator: - description: |- - operator represents a key's relationship to a set of values. - Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: |- - values is an array of string values. If the operator is In or NotIn, - the values array must be non-empty. If the operator is Exists or DoesNotExist, - the values array must be empty. This array is replaced during a strategic - merge patch. - items: - type: string - type: array - x-kubernetes-list-type: atomic - required: - - key - - operator - type: object - type: array - x-kubernetes-list-type: atomic - matchLabels: - additionalProperties: - type: string - description: |- - matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels - map is equivalent to an element of matchExpressions, whose key field is "key", the - operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - type: object - x-kubernetes-map-type: atomic - preloadPolicy: - description: |- - preloadPolicy directs the client to include hosts in its host preload list so that - it never needs to do an initial load to get the HSTS header (note that this is not defined - in RFC 6797 and is therefore client implementation-dependent). - enum: - - RequirePreload - - RequireNoPreload - - NoOpinion - type: string - required: - - domainPatterns - type: object - type: array - type: object - status: - description: status holds observed values from the cluster. They may not - be overridden. - properties: - componentRoutes: - description: |- - componentRoutes is where participating operators place the current route status for routes whose - hostnames and serving certificates can be customized by the cluster-admin. - items: - description: ComponentRouteStatus contains information allowing - configuration of a route's hostname and serving certificate. - properties: - conditions: - description: |- - conditions are used to communicate the state of the componentRoutes entry. - - Supported conditions include Available, Degraded and Progressing. - - If available is true, the content served by the route can be accessed by users. This includes cases - where a default may continue to serve content while the customized route specified by the cluster-admin - is being configured. - - If Degraded is true, that means something has gone wrong trying to handle the componentRoutes entry. - The currentHostnames field may or may not be in effect. - - If Progressing is true, that means the component is taking some action related to the componentRoutes entry. - items: - description: Condition contains details for one aspect of - the current state of this API Resource. - properties: - lastTransitionTime: - description: |- - lastTransitionTime is the last time the condition transitioned from one status to another. - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. - format: date-time - type: string - message: - description: |- - message is a human readable message indicating details about the transition. - This may be an empty string. - maxLength: 32768 - type: string - observedGeneration: - description: |- - observedGeneration represents the .metadata.generation that the condition was set based upon. - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date - with respect to the current state of the instance. - format: int64 - minimum: 0 - type: integer - reason: - description: |- - reason contains a programmatic identifier indicating the reason for the condition's last transition. - Producers of specific condition types may define expected values and meanings for this field, - and whether the values are considered a guaranteed API. - The value should be a CamelCase string. - This field may not be empty. - maxLength: 1024 - minLength: 1 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ - type: string - status: - description: status of the condition, one of True, False, - Unknown. - enum: - - "True" - - "False" - - Unknown - type: string - type: - description: type of condition in CamelCase or in foo.example.com/CamelCase. - maxLength: 316 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ - type: string - required: - - lastTransitionTime - - message - - reason - - status - - type - type: object - type: array - x-kubernetes-list-map-keys: - - type - x-kubernetes-list-type: map - consumingUsers: - description: consumingUsers is a slice of ServiceAccounts that - need to have read permission on the servingCertKeyPairSecret - secret. - items: - description: ConsumingUser is an alias for string which we - add validation to. Currently only service accounts are supported. - maxLength: 512 - minLength: 1 - pattern: ^system:serviceaccount:[a-z0-9]([-a-z0-9]*[a-z0-9])?:[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ - type: string - maxItems: 5 - type: array - currentHostnames: - description: |- - currentHostnames is the list of current names used by the route. Typically, this list should consist of a single - hostname, but if multiple hostnames are supported by the route the operator may write multiple entries to this list. - items: - description: Hostname is a host name as defined by RFC-1123. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - minItems: 1 - type: array - defaultHostname: - description: defaultHostname is the hostname of this route prior - to customization. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - name: - description: |- - name is the logical name of the route to customize. It does not have to be the actual name of a route resource - but it cannot be renamed. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of spec.componentRoutes if the route is to be customized. - maxLength: 256 - minLength: 1 - type: string - namespace: - description: |- - namespace is the namespace of the route to customize. It must be a real namespace. Using an actual namespace - ensures that no two components will conflict and the same component can be installed multiple times. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of spec.componentRoutes if the route is to be customized. - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - type: string - relatedObjects: - description: relatedObjects is a list of resources which are - useful when debugging or inspecting how spec.componentRoutes - is applied. - items: - description: ObjectReference contains enough information to - let you inspect or modify the referred object. - properties: - group: - description: group of the referent. - type: string - name: - description: name of the referent. - type: string - namespace: - description: namespace of the referent. - type: string - resource: - description: resource of the referent. - type: string - required: - - group - - name - - resource - type: object - minItems: 1 - type: array - required: - - defaultHostname - - name - - namespace - - relatedObjects - type: object - type: array - x-kubernetes-list-map-keys: - - namespace - - name - x-kubernetes-list-type: map - defaultPlacement: - description: |- - defaultPlacement is set at installation time to control which - nodes will host the ingress router pods by default. The options are - control-plane nodes or worker nodes. - - This field works by dictating how the Cluster Ingress Operator will - consider unset replicas and nodePlacement fields in IngressController - resources when creating the corresponding Deployments. - - See the documentation for the IngressController replicas and nodePlacement - fields for more information. - - When omitted, the default value is Workers - enum: - - ControlPlane - - Workers - - "" - type: string - type: object - required: - - spec - type: object - served: true - storage: true - subresources: - status: {} diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-OKD.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-OKD.crd.yaml deleted file mode 100644 index 2c5b410efc8..00000000000 --- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-OKD.crd.yaml +++ /dev/null @@ -1,546 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - api-approved.openshift.io: https://github.com/openshift/api/pull/470 - api.openshift.io/merged-by-featuregates: "true" - include.release.openshift.io/ibm-cloud-managed: "true" - include.release.openshift.io/self-managed-high-availability: "true" - release.openshift.io/bootstrap-required: "true" - release.openshift.io/feature-set: OKD - name: ingresses.config.openshift.io -spec: - group: config.openshift.io - names: - kind: Ingress - listKind: IngressList - plural: ingresses - singular: ingress - scope: Cluster - versions: - - name: v1 - schema: - openAPIV3Schema: - description: |- - Ingress holds cluster-wide information about ingress, including the default ingress domain - used for routes. The canonical name is `cluster`. - - Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). - properties: - apiVersion: - description: |- - APIVersion defines the versioned schema of this representation of an object. - Servers should convert recognized schemas to the latest internal value, and - may reject unrecognized values. - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources - type: string - kind: - description: |- - Kind is a string value representing the REST resource this object represents. - Servers may infer this from the endpoint the client submits requests to. - Cannot be updated. - In CamelCase. - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds - type: string - metadata: - type: object - spec: - description: spec holds user settable values for configuration - properties: - appsDomain: - description: |- - appsDomain is an optional domain to use instead of the one specified - in the domain field when a Route is created without specifying an explicit - host. If appsDomain is nonempty, this value is used to generate default - host values for Route. Unlike domain, appsDomain may be modified after - installation. - This assumes a new ingresscontroller has been setup with a wildcard - certificate. - type: string - componentRoutes: - description: |- - componentRoutes is an optional list of routes that are managed by OpenShift components - that a cluster-admin is able to configure the hostname and serving certificate for. - The namespace and name of each route in this list should match an existing entry in the - status.componentRoutes list. - - To determine the set of configurable Routes, look at namespace and name of entries in the - .status.componentRoutes list, where participating operators write the status of - configurable routes. - A maximum of 250 component routes may be configured. - items: - description: ComponentRouteSpec allows for configuration of a route's - hostname and serving certificate. - properties: - hostname: - description: hostname is the hostname that should be used by - the route. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - name: - description: |- - name is the logical name of the route to customize. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of status.componentRoutes if the route is to be customized. - maxLength: 256 - minLength: 1 - type: string - namespace: - description: |- - namespace is the namespace of the route to customize. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of status.componentRoutes if the route is to be customized. - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - type: string - servingCertKeyPairSecret: - description: |- - servingCertKeyPairSecret is a reference to a secret of type `kubernetes.io/tls` in the openshift-config namespace. - The serving cert/key pair must match and will be used by the operator to fulfill the intent of serving with this name. - If the custom hostname uses the default routing suffix of the cluster, - the Secret specification for a serving certificate will not be needed. - properties: - name: - description: name is the metadata.name of the referenced - secret - type: string - required: - - name - type: object - required: - - hostname - - name - - namespace - type: object - maxItems: 250 - type: array - x-kubernetes-list-map-keys: - - namespace - - name - x-kubernetes-list-type: map - domain: - description: |- - domain is used to generate a default host name for a route when the - route's host name is empty. The generated host name will follow this - pattern: "..". - - It is also used as the default wildcard domain suffix for ingress. The - default ingresscontroller domain will follow this pattern: "*.". - - Once set, changing domain is not currently supported. - type: string - x-kubernetes-validations: - - message: domain is immutable once set - rule: self == oldSelf - loadBalancer: - description: |- - loadBalancer contains the load balancer details in general which are not only specific to the underlying infrastructure - provider of the current cluster and are required for Ingress Controller to work on OpenShift. - properties: - platform: - description: |- - platform holds configuration specific to the underlying - infrastructure provider for the ingress load balancers. - When omitted, this means the user has no opinion and the platform is left - to choose reasonable defaults. These defaults are subject to change over time. - properties: - aws: - description: aws contains settings specific to the Amazon - Web Services infrastructure provider. - properties: - type: - description: |- - type allows user to set a load balancer type. - When this field is set the default ingresscontroller will get created using the specified LBType. - If this field is not set then the default ingress controller of LBType Classic will be created. - Valid values are: - - * "Classic": A Classic Load Balancer that makes routing decisions at either - the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See - the following for additional details: - - https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb - - * "NLB": A Network Load Balancer that makes routing decisions at the - transport layer (TCP/SSL). See the following for additional details: - - https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb - enum: - - NLB - - Classic - type: string - required: - - type - type: object - type: - description: |- - type is the underlying infrastructure provider for the cluster. - Allowed values are "AWS", "Azure", "BareMetal", "GCP", "Libvirt", - "OpenStack", "VSphere", "oVirt", "KubeVirt", "EquinixMetal", "PowerVS", - "AlibabaCloud", "Nutanix" and "None". Individual components may not support all platforms, - and must handle unrecognized platforms as None if they do not support that platform. - enum: - - "" - - AWS - - Azure - - BareMetal - - GCP - - Libvirt - - OpenStack - - None - - VSphere - - oVirt - - IBMCloud - - KubeVirt - - EquinixMetal - - PowerVS - - AlibabaCloud - - Nutanix - - External - type: string - type: object - type: object - requiredHSTSPolicies: - description: |- - requiredHSTSPolicies specifies HSTS policies that are required to be set on newly created or updated routes - matching the domainPattern/s and namespaceSelector/s that are specified in the policy. - Each requiredHSTSPolicy must have at least a domainPattern and a maxAge to validate a route HSTS Policy route - annotation, and affect route admission. - - A candidate route is checked for HSTS Policies if it has the HSTS Policy route annotation: - "haproxy.router.openshift.io/hsts_header" - E.g. haproxy.router.openshift.io/hsts_header: max-age=31536000;preload;includeSubDomains - - - For each candidate route, if it matches a requiredHSTSPolicy domainPattern and optional namespaceSelector, - then the maxAge, preloadPolicy, and includeSubdomainsPolicy must be valid to be admitted. Otherwise, the route - is rejected. - - The first match, by domainPattern and optional namespaceSelector, in the ordering of the RequiredHSTSPolicies - determines the route's admission status. - - If the candidate route doesn't match any requiredHSTSPolicy domainPattern and optional namespaceSelector, - then it may use any HSTS Policy annotation. - - The HSTS policy configuration may be changed after routes have already been created. An update to a previously - admitted route may then fail if the updated route does not conform to the updated HSTS policy configuration. - However, changing the HSTS policy configuration will not cause a route that is already admitted to stop working. - - Note that if there are no RequiredHSTSPolicies, any HSTS Policy annotation on the route is valid. - items: - properties: - domainPatterns: - description: |- - domainPatterns is a list of domains for which the desired HSTS annotations are required. - If domainPatterns is specified and a route is created with a spec.host matching one of the domains, - the route must specify the HSTS Policy components described in the matching RequiredHSTSPolicy. - - The use of wildcards is allowed like this: *.foo.com matches everything under foo.com. - foo.com only matches foo.com, so to cover foo.com and everything under it, you must specify *both*. - items: - type: string - minItems: 1 - type: array - includeSubDomainsPolicy: - description: |- - includeSubDomainsPolicy means the HSTS Policy should apply to any subdomains of the host's - domain name. Thus, for the host bar.foo.com, if includeSubDomainsPolicy was set to RequireIncludeSubDomains: - - the host app.bar.foo.com would inherit the HSTS Policy of bar.foo.com - - the host bar.foo.com would inherit the HSTS Policy of bar.foo.com - - the host foo.com would NOT inherit the HSTS Policy of bar.foo.com - - the host def.foo.com would NOT inherit the HSTS Policy of bar.foo.com - enum: - - RequireIncludeSubDomains - - RequireNoIncludeSubDomains - - NoOpinion - type: string - maxAge: - description: |- - maxAge is the delta time range in seconds during which hosts are regarded as HSTS hosts. - If set to 0, it negates the effect, and hosts are removed as HSTS hosts. - If set to 0 and includeSubdomains is specified, all subdomains of the host are also removed as HSTS hosts. - maxAge is a time-to-live value, and if this policy is not refreshed on a client, the HSTS - policy will eventually expire on that client. - properties: - largestMaxAge: - description: |- - The largest allowed value (in seconds) of the RequiredHSTSPolicy max-age - This value can be left unspecified, in which case no upper limit is enforced. - format: int32 - maximum: 2147483647 - minimum: 0 - type: integer - smallestMaxAge: - description: |- - The smallest allowed value (in seconds) of the RequiredHSTSPolicy max-age - Setting max-age=0 allows the deletion of an existing HSTS header from a host. This is a necessary - tool for administrators to quickly correct mistakes. - This value can be left unspecified, in which case no lower limit is enforced. - format: int32 - maximum: 2147483647 - minimum: 0 - type: integer - type: object - namespaceSelector: - description: |- - namespaceSelector specifies a label selector such that the policy applies only to those routes that - are in namespaces with labels that match the selector, and are in one of the DomainPatterns. - Defaults to the empty LabelSelector, which matches everything. - properties: - matchExpressions: - description: matchExpressions is a list of label selector - requirements. The requirements are ANDed. - items: - description: |- - A label selector requirement is a selector that contains values, a key, and an operator that - relates the key and values. - properties: - key: - description: key is the label key that the selector - applies to. - type: string - operator: - description: |- - operator represents a key's relationship to a set of values. - Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: |- - values is an array of string values. If the operator is In or NotIn, - the values array must be non-empty. If the operator is Exists or DoesNotExist, - the values array must be empty. This array is replaced during a strategic - merge patch. - items: - type: string - type: array - x-kubernetes-list-type: atomic - required: - - key - - operator - type: object - type: array - x-kubernetes-list-type: atomic - matchLabels: - additionalProperties: - type: string - description: |- - matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels - map is equivalent to an element of matchExpressions, whose key field is "key", the - operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - type: object - x-kubernetes-map-type: atomic - preloadPolicy: - description: |- - preloadPolicy directs the client to include hosts in its host preload list so that - it never needs to do an initial load to get the HSTS header (note that this is not defined - in RFC 6797 and is therefore client implementation-dependent). - enum: - - RequirePreload - - RequireNoPreload - - NoOpinion - type: string - required: - - domainPatterns - type: object - type: array - type: object - status: - description: status holds observed values from the cluster. They may not - be overridden. - properties: - componentRoutes: - description: |- - componentRoutes is where participating operators place the current route status for routes whose - hostnames and serving certificates can be customized by the cluster-admin. - items: - description: ComponentRouteStatus contains information allowing - configuration of a route's hostname and serving certificate. - properties: - conditions: - description: |- - conditions are used to communicate the state of the componentRoutes entry. - - Supported conditions include Available, Degraded and Progressing. - - If available is true, the content served by the route can be accessed by users. This includes cases - where a default may continue to serve content while the customized route specified by the cluster-admin - is being configured. - - If Degraded is true, that means something has gone wrong trying to handle the componentRoutes entry. - The currentHostnames field may or may not be in effect. - - If Progressing is true, that means the component is taking some action related to the componentRoutes entry. - items: - description: Condition contains details for one aspect of - the current state of this API Resource. - properties: - lastTransitionTime: - description: |- - lastTransitionTime is the last time the condition transitioned from one status to another. - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. - format: date-time - type: string - message: - description: |- - message is a human readable message indicating details about the transition. - This may be an empty string. - maxLength: 32768 - type: string - observedGeneration: - description: |- - observedGeneration represents the .metadata.generation that the condition was set based upon. - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date - with respect to the current state of the instance. - format: int64 - minimum: 0 - type: integer - reason: - description: |- - reason contains a programmatic identifier indicating the reason for the condition's last transition. - Producers of specific condition types may define expected values and meanings for this field, - and whether the values are considered a guaranteed API. - The value should be a CamelCase string. - This field may not be empty. - maxLength: 1024 - minLength: 1 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ - type: string - status: - description: status of the condition, one of True, False, - Unknown. - enum: - - "True" - - "False" - - Unknown - type: string - type: - description: type of condition in CamelCase or in foo.example.com/CamelCase. - maxLength: 316 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ - type: string - required: - - lastTransitionTime - - message - - reason - - status - - type - type: object - type: array - x-kubernetes-list-map-keys: - - type - x-kubernetes-list-type: map - consumingUsers: - description: consumingUsers is a slice of ServiceAccounts that - need to have read permission on the servingCertKeyPairSecret - secret. - items: - description: ConsumingUser is an alias for string which we - add validation to. Currently only service accounts are supported. - maxLength: 512 - minLength: 1 - pattern: ^system:serviceaccount:[a-z0-9]([-a-z0-9]*[a-z0-9])?:[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ - type: string - maxItems: 5 - type: array - currentHostnames: - description: |- - currentHostnames is the list of current names used by the route. Typically, this list should consist of a single - hostname, but if multiple hostnames are supported by the route the operator may write multiple entries to this list. - items: - description: Hostname is a host name as defined by RFC-1123. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - minItems: 1 - type: array - defaultHostname: - description: defaultHostname is the hostname of this route prior - to customization. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - name: - description: |- - name is the logical name of the route to customize. It does not have to be the actual name of a route resource - but it cannot be renamed. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of spec.componentRoutes if the route is to be customized. - maxLength: 256 - minLength: 1 - type: string - namespace: - description: |- - namespace is the namespace of the route to customize. It must be a real namespace. Using an actual namespace - ensures that no two components will conflict and the same component can be installed multiple times. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of spec.componentRoutes if the route is to be customized. - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - type: string - relatedObjects: - description: relatedObjects is a list of resources which are - useful when debugging or inspecting how spec.componentRoutes - is applied. - items: - description: ObjectReference contains enough information to - let you inspect or modify the referred object. - properties: - group: - description: group of the referent. - type: string - name: - description: name of the referent. - type: string - namespace: - description: namespace of the referent. - type: string - resource: - description: resource of the referent. - type: string - required: - - group - - name - - resource - type: object - minItems: 1 - type: array - required: - - defaultHostname - - name - - namespace - - relatedObjects - type: object - type: array - x-kubernetes-list-map-keys: - - namespace - - name - x-kubernetes-list-type: map - defaultPlacement: - description: |- - defaultPlacement is set at installation time to control which - nodes will host the ingress router pods by default. The options are - control-plane nodes or worker nodes. - - This field works by dictating how the Cluster Ingress Operator will - consider unset replicas and nodePlacement fields in IngressController - resources when creating the corresponding Deployments. - - See the documentation for the IngressController replicas and nodePlacement - fields for more information. - - When omitted, the default value is Workers - enum: - - ControlPlane - - Workers - - "" - type: string - type: object - required: - - spec - type: object - served: true - storage: true - subresources: - status: {} diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-TechPreviewNoUpgrade.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-TechPreviewNoUpgrade.crd.yaml deleted file mode 100644 index 204708d8710..00000000000 --- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-TechPreviewNoUpgrade.crd.yaml +++ /dev/null @@ -1,598 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - api-approved.openshift.io: https://github.com/openshift/api/pull/470 - api.openshift.io/merged-by-featuregates: "true" - include.release.openshift.io/ibm-cloud-managed: "true" - include.release.openshift.io/self-managed-high-availability: "true" - release.openshift.io/bootstrap-required: "true" - release.openshift.io/feature-set: TechPreviewNoUpgrade - name: ingresses.config.openshift.io -spec: - group: config.openshift.io - names: - kind: Ingress - listKind: IngressList - plural: ingresses - singular: ingress - scope: Cluster - versions: - - name: v1 - schema: - openAPIV3Schema: - description: |- - Ingress holds cluster-wide information about ingress, including the default ingress domain - used for routes. The canonical name is `cluster`. - - Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). - properties: - apiVersion: - description: |- - APIVersion defines the versioned schema of this representation of an object. - Servers should convert recognized schemas to the latest internal value, and - may reject unrecognized values. - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources - type: string - kind: - description: |- - Kind is a string value representing the REST resource this object represents. - Servers may infer this from the endpoint the client submits requests to. - Cannot be updated. - In CamelCase. - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds - type: string - metadata: - type: object - spec: - description: spec holds user settable values for configuration - properties: - appsDomain: - description: |- - appsDomain is an optional domain to use instead of the one specified - in the domain field when a Route is created without specifying an explicit - host. If appsDomain is nonempty, this value is used to generate default - host values for Route. Unlike domain, appsDomain may be modified after - installation. - This assumes a new ingresscontroller has been setup with a wildcard - certificate. - type: string - componentRoutes: - description: |- - componentRoutes is an optional list of routes that are managed by OpenShift components - that a cluster-admin is able to configure the hostname and serving certificate for. - The namespace and name of each route in this list should match an existing entry in the - status.componentRoutes list. - - To determine the set of configurable Routes, look at namespace and name of entries in the - .status.componentRoutes list, where participating operators write the status of - configurable routes. - A maximum of 250 component routes may be configured. - items: - description: ComponentRouteSpec allows for configuration of a route's - hostname and serving certificate. - properties: - hostname: - description: hostname is the hostname that should be used by - the route. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - labels: - additionalProperties: - description: |- - LabelValue is the value part of a Kubernetes label. - A label value must be either empty or 1-63 characters, consisting of - alphanumeric characters, '-', '_', or '.', starting and ending with - an alphanumeric character. - maxLength: 63 - minLength: 0 - type: string - x-kubernetes-validations: - - message: label values must be valid Kubernetes label values - (at most 63 characters, alphanumeric, '-', '_', or '.', - must start and end with alphanumeric) - rule: self == "" || self.matches('^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9])?$') - description: |- - labels defines additional labels to be applied to the route created - for the component. These labels are used by the IngressController to - determine which routes it should manage. Changing labels may cause the - route to be reassigned to a different IngressController. - When omitted, no additional labels are applied to the component route. - When specified, labels must contain at least one entry, up to a maximum of 8. - Label keys must be valid qualified names, consisting of a name segment and - an optional prefix separated by a slash (/). The name segment must be at most - 63 characters in length and must consist only of alphanumeric characters, - dashes (-), underscores (_), and dots (.), and must start and end with - alphanumeric characters. The prefix, if specified, must be a DNS subdomain: - at most 253 characters in length, consisting of dot-separated segments where - each segment starts and ends with an alphanumeric character. - Label values must be either empty or 1-63 characters, consisting of - alphanumeric characters, dashes (-), underscores (_), or dots (.), - starting and ending with an alphanumeric character. - Keys with the "kubernetes.io/", "k8s.io/", and "openshift.io/" prefixes are reserved and may not be used. - maxProperties: 8 - minProperties: 1 - type: object - x-kubernetes-map-type: granular - x-kubernetes-validations: - - message: label keys must be between 1 and 63 characters in - length - rule: self.all(key, key.size() <= 63 && key.size() > 0) - - message: label keys must be valid qualified names, consisting - of an optional DNS subdomain prefix of up to 253 characters - followed by a slash and a name segment of 1-63 characters, - that consists only of alphanumeric characters, dashes, underscores, - and dots, and must start and end with an alphanumeric character - rule: self.all(key, key.matches('^([a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*\\/)?[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9])?$') - && key.size() <= 253) - - message: kubernetes.io/, k8s.io/, and openshift.io/ prefixed - label keys are reserved and may not be used - rule: self.all(key, !key.startsWith('kubernetes.io/') && !key.startsWith('k8s.io/') - && !key.startsWith('openshift.io/')) - name: - description: |- - name is the logical name of the route to customize. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of status.componentRoutes if the route is to be customized. - maxLength: 256 - minLength: 1 - type: string - namespace: - description: |- - namespace is the namespace of the route to customize. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of status.componentRoutes if the route is to be customized. - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - type: string - servingCertKeyPairSecret: - description: |- - servingCertKeyPairSecret is a reference to a secret of type `kubernetes.io/tls` in the openshift-config namespace. - The serving cert/key pair must match and will be used by the operator to fulfill the intent of serving with this name. - If the custom hostname uses the default routing suffix of the cluster, - the Secret specification for a serving certificate will not be needed. - properties: - name: - description: name is the metadata.name of the referenced - secret - type: string - required: - - name - type: object - required: - - hostname - - name - - namespace - type: object - maxItems: 250 - type: array - x-kubernetes-list-map-keys: - - namespace - - name - x-kubernetes-list-type: map - domain: - description: |- - domain is used to generate a default host name for a route when the - route's host name is empty. The generated host name will follow this - pattern: "..". - - It is also used as the default wildcard domain suffix for ingress. The - default ingresscontroller domain will follow this pattern: "*.". - - Once set, changing domain is not currently supported. - type: string - x-kubernetes-validations: - - message: domain is immutable once set - rule: self == oldSelf - loadBalancer: - description: |- - loadBalancer contains the load balancer details in general which are not only specific to the underlying infrastructure - provider of the current cluster and are required for Ingress Controller to work on OpenShift. - properties: - platform: - description: |- - platform holds configuration specific to the underlying - infrastructure provider for the ingress load balancers. - When omitted, this means the user has no opinion and the platform is left - to choose reasonable defaults. These defaults are subject to change over time. - properties: - aws: - description: aws contains settings specific to the Amazon - Web Services infrastructure provider. - properties: - type: - description: |- - type allows user to set a load balancer type. - When this field is set the default ingresscontroller will get created using the specified LBType. - If this field is not set then the default ingress controller of LBType Classic will be created. - Valid values are: - - * "Classic": A Classic Load Balancer that makes routing decisions at either - the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See - the following for additional details: - - https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb - - * "NLB": A Network Load Balancer that makes routing decisions at the - transport layer (TCP/SSL). See the following for additional details: - - https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb - enum: - - NLB - - Classic - type: string - required: - - type - type: object - type: - description: |- - type is the underlying infrastructure provider for the cluster. - Allowed values are "AWS", "Azure", "BareMetal", "GCP", "Libvirt", - "OpenStack", "VSphere", "oVirt", "KubeVirt", "EquinixMetal", "PowerVS", - "AlibabaCloud", "Nutanix" and "None". Individual components may not support all platforms, - and must handle unrecognized platforms as None if they do not support that platform. - enum: - - "" - - AWS - - Azure - - BareMetal - - GCP - - Libvirt - - OpenStack - - None - - VSphere - - oVirt - - IBMCloud - - KubeVirt - - EquinixMetal - - PowerVS - - AlibabaCloud - - Nutanix - - External - type: string - type: object - type: object - requiredHSTSPolicies: - description: |- - requiredHSTSPolicies specifies HSTS policies that are required to be set on newly created or updated routes - matching the domainPattern/s and namespaceSelector/s that are specified in the policy. - Each requiredHSTSPolicy must have at least a domainPattern and a maxAge to validate a route HSTS Policy route - annotation, and affect route admission. - - A candidate route is checked for HSTS Policies if it has the HSTS Policy route annotation: - "haproxy.router.openshift.io/hsts_header" - E.g. haproxy.router.openshift.io/hsts_header: max-age=31536000;preload;includeSubDomains - - - For each candidate route, if it matches a requiredHSTSPolicy domainPattern and optional namespaceSelector, - then the maxAge, preloadPolicy, and includeSubdomainsPolicy must be valid to be admitted. Otherwise, the route - is rejected. - - The first match, by domainPattern and optional namespaceSelector, in the ordering of the RequiredHSTSPolicies - determines the route's admission status. - - If the candidate route doesn't match any requiredHSTSPolicy domainPattern and optional namespaceSelector, - then it may use any HSTS Policy annotation. - - The HSTS policy configuration may be changed after routes have already been created. An update to a previously - admitted route may then fail if the updated route does not conform to the updated HSTS policy configuration. - However, changing the HSTS policy configuration will not cause a route that is already admitted to stop working. - - Note that if there are no RequiredHSTSPolicies, any HSTS Policy annotation on the route is valid. - items: - properties: - domainPatterns: - description: |- - domainPatterns is a list of domains for which the desired HSTS annotations are required. - If domainPatterns is specified and a route is created with a spec.host matching one of the domains, - the route must specify the HSTS Policy components described in the matching RequiredHSTSPolicy. - - The use of wildcards is allowed like this: *.foo.com matches everything under foo.com. - foo.com only matches foo.com, so to cover foo.com and everything under it, you must specify *both*. - items: - type: string - minItems: 1 - type: array - includeSubDomainsPolicy: - description: |- - includeSubDomainsPolicy means the HSTS Policy should apply to any subdomains of the host's - domain name. Thus, for the host bar.foo.com, if includeSubDomainsPolicy was set to RequireIncludeSubDomains: - - the host app.bar.foo.com would inherit the HSTS Policy of bar.foo.com - - the host bar.foo.com would inherit the HSTS Policy of bar.foo.com - - the host foo.com would NOT inherit the HSTS Policy of bar.foo.com - - the host def.foo.com would NOT inherit the HSTS Policy of bar.foo.com - enum: - - RequireIncludeSubDomains - - RequireNoIncludeSubDomains - - NoOpinion - type: string - maxAge: - description: |- - maxAge is the delta time range in seconds during which hosts are regarded as HSTS hosts. - If set to 0, it negates the effect, and hosts are removed as HSTS hosts. - If set to 0 and includeSubdomains is specified, all subdomains of the host are also removed as HSTS hosts. - maxAge is a time-to-live value, and if this policy is not refreshed on a client, the HSTS - policy will eventually expire on that client. - properties: - largestMaxAge: - description: |- - The largest allowed value (in seconds) of the RequiredHSTSPolicy max-age - This value can be left unspecified, in which case no upper limit is enforced. - format: int32 - maximum: 2147483647 - minimum: 0 - type: integer - smallestMaxAge: - description: |- - The smallest allowed value (in seconds) of the RequiredHSTSPolicy max-age - Setting max-age=0 allows the deletion of an existing HSTS header from a host. This is a necessary - tool for administrators to quickly correct mistakes. - This value can be left unspecified, in which case no lower limit is enforced. - format: int32 - maximum: 2147483647 - minimum: 0 - type: integer - type: object - namespaceSelector: - description: |- - namespaceSelector specifies a label selector such that the policy applies only to those routes that - are in namespaces with labels that match the selector, and are in one of the DomainPatterns. - Defaults to the empty LabelSelector, which matches everything. - properties: - matchExpressions: - description: matchExpressions is a list of label selector - requirements. The requirements are ANDed. - items: - description: |- - A label selector requirement is a selector that contains values, a key, and an operator that - relates the key and values. - properties: - key: - description: key is the label key that the selector - applies to. - type: string - operator: - description: |- - operator represents a key's relationship to a set of values. - Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: |- - values is an array of string values. If the operator is In or NotIn, - the values array must be non-empty. If the operator is Exists or DoesNotExist, - the values array must be empty. This array is replaced during a strategic - merge patch. - items: - type: string - type: array - x-kubernetes-list-type: atomic - required: - - key - - operator - type: object - type: array - x-kubernetes-list-type: atomic - matchLabels: - additionalProperties: - type: string - description: |- - matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels - map is equivalent to an element of matchExpressions, whose key field is "key", the - operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - type: object - x-kubernetes-map-type: atomic - preloadPolicy: - description: |- - preloadPolicy directs the client to include hosts in its host preload list so that - it never needs to do an initial load to get the HSTS header (note that this is not defined - in RFC 6797 and is therefore client implementation-dependent). - enum: - - RequirePreload - - RequireNoPreload - - NoOpinion - type: string - required: - - domainPatterns - type: object - type: array - type: object - status: - description: status holds observed values from the cluster. They may not - be overridden. - properties: - componentRoutes: - description: |- - componentRoutes is where participating operators place the current route status for routes whose - hostnames and serving certificates can be customized by the cluster-admin. - items: - description: ComponentRouteStatus contains information allowing - configuration of a route's hostname and serving certificate. - properties: - conditions: - description: |- - conditions are used to communicate the state of the componentRoutes entry. - - Supported conditions include Available, Degraded and Progressing. - - If available is true, the content served by the route can be accessed by users. This includes cases - where a default may continue to serve content while the customized route specified by the cluster-admin - is being configured. - - If Degraded is true, that means something has gone wrong trying to handle the componentRoutes entry. - The currentHostnames field may or may not be in effect. - - If Progressing is true, that means the component is taking some action related to the componentRoutes entry. - items: - description: Condition contains details for one aspect of - the current state of this API Resource. - properties: - lastTransitionTime: - description: |- - lastTransitionTime is the last time the condition transitioned from one status to another. - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. - format: date-time - type: string - message: - description: |- - message is a human readable message indicating details about the transition. - This may be an empty string. - maxLength: 32768 - type: string - observedGeneration: - description: |- - observedGeneration represents the .metadata.generation that the condition was set based upon. - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date - with respect to the current state of the instance. - format: int64 - minimum: 0 - type: integer - reason: - description: |- - reason contains a programmatic identifier indicating the reason for the condition's last transition. - Producers of specific condition types may define expected values and meanings for this field, - and whether the values are considered a guaranteed API. - The value should be a CamelCase string. - This field may not be empty. - maxLength: 1024 - minLength: 1 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ - type: string - status: - description: status of the condition, one of True, False, - Unknown. - enum: - - "True" - - "False" - - Unknown - type: string - type: - description: type of condition in CamelCase or in foo.example.com/CamelCase. - maxLength: 316 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ - type: string - required: - - lastTransitionTime - - message - - reason - - status - - type - type: object - type: array - x-kubernetes-list-map-keys: - - type - x-kubernetes-list-type: map - consumingUsers: - description: consumingUsers is a slice of ServiceAccounts that - need to have read permission on the servingCertKeyPairSecret - secret. - items: - description: ConsumingUser is an alias for string which we - add validation to. Currently only service accounts are supported. - maxLength: 512 - minLength: 1 - pattern: ^system:serviceaccount:[a-z0-9]([-a-z0-9]*[a-z0-9])?:[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ - type: string - maxItems: 5 - type: array - currentHostnames: - description: |- - currentHostnames is the list of current names used by the route. Typically, this list should consist of a single - hostname, but if multiple hostnames are supported by the route the operator may write multiple entries to this list. - items: - description: Hostname is a host name as defined by RFC-1123. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - minItems: 1 - type: array - defaultHostname: - description: defaultHostname is the hostname of this route prior - to customization. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - name: - description: |- - name is the logical name of the route to customize. It does not have to be the actual name of a route resource - but it cannot be renamed. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of spec.componentRoutes if the route is to be customized. - maxLength: 256 - minLength: 1 - type: string - namespace: - description: |- - namespace is the namespace of the route to customize. It must be a real namespace. Using an actual namespace - ensures that no two components will conflict and the same component can be installed multiple times. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of spec.componentRoutes if the route is to be customized. - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - type: string - relatedObjects: - description: relatedObjects is a list of resources which are - useful when debugging or inspecting how spec.componentRoutes - is applied. - items: - description: ObjectReference contains enough information to - let you inspect or modify the referred object. - properties: - group: - description: group of the referent. - type: string - name: - description: name of the referent. - type: string - namespace: - description: namespace of the referent. - type: string - resource: - description: resource of the referent. - type: string - required: - - group - - name - - resource - type: object - minItems: 1 - type: array - required: - - defaultHostname - - name - - namespace - - relatedObjects - type: object - type: array - x-kubernetes-list-map-keys: - - namespace - - name - x-kubernetes-list-type: map - defaultPlacement: - description: |- - defaultPlacement is set at installation time to control which - nodes will host the ingress router pods by default. The options are - control-plane nodes or worker nodes. - - This field works by dictating how the Cluster Ingress Operator will - consider unset replicas and nodePlacement fields in IngressController - resources when creating the corresponding Deployments. - - See the documentation for the IngressController replicas and nodePlacement - fields for more information. - - When omitted, the default value is Workers - enum: - - ControlPlane - - Workers - - "" - type: string - type: object - required: - - spec - type: object - served: true - storage: true - subresources: - status: {} diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-CustomNoUpgrade.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses.crd.yaml similarity index 99% rename from config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-CustomNoUpgrade.crd.yaml rename to config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses.crd.yaml index c94de0ff2ee..65ee4582250 100644 --- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses-CustomNoUpgrade.crd.yaml +++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses.crd.yaml @@ -7,7 +7,6 @@ metadata: include.release.openshift.io/ibm-cloud-managed: "true" include.release.openshift.io/self-managed-high-availability: "true" release.openshift.io/bootstrap-required: "true" - release.openshift.io/feature-set: CustomNoUpgrade name: ingresses.config.openshift.io spec: group: config.openshift.io diff --git a/features.md b/features.md index c89925276f6..7d7c8b9c6e5 100644 --- a/features.md +++ b/features.md @@ -26,10 +26,14 @@ | NewOLMCatalogdAPIV1Metas| | | | Enabled | | | | Enabled | | NewOLMConfigAPI| | | | Enabled | | | | Enabled | | NewOLMOwnSingleNamespace| | | | Enabled | | | | Enabled | +| NewOLMPreflightPermissionChecks| | | | Enabled | | | | Enabled | +| NoRegistryClusterInstall| | | | Enabled | | | | Enabled | | ProvisioningRequestAvailable| | | Enabled | Enabled | | | | | | AWSClusterHostedDNS| | | Enabled | Enabled | | | Enabled | Enabled | | AWSDedicatedHosts| | | Enabled | Enabled | | | Enabled | Enabled | +| AWSDualStackInstall| | | Enabled | Enabled | | | Enabled | Enabled | | AWSEuropeanSovereignCloudInstall| | | Enabled | Enabled | | | Enabled | Enabled | +| AdditionalStorageConfig| | | Enabled | Enabled | | | Enabled | Enabled | | AutomatedEtcdBackup| | | Enabled | Enabled | | | Enabled | Enabled | | AzureDedicatedHosts| | | Enabled | Enabled | | | Enabled | Enabled | | AzureDualStackInstall| | | Enabled | Enabled | | | Enabled | Enabled | @@ -37,7 +41,7 @@ | BootcNodeManagement| | | Enabled | Enabled | | | Enabled | Enabled | | CBORServingAndStorage| | | Enabled | Enabled | | | Enabled | Enabled | | CRDCompatibilityRequirementOperator| | | Enabled | Enabled | | | Enabled | Enabled | -| CRIOCredentialProviderConfig| | Enabled | | Enabled | | Enabled | | Enabled | +| CRIOCredentialProviderConfig| | | Enabled | Enabled | | | Enabled | Enabled | | ClientsPreferCBOR| | | Enabled | Enabled | | | Enabled | Enabled | | ClusterAPIInstallIBMCloud| | | Enabled | Enabled | | | Enabled | Enabled | | ClusterAPIMachineManagement| | | Enabled | Enabled | | | Enabled | Enabled | @@ -62,10 +66,10 @@ | GCPCustomAPIEndpoints| | | Enabled | Enabled | | | Enabled | Enabled | | GCPCustomAPIEndpointsInstall| | | Enabled | Enabled | | | Enabled | Enabled | | GCPDualStackInstall| | | Enabled | Enabled | | | Enabled | Enabled | -| GatewayAPIManagementMode| | | Enabled | Enabled | | | Enabled | Enabled | | HyperShiftOnlyDynamicResourceAllocation| Enabled | | Enabled | | Enabled | | Enabled | | | ImageModeStatusReporting| | | Enabled | Enabled | | | Enabled | Enabled | -| IngressComponentRouteLabels| | | Enabled | Enabled | | | Enabled | Enabled | +| IngressControllerMultipleHAProxyVersions| | | Enabled | Enabled | | | Enabled | Enabled | +| IrreconcilableMachineConfig| | | Enabled | Enabled | | | Enabled | Enabled | | KMSEncryption| | | Enabled | Enabled | | | Enabled | Enabled | | MachineAPIMigration| | | Enabled | Enabled | | | Enabled | Enabled | | MachineAPIMigrationAWS| | | Enabled | Enabled | | | Enabled | Enabled | @@ -78,7 +82,6 @@ | NewOLM| | Enabled | | Enabled | | Enabled | | Enabled | | NewOLMWebhookProviderOpenshiftServiceCA| | Enabled | | Enabled | | Enabled | | Enabled | | NoOverlayMode| | | Enabled | Enabled | | | Enabled | Enabled | -| NoRegistryClusterInstall| | Enabled | | Enabled | | Enabled | | Enabled | | NutanixMultiSubnets| | | Enabled | Enabled | | | Enabled | Enabled | | OLMLifecycleAndCompatibility| | Enabled | | Enabled | | Enabled | | Enabled | | OVNObservability| | | Enabled | Enabled | | | Enabled | Enabled | @@ -93,9 +96,7 @@ | VolumeGroupSnapshot| | | Enabled | Enabled | | | Enabled | Enabled | | OSStreams| | Enabled | Enabled | Enabled | | Enabled | Enabled | Enabled | | AWSClusterHostedDNSInstall| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | -| AWSDualStackInstall| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | AWSServiceLBNetworkSecurityGroup| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | -| AdditionalStorageConfig| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | AzureWorkloadIdentity| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | BootImageSkewEnforcement| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | BuildCSIVolumes| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | @@ -106,17 +107,17 @@ | ExternalOIDCWithUIDAndExtraClaimMappings| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | GatewayAPIWithoutOLM| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | ImageStreamImportMode| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | +| IngressComponentRouteLabels| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | IngressControllerDynamicConfigurationManager| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | -| IngressControllerMultipleHAProxyVersions| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | InsightsConfig| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | InsightsOnDemandDataGather| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | -| IrreconcilableMachineConfig| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | KMSv1| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | ManagedBootImagesCPMS| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | MetricsCollectionProfiles| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | MutableCSINodeAllocatableCount| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | MutatingAdmissionPolicy| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | OpenShiftPodSecurityAdmission| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | +| RouteExternalCertificate| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | ServiceAccountTokenNodeBinding| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | SigstoreImageVerification| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | SigstoreImageVerificationPKI| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | diff --git a/features/features.go b/features/features.go index 591b6147b1b..b52ec82e51d 100644 --- a/features/features.go +++ b/features/features.go @@ -655,7 +655,7 @@ var ( contactPerson("leoli"). productScope(ocpSpecific). enhancementPR("https://github.com/openshift/enhancements/pull/2033"). - enable(inDevPreviewNoUpgrade(), inTechPreviewNoUpgrade()). + enable(inDevPreviewNoUpgrade(), inTechPreviewNoUpgrade(), inDefault(), inOKD()). mustRegister() FeatureGateIngressControllerMultipleHAProxyVersions = newFeatureGate("IngressControllerMultipleHAProxyVersions"). diff --git a/payload-manifests/crds/0000_10_config-operator_01_ingresses-Default.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_ingresses-Default.crd.yaml deleted file mode 100644 index 70c87e6e48b..00000000000 --- a/payload-manifests/crds/0000_10_config-operator_01_ingresses-Default.crd.yaml +++ /dev/null @@ -1,546 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - api-approved.openshift.io: https://github.com/openshift/api/pull/470 - api.openshift.io/merged-by-featuregates: "true" - include.release.openshift.io/ibm-cloud-managed: "true" - include.release.openshift.io/self-managed-high-availability: "true" - release.openshift.io/bootstrap-required: "true" - release.openshift.io/feature-set: Default - name: ingresses.config.openshift.io -spec: - group: config.openshift.io - names: - kind: Ingress - listKind: IngressList - plural: ingresses - singular: ingress - scope: Cluster - versions: - - name: v1 - schema: - openAPIV3Schema: - description: |- - Ingress holds cluster-wide information about ingress, including the default ingress domain - used for routes. The canonical name is `cluster`. - - Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). - properties: - apiVersion: - description: |- - APIVersion defines the versioned schema of this representation of an object. - Servers should convert recognized schemas to the latest internal value, and - may reject unrecognized values. - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources - type: string - kind: - description: |- - Kind is a string value representing the REST resource this object represents. - Servers may infer this from the endpoint the client submits requests to. - Cannot be updated. - In CamelCase. - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds - type: string - metadata: - type: object - spec: - description: spec holds user settable values for configuration - properties: - appsDomain: - description: |- - appsDomain is an optional domain to use instead of the one specified - in the domain field when a Route is created without specifying an explicit - host. If appsDomain is nonempty, this value is used to generate default - host values for Route. Unlike domain, appsDomain may be modified after - installation. - This assumes a new ingresscontroller has been setup with a wildcard - certificate. - type: string - componentRoutes: - description: |- - componentRoutes is an optional list of routes that are managed by OpenShift components - that a cluster-admin is able to configure the hostname and serving certificate for. - The namespace and name of each route in this list should match an existing entry in the - status.componentRoutes list. - - To determine the set of configurable Routes, look at namespace and name of entries in the - .status.componentRoutes list, where participating operators write the status of - configurable routes. - A maximum of 250 component routes may be configured. - items: - description: ComponentRouteSpec allows for configuration of a route's - hostname and serving certificate. - properties: - hostname: - description: hostname is the hostname that should be used by - the route. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - name: - description: |- - name is the logical name of the route to customize. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of status.componentRoutes if the route is to be customized. - maxLength: 256 - minLength: 1 - type: string - namespace: - description: |- - namespace is the namespace of the route to customize. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of status.componentRoutes if the route is to be customized. - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - type: string - servingCertKeyPairSecret: - description: |- - servingCertKeyPairSecret is a reference to a secret of type `kubernetes.io/tls` in the openshift-config namespace. - The serving cert/key pair must match and will be used by the operator to fulfill the intent of serving with this name. - If the custom hostname uses the default routing suffix of the cluster, - the Secret specification for a serving certificate will not be needed. - properties: - name: - description: name is the metadata.name of the referenced - secret - type: string - required: - - name - type: object - required: - - hostname - - name - - namespace - type: object - maxItems: 250 - type: array - x-kubernetes-list-map-keys: - - namespace - - name - x-kubernetes-list-type: map - domain: - description: |- - domain is used to generate a default host name for a route when the - route's host name is empty. The generated host name will follow this - pattern: "..". - - It is also used as the default wildcard domain suffix for ingress. The - default ingresscontroller domain will follow this pattern: "*.". - - Once set, changing domain is not currently supported. - type: string - x-kubernetes-validations: - - message: domain is immutable once set - rule: self == oldSelf - loadBalancer: - description: |- - loadBalancer contains the load balancer details in general which are not only specific to the underlying infrastructure - provider of the current cluster and are required for Ingress Controller to work on OpenShift. - properties: - platform: - description: |- - platform holds configuration specific to the underlying - infrastructure provider for the ingress load balancers. - When omitted, this means the user has no opinion and the platform is left - to choose reasonable defaults. These defaults are subject to change over time. - properties: - aws: - description: aws contains settings specific to the Amazon - Web Services infrastructure provider. - properties: - type: - description: |- - type allows user to set a load balancer type. - When this field is set the default ingresscontroller will get created using the specified LBType. - If this field is not set then the default ingress controller of LBType Classic will be created. - Valid values are: - - * "Classic": A Classic Load Balancer that makes routing decisions at either - the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See - the following for additional details: - - https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb - - * "NLB": A Network Load Balancer that makes routing decisions at the - transport layer (TCP/SSL). See the following for additional details: - - https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb - enum: - - NLB - - Classic - type: string - required: - - type - type: object - type: - description: |- - type is the underlying infrastructure provider for the cluster. - Allowed values are "AWS", "Azure", "BareMetal", "GCP", "Libvirt", - "OpenStack", "VSphere", "oVirt", "KubeVirt", "EquinixMetal", "PowerVS", - "AlibabaCloud", "Nutanix" and "None". Individual components may not support all platforms, - and must handle unrecognized platforms as None if they do not support that platform. - enum: - - "" - - AWS - - Azure - - BareMetal - - GCP - - Libvirt - - OpenStack - - None - - VSphere - - oVirt - - IBMCloud - - KubeVirt - - EquinixMetal - - PowerVS - - AlibabaCloud - - Nutanix - - External - type: string - type: object - type: object - requiredHSTSPolicies: - description: |- - requiredHSTSPolicies specifies HSTS policies that are required to be set on newly created or updated routes - matching the domainPattern/s and namespaceSelector/s that are specified in the policy. - Each requiredHSTSPolicy must have at least a domainPattern and a maxAge to validate a route HSTS Policy route - annotation, and affect route admission. - - A candidate route is checked for HSTS Policies if it has the HSTS Policy route annotation: - "haproxy.router.openshift.io/hsts_header" - E.g. haproxy.router.openshift.io/hsts_header: max-age=31536000;preload;includeSubDomains - - - For each candidate route, if it matches a requiredHSTSPolicy domainPattern and optional namespaceSelector, - then the maxAge, preloadPolicy, and includeSubdomainsPolicy must be valid to be admitted. Otherwise, the route - is rejected. - - The first match, by domainPattern and optional namespaceSelector, in the ordering of the RequiredHSTSPolicies - determines the route's admission status. - - If the candidate route doesn't match any requiredHSTSPolicy domainPattern and optional namespaceSelector, - then it may use any HSTS Policy annotation. - - The HSTS policy configuration may be changed after routes have already been created. An update to a previously - admitted route may then fail if the updated route does not conform to the updated HSTS policy configuration. - However, changing the HSTS policy configuration will not cause a route that is already admitted to stop working. - - Note that if there are no RequiredHSTSPolicies, any HSTS Policy annotation on the route is valid. - items: - properties: - domainPatterns: - description: |- - domainPatterns is a list of domains for which the desired HSTS annotations are required. - If domainPatterns is specified and a route is created with a spec.host matching one of the domains, - the route must specify the HSTS Policy components described in the matching RequiredHSTSPolicy. - - The use of wildcards is allowed like this: *.foo.com matches everything under foo.com. - foo.com only matches foo.com, so to cover foo.com and everything under it, you must specify *both*. - items: - type: string - minItems: 1 - type: array - includeSubDomainsPolicy: - description: |- - includeSubDomainsPolicy means the HSTS Policy should apply to any subdomains of the host's - domain name. Thus, for the host bar.foo.com, if includeSubDomainsPolicy was set to RequireIncludeSubDomains: - - the host app.bar.foo.com would inherit the HSTS Policy of bar.foo.com - - the host bar.foo.com would inherit the HSTS Policy of bar.foo.com - - the host foo.com would NOT inherit the HSTS Policy of bar.foo.com - - the host def.foo.com would NOT inherit the HSTS Policy of bar.foo.com - enum: - - RequireIncludeSubDomains - - RequireNoIncludeSubDomains - - NoOpinion - type: string - maxAge: - description: |- - maxAge is the delta time range in seconds during which hosts are regarded as HSTS hosts. - If set to 0, it negates the effect, and hosts are removed as HSTS hosts. - If set to 0 and includeSubdomains is specified, all subdomains of the host are also removed as HSTS hosts. - maxAge is a time-to-live value, and if this policy is not refreshed on a client, the HSTS - policy will eventually expire on that client. - properties: - largestMaxAge: - description: |- - The largest allowed value (in seconds) of the RequiredHSTSPolicy max-age - This value can be left unspecified, in which case no upper limit is enforced. - format: int32 - maximum: 2147483647 - minimum: 0 - type: integer - smallestMaxAge: - description: |- - The smallest allowed value (in seconds) of the RequiredHSTSPolicy max-age - Setting max-age=0 allows the deletion of an existing HSTS header from a host. This is a necessary - tool for administrators to quickly correct mistakes. - This value can be left unspecified, in which case no lower limit is enforced. - format: int32 - maximum: 2147483647 - minimum: 0 - type: integer - type: object - namespaceSelector: - description: |- - namespaceSelector specifies a label selector such that the policy applies only to those routes that - are in namespaces with labels that match the selector, and are in one of the DomainPatterns. - Defaults to the empty LabelSelector, which matches everything. - properties: - matchExpressions: - description: matchExpressions is a list of label selector - requirements. The requirements are ANDed. - items: - description: |- - A label selector requirement is a selector that contains values, a key, and an operator that - relates the key and values. - properties: - key: - description: key is the label key that the selector - applies to. - type: string - operator: - description: |- - operator represents a key's relationship to a set of values. - Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: |- - values is an array of string values. If the operator is In or NotIn, - the values array must be non-empty. If the operator is Exists or DoesNotExist, - the values array must be empty. This array is replaced during a strategic - merge patch. - items: - type: string - type: array - x-kubernetes-list-type: atomic - required: - - key - - operator - type: object - type: array - x-kubernetes-list-type: atomic - matchLabels: - additionalProperties: - type: string - description: |- - matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels - map is equivalent to an element of matchExpressions, whose key field is "key", the - operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - type: object - x-kubernetes-map-type: atomic - preloadPolicy: - description: |- - preloadPolicy directs the client to include hosts in its host preload list so that - it never needs to do an initial load to get the HSTS header (note that this is not defined - in RFC 6797 and is therefore client implementation-dependent). - enum: - - RequirePreload - - RequireNoPreload - - NoOpinion - type: string - required: - - domainPatterns - type: object - type: array - type: object - status: - description: status holds observed values from the cluster. They may not - be overridden. - properties: - componentRoutes: - description: |- - componentRoutes is where participating operators place the current route status for routes whose - hostnames and serving certificates can be customized by the cluster-admin. - items: - description: ComponentRouteStatus contains information allowing - configuration of a route's hostname and serving certificate. - properties: - conditions: - description: |- - conditions are used to communicate the state of the componentRoutes entry. - - Supported conditions include Available, Degraded and Progressing. - - If available is true, the content served by the route can be accessed by users. This includes cases - where a default may continue to serve content while the customized route specified by the cluster-admin - is being configured. - - If Degraded is true, that means something has gone wrong trying to handle the componentRoutes entry. - The currentHostnames field may or may not be in effect. - - If Progressing is true, that means the component is taking some action related to the componentRoutes entry. - items: - description: Condition contains details for one aspect of - the current state of this API Resource. - properties: - lastTransitionTime: - description: |- - lastTransitionTime is the last time the condition transitioned from one status to another. - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. - format: date-time - type: string - message: - description: |- - message is a human readable message indicating details about the transition. - This may be an empty string. - maxLength: 32768 - type: string - observedGeneration: - description: |- - observedGeneration represents the .metadata.generation that the condition was set based upon. - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date - with respect to the current state of the instance. - format: int64 - minimum: 0 - type: integer - reason: - description: |- - reason contains a programmatic identifier indicating the reason for the condition's last transition. - Producers of specific condition types may define expected values and meanings for this field, - and whether the values are considered a guaranteed API. - The value should be a CamelCase string. - This field may not be empty. - maxLength: 1024 - minLength: 1 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ - type: string - status: - description: status of the condition, one of True, False, - Unknown. - enum: - - "True" - - "False" - - Unknown - type: string - type: - description: type of condition in CamelCase or in foo.example.com/CamelCase. - maxLength: 316 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ - type: string - required: - - lastTransitionTime - - message - - reason - - status - - type - type: object - type: array - x-kubernetes-list-map-keys: - - type - x-kubernetes-list-type: map - consumingUsers: - description: consumingUsers is a slice of ServiceAccounts that - need to have read permission on the servingCertKeyPairSecret - secret. - items: - description: ConsumingUser is an alias for string which we - add validation to. Currently only service accounts are supported. - maxLength: 512 - minLength: 1 - pattern: ^system:serviceaccount:[a-z0-9]([-a-z0-9]*[a-z0-9])?:[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ - type: string - maxItems: 5 - type: array - currentHostnames: - description: |- - currentHostnames is the list of current names used by the route. Typically, this list should consist of a single - hostname, but if multiple hostnames are supported by the route the operator may write multiple entries to this list. - items: - description: Hostname is a host name as defined by RFC-1123. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - minItems: 1 - type: array - defaultHostname: - description: defaultHostname is the hostname of this route prior - to customization. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - name: - description: |- - name is the logical name of the route to customize. It does not have to be the actual name of a route resource - but it cannot be renamed. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of spec.componentRoutes if the route is to be customized. - maxLength: 256 - minLength: 1 - type: string - namespace: - description: |- - namespace is the namespace of the route to customize. It must be a real namespace. Using an actual namespace - ensures that no two components will conflict and the same component can be installed multiple times. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of spec.componentRoutes if the route is to be customized. - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - type: string - relatedObjects: - description: relatedObjects is a list of resources which are - useful when debugging or inspecting how spec.componentRoutes - is applied. - items: - description: ObjectReference contains enough information to - let you inspect or modify the referred object. - properties: - group: - description: group of the referent. - type: string - name: - description: name of the referent. - type: string - namespace: - description: namespace of the referent. - type: string - resource: - description: resource of the referent. - type: string - required: - - group - - name - - resource - type: object - minItems: 1 - type: array - required: - - defaultHostname - - name - - namespace - - relatedObjects - type: object - type: array - x-kubernetes-list-map-keys: - - namespace - - name - x-kubernetes-list-type: map - defaultPlacement: - description: |- - defaultPlacement is set at installation time to control which - nodes will host the ingress router pods by default. The options are - control-plane nodes or worker nodes. - - This field works by dictating how the Cluster Ingress Operator will - consider unset replicas and nodePlacement fields in IngressController - resources when creating the corresponding Deployments. - - See the documentation for the IngressController replicas and nodePlacement - fields for more information. - - When omitted, the default value is Workers - enum: - - ControlPlane - - Workers - - "" - type: string - type: object - required: - - spec - type: object - served: true - storage: true - subresources: - status: {} diff --git a/payload-manifests/crds/0000_10_config-operator_01_ingresses-DevPreviewNoUpgrade.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_ingresses-DevPreviewNoUpgrade.crd.yaml deleted file mode 100644 index 860bde0fb25..00000000000 --- a/payload-manifests/crds/0000_10_config-operator_01_ingresses-DevPreviewNoUpgrade.crd.yaml +++ /dev/null @@ -1,598 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - api-approved.openshift.io: https://github.com/openshift/api/pull/470 - api.openshift.io/merged-by-featuregates: "true" - include.release.openshift.io/ibm-cloud-managed: "true" - include.release.openshift.io/self-managed-high-availability: "true" - release.openshift.io/bootstrap-required: "true" - release.openshift.io/feature-set: DevPreviewNoUpgrade - name: ingresses.config.openshift.io -spec: - group: config.openshift.io - names: - kind: Ingress - listKind: IngressList - plural: ingresses - singular: ingress - scope: Cluster - versions: - - name: v1 - schema: - openAPIV3Schema: - description: |- - Ingress holds cluster-wide information about ingress, including the default ingress domain - used for routes. The canonical name is `cluster`. - - Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). - properties: - apiVersion: - description: |- - APIVersion defines the versioned schema of this representation of an object. - Servers should convert recognized schemas to the latest internal value, and - may reject unrecognized values. - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources - type: string - kind: - description: |- - Kind is a string value representing the REST resource this object represents. - Servers may infer this from the endpoint the client submits requests to. - Cannot be updated. - In CamelCase. - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds - type: string - metadata: - type: object - spec: - description: spec holds user settable values for configuration - properties: - appsDomain: - description: |- - appsDomain is an optional domain to use instead of the one specified - in the domain field when a Route is created without specifying an explicit - host. If appsDomain is nonempty, this value is used to generate default - host values for Route. Unlike domain, appsDomain may be modified after - installation. - This assumes a new ingresscontroller has been setup with a wildcard - certificate. - type: string - componentRoutes: - description: |- - componentRoutes is an optional list of routes that are managed by OpenShift components - that a cluster-admin is able to configure the hostname and serving certificate for. - The namespace and name of each route in this list should match an existing entry in the - status.componentRoutes list. - - To determine the set of configurable Routes, look at namespace and name of entries in the - .status.componentRoutes list, where participating operators write the status of - configurable routes. - A maximum of 250 component routes may be configured. - items: - description: ComponentRouteSpec allows for configuration of a route's - hostname and serving certificate. - properties: - hostname: - description: hostname is the hostname that should be used by - the route. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - labels: - additionalProperties: - description: |- - LabelValue is the value part of a Kubernetes label. - A label value must be either empty or 1-63 characters, consisting of - alphanumeric characters, '-', '_', or '.', starting and ending with - an alphanumeric character. - maxLength: 63 - minLength: 0 - type: string - x-kubernetes-validations: - - message: label values must be valid Kubernetes label values - (at most 63 characters, alphanumeric, '-', '_', or '.', - must start and end with alphanumeric) - rule: self == "" || self.matches('^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9])?$') - description: |- - labels defines additional labels to be applied to the route created - for the component. These labels are used by the IngressController to - determine which routes it should manage. Changing labels may cause the - route to be reassigned to a different IngressController. - When omitted, no additional labels are applied to the component route. - When specified, labels must contain at least one entry, up to a maximum of 8. - Label keys must be valid qualified names, consisting of a name segment and - an optional prefix separated by a slash (/). The name segment must be at most - 63 characters in length and must consist only of alphanumeric characters, - dashes (-), underscores (_), and dots (.), and must start and end with - alphanumeric characters. The prefix, if specified, must be a DNS subdomain: - at most 253 characters in length, consisting of dot-separated segments where - each segment starts and ends with an alphanumeric character. - Label values must be either empty or 1-63 characters, consisting of - alphanumeric characters, dashes (-), underscores (_), or dots (.), - starting and ending with an alphanumeric character. - Keys with the "kubernetes.io/", "k8s.io/", and "openshift.io/" prefixes are reserved and may not be used. - maxProperties: 8 - minProperties: 1 - type: object - x-kubernetes-map-type: granular - x-kubernetes-validations: - - message: label keys must be between 1 and 63 characters in - length - rule: self.all(key, key.size() <= 63 && key.size() > 0) - - message: label keys must be valid qualified names, consisting - of an optional DNS subdomain prefix of up to 253 characters - followed by a slash and a name segment of 1-63 characters, - that consists only of alphanumeric characters, dashes, underscores, - and dots, and must start and end with an alphanumeric character - rule: self.all(key, key.matches('^([a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*\\/)?[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9])?$') - && key.size() <= 253) - - message: kubernetes.io/, k8s.io/, and openshift.io/ prefixed - label keys are reserved and may not be used - rule: self.all(key, !key.startsWith('kubernetes.io/') && !key.startsWith('k8s.io/') - && !key.startsWith('openshift.io/')) - name: - description: |- - name is the logical name of the route to customize. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of status.componentRoutes if the route is to be customized. - maxLength: 256 - minLength: 1 - type: string - namespace: - description: |- - namespace is the namespace of the route to customize. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of status.componentRoutes if the route is to be customized. - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - type: string - servingCertKeyPairSecret: - description: |- - servingCertKeyPairSecret is a reference to a secret of type `kubernetes.io/tls` in the openshift-config namespace. - The serving cert/key pair must match and will be used by the operator to fulfill the intent of serving with this name. - If the custom hostname uses the default routing suffix of the cluster, - the Secret specification for a serving certificate will not be needed. - properties: - name: - description: name is the metadata.name of the referenced - secret - type: string - required: - - name - type: object - required: - - hostname - - name - - namespace - type: object - maxItems: 250 - type: array - x-kubernetes-list-map-keys: - - namespace - - name - x-kubernetes-list-type: map - domain: - description: |- - domain is used to generate a default host name for a route when the - route's host name is empty. The generated host name will follow this - pattern: "..". - - It is also used as the default wildcard domain suffix for ingress. The - default ingresscontroller domain will follow this pattern: "*.". - - Once set, changing domain is not currently supported. - type: string - x-kubernetes-validations: - - message: domain is immutable once set - rule: self == oldSelf - loadBalancer: - description: |- - loadBalancer contains the load balancer details in general which are not only specific to the underlying infrastructure - provider of the current cluster and are required for Ingress Controller to work on OpenShift. - properties: - platform: - description: |- - platform holds configuration specific to the underlying - infrastructure provider for the ingress load balancers. - When omitted, this means the user has no opinion and the platform is left - to choose reasonable defaults. These defaults are subject to change over time. - properties: - aws: - description: aws contains settings specific to the Amazon - Web Services infrastructure provider. - properties: - type: - description: |- - type allows user to set a load balancer type. - When this field is set the default ingresscontroller will get created using the specified LBType. - If this field is not set then the default ingress controller of LBType Classic will be created. - Valid values are: - - * "Classic": A Classic Load Balancer that makes routing decisions at either - the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See - the following for additional details: - - https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb - - * "NLB": A Network Load Balancer that makes routing decisions at the - transport layer (TCP/SSL). See the following for additional details: - - https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb - enum: - - NLB - - Classic - type: string - required: - - type - type: object - type: - description: |- - type is the underlying infrastructure provider for the cluster. - Allowed values are "AWS", "Azure", "BareMetal", "GCP", "Libvirt", - "OpenStack", "VSphere", "oVirt", "KubeVirt", "EquinixMetal", "PowerVS", - "AlibabaCloud", "Nutanix" and "None". Individual components may not support all platforms, - and must handle unrecognized platforms as None if they do not support that platform. - enum: - - "" - - AWS - - Azure - - BareMetal - - GCP - - Libvirt - - OpenStack - - None - - VSphere - - oVirt - - IBMCloud - - KubeVirt - - EquinixMetal - - PowerVS - - AlibabaCloud - - Nutanix - - External - type: string - type: object - type: object - requiredHSTSPolicies: - description: |- - requiredHSTSPolicies specifies HSTS policies that are required to be set on newly created or updated routes - matching the domainPattern/s and namespaceSelector/s that are specified in the policy. - Each requiredHSTSPolicy must have at least a domainPattern and a maxAge to validate a route HSTS Policy route - annotation, and affect route admission. - - A candidate route is checked for HSTS Policies if it has the HSTS Policy route annotation: - "haproxy.router.openshift.io/hsts_header" - E.g. haproxy.router.openshift.io/hsts_header: max-age=31536000;preload;includeSubDomains - - - For each candidate route, if it matches a requiredHSTSPolicy domainPattern and optional namespaceSelector, - then the maxAge, preloadPolicy, and includeSubdomainsPolicy must be valid to be admitted. Otherwise, the route - is rejected. - - The first match, by domainPattern and optional namespaceSelector, in the ordering of the RequiredHSTSPolicies - determines the route's admission status. - - If the candidate route doesn't match any requiredHSTSPolicy domainPattern and optional namespaceSelector, - then it may use any HSTS Policy annotation. - - The HSTS policy configuration may be changed after routes have already been created. An update to a previously - admitted route may then fail if the updated route does not conform to the updated HSTS policy configuration. - However, changing the HSTS policy configuration will not cause a route that is already admitted to stop working. - - Note that if there are no RequiredHSTSPolicies, any HSTS Policy annotation on the route is valid. - items: - properties: - domainPatterns: - description: |- - domainPatterns is a list of domains for which the desired HSTS annotations are required. - If domainPatterns is specified and a route is created with a spec.host matching one of the domains, - the route must specify the HSTS Policy components described in the matching RequiredHSTSPolicy. - - The use of wildcards is allowed like this: *.foo.com matches everything under foo.com. - foo.com only matches foo.com, so to cover foo.com and everything under it, you must specify *both*. - items: - type: string - minItems: 1 - type: array - includeSubDomainsPolicy: - description: |- - includeSubDomainsPolicy means the HSTS Policy should apply to any subdomains of the host's - domain name. Thus, for the host bar.foo.com, if includeSubDomainsPolicy was set to RequireIncludeSubDomains: - - the host app.bar.foo.com would inherit the HSTS Policy of bar.foo.com - - the host bar.foo.com would inherit the HSTS Policy of bar.foo.com - - the host foo.com would NOT inherit the HSTS Policy of bar.foo.com - - the host def.foo.com would NOT inherit the HSTS Policy of bar.foo.com - enum: - - RequireIncludeSubDomains - - RequireNoIncludeSubDomains - - NoOpinion - type: string - maxAge: - description: |- - maxAge is the delta time range in seconds during which hosts are regarded as HSTS hosts. - If set to 0, it negates the effect, and hosts are removed as HSTS hosts. - If set to 0 and includeSubdomains is specified, all subdomains of the host are also removed as HSTS hosts. - maxAge is a time-to-live value, and if this policy is not refreshed on a client, the HSTS - policy will eventually expire on that client. - properties: - largestMaxAge: - description: |- - The largest allowed value (in seconds) of the RequiredHSTSPolicy max-age - This value can be left unspecified, in which case no upper limit is enforced. - format: int32 - maximum: 2147483647 - minimum: 0 - type: integer - smallestMaxAge: - description: |- - The smallest allowed value (in seconds) of the RequiredHSTSPolicy max-age - Setting max-age=0 allows the deletion of an existing HSTS header from a host. This is a necessary - tool for administrators to quickly correct mistakes. - This value can be left unspecified, in which case no lower limit is enforced. - format: int32 - maximum: 2147483647 - minimum: 0 - type: integer - type: object - namespaceSelector: - description: |- - namespaceSelector specifies a label selector such that the policy applies only to those routes that - are in namespaces with labels that match the selector, and are in one of the DomainPatterns. - Defaults to the empty LabelSelector, which matches everything. - properties: - matchExpressions: - description: matchExpressions is a list of label selector - requirements. The requirements are ANDed. - items: - description: |- - A label selector requirement is a selector that contains values, a key, and an operator that - relates the key and values. - properties: - key: - description: key is the label key that the selector - applies to. - type: string - operator: - description: |- - operator represents a key's relationship to a set of values. - Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: |- - values is an array of string values. If the operator is In or NotIn, - the values array must be non-empty. If the operator is Exists or DoesNotExist, - the values array must be empty. This array is replaced during a strategic - merge patch. - items: - type: string - type: array - x-kubernetes-list-type: atomic - required: - - key - - operator - type: object - type: array - x-kubernetes-list-type: atomic - matchLabels: - additionalProperties: - type: string - description: |- - matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels - map is equivalent to an element of matchExpressions, whose key field is "key", the - operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - type: object - x-kubernetes-map-type: atomic - preloadPolicy: - description: |- - preloadPolicy directs the client to include hosts in its host preload list so that - it never needs to do an initial load to get the HSTS header (note that this is not defined - in RFC 6797 and is therefore client implementation-dependent). - enum: - - RequirePreload - - RequireNoPreload - - NoOpinion - type: string - required: - - domainPatterns - type: object - type: array - type: object - status: - description: status holds observed values from the cluster. They may not - be overridden. - properties: - componentRoutes: - description: |- - componentRoutes is where participating operators place the current route status for routes whose - hostnames and serving certificates can be customized by the cluster-admin. - items: - description: ComponentRouteStatus contains information allowing - configuration of a route's hostname and serving certificate. - properties: - conditions: - description: |- - conditions are used to communicate the state of the componentRoutes entry. - - Supported conditions include Available, Degraded and Progressing. - - If available is true, the content served by the route can be accessed by users. This includes cases - where a default may continue to serve content while the customized route specified by the cluster-admin - is being configured. - - If Degraded is true, that means something has gone wrong trying to handle the componentRoutes entry. - The currentHostnames field may or may not be in effect. - - If Progressing is true, that means the component is taking some action related to the componentRoutes entry. - items: - description: Condition contains details for one aspect of - the current state of this API Resource. - properties: - lastTransitionTime: - description: |- - lastTransitionTime is the last time the condition transitioned from one status to another. - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. - format: date-time - type: string - message: - description: |- - message is a human readable message indicating details about the transition. - This may be an empty string. - maxLength: 32768 - type: string - observedGeneration: - description: |- - observedGeneration represents the .metadata.generation that the condition was set based upon. - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date - with respect to the current state of the instance. - format: int64 - minimum: 0 - type: integer - reason: - description: |- - reason contains a programmatic identifier indicating the reason for the condition's last transition. - Producers of specific condition types may define expected values and meanings for this field, - and whether the values are considered a guaranteed API. - The value should be a CamelCase string. - This field may not be empty. - maxLength: 1024 - minLength: 1 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ - type: string - status: - description: status of the condition, one of True, False, - Unknown. - enum: - - "True" - - "False" - - Unknown - type: string - type: - description: type of condition in CamelCase or in foo.example.com/CamelCase. - maxLength: 316 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ - type: string - required: - - lastTransitionTime - - message - - reason - - status - - type - type: object - type: array - x-kubernetes-list-map-keys: - - type - x-kubernetes-list-type: map - consumingUsers: - description: consumingUsers is a slice of ServiceAccounts that - need to have read permission on the servingCertKeyPairSecret - secret. - items: - description: ConsumingUser is an alias for string which we - add validation to. Currently only service accounts are supported. - maxLength: 512 - minLength: 1 - pattern: ^system:serviceaccount:[a-z0-9]([-a-z0-9]*[a-z0-9])?:[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ - type: string - maxItems: 5 - type: array - currentHostnames: - description: |- - currentHostnames is the list of current names used by the route. Typically, this list should consist of a single - hostname, but if multiple hostnames are supported by the route the operator may write multiple entries to this list. - items: - description: Hostname is a host name as defined by RFC-1123. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - minItems: 1 - type: array - defaultHostname: - description: defaultHostname is the hostname of this route prior - to customization. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - name: - description: |- - name is the logical name of the route to customize. It does not have to be the actual name of a route resource - but it cannot be renamed. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of spec.componentRoutes if the route is to be customized. - maxLength: 256 - minLength: 1 - type: string - namespace: - description: |- - namespace is the namespace of the route to customize. It must be a real namespace. Using an actual namespace - ensures that no two components will conflict and the same component can be installed multiple times. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of spec.componentRoutes if the route is to be customized. - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - type: string - relatedObjects: - description: relatedObjects is a list of resources which are - useful when debugging or inspecting how spec.componentRoutes - is applied. - items: - description: ObjectReference contains enough information to - let you inspect or modify the referred object. - properties: - group: - description: group of the referent. - type: string - name: - description: name of the referent. - type: string - namespace: - description: namespace of the referent. - type: string - resource: - description: resource of the referent. - type: string - required: - - group - - name - - resource - type: object - minItems: 1 - type: array - required: - - defaultHostname - - name - - namespace - - relatedObjects - type: object - type: array - x-kubernetes-list-map-keys: - - namespace - - name - x-kubernetes-list-type: map - defaultPlacement: - description: |- - defaultPlacement is set at installation time to control which - nodes will host the ingress router pods by default. The options are - control-plane nodes or worker nodes. - - This field works by dictating how the Cluster Ingress Operator will - consider unset replicas and nodePlacement fields in IngressController - resources when creating the corresponding Deployments. - - See the documentation for the IngressController replicas and nodePlacement - fields for more information. - - When omitted, the default value is Workers - enum: - - ControlPlane - - Workers - - "" - type: string - type: object - required: - - spec - type: object - served: true - storage: true - subresources: - status: {} diff --git a/payload-manifests/crds/0000_10_config-operator_01_ingresses-OKD.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_ingresses-OKD.crd.yaml deleted file mode 100644 index 2c5b410efc8..00000000000 --- a/payload-manifests/crds/0000_10_config-operator_01_ingresses-OKD.crd.yaml +++ /dev/null @@ -1,546 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - api-approved.openshift.io: https://github.com/openshift/api/pull/470 - api.openshift.io/merged-by-featuregates: "true" - include.release.openshift.io/ibm-cloud-managed: "true" - include.release.openshift.io/self-managed-high-availability: "true" - release.openshift.io/bootstrap-required: "true" - release.openshift.io/feature-set: OKD - name: ingresses.config.openshift.io -spec: - group: config.openshift.io - names: - kind: Ingress - listKind: IngressList - plural: ingresses - singular: ingress - scope: Cluster - versions: - - name: v1 - schema: - openAPIV3Schema: - description: |- - Ingress holds cluster-wide information about ingress, including the default ingress domain - used for routes. The canonical name is `cluster`. - - Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). - properties: - apiVersion: - description: |- - APIVersion defines the versioned schema of this representation of an object. - Servers should convert recognized schemas to the latest internal value, and - may reject unrecognized values. - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources - type: string - kind: - description: |- - Kind is a string value representing the REST resource this object represents. - Servers may infer this from the endpoint the client submits requests to. - Cannot be updated. - In CamelCase. - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds - type: string - metadata: - type: object - spec: - description: spec holds user settable values for configuration - properties: - appsDomain: - description: |- - appsDomain is an optional domain to use instead of the one specified - in the domain field when a Route is created without specifying an explicit - host. If appsDomain is nonempty, this value is used to generate default - host values for Route. Unlike domain, appsDomain may be modified after - installation. - This assumes a new ingresscontroller has been setup with a wildcard - certificate. - type: string - componentRoutes: - description: |- - componentRoutes is an optional list of routes that are managed by OpenShift components - that a cluster-admin is able to configure the hostname and serving certificate for. - The namespace and name of each route in this list should match an existing entry in the - status.componentRoutes list. - - To determine the set of configurable Routes, look at namespace and name of entries in the - .status.componentRoutes list, where participating operators write the status of - configurable routes. - A maximum of 250 component routes may be configured. - items: - description: ComponentRouteSpec allows for configuration of a route's - hostname and serving certificate. - properties: - hostname: - description: hostname is the hostname that should be used by - the route. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - name: - description: |- - name is the logical name of the route to customize. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of status.componentRoutes if the route is to be customized. - maxLength: 256 - minLength: 1 - type: string - namespace: - description: |- - namespace is the namespace of the route to customize. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of status.componentRoutes if the route is to be customized. - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - type: string - servingCertKeyPairSecret: - description: |- - servingCertKeyPairSecret is a reference to a secret of type `kubernetes.io/tls` in the openshift-config namespace. - The serving cert/key pair must match and will be used by the operator to fulfill the intent of serving with this name. - If the custom hostname uses the default routing suffix of the cluster, - the Secret specification for a serving certificate will not be needed. - properties: - name: - description: name is the metadata.name of the referenced - secret - type: string - required: - - name - type: object - required: - - hostname - - name - - namespace - type: object - maxItems: 250 - type: array - x-kubernetes-list-map-keys: - - namespace - - name - x-kubernetes-list-type: map - domain: - description: |- - domain is used to generate a default host name for a route when the - route's host name is empty. The generated host name will follow this - pattern: "..". - - It is also used as the default wildcard domain suffix for ingress. The - default ingresscontroller domain will follow this pattern: "*.". - - Once set, changing domain is not currently supported. - type: string - x-kubernetes-validations: - - message: domain is immutable once set - rule: self == oldSelf - loadBalancer: - description: |- - loadBalancer contains the load balancer details in general which are not only specific to the underlying infrastructure - provider of the current cluster and are required for Ingress Controller to work on OpenShift. - properties: - platform: - description: |- - platform holds configuration specific to the underlying - infrastructure provider for the ingress load balancers. - When omitted, this means the user has no opinion and the platform is left - to choose reasonable defaults. These defaults are subject to change over time. - properties: - aws: - description: aws contains settings specific to the Amazon - Web Services infrastructure provider. - properties: - type: - description: |- - type allows user to set a load balancer type. - When this field is set the default ingresscontroller will get created using the specified LBType. - If this field is not set then the default ingress controller of LBType Classic will be created. - Valid values are: - - * "Classic": A Classic Load Balancer that makes routing decisions at either - the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See - the following for additional details: - - https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb - - * "NLB": A Network Load Balancer that makes routing decisions at the - transport layer (TCP/SSL). See the following for additional details: - - https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb - enum: - - NLB - - Classic - type: string - required: - - type - type: object - type: - description: |- - type is the underlying infrastructure provider for the cluster. - Allowed values are "AWS", "Azure", "BareMetal", "GCP", "Libvirt", - "OpenStack", "VSphere", "oVirt", "KubeVirt", "EquinixMetal", "PowerVS", - "AlibabaCloud", "Nutanix" and "None". Individual components may not support all platforms, - and must handle unrecognized platforms as None if they do not support that platform. - enum: - - "" - - AWS - - Azure - - BareMetal - - GCP - - Libvirt - - OpenStack - - None - - VSphere - - oVirt - - IBMCloud - - KubeVirt - - EquinixMetal - - PowerVS - - AlibabaCloud - - Nutanix - - External - type: string - type: object - type: object - requiredHSTSPolicies: - description: |- - requiredHSTSPolicies specifies HSTS policies that are required to be set on newly created or updated routes - matching the domainPattern/s and namespaceSelector/s that are specified in the policy. - Each requiredHSTSPolicy must have at least a domainPattern and a maxAge to validate a route HSTS Policy route - annotation, and affect route admission. - - A candidate route is checked for HSTS Policies if it has the HSTS Policy route annotation: - "haproxy.router.openshift.io/hsts_header" - E.g. haproxy.router.openshift.io/hsts_header: max-age=31536000;preload;includeSubDomains - - - For each candidate route, if it matches a requiredHSTSPolicy domainPattern and optional namespaceSelector, - then the maxAge, preloadPolicy, and includeSubdomainsPolicy must be valid to be admitted. Otherwise, the route - is rejected. - - The first match, by domainPattern and optional namespaceSelector, in the ordering of the RequiredHSTSPolicies - determines the route's admission status. - - If the candidate route doesn't match any requiredHSTSPolicy domainPattern and optional namespaceSelector, - then it may use any HSTS Policy annotation. - - The HSTS policy configuration may be changed after routes have already been created. An update to a previously - admitted route may then fail if the updated route does not conform to the updated HSTS policy configuration. - However, changing the HSTS policy configuration will not cause a route that is already admitted to stop working. - - Note that if there are no RequiredHSTSPolicies, any HSTS Policy annotation on the route is valid. - items: - properties: - domainPatterns: - description: |- - domainPatterns is a list of domains for which the desired HSTS annotations are required. - If domainPatterns is specified and a route is created with a spec.host matching one of the domains, - the route must specify the HSTS Policy components described in the matching RequiredHSTSPolicy. - - The use of wildcards is allowed like this: *.foo.com matches everything under foo.com. - foo.com only matches foo.com, so to cover foo.com and everything under it, you must specify *both*. - items: - type: string - minItems: 1 - type: array - includeSubDomainsPolicy: - description: |- - includeSubDomainsPolicy means the HSTS Policy should apply to any subdomains of the host's - domain name. Thus, for the host bar.foo.com, if includeSubDomainsPolicy was set to RequireIncludeSubDomains: - - the host app.bar.foo.com would inherit the HSTS Policy of bar.foo.com - - the host bar.foo.com would inherit the HSTS Policy of bar.foo.com - - the host foo.com would NOT inherit the HSTS Policy of bar.foo.com - - the host def.foo.com would NOT inherit the HSTS Policy of bar.foo.com - enum: - - RequireIncludeSubDomains - - RequireNoIncludeSubDomains - - NoOpinion - type: string - maxAge: - description: |- - maxAge is the delta time range in seconds during which hosts are regarded as HSTS hosts. - If set to 0, it negates the effect, and hosts are removed as HSTS hosts. - If set to 0 and includeSubdomains is specified, all subdomains of the host are also removed as HSTS hosts. - maxAge is a time-to-live value, and if this policy is not refreshed on a client, the HSTS - policy will eventually expire on that client. - properties: - largestMaxAge: - description: |- - The largest allowed value (in seconds) of the RequiredHSTSPolicy max-age - This value can be left unspecified, in which case no upper limit is enforced. - format: int32 - maximum: 2147483647 - minimum: 0 - type: integer - smallestMaxAge: - description: |- - The smallest allowed value (in seconds) of the RequiredHSTSPolicy max-age - Setting max-age=0 allows the deletion of an existing HSTS header from a host. This is a necessary - tool for administrators to quickly correct mistakes. - This value can be left unspecified, in which case no lower limit is enforced. - format: int32 - maximum: 2147483647 - minimum: 0 - type: integer - type: object - namespaceSelector: - description: |- - namespaceSelector specifies a label selector such that the policy applies only to those routes that - are in namespaces with labels that match the selector, and are in one of the DomainPatterns. - Defaults to the empty LabelSelector, which matches everything. - properties: - matchExpressions: - description: matchExpressions is a list of label selector - requirements. The requirements are ANDed. - items: - description: |- - A label selector requirement is a selector that contains values, a key, and an operator that - relates the key and values. - properties: - key: - description: key is the label key that the selector - applies to. - type: string - operator: - description: |- - operator represents a key's relationship to a set of values. - Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: |- - values is an array of string values. If the operator is In or NotIn, - the values array must be non-empty. If the operator is Exists or DoesNotExist, - the values array must be empty. This array is replaced during a strategic - merge patch. - items: - type: string - type: array - x-kubernetes-list-type: atomic - required: - - key - - operator - type: object - type: array - x-kubernetes-list-type: atomic - matchLabels: - additionalProperties: - type: string - description: |- - matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels - map is equivalent to an element of matchExpressions, whose key field is "key", the - operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - type: object - x-kubernetes-map-type: atomic - preloadPolicy: - description: |- - preloadPolicy directs the client to include hosts in its host preload list so that - it never needs to do an initial load to get the HSTS header (note that this is not defined - in RFC 6797 and is therefore client implementation-dependent). - enum: - - RequirePreload - - RequireNoPreload - - NoOpinion - type: string - required: - - domainPatterns - type: object - type: array - type: object - status: - description: status holds observed values from the cluster. They may not - be overridden. - properties: - componentRoutes: - description: |- - componentRoutes is where participating operators place the current route status for routes whose - hostnames and serving certificates can be customized by the cluster-admin. - items: - description: ComponentRouteStatus contains information allowing - configuration of a route's hostname and serving certificate. - properties: - conditions: - description: |- - conditions are used to communicate the state of the componentRoutes entry. - - Supported conditions include Available, Degraded and Progressing. - - If available is true, the content served by the route can be accessed by users. This includes cases - where a default may continue to serve content while the customized route specified by the cluster-admin - is being configured. - - If Degraded is true, that means something has gone wrong trying to handle the componentRoutes entry. - The currentHostnames field may or may not be in effect. - - If Progressing is true, that means the component is taking some action related to the componentRoutes entry. - items: - description: Condition contains details for one aspect of - the current state of this API Resource. - properties: - lastTransitionTime: - description: |- - lastTransitionTime is the last time the condition transitioned from one status to another. - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. - format: date-time - type: string - message: - description: |- - message is a human readable message indicating details about the transition. - This may be an empty string. - maxLength: 32768 - type: string - observedGeneration: - description: |- - observedGeneration represents the .metadata.generation that the condition was set based upon. - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date - with respect to the current state of the instance. - format: int64 - minimum: 0 - type: integer - reason: - description: |- - reason contains a programmatic identifier indicating the reason for the condition's last transition. - Producers of specific condition types may define expected values and meanings for this field, - and whether the values are considered a guaranteed API. - The value should be a CamelCase string. - This field may not be empty. - maxLength: 1024 - minLength: 1 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ - type: string - status: - description: status of the condition, one of True, False, - Unknown. - enum: - - "True" - - "False" - - Unknown - type: string - type: - description: type of condition in CamelCase or in foo.example.com/CamelCase. - maxLength: 316 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ - type: string - required: - - lastTransitionTime - - message - - reason - - status - - type - type: object - type: array - x-kubernetes-list-map-keys: - - type - x-kubernetes-list-type: map - consumingUsers: - description: consumingUsers is a slice of ServiceAccounts that - need to have read permission on the servingCertKeyPairSecret - secret. - items: - description: ConsumingUser is an alias for string which we - add validation to. Currently only service accounts are supported. - maxLength: 512 - minLength: 1 - pattern: ^system:serviceaccount:[a-z0-9]([-a-z0-9]*[a-z0-9])?:[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ - type: string - maxItems: 5 - type: array - currentHostnames: - description: |- - currentHostnames is the list of current names used by the route. Typically, this list should consist of a single - hostname, but if multiple hostnames are supported by the route the operator may write multiple entries to this list. - items: - description: Hostname is a host name as defined by RFC-1123. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - minItems: 1 - type: array - defaultHostname: - description: defaultHostname is the hostname of this route prior - to customization. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - name: - description: |- - name is the logical name of the route to customize. It does not have to be the actual name of a route resource - but it cannot be renamed. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of spec.componentRoutes if the route is to be customized. - maxLength: 256 - minLength: 1 - type: string - namespace: - description: |- - namespace is the namespace of the route to customize. It must be a real namespace. Using an actual namespace - ensures that no two components will conflict and the same component can be installed multiple times. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of spec.componentRoutes if the route is to be customized. - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - type: string - relatedObjects: - description: relatedObjects is a list of resources which are - useful when debugging or inspecting how spec.componentRoutes - is applied. - items: - description: ObjectReference contains enough information to - let you inspect or modify the referred object. - properties: - group: - description: group of the referent. - type: string - name: - description: name of the referent. - type: string - namespace: - description: namespace of the referent. - type: string - resource: - description: resource of the referent. - type: string - required: - - group - - name - - resource - type: object - minItems: 1 - type: array - required: - - defaultHostname - - name - - namespace - - relatedObjects - type: object - type: array - x-kubernetes-list-map-keys: - - namespace - - name - x-kubernetes-list-type: map - defaultPlacement: - description: |- - defaultPlacement is set at installation time to control which - nodes will host the ingress router pods by default. The options are - control-plane nodes or worker nodes. - - This field works by dictating how the Cluster Ingress Operator will - consider unset replicas and nodePlacement fields in IngressController - resources when creating the corresponding Deployments. - - See the documentation for the IngressController replicas and nodePlacement - fields for more information. - - When omitted, the default value is Workers - enum: - - ControlPlane - - Workers - - "" - type: string - type: object - required: - - spec - type: object - served: true - storage: true - subresources: - status: {} diff --git a/payload-manifests/crds/0000_10_config-operator_01_ingresses-TechPreviewNoUpgrade.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_ingresses-TechPreviewNoUpgrade.crd.yaml deleted file mode 100644 index 204708d8710..00000000000 --- a/payload-manifests/crds/0000_10_config-operator_01_ingresses-TechPreviewNoUpgrade.crd.yaml +++ /dev/null @@ -1,598 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - api-approved.openshift.io: https://github.com/openshift/api/pull/470 - api.openshift.io/merged-by-featuregates: "true" - include.release.openshift.io/ibm-cloud-managed: "true" - include.release.openshift.io/self-managed-high-availability: "true" - release.openshift.io/bootstrap-required: "true" - release.openshift.io/feature-set: TechPreviewNoUpgrade - name: ingresses.config.openshift.io -spec: - group: config.openshift.io - names: - kind: Ingress - listKind: IngressList - plural: ingresses - singular: ingress - scope: Cluster - versions: - - name: v1 - schema: - openAPIV3Schema: - description: |- - Ingress holds cluster-wide information about ingress, including the default ingress domain - used for routes. The canonical name is `cluster`. - - Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). - properties: - apiVersion: - description: |- - APIVersion defines the versioned schema of this representation of an object. - Servers should convert recognized schemas to the latest internal value, and - may reject unrecognized values. - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources - type: string - kind: - description: |- - Kind is a string value representing the REST resource this object represents. - Servers may infer this from the endpoint the client submits requests to. - Cannot be updated. - In CamelCase. - More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds - type: string - metadata: - type: object - spec: - description: spec holds user settable values for configuration - properties: - appsDomain: - description: |- - appsDomain is an optional domain to use instead of the one specified - in the domain field when a Route is created without specifying an explicit - host. If appsDomain is nonempty, this value is used to generate default - host values for Route. Unlike domain, appsDomain may be modified after - installation. - This assumes a new ingresscontroller has been setup with a wildcard - certificate. - type: string - componentRoutes: - description: |- - componentRoutes is an optional list of routes that are managed by OpenShift components - that a cluster-admin is able to configure the hostname and serving certificate for. - The namespace and name of each route in this list should match an existing entry in the - status.componentRoutes list. - - To determine the set of configurable Routes, look at namespace and name of entries in the - .status.componentRoutes list, where participating operators write the status of - configurable routes. - A maximum of 250 component routes may be configured. - items: - description: ComponentRouteSpec allows for configuration of a route's - hostname and serving certificate. - properties: - hostname: - description: hostname is the hostname that should be used by - the route. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - labels: - additionalProperties: - description: |- - LabelValue is the value part of a Kubernetes label. - A label value must be either empty or 1-63 characters, consisting of - alphanumeric characters, '-', '_', or '.', starting and ending with - an alphanumeric character. - maxLength: 63 - minLength: 0 - type: string - x-kubernetes-validations: - - message: label values must be valid Kubernetes label values - (at most 63 characters, alphanumeric, '-', '_', or '.', - must start and end with alphanumeric) - rule: self == "" || self.matches('^[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9])?$') - description: |- - labels defines additional labels to be applied to the route created - for the component. These labels are used by the IngressController to - determine which routes it should manage. Changing labels may cause the - route to be reassigned to a different IngressController. - When omitted, no additional labels are applied to the component route. - When specified, labels must contain at least one entry, up to a maximum of 8. - Label keys must be valid qualified names, consisting of a name segment and - an optional prefix separated by a slash (/). The name segment must be at most - 63 characters in length and must consist only of alphanumeric characters, - dashes (-), underscores (_), and dots (.), and must start and end with - alphanumeric characters. The prefix, if specified, must be a DNS subdomain: - at most 253 characters in length, consisting of dot-separated segments where - each segment starts and ends with an alphanumeric character. - Label values must be either empty or 1-63 characters, consisting of - alphanumeric characters, dashes (-), underscores (_), or dots (.), - starting and ending with an alphanumeric character. - Keys with the "kubernetes.io/", "k8s.io/", and "openshift.io/" prefixes are reserved and may not be used. - maxProperties: 8 - minProperties: 1 - type: object - x-kubernetes-map-type: granular - x-kubernetes-validations: - - message: label keys must be between 1 and 63 characters in - length - rule: self.all(key, key.size() <= 63 && key.size() > 0) - - message: label keys must be valid qualified names, consisting - of an optional DNS subdomain prefix of up to 253 characters - followed by a slash and a name segment of 1-63 characters, - that consists only of alphanumeric characters, dashes, underscores, - and dots, and must start and end with an alphanumeric character - rule: self.all(key, key.matches('^([a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*\\/)?[a-zA-Z0-9]([a-zA-Z0-9._-]*[a-zA-Z0-9])?$') - && key.size() <= 253) - - message: kubernetes.io/, k8s.io/, and openshift.io/ prefixed - label keys are reserved and may not be used - rule: self.all(key, !key.startsWith('kubernetes.io/') && !key.startsWith('k8s.io/') - && !key.startsWith('openshift.io/')) - name: - description: |- - name is the logical name of the route to customize. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of status.componentRoutes if the route is to be customized. - maxLength: 256 - minLength: 1 - type: string - namespace: - description: |- - namespace is the namespace of the route to customize. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of status.componentRoutes if the route is to be customized. - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - type: string - servingCertKeyPairSecret: - description: |- - servingCertKeyPairSecret is a reference to a secret of type `kubernetes.io/tls` in the openshift-config namespace. - The serving cert/key pair must match and will be used by the operator to fulfill the intent of serving with this name. - If the custom hostname uses the default routing suffix of the cluster, - the Secret specification for a serving certificate will not be needed. - properties: - name: - description: name is the metadata.name of the referenced - secret - type: string - required: - - name - type: object - required: - - hostname - - name - - namespace - type: object - maxItems: 250 - type: array - x-kubernetes-list-map-keys: - - namespace - - name - x-kubernetes-list-type: map - domain: - description: |- - domain is used to generate a default host name for a route when the - route's host name is empty. The generated host name will follow this - pattern: "..". - - It is also used as the default wildcard domain suffix for ingress. The - default ingresscontroller domain will follow this pattern: "*.". - - Once set, changing domain is not currently supported. - type: string - x-kubernetes-validations: - - message: domain is immutable once set - rule: self == oldSelf - loadBalancer: - description: |- - loadBalancer contains the load balancer details in general which are not only specific to the underlying infrastructure - provider of the current cluster and are required for Ingress Controller to work on OpenShift. - properties: - platform: - description: |- - platform holds configuration specific to the underlying - infrastructure provider for the ingress load balancers. - When omitted, this means the user has no opinion and the platform is left - to choose reasonable defaults. These defaults are subject to change over time. - properties: - aws: - description: aws contains settings specific to the Amazon - Web Services infrastructure provider. - properties: - type: - description: |- - type allows user to set a load balancer type. - When this field is set the default ingresscontroller will get created using the specified LBType. - If this field is not set then the default ingress controller of LBType Classic will be created. - Valid values are: - - * "Classic": A Classic Load Balancer that makes routing decisions at either - the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See - the following for additional details: - - https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb - - * "NLB": A Network Load Balancer that makes routing decisions at the - transport layer (TCP/SSL). See the following for additional details: - - https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb - enum: - - NLB - - Classic - type: string - required: - - type - type: object - type: - description: |- - type is the underlying infrastructure provider for the cluster. - Allowed values are "AWS", "Azure", "BareMetal", "GCP", "Libvirt", - "OpenStack", "VSphere", "oVirt", "KubeVirt", "EquinixMetal", "PowerVS", - "AlibabaCloud", "Nutanix" and "None". Individual components may not support all platforms, - and must handle unrecognized platforms as None if they do not support that platform. - enum: - - "" - - AWS - - Azure - - BareMetal - - GCP - - Libvirt - - OpenStack - - None - - VSphere - - oVirt - - IBMCloud - - KubeVirt - - EquinixMetal - - PowerVS - - AlibabaCloud - - Nutanix - - External - type: string - type: object - type: object - requiredHSTSPolicies: - description: |- - requiredHSTSPolicies specifies HSTS policies that are required to be set on newly created or updated routes - matching the domainPattern/s and namespaceSelector/s that are specified in the policy. - Each requiredHSTSPolicy must have at least a domainPattern and a maxAge to validate a route HSTS Policy route - annotation, and affect route admission. - - A candidate route is checked for HSTS Policies if it has the HSTS Policy route annotation: - "haproxy.router.openshift.io/hsts_header" - E.g. haproxy.router.openshift.io/hsts_header: max-age=31536000;preload;includeSubDomains - - - For each candidate route, if it matches a requiredHSTSPolicy domainPattern and optional namespaceSelector, - then the maxAge, preloadPolicy, and includeSubdomainsPolicy must be valid to be admitted. Otherwise, the route - is rejected. - - The first match, by domainPattern and optional namespaceSelector, in the ordering of the RequiredHSTSPolicies - determines the route's admission status. - - If the candidate route doesn't match any requiredHSTSPolicy domainPattern and optional namespaceSelector, - then it may use any HSTS Policy annotation. - - The HSTS policy configuration may be changed after routes have already been created. An update to a previously - admitted route may then fail if the updated route does not conform to the updated HSTS policy configuration. - However, changing the HSTS policy configuration will not cause a route that is already admitted to stop working. - - Note that if there are no RequiredHSTSPolicies, any HSTS Policy annotation on the route is valid. - items: - properties: - domainPatterns: - description: |- - domainPatterns is a list of domains for which the desired HSTS annotations are required. - If domainPatterns is specified and a route is created with a spec.host matching one of the domains, - the route must specify the HSTS Policy components described in the matching RequiredHSTSPolicy. - - The use of wildcards is allowed like this: *.foo.com matches everything under foo.com. - foo.com only matches foo.com, so to cover foo.com and everything under it, you must specify *both*. - items: - type: string - minItems: 1 - type: array - includeSubDomainsPolicy: - description: |- - includeSubDomainsPolicy means the HSTS Policy should apply to any subdomains of the host's - domain name. Thus, for the host bar.foo.com, if includeSubDomainsPolicy was set to RequireIncludeSubDomains: - - the host app.bar.foo.com would inherit the HSTS Policy of bar.foo.com - - the host bar.foo.com would inherit the HSTS Policy of bar.foo.com - - the host foo.com would NOT inherit the HSTS Policy of bar.foo.com - - the host def.foo.com would NOT inherit the HSTS Policy of bar.foo.com - enum: - - RequireIncludeSubDomains - - RequireNoIncludeSubDomains - - NoOpinion - type: string - maxAge: - description: |- - maxAge is the delta time range in seconds during which hosts are regarded as HSTS hosts. - If set to 0, it negates the effect, and hosts are removed as HSTS hosts. - If set to 0 and includeSubdomains is specified, all subdomains of the host are also removed as HSTS hosts. - maxAge is a time-to-live value, and if this policy is not refreshed on a client, the HSTS - policy will eventually expire on that client. - properties: - largestMaxAge: - description: |- - The largest allowed value (in seconds) of the RequiredHSTSPolicy max-age - This value can be left unspecified, in which case no upper limit is enforced. - format: int32 - maximum: 2147483647 - minimum: 0 - type: integer - smallestMaxAge: - description: |- - The smallest allowed value (in seconds) of the RequiredHSTSPolicy max-age - Setting max-age=0 allows the deletion of an existing HSTS header from a host. This is a necessary - tool for administrators to quickly correct mistakes. - This value can be left unspecified, in which case no lower limit is enforced. - format: int32 - maximum: 2147483647 - minimum: 0 - type: integer - type: object - namespaceSelector: - description: |- - namespaceSelector specifies a label selector such that the policy applies only to those routes that - are in namespaces with labels that match the selector, and are in one of the DomainPatterns. - Defaults to the empty LabelSelector, which matches everything. - properties: - matchExpressions: - description: matchExpressions is a list of label selector - requirements. The requirements are ANDed. - items: - description: |- - A label selector requirement is a selector that contains values, a key, and an operator that - relates the key and values. - properties: - key: - description: key is the label key that the selector - applies to. - type: string - operator: - description: |- - operator represents a key's relationship to a set of values. - Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: |- - values is an array of string values. If the operator is In or NotIn, - the values array must be non-empty. If the operator is Exists or DoesNotExist, - the values array must be empty. This array is replaced during a strategic - merge patch. - items: - type: string - type: array - x-kubernetes-list-type: atomic - required: - - key - - operator - type: object - type: array - x-kubernetes-list-type: atomic - matchLabels: - additionalProperties: - type: string - description: |- - matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels - map is equivalent to an element of matchExpressions, whose key field is "key", the - operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - type: object - x-kubernetes-map-type: atomic - preloadPolicy: - description: |- - preloadPolicy directs the client to include hosts in its host preload list so that - it never needs to do an initial load to get the HSTS header (note that this is not defined - in RFC 6797 and is therefore client implementation-dependent). - enum: - - RequirePreload - - RequireNoPreload - - NoOpinion - type: string - required: - - domainPatterns - type: object - type: array - type: object - status: - description: status holds observed values from the cluster. They may not - be overridden. - properties: - componentRoutes: - description: |- - componentRoutes is where participating operators place the current route status for routes whose - hostnames and serving certificates can be customized by the cluster-admin. - items: - description: ComponentRouteStatus contains information allowing - configuration of a route's hostname and serving certificate. - properties: - conditions: - description: |- - conditions are used to communicate the state of the componentRoutes entry. - - Supported conditions include Available, Degraded and Progressing. - - If available is true, the content served by the route can be accessed by users. This includes cases - where a default may continue to serve content while the customized route specified by the cluster-admin - is being configured. - - If Degraded is true, that means something has gone wrong trying to handle the componentRoutes entry. - The currentHostnames field may or may not be in effect. - - If Progressing is true, that means the component is taking some action related to the componentRoutes entry. - items: - description: Condition contains details for one aspect of - the current state of this API Resource. - properties: - lastTransitionTime: - description: |- - lastTransitionTime is the last time the condition transitioned from one status to another. - This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. - format: date-time - type: string - message: - description: |- - message is a human readable message indicating details about the transition. - This may be an empty string. - maxLength: 32768 - type: string - observedGeneration: - description: |- - observedGeneration represents the .metadata.generation that the condition was set based upon. - For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date - with respect to the current state of the instance. - format: int64 - minimum: 0 - type: integer - reason: - description: |- - reason contains a programmatic identifier indicating the reason for the condition's last transition. - Producers of specific condition types may define expected values and meanings for this field, - and whether the values are considered a guaranteed API. - The value should be a CamelCase string. - This field may not be empty. - maxLength: 1024 - minLength: 1 - pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ - type: string - status: - description: status of the condition, one of True, False, - Unknown. - enum: - - "True" - - "False" - - Unknown - type: string - type: - description: type of condition in CamelCase or in foo.example.com/CamelCase. - maxLength: 316 - pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ - type: string - required: - - lastTransitionTime - - message - - reason - - status - - type - type: object - type: array - x-kubernetes-list-map-keys: - - type - x-kubernetes-list-type: map - consumingUsers: - description: consumingUsers is a slice of ServiceAccounts that - need to have read permission on the servingCertKeyPairSecret - secret. - items: - description: ConsumingUser is an alias for string which we - add validation to. Currently only service accounts are supported. - maxLength: 512 - minLength: 1 - pattern: ^system:serviceaccount:[a-z0-9]([-a-z0-9]*[a-z0-9])?:[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ - type: string - maxItems: 5 - type: array - currentHostnames: - description: |- - currentHostnames is the list of current names used by the route. Typically, this list should consist of a single - hostname, but if multiple hostnames are supported by the route the operator may write multiple entries to this list. - items: - description: Hostname is a host name as defined by RFC-1123. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - minItems: 1 - type: array - defaultHostname: - description: defaultHostname is the hostname of this route prior - to customization. - pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$ - type: string - name: - description: |- - name is the logical name of the route to customize. It does not have to be the actual name of a route resource - but it cannot be renamed. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of spec.componentRoutes if the route is to be customized. - maxLength: 256 - minLength: 1 - type: string - namespace: - description: |- - namespace is the namespace of the route to customize. It must be a real namespace. Using an actual namespace - ensures that no two components will conflict and the same component can be installed multiple times. - - The namespace and name of this componentRoute must match a corresponding - entry in the list of spec.componentRoutes if the route is to be customized. - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - type: string - relatedObjects: - description: relatedObjects is a list of resources which are - useful when debugging or inspecting how spec.componentRoutes - is applied. - items: - description: ObjectReference contains enough information to - let you inspect or modify the referred object. - properties: - group: - description: group of the referent. - type: string - name: - description: name of the referent. - type: string - namespace: - description: namespace of the referent. - type: string - resource: - description: resource of the referent. - type: string - required: - - group - - name - - resource - type: object - minItems: 1 - type: array - required: - - defaultHostname - - name - - namespace - - relatedObjects - type: object - type: array - x-kubernetes-list-map-keys: - - namespace - - name - x-kubernetes-list-type: map - defaultPlacement: - description: |- - defaultPlacement is set at installation time to control which - nodes will host the ingress router pods by default. The options are - control-plane nodes or worker nodes. - - This field works by dictating how the Cluster Ingress Operator will - consider unset replicas and nodePlacement fields in IngressController - resources when creating the corresponding Deployments. - - See the documentation for the IngressController replicas and nodePlacement - fields for more information. - - When omitted, the default value is Workers - enum: - - ControlPlane - - Workers - - "" - type: string - type: object - required: - - spec - type: object - served: true - storage: true - subresources: - status: {} diff --git a/payload-manifests/crds/0000_10_config-operator_01_ingresses-CustomNoUpgrade.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_ingresses.crd.yaml similarity index 99% rename from payload-manifests/crds/0000_10_config-operator_01_ingresses-CustomNoUpgrade.crd.yaml rename to payload-manifests/crds/0000_10_config-operator_01_ingresses.crd.yaml index c94de0ff2ee..65ee4582250 100644 --- a/payload-manifests/crds/0000_10_config-operator_01_ingresses-CustomNoUpgrade.crd.yaml +++ b/payload-manifests/crds/0000_10_config-operator_01_ingresses.crd.yaml @@ -7,7 +7,6 @@ metadata: include.release.openshift.io/ibm-cloud-managed: "true" include.release.openshift.io/self-managed-high-availability: "true" release.openshift.io/bootstrap-required: "true" - release.openshift.io/feature-set: CustomNoUpgrade name: ingresses.config.openshift.io spec: group: config.openshift.io diff --git a/payload-manifests/featuregates/featureGate-4-10-Hypershift-Default.yaml b/payload-manifests/featuregates/featureGate-4-10-Hypershift-Default.yaml index 292c3dd7f37..9145cc230f8 100644 --- a/payload-manifests/featuregates/featureGate-4-10-Hypershift-Default.yaml +++ b/payload-manifests/featuregates/featureGate-4-10-Hypershift-Default.yaml @@ -20,9 +20,15 @@ { "name": "AWSDedicatedHosts" }, + { + "name": "AWSDualStackInstall" + }, { "name": "AWSEuropeanSovereignCloudInstall" }, + { + "name": "AdditionalStorageConfig" + }, { "name": "AuthenticationComponentProxy" }, @@ -153,13 +159,13 @@ "name": "GCPSovereignCloudInstall" }, { - "name": "GatewayAPIManagementMode" + "name": "ImageModeStatusReporting" }, { - "name": "ImageModeStatusReporting" + "name": "IngressControllerMultipleHAProxyVersions" }, { - "name": "IngressComponentRouteLabels" + "name": "IrreconcilableMachineConfig" }, { "name": "KMSEncryption" @@ -233,6 +239,9 @@ { "name": "NewOLMOwnSingleNamespace" }, + { + "name": "NewOLMPreflightPermissionChecks" + }, { "name": "NewOLMWebhookProviderOpenshiftServiceCA" }, @@ -292,15 +301,9 @@ { "name": "AWSClusterHostedDNSInstall" }, - { - "name": "AWSDualStackInstall" - }, { "name": "AWSServiceLBNetworkSecurityGroup" }, - { - "name": "AdditionalStorageConfig" - }, { "name": "AzureWorkloadIdentity" }, @@ -335,10 +338,10 @@ "name": "ImageStreamImportMode" }, { - "name": "IngressControllerDynamicConfigurationManager" + "name": "IngressComponentRouteLabels" }, { - "name": "IngressControllerMultipleHAProxyVersions" + "name": "IngressControllerDynamicConfigurationManager" }, { "name": "InsightsConfig" @@ -346,9 +349,6 @@ { "name": "InsightsOnDemandDataGather" }, - { - "name": "IrreconcilableMachineConfig" - }, { "name": "KMSv1" }, @@ -367,6 +367,9 @@ { "name": "OpenShiftPodSecurityAdmission" }, + { + "name": "RouteExternalCertificate" + }, { "name": "ServiceAccountTokenNodeBinding" }, diff --git a/payload-manifests/featuregates/featureGate-4-10-Hypershift-OKD.yaml b/payload-manifests/featuregates/featureGate-4-10-Hypershift-OKD.yaml index d6089ff7acd..a3106fe9c67 100644 --- a/payload-manifests/featuregates/featureGate-4-10-Hypershift-OKD.yaml +++ b/payload-manifests/featuregates/featureGate-4-10-Hypershift-OKD.yaml @@ -22,9 +22,15 @@ { "name": "AWSDedicatedHosts" }, + { + "name": "AWSDualStackInstall" + }, { "name": "AWSEuropeanSovereignCloudInstall" }, + { + "name": "AdditionalStorageConfig" + }, { "name": "AuthenticationComponentProxy" }, @@ -155,13 +161,13 @@ "name": "GCPSovereignCloudInstall" }, { - "name": "GatewayAPIManagementMode" + "name": "ImageModeStatusReporting" }, { - "name": "ImageModeStatusReporting" + "name": "IngressControllerMultipleHAProxyVersions" }, { - "name": "IngressComponentRouteLabels" + "name": "IrreconcilableMachineConfig" }, { "name": "KMSEncryption" @@ -235,6 +241,9 @@ { "name": "NewOLMOwnSingleNamespace" }, + { + "name": "NewOLMPreflightPermissionChecks" + }, { "name": "NewOLMWebhookProviderOpenshiftServiceCA" }, @@ -294,15 +303,9 @@ { "name": "AWSClusterHostedDNSInstall" }, - { - "name": "AWSDualStackInstall" - }, { "name": "AWSServiceLBNetworkSecurityGroup" }, - { - "name": "AdditionalStorageConfig" - }, { "name": "AzureWorkloadIdentity" }, @@ -337,10 +340,10 @@ "name": "ImageStreamImportMode" }, { - "name": "IngressControllerDynamicConfigurationManager" + "name": "IngressComponentRouteLabels" }, { - "name": "IngressControllerMultipleHAProxyVersions" + "name": "IngressControllerDynamicConfigurationManager" }, { "name": "InsightsConfig" @@ -348,9 +351,6 @@ { "name": "InsightsOnDemandDataGather" }, - { - "name": "IrreconcilableMachineConfig" - }, { "name": "KMSv1" }, @@ -369,6 +369,9 @@ { "name": "OpenShiftPodSecurityAdmission" }, + { + "name": "RouteExternalCertificate" + }, { "name": "ServiceAccountTokenNodeBinding" }, diff --git a/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-Default.yaml b/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-Default.yaml index 493f2840256..9abe667dc62 100644 --- a/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-Default.yaml +++ b/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-Default.yaml @@ -20,9 +20,15 @@ { "name": "AWSDedicatedHosts" }, + { + "name": "AWSDualStackInstall" + }, { "name": "AWSEuropeanSovereignCloudInstall" }, + { + "name": "AdditionalStorageConfig" + }, { "name": "AuthenticationComponentProxy" }, @@ -50,6 +56,9 @@ { "name": "CRDCompatibilityRequirementOperator" }, + { + "name": "CRIOCredentialProviderConfig" + }, { "name": "ClientsAllowCBOR" }, @@ -149,9 +158,6 @@ { "name": "GCPSovereignCloudInstall" }, - { - "name": "GatewayAPIManagementMode" - }, { "name": "HyperShiftOnlyDynamicResourceAllocation" }, @@ -159,7 +165,10 @@ "name": "ImageModeStatusReporting" }, { - "name": "IngressComponentRouteLabels" + "name": "IngressControllerMultipleHAProxyVersions" + }, + { + "name": "IrreconcilableMachineConfig" }, { "name": "KMSEncryption" @@ -230,9 +239,15 @@ { "name": "NewOLMOwnSingleNamespace" }, + { + "name": "NewOLMPreflightPermissionChecks" + }, { "name": "NoOverlayMode" }, + { + "name": "NoRegistryClusterInstall" + }, { "name": "NutanixMultiSubnets" }, @@ -277,15 +292,9 @@ { "name": "AWSClusterHostedDNSInstall" }, - { - "name": "AWSDualStackInstall" - }, { "name": "AWSServiceLBNetworkSecurityGroup" }, - { - "name": "AdditionalStorageConfig" - }, { "name": "AzureWorkloadIdentity" }, @@ -295,9 +304,6 @@ { "name": "BuildCSIVolumes" }, - { - "name": "CRIOCredentialProviderConfig" - }, { "name": "DualReplica" }, @@ -320,10 +326,10 @@ "name": "ImageStreamImportMode" }, { - "name": "IngressControllerDynamicConfigurationManager" + "name": "IngressComponentRouteLabels" }, { - "name": "IngressControllerMultipleHAProxyVersions" + "name": "IngressControllerDynamicConfigurationManager" }, { "name": "InsightsConfig" @@ -331,9 +337,6 @@ { "name": "InsightsOnDemandDataGather" }, - { - "name": "IrreconcilableMachineConfig" - }, { "name": "KMSv1" }, @@ -355,9 +358,6 @@ { "name": "NewOLMWebhookProviderOpenshiftServiceCA" }, - { - "name": "NoRegistryClusterInstall" - }, { "name": "OLMLifecycleAndCompatibility" }, @@ -367,6 +367,9 @@ { "name": "OpenShiftPodSecurityAdmission" }, + { + "name": "RouteExternalCertificate" + }, { "name": "ServiceAccountTokenNodeBinding" }, diff --git a/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-OKD.yaml b/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-OKD.yaml index 6a7972dc6c9..1f335499ed8 100644 --- a/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-OKD.yaml +++ b/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-OKD.yaml @@ -22,9 +22,15 @@ { "name": "AWSDedicatedHosts" }, + { + "name": "AWSDualStackInstall" + }, { "name": "AWSEuropeanSovereignCloudInstall" }, + { + "name": "AdditionalStorageConfig" + }, { "name": "AuthenticationComponentProxy" }, @@ -52,6 +58,9 @@ { "name": "CRDCompatibilityRequirementOperator" }, + { + "name": "CRIOCredentialProviderConfig" + }, { "name": "ClientsAllowCBOR" }, @@ -151,9 +160,6 @@ { "name": "GCPSovereignCloudInstall" }, - { - "name": "GatewayAPIManagementMode" - }, { "name": "HyperShiftOnlyDynamicResourceAllocation" }, @@ -161,7 +167,10 @@ "name": "ImageModeStatusReporting" }, { - "name": "IngressComponentRouteLabels" + "name": "IngressControllerMultipleHAProxyVersions" + }, + { + "name": "IrreconcilableMachineConfig" }, { "name": "KMSEncryption" @@ -232,9 +241,15 @@ { "name": "NewOLMOwnSingleNamespace" }, + { + "name": "NewOLMPreflightPermissionChecks" + }, { "name": "NoOverlayMode" }, + { + "name": "NoRegistryClusterInstall" + }, { "name": "NutanixMultiSubnets" }, @@ -279,15 +294,9 @@ { "name": "AWSClusterHostedDNSInstall" }, - { - "name": "AWSDualStackInstall" - }, { "name": "AWSServiceLBNetworkSecurityGroup" }, - { - "name": "AdditionalStorageConfig" - }, { "name": "AzureWorkloadIdentity" }, @@ -297,9 +306,6 @@ { "name": "BuildCSIVolumes" }, - { - "name": "CRIOCredentialProviderConfig" - }, { "name": "DualReplica" }, @@ -322,10 +328,10 @@ "name": "ImageStreamImportMode" }, { - "name": "IngressControllerDynamicConfigurationManager" + "name": "IngressComponentRouteLabels" }, { - "name": "IngressControllerMultipleHAProxyVersions" + "name": "IngressControllerDynamicConfigurationManager" }, { "name": "InsightsConfig" @@ -333,9 +339,6 @@ { "name": "InsightsOnDemandDataGather" }, - { - "name": "IrreconcilableMachineConfig" - }, { "name": "KMSv1" }, @@ -357,9 +360,6 @@ { "name": "NewOLMWebhookProviderOpenshiftServiceCA" }, - { - "name": "NoRegistryClusterInstall" - }, { "name": "OLMLifecycleAndCompatibility" }, @@ -369,6 +369,9 @@ { "name": "OpenShiftPodSecurityAdmission" }, + { + "name": "RouteExternalCertificate" + }, { "name": "ServiceAccountTokenNodeBinding" }, From cabad56c53d4839f943a5f317cd0fd7ac524fa86 Mon Sep 17 00:00:00 2001 From: Leo6Leo <36619969+Leo6Leo@users.noreply.github.com> Date: Mon, 10 Aug 2026 11:09:01 -0400 Subject: [PATCH 2/2] Regenerate manifests after rebase on master Co-Authored-By: Claude Opus 4.6 --- features.md | 15 +- .../generated_openapi/zz_generated.openapi.go | 73742 ++-------------- openapi/openapi.json | 45158 ++-------- .../featureGate-4-10-Hypershift-Default.yaml | 31 +- .../featureGate-4-10-Hypershift-OKD.yaml | 31 +- ...eatureGate-4-10-SelfManagedHA-Default.yaml | 45 +- .../featureGate-4-10-SelfManagedHA-OKD.yaml | 45 +- 7 files changed, 12688 insertions(+), 106379 deletions(-) diff --git a/features.md b/features.md index 7d7c8b9c6e5..dbba9b885b3 100644 --- a/features.md +++ b/features.md @@ -26,14 +26,10 @@ | NewOLMCatalogdAPIV1Metas| | | | Enabled | | | | Enabled | | NewOLMConfigAPI| | | | Enabled | | | | Enabled | | NewOLMOwnSingleNamespace| | | | Enabled | | | | Enabled | -| NewOLMPreflightPermissionChecks| | | | Enabled | | | | Enabled | -| NoRegistryClusterInstall| | | | Enabled | | | | Enabled | | ProvisioningRequestAvailable| | | Enabled | Enabled | | | | | | AWSClusterHostedDNS| | | Enabled | Enabled | | | Enabled | Enabled | | AWSDedicatedHosts| | | Enabled | Enabled | | | Enabled | Enabled | -| AWSDualStackInstall| | | Enabled | Enabled | | | Enabled | Enabled | | AWSEuropeanSovereignCloudInstall| | | Enabled | Enabled | | | Enabled | Enabled | -| AdditionalStorageConfig| | | Enabled | Enabled | | | Enabled | Enabled | | AutomatedEtcdBackup| | | Enabled | Enabled | | | Enabled | Enabled | | AzureDedicatedHosts| | | Enabled | Enabled | | | Enabled | Enabled | | AzureDualStackInstall| | | Enabled | Enabled | | | Enabled | Enabled | @@ -41,7 +37,7 @@ | BootcNodeManagement| | | Enabled | Enabled | | | Enabled | Enabled | | CBORServingAndStorage| | | Enabled | Enabled | | | Enabled | Enabled | | CRDCompatibilityRequirementOperator| | | Enabled | Enabled | | | Enabled | Enabled | -| CRIOCredentialProviderConfig| | | Enabled | Enabled | | | Enabled | Enabled | +| CRIOCredentialProviderConfig| | Enabled | | Enabled | | Enabled | | Enabled | | ClientsPreferCBOR| | | Enabled | Enabled | | | Enabled | Enabled | | ClusterAPIInstallIBMCloud| | | Enabled | Enabled | | | Enabled | Enabled | | ClusterAPIMachineManagement| | | Enabled | Enabled | | | Enabled | Enabled | @@ -66,10 +62,9 @@ | GCPCustomAPIEndpoints| | | Enabled | Enabled | | | Enabled | Enabled | | GCPCustomAPIEndpointsInstall| | | Enabled | Enabled | | | Enabled | Enabled | | GCPDualStackInstall| | | Enabled | Enabled | | | Enabled | Enabled | +| GatewayAPIManagementMode| | | Enabled | Enabled | | | Enabled | Enabled | | HyperShiftOnlyDynamicResourceAllocation| Enabled | | Enabled | | Enabled | | Enabled | | | ImageModeStatusReporting| | | Enabled | Enabled | | | Enabled | Enabled | -| IngressControllerMultipleHAProxyVersions| | | Enabled | Enabled | | | Enabled | Enabled | -| IrreconcilableMachineConfig| | | Enabled | Enabled | | | Enabled | Enabled | | KMSEncryption| | | Enabled | Enabled | | | Enabled | Enabled | | MachineAPIMigration| | | Enabled | Enabled | | | Enabled | Enabled | | MachineAPIMigrationAWS| | | Enabled | Enabled | | | Enabled | Enabled | @@ -82,6 +77,7 @@ | NewOLM| | Enabled | | Enabled | | Enabled | | Enabled | | NewOLMWebhookProviderOpenshiftServiceCA| | Enabled | | Enabled | | Enabled | | Enabled | | NoOverlayMode| | | Enabled | Enabled | | | Enabled | Enabled | +| NoRegistryClusterInstall| | Enabled | | Enabled | | Enabled | | Enabled | | NutanixMultiSubnets| | | Enabled | Enabled | | | Enabled | Enabled | | OLMLifecycleAndCompatibility| | Enabled | | Enabled | | Enabled | | Enabled | | OVNObservability| | | Enabled | Enabled | | | Enabled | Enabled | @@ -96,7 +92,9 @@ | VolumeGroupSnapshot| | | Enabled | Enabled | | | Enabled | Enabled | | OSStreams| | Enabled | Enabled | Enabled | | Enabled | Enabled | Enabled | | AWSClusterHostedDNSInstall| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | +| AWSDualStackInstall| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | AWSServiceLBNetworkSecurityGroup| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | +| AdditionalStorageConfig| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | AzureWorkloadIdentity| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | BootImageSkewEnforcement| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | BuildCSIVolumes| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | @@ -109,15 +107,16 @@ | ImageStreamImportMode| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | IngressComponentRouteLabels| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | IngressControllerDynamicConfigurationManager| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | +| IngressControllerMultipleHAProxyVersions| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | InsightsConfig| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | InsightsOnDemandDataGather| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | +| IrreconcilableMachineConfig| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | KMSv1| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | ManagedBootImagesCPMS| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | MetricsCollectionProfiles| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | MutableCSINodeAllocatableCount| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | MutatingAdmissionPolicy| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | OpenShiftPodSecurityAdmission| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | -| RouteExternalCertificate| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | ServiceAccountTokenNodeBinding| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | SigstoreImageVerification| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | | SigstoreImageVerificationPKI| Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | Enabled | diff --git a/openapi/generated_openapi/zz_generated.openapi.go b/openapi/generated_openapi/zz_generated.openapi.go index fbb8d32f7e7..0946328f6b2 100644 --- a/openapi/generated_openapi/zz_generated.openapi.go +++ b/openapi/generated_openapi/zz_generated.openapi.go @@ -6,54 +6,9 @@ package generated_openapi import ( - v1alpha1 "github.com/openshift/api/apiextensions/v1alpha1" - v1 "github.com/openshift/api/apiserver/v1" - appsv1 "github.com/openshift/api/apps/v1" - authorizationv1 "github.com/openshift/api/authorization/v1" - buildv1 "github.com/openshift/api/build/v1" - cloudnetworkv1 "github.com/openshift/api/cloudnetwork/v1" - configv1 "github.com/openshift/api/config/v1" - configv1alpha1 "github.com/openshift/api/config/v1alpha1" - v1alpha2 "github.com/openshift/api/config/v1alpha2" - consolev1 "github.com/openshift/api/console/v1" - etcdv1 "github.com/openshift/api/etcd/v1" - etcdv1alpha1 "github.com/openshift/api/etcd/v1alpha1" - examplev1 "github.com/openshift/api/example/v1" - examplev1alpha1 "github.com/openshift/api/example/v1alpha1" - v1beta1 "github.com/openshift/api/helm/v1beta1" - imagev1 "github.com/openshift/api/image/v1" - insightsv1 "github.com/openshift/api/insights/v1" - insightsv1alpha1 "github.com/openshift/api/insights/v1alpha1" - insightsv1alpha2 "github.com/openshift/api/insights/v1alpha2" - kubecontrolplanev1 "github.com/openshift/api/kubecontrolplane/v1" - legacyconfigv1 "github.com/openshift/api/legacyconfig/v1" - machinev1 "github.com/openshift/api/machine/v1" - machinev1alpha1 "github.com/openshift/api/machine/v1alpha1" - machinev1beta1 "github.com/openshift/api/machine/v1beta1" - machineconfigurationv1alpha1 "github.com/openshift/api/machineconfiguration/v1alpha1" - monitoringv1 "github.com/openshift/api/monitoring/v1" - networkv1 "github.com/openshift/api/network/v1" - networkv1alpha1 "github.com/openshift/api/network/v1alpha1" - networkoperatorv1 "github.com/openshift/api/networkoperator/v1" - oauthv1 "github.com/openshift/api/oauth/v1" - openshiftcontrolplanev1 "github.com/openshift/api/openshiftcontrolplane/v1" - operatorv1 "github.com/openshift/api/operator/v1" - operatorv1alpha1 "github.com/openshift/api/operator/v1alpha1" - operatorcontrolplanev1alpha1 "github.com/openshift/api/operatorcontrolplane/v1alpha1" - operatoringressv1 "github.com/openshift/api/operatoringress/v1" - osinv1 "github.com/openshift/api/osin/v1" - projectv1 "github.com/openshift/api/project/v1" - quotav1 "github.com/openshift/api/quota/v1" - routev1 "github.com/openshift/api/route/v1" - samplesv1 "github.com/openshift/api/samples/v1" - securityv1 "github.com/openshift/api/security/v1" - securityinternalv1 "github.com/openshift/api/securityinternal/v1" - servicecertsignerv1alpha1 "github.com/openshift/api/servicecertsigner/v1alpha1" - sharedresourcev1alpha1 "github.com/openshift/api/sharedresource/v1alpha1" - templatev1 "github.com/openshift/api/template/v1" - userv1 "github.com/openshift/api/user/v1" + v1 "github.com/openshift/api/config/v1" admissionregistrationv1 "k8s.io/api/admissionregistration/v1" - apiauthorizationv1 "k8s.io/api/authorization/v1" + authorizationv1 "k8s.io/api/authorization/v1" corev1 "k8s.io/api/core/v1" rbacv1 "k8s.io/api/rbac/v1" resource "k8s.io/apimachinery/pkg/api/resource" @@ -66,1963 +21,776 @@ import ( func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenAPIDefinition { return map[string]common.OpenAPIDefinition{ - v1alpha1.APIExcludedField{}.OpenAPIModelName(): schema_openshift_api_apiextensions_v1alpha1_APIExcludedField(ref), - v1alpha1.APIVersions{}.OpenAPIModelName(): schema_openshift_api_apiextensions_v1alpha1_APIVersions(ref), - v1alpha1.CRDData{}.OpenAPIModelName(): schema_openshift_api_apiextensions_v1alpha1_CRDData(ref), - v1alpha1.CompatibilityRequirement{}.OpenAPIModelName(): schema_openshift_api_apiextensions_v1alpha1_CompatibilityRequirement(ref), - v1alpha1.CompatibilityRequirementList{}.OpenAPIModelName(): schema_openshift_api_apiextensions_v1alpha1_CompatibilityRequirementList(ref), - v1alpha1.CompatibilityRequirementSpec{}.OpenAPIModelName(): schema_openshift_api_apiextensions_v1alpha1_CompatibilityRequirementSpec(ref), - v1alpha1.CompatibilityRequirementStatus{}.OpenAPIModelName(): schema_openshift_api_apiextensions_v1alpha1_CompatibilityRequirementStatus(ref), - v1alpha1.CompatibilitySchema{}.OpenAPIModelName(): schema_openshift_api_apiextensions_v1alpha1_CompatibilitySchema(ref), - v1alpha1.CustomResourceDefinitionSchemaValidation{}.OpenAPIModelName(): schema_openshift_api_apiextensions_v1alpha1_CustomResourceDefinitionSchemaValidation(ref), - v1alpha1.ObjectSchemaValidation{}.OpenAPIModelName(): schema_openshift_api_apiextensions_v1alpha1_ObjectSchemaValidation(ref), - v1alpha1.ObservedCRD{}.OpenAPIModelName(): schema_openshift_api_apiextensions_v1alpha1_ObservedCRD(ref), - v1.APIRequestCount{}.OpenAPIModelName(): schema_openshift_api_apiserver_v1_APIRequestCount(ref), - v1.APIRequestCountList{}.OpenAPIModelName(): schema_openshift_api_apiserver_v1_APIRequestCountList(ref), - v1.APIRequestCountSpec{}.OpenAPIModelName(): schema_openshift_api_apiserver_v1_APIRequestCountSpec(ref), - v1.APIRequestCountStatus{}.OpenAPIModelName(): schema_openshift_api_apiserver_v1_APIRequestCountStatus(ref), - v1.PerNodeAPIRequestLog{}.OpenAPIModelName(): schema_openshift_api_apiserver_v1_PerNodeAPIRequestLog(ref), - v1.PerResourceAPIRequestLog{}.OpenAPIModelName(): schema_openshift_api_apiserver_v1_PerResourceAPIRequestLog(ref), - v1.PerUserAPIRequestCount{}.OpenAPIModelName(): schema_openshift_api_apiserver_v1_PerUserAPIRequestCount(ref), - v1.PerVerbAPIRequestCount{}.OpenAPIModelName(): schema_openshift_api_apiserver_v1_PerVerbAPIRequestCount(ref), - appsv1.CustomDeploymentStrategyParams{}.OpenAPIModelName(): schema_openshift_api_apps_v1_CustomDeploymentStrategyParams(ref), - appsv1.DeploymentCause{}.OpenAPIModelName(): schema_openshift_api_apps_v1_DeploymentCause(ref), - appsv1.DeploymentCauseImageTrigger{}.OpenAPIModelName(): schema_openshift_api_apps_v1_DeploymentCauseImageTrigger(ref), - appsv1.DeploymentCondition{}.OpenAPIModelName(): schema_openshift_api_apps_v1_DeploymentCondition(ref), - appsv1.DeploymentConfig{}.OpenAPIModelName(): schema_openshift_api_apps_v1_DeploymentConfig(ref), - appsv1.DeploymentConfigList{}.OpenAPIModelName(): schema_openshift_api_apps_v1_DeploymentConfigList(ref), - appsv1.DeploymentConfigRollback{}.OpenAPIModelName(): schema_openshift_api_apps_v1_DeploymentConfigRollback(ref), - appsv1.DeploymentConfigRollbackSpec{}.OpenAPIModelName(): schema_openshift_api_apps_v1_DeploymentConfigRollbackSpec(ref), - appsv1.DeploymentConfigSpec{}.OpenAPIModelName(): schema_openshift_api_apps_v1_DeploymentConfigSpec(ref), - appsv1.DeploymentConfigStatus{}.OpenAPIModelName(): schema_openshift_api_apps_v1_DeploymentConfigStatus(ref), - appsv1.DeploymentDetails{}.OpenAPIModelName(): schema_openshift_api_apps_v1_DeploymentDetails(ref), - appsv1.DeploymentLog{}.OpenAPIModelName(): schema_openshift_api_apps_v1_DeploymentLog(ref), - appsv1.DeploymentLogOptions{}.OpenAPIModelName(): schema_openshift_api_apps_v1_DeploymentLogOptions(ref), - appsv1.DeploymentRequest{}.OpenAPIModelName(): schema_openshift_api_apps_v1_DeploymentRequest(ref), - appsv1.DeploymentStrategy{}.OpenAPIModelName(): schema_openshift_api_apps_v1_DeploymentStrategy(ref), - appsv1.DeploymentTriggerImageChangeParams{}.OpenAPIModelName(): schema_openshift_api_apps_v1_DeploymentTriggerImageChangeParams(ref), - appsv1.DeploymentTriggerPolicy{}.OpenAPIModelName(): schema_openshift_api_apps_v1_DeploymentTriggerPolicy(ref), - appsv1.ExecNewPodHook{}.OpenAPIModelName(): schema_openshift_api_apps_v1_ExecNewPodHook(ref), - appsv1.LifecycleHook{}.OpenAPIModelName(): schema_openshift_api_apps_v1_LifecycleHook(ref), - appsv1.RecreateDeploymentStrategyParams{}.OpenAPIModelName(): schema_openshift_api_apps_v1_RecreateDeploymentStrategyParams(ref), - appsv1.RollingDeploymentStrategyParams{}.OpenAPIModelName(): schema_openshift_api_apps_v1_RollingDeploymentStrategyParams(ref), - appsv1.TagImageHook{}.OpenAPIModelName(): schema_openshift_api_apps_v1_TagImageHook(ref), - authorizationv1.Action{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_Action(ref), - authorizationv1.ClusterRole{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_ClusterRole(ref), - authorizationv1.ClusterRoleBinding{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_ClusterRoleBinding(ref), - authorizationv1.ClusterRoleBindingList{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_ClusterRoleBindingList(ref), - authorizationv1.ClusterRoleList{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_ClusterRoleList(ref), - authorizationv1.GroupRestriction{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_GroupRestriction(ref), - authorizationv1.IsPersonalSubjectAccessReview{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_IsPersonalSubjectAccessReview(ref), - authorizationv1.LocalResourceAccessReview{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_LocalResourceAccessReview(ref), - authorizationv1.LocalSubjectAccessReview{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_LocalSubjectAccessReview(ref), - authorizationv1.NamedClusterRole{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_NamedClusterRole(ref), - authorizationv1.NamedClusterRoleBinding{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_NamedClusterRoleBinding(ref), - authorizationv1.NamedRole{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_NamedRole(ref), - authorizationv1.NamedRoleBinding{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_NamedRoleBinding(ref), - authorizationv1.PolicyRule{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_PolicyRule(ref), - authorizationv1.ResourceAccessReview{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_ResourceAccessReview(ref), - authorizationv1.ResourceAccessReviewResponse{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_ResourceAccessReviewResponse(ref), - authorizationv1.Role{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_Role(ref), - authorizationv1.RoleBinding{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_RoleBinding(ref), - authorizationv1.RoleBindingList{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_RoleBindingList(ref), - authorizationv1.RoleBindingRestriction{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_RoleBindingRestriction(ref), - authorizationv1.RoleBindingRestrictionList{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_RoleBindingRestrictionList(ref), - authorizationv1.RoleBindingRestrictionSpec{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_RoleBindingRestrictionSpec(ref), - authorizationv1.RoleList{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_RoleList(ref), - authorizationv1.SelfSubjectRulesReview{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_SelfSubjectRulesReview(ref), - authorizationv1.SelfSubjectRulesReviewSpec{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_SelfSubjectRulesReviewSpec(ref), - authorizationv1.ServiceAccountReference{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_ServiceAccountReference(ref), - authorizationv1.ServiceAccountRestriction{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_ServiceAccountRestriction(ref), - authorizationv1.SubjectAccessReview{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_SubjectAccessReview(ref), - authorizationv1.SubjectAccessReviewResponse{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_SubjectAccessReviewResponse(ref), - authorizationv1.SubjectRulesReview{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_SubjectRulesReview(ref), - authorizationv1.SubjectRulesReviewSpec{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_SubjectRulesReviewSpec(ref), - authorizationv1.SubjectRulesReviewStatus{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_SubjectRulesReviewStatus(ref), - authorizationv1.UserRestriction{}.OpenAPIModelName(): schema_openshift_api_authorization_v1_UserRestriction(ref), - buildv1.BinaryBuildRequestOptions{}.OpenAPIModelName(): schema_openshift_api_build_v1_BinaryBuildRequestOptions(ref), - buildv1.BinaryBuildSource{}.OpenAPIModelName(): schema_openshift_api_build_v1_BinaryBuildSource(ref), - buildv1.BitbucketWebHookCause{}.OpenAPIModelName(): schema_openshift_api_build_v1_BitbucketWebHookCause(ref), - buildv1.Build{}.OpenAPIModelName(): schema_openshift_api_build_v1_Build(ref), - buildv1.BuildCondition{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildCondition(ref), - buildv1.BuildConfig{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildConfig(ref), - buildv1.BuildConfigList{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildConfigList(ref), - buildv1.BuildConfigSpec{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildConfigSpec(ref), - buildv1.BuildConfigStatus{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildConfigStatus(ref), - buildv1.BuildList{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildList(ref), - buildv1.BuildLog{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildLog(ref), - buildv1.BuildLogOptions{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildLogOptions(ref), - buildv1.BuildOutput{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildOutput(ref), - buildv1.BuildPostCommitSpec{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildPostCommitSpec(ref), - buildv1.BuildRequest{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildRequest(ref), - buildv1.BuildSource{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildSource(ref), - buildv1.BuildSpec{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildSpec(ref), - buildv1.BuildStatus{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildStatus(ref), - buildv1.BuildStatusOutput{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildStatusOutput(ref), - buildv1.BuildStatusOutputTo{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildStatusOutputTo(ref), - buildv1.BuildStrategy{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildStrategy(ref), - buildv1.BuildTriggerCause{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildTriggerCause(ref), - buildv1.BuildTriggerPolicy{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildTriggerPolicy(ref), - buildv1.BuildVolume{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildVolume(ref), - buildv1.BuildVolumeMount{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildVolumeMount(ref), - buildv1.BuildVolumeSource{}.OpenAPIModelName(): schema_openshift_api_build_v1_BuildVolumeSource(ref), - buildv1.CommonSpec{}.OpenAPIModelName(): schema_openshift_api_build_v1_CommonSpec(ref), - buildv1.CommonWebHookCause{}.OpenAPIModelName(): schema_openshift_api_build_v1_CommonWebHookCause(ref), - buildv1.ConfigMapBuildSource{}.OpenAPIModelName(): schema_openshift_api_build_v1_ConfigMapBuildSource(ref), - buildv1.CustomBuildStrategy{}.OpenAPIModelName(): schema_openshift_api_build_v1_CustomBuildStrategy(ref), - buildv1.DockerBuildStrategy{}.OpenAPIModelName(): schema_openshift_api_build_v1_DockerBuildStrategy(ref), - buildv1.DockerStrategyOptions{}.OpenAPIModelName(): schema_openshift_api_build_v1_DockerStrategyOptions(ref), - buildv1.GenericWebHookCause{}.OpenAPIModelName(): schema_openshift_api_build_v1_GenericWebHookCause(ref), - buildv1.GenericWebHookEvent{}.OpenAPIModelName(): schema_openshift_api_build_v1_GenericWebHookEvent(ref), - buildv1.GitBuildSource{}.OpenAPIModelName(): schema_openshift_api_build_v1_GitBuildSource(ref), - buildv1.GitHubWebHookCause{}.OpenAPIModelName(): schema_openshift_api_build_v1_GitHubWebHookCause(ref), - buildv1.GitInfo{}.OpenAPIModelName(): schema_openshift_api_build_v1_GitInfo(ref), - buildv1.GitLabWebHookCause{}.OpenAPIModelName(): schema_openshift_api_build_v1_GitLabWebHookCause(ref), - buildv1.GitRefInfo{}.OpenAPIModelName(): schema_openshift_api_build_v1_GitRefInfo(ref), - buildv1.GitSourceRevision{}.OpenAPIModelName(): schema_openshift_api_build_v1_GitSourceRevision(ref), - buildv1.ImageChangeCause{}.OpenAPIModelName(): schema_openshift_api_build_v1_ImageChangeCause(ref), - buildv1.ImageChangeTrigger{}.OpenAPIModelName(): schema_openshift_api_build_v1_ImageChangeTrigger(ref), - buildv1.ImageChangeTriggerStatus{}.OpenAPIModelName(): schema_openshift_api_build_v1_ImageChangeTriggerStatus(ref), - buildv1.ImageLabel{}.OpenAPIModelName(): schema_openshift_api_build_v1_ImageLabel(ref), - buildv1.ImageSource{}.OpenAPIModelName(): schema_openshift_api_build_v1_ImageSource(ref), - buildv1.ImageSourcePath{}.OpenAPIModelName(): schema_openshift_api_build_v1_ImageSourcePath(ref), - buildv1.ImageStreamTagReference{}.OpenAPIModelName(): schema_openshift_api_build_v1_ImageStreamTagReference(ref), - buildv1.JenkinsPipelineBuildStrategy{}.OpenAPIModelName(): schema_openshift_api_build_v1_JenkinsPipelineBuildStrategy(ref), - buildv1.ProxyConfig{}.OpenAPIModelName(): schema_openshift_api_build_v1_ProxyConfig(ref), - buildv1.SecretBuildSource{}.OpenAPIModelName(): schema_openshift_api_build_v1_SecretBuildSource(ref), - buildv1.SecretLocalReference{}.OpenAPIModelName(): schema_openshift_api_build_v1_SecretLocalReference(ref), - buildv1.SecretSpec{}.OpenAPIModelName(): schema_openshift_api_build_v1_SecretSpec(ref), - buildv1.SourceBuildStrategy{}.OpenAPIModelName(): schema_openshift_api_build_v1_SourceBuildStrategy(ref), - buildv1.SourceControlUser{}.OpenAPIModelName(): schema_openshift_api_build_v1_SourceControlUser(ref), - buildv1.SourceRevision{}.OpenAPIModelName(): schema_openshift_api_build_v1_SourceRevision(ref), - buildv1.SourceStrategyOptions{}.OpenAPIModelName(): schema_openshift_api_build_v1_SourceStrategyOptions(ref), - buildv1.StageInfo{}.OpenAPIModelName(): schema_openshift_api_build_v1_StageInfo(ref), - buildv1.StepInfo{}.OpenAPIModelName(): schema_openshift_api_build_v1_StepInfo(ref), - buildv1.WebHookTrigger{}.OpenAPIModelName(): schema_openshift_api_build_v1_WebHookTrigger(ref), - cloudnetworkv1.CloudPrivateIPConfig{}.OpenAPIModelName(): schema_openshift_api_cloudnetwork_v1_CloudPrivateIPConfig(ref), - cloudnetworkv1.CloudPrivateIPConfigSpec{}.OpenAPIModelName(): schema_openshift_api_cloudnetwork_v1_CloudPrivateIPConfigSpec(ref), - cloudnetworkv1.CloudPrivateIPConfigStatus{}.OpenAPIModelName(): schema_openshift_api_cloudnetwork_v1_CloudPrivateIPConfigStatus(ref), - configv1.APIServer{}.OpenAPIModelName(): schema_openshift_api_config_v1_APIServer(ref), - configv1.APIServerEncryption{}.OpenAPIModelName(): schema_openshift_api_config_v1_APIServerEncryption(ref), - configv1.APIServerList{}.OpenAPIModelName(): schema_openshift_api_config_v1_APIServerList(ref), - configv1.APIServerNamedServingCert{}.OpenAPIModelName(): schema_openshift_api_config_v1_APIServerNamedServingCert(ref), - configv1.APIServerServingCerts{}.OpenAPIModelName(): schema_openshift_api_config_v1_APIServerServingCerts(ref), - configv1.APIServerSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_APIServerSpec(ref), - configv1.APIServerStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_APIServerStatus(ref), - configv1.AWSDNSSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_AWSDNSSpec(ref), - configv1.AWSIngressSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_AWSIngressSpec(ref), - configv1.AWSPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_AWSPlatformSpec(ref), - configv1.AWSPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_AWSPlatformStatus(ref), - configv1.AWSResourceTag{}.OpenAPIModelName(): schema_openshift_api_config_v1_AWSResourceTag(ref), - configv1.AWSServiceEndpoint{}.OpenAPIModelName(): schema_openshift_api_config_v1_AWSServiceEndpoint(ref), - configv1.AcceptRisk{}.OpenAPIModelName(): schema_openshift_api_config_v1_AcceptRisk(ref), - configv1.AdmissionConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_AdmissionConfig(ref), - configv1.AdmissionPluginConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_AdmissionPluginConfig(ref), - configv1.AlibabaCloudPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_AlibabaCloudPlatformSpec(ref), - configv1.AlibabaCloudPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_AlibabaCloudPlatformStatus(ref), - configv1.AlibabaCloudResourceTag{}.OpenAPIModelName(): schema_openshift_api_config_v1_AlibabaCloudResourceTag(ref), - configv1.Audit{}.OpenAPIModelName(): schema_openshift_api_config_v1_Audit(ref), - configv1.AuditConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_AuditConfig(ref), - configv1.AuditCustomRule{}.OpenAPIModelName(): schema_openshift_api_config_v1_AuditCustomRule(ref), - configv1.Authentication{}.OpenAPIModelName(): schema_openshift_api_config_v1_Authentication(ref), - configv1.AuthenticationList{}.OpenAPIModelName(): schema_openshift_api_config_v1_AuthenticationList(ref), - configv1.AuthenticationSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_AuthenticationSpec(ref), - configv1.AuthenticationStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_AuthenticationStatus(ref), - configv1.AzurePlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_AzurePlatformSpec(ref), - configv1.AzurePlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_AzurePlatformStatus(ref), - configv1.AzureResourceTag{}.OpenAPIModelName(): schema_openshift_api_config_v1_AzureResourceTag(ref), - configv1.BareMetalPlatformLoadBalancer{}.OpenAPIModelName(): schema_openshift_api_config_v1_BareMetalPlatformLoadBalancer(ref), - configv1.BareMetalPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_BareMetalPlatformSpec(ref), - configv1.BareMetalPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_BareMetalPlatformStatus(ref), - configv1.BasicAuthIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_BasicAuthIdentityProvider(ref), - configv1.Build{}.OpenAPIModelName(): schema_openshift_api_config_v1_Build(ref), - configv1.BuildDefaults{}.OpenAPIModelName(): schema_openshift_api_config_v1_BuildDefaults(ref), - configv1.BuildList{}.OpenAPIModelName(): schema_openshift_api_config_v1_BuildList(ref), - configv1.BuildOverrides{}.OpenAPIModelName(): schema_openshift_api_config_v1_BuildOverrides(ref), - configv1.BuildSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_BuildSpec(ref), - configv1.CRIOCredentialProviderConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_CRIOCredentialProviderConfig(ref), - configv1.CRIOCredentialProviderConfigList{}.OpenAPIModelName(): schema_openshift_api_config_v1_CRIOCredentialProviderConfigList(ref), - configv1.CRIOCredentialProviderConfigSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_CRIOCredentialProviderConfigSpec(ref), - configv1.CRIOCredentialProviderConfigStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_CRIOCredentialProviderConfigStatus(ref), - configv1.CertInfo{}.OpenAPIModelName(): schema_openshift_api_config_v1_CertInfo(ref), - configv1.ClientConnectionOverrides{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClientConnectionOverrides(ref), - configv1.ClientCredentialConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClientCredentialConfig(ref), - configv1.ClientSecretSecretReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClientSecretSecretReference(ref), - configv1.CloudControllerManagerStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_CloudControllerManagerStatus(ref), - configv1.CloudLoadBalancerConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_CloudLoadBalancerConfig(ref), - configv1.CloudLoadBalancerIPs{}.OpenAPIModelName(): schema_openshift_api_config_v1_CloudLoadBalancerIPs(ref), - configv1.ClusterCondition{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterCondition(ref), - configv1.ClusterImagePolicy{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterImagePolicy(ref), - configv1.ClusterImagePolicyList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterImagePolicyList(ref), - configv1.ClusterImagePolicySpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterImagePolicySpec(ref), - configv1.ClusterImagePolicyStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterImagePolicyStatus(ref), - configv1.ClusterNetworkEntry{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterNetworkEntry(ref), - configv1.ClusterOperator{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterOperator(ref), - configv1.ClusterOperatorList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterOperatorList(ref), - configv1.ClusterOperatorSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterOperatorSpec(ref), - configv1.ClusterOperatorStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterOperatorStatus(ref), - configv1.ClusterOperatorStatusCondition{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterOperatorStatusCondition(ref), - configv1.ClusterVersion{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterVersion(ref), - configv1.ClusterVersionCapabilitiesSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterVersionCapabilitiesSpec(ref), - configv1.ClusterVersionCapabilitiesStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterVersionCapabilitiesStatus(ref), - configv1.ClusterVersionList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterVersionList(ref), - configv1.ClusterVersionSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterVersionSpec(ref), - configv1.ClusterVersionStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterVersionStatus(ref), - configv1.ComponentOverride{}.OpenAPIModelName(): schema_openshift_api_config_v1_ComponentOverride(ref), - configv1.ComponentRouteSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ComponentRouteSpec(ref), - configv1.ComponentRouteStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ComponentRouteStatus(ref), - configv1.ConditionalUpdate{}.OpenAPIModelName(): schema_openshift_api_config_v1_ConditionalUpdate(ref), - configv1.ConditionalUpdateRisk{}.OpenAPIModelName(): schema_openshift_api_config_v1_ConditionalUpdateRisk(ref), - configv1.ConfigMapFileReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_ConfigMapFileReference(ref), - configv1.ConfigMapNameReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_ConfigMapNameReference(ref), - configv1.Console{}.OpenAPIModelName(): schema_openshift_api_config_v1_Console(ref), - configv1.ConsoleAuthentication{}.OpenAPIModelName(): schema_openshift_api_config_v1_ConsoleAuthentication(ref), - configv1.ConsoleList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ConsoleList(ref), - configv1.ConsoleSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ConsoleSpec(ref), - configv1.ConsoleStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ConsoleStatus(ref), - configv1.Custom{}.OpenAPIModelName(): schema_openshift_api_config_v1_Custom(ref), - configv1.CustomFeatureGates{}.OpenAPIModelName(): schema_openshift_api_config_v1_CustomFeatureGates(ref), - configv1.CustomTLSProfile{}.OpenAPIModelName(): schema_openshift_api_config_v1_CustomTLSProfile(ref), - configv1.DNS{}.OpenAPIModelName(): schema_openshift_api_config_v1_DNS(ref), - configv1.DNSList{}.OpenAPIModelName(): schema_openshift_api_config_v1_DNSList(ref), - configv1.DNSPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_DNSPlatformSpec(ref), - configv1.DNSSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_DNSSpec(ref), - configv1.DNSStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_DNSStatus(ref), - configv1.DNSZone{}.OpenAPIModelName(): schema_openshift_api_config_v1_DNSZone(ref), - configv1.DelegatedAuthentication{}.OpenAPIModelName(): schema_openshift_api_config_v1_DelegatedAuthentication(ref), - configv1.DelegatedAuthorization{}.OpenAPIModelName(): schema_openshift_api_config_v1_DelegatedAuthorization(ref), - configv1.DeprecatedWebhookTokenAuthenticator{}.OpenAPIModelName(): schema_openshift_api_config_v1_DeprecatedWebhookTokenAuthenticator(ref), - configv1.EquinixMetalPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_EquinixMetalPlatformSpec(ref), - configv1.EquinixMetalPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_EquinixMetalPlatformStatus(ref), - configv1.EtcdConnectionInfo{}.OpenAPIModelName(): schema_openshift_api_config_v1_EtcdConnectionInfo(ref), - configv1.EtcdStorageConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_EtcdStorageConfig(ref), - configv1.ExternalClaimsSource{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExternalClaimsSource(ref), - configv1.ExternalIPConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExternalIPConfig(ref), - configv1.ExternalIPPolicy{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExternalIPPolicy(ref), - configv1.ExternalPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExternalPlatformSpec(ref), - configv1.ExternalPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExternalPlatformStatus(ref), - configv1.ExternalSourceAuthentication{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExternalSourceAuthentication(ref), - configv1.ExternalSourceCertificateAuthorityConfigMapReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExternalSourceCertificateAuthorityConfigMapReference(ref), - configv1.ExternalSourcePredicate{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExternalSourcePredicate(ref), - configv1.ExternalSourceTLS{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExternalSourceTLS(ref), - configv1.ExtraMapping{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExtraMapping(ref), - configv1.FeatureGate{}.OpenAPIModelName(): schema_openshift_api_config_v1_FeatureGate(ref), - configv1.FeatureGateAttributes{}.OpenAPIModelName(): schema_openshift_api_config_v1_FeatureGateAttributes(ref), - configv1.FeatureGateDetails{}.OpenAPIModelName(): schema_openshift_api_config_v1_FeatureGateDetails(ref), - configv1.FeatureGateList{}.OpenAPIModelName(): schema_openshift_api_config_v1_FeatureGateList(ref), - configv1.FeatureGateSelection{}.OpenAPIModelName(): schema_openshift_api_config_v1_FeatureGateSelection(ref), - configv1.FeatureGateSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_FeatureGateSpec(ref), - configv1.FeatureGateStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_FeatureGateStatus(ref), - configv1.FeatureGateTests{}.OpenAPIModelName(): schema_openshift_api_config_v1_FeatureGateTests(ref), - configv1.GCPPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_GCPPlatformSpec(ref), - configv1.GCPPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_GCPPlatformStatus(ref), - configv1.GCPResourceLabel{}.OpenAPIModelName(): schema_openshift_api_config_v1_GCPResourceLabel(ref), - configv1.GCPResourceTag{}.OpenAPIModelName(): schema_openshift_api_config_v1_GCPResourceTag(ref), - configv1.GatherConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_GatherConfig(ref), - configv1.GathererConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_GathererConfig(ref), - configv1.Gatherers{}.OpenAPIModelName(): schema_openshift_api_config_v1_Gatherers(ref), - configv1.GenericAPIServerConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_GenericAPIServerConfig(ref), - configv1.GenericControllerConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_GenericControllerConfig(ref), - configv1.GitHubIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_GitHubIdentityProvider(ref), - configv1.GitLabIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_GitLabIdentityProvider(ref), - configv1.GoogleIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_GoogleIdentityProvider(ref), - configv1.HTPasswdIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_HTPasswdIdentityProvider(ref), - configv1.HTTPServingInfo{}.OpenAPIModelName(): schema_openshift_api_config_v1_HTTPServingInfo(ref), - configv1.HubSource{}.OpenAPIModelName(): schema_openshift_api_config_v1_HubSource(ref), - configv1.HubSourceStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_HubSourceStatus(ref), - configv1.IBMCloudPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_IBMCloudPlatformSpec(ref), - configv1.IBMCloudPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_IBMCloudPlatformStatus(ref), - configv1.IBMCloudServiceEndpoint{}.OpenAPIModelName(): schema_openshift_api_config_v1_IBMCloudServiceEndpoint(ref), - configv1.IdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_IdentityProvider(ref), - configv1.IdentityProviderConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_IdentityProviderConfig(ref), - configv1.Image{}.OpenAPIModelName(): schema_openshift_api_config_v1_Image(ref), - configv1.ImageContentPolicy{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageContentPolicy(ref), - configv1.ImageContentPolicyList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageContentPolicyList(ref), - configv1.ImageContentPolicySpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageContentPolicySpec(ref), - configv1.ImageDigestMirrorSet{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageDigestMirrorSet(ref), - configv1.ImageDigestMirrorSetList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageDigestMirrorSetList(ref), - configv1.ImageDigestMirrorSetSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageDigestMirrorSetSpec(ref), - configv1.ImageDigestMirrorSetStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageDigestMirrorSetStatus(ref), - configv1.ImageDigestMirrors{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageDigestMirrors(ref), - configv1.ImageLabel{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageLabel(ref), - configv1.ImageList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageList(ref), - configv1.ImagePolicy{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImagePolicy(ref), - configv1.ImagePolicyFulcioCAWithRekorRootOfTrust{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImagePolicyFulcioCAWithRekorRootOfTrust(ref), - configv1.ImagePolicyList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImagePolicyList(ref), - configv1.ImagePolicyPKIRootOfTrust{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImagePolicyPKIRootOfTrust(ref), - configv1.ImagePolicyPublicKeyRootOfTrust{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImagePolicyPublicKeyRootOfTrust(ref), - configv1.ImagePolicySpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImagePolicySpec(ref), - configv1.ImagePolicyStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImagePolicyStatus(ref), - configv1.ImageSigstoreVerificationPolicy{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageSigstoreVerificationPolicy(ref), - configv1.ImageSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageSpec(ref), - configv1.ImageStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageStatus(ref), - configv1.ImageTagMirrorSet{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageTagMirrorSet(ref), - configv1.ImageTagMirrorSetList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageTagMirrorSetList(ref), - configv1.ImageTagMirrorSetSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageTagMirrorSetSpec(ref), - configv1.ImageTagMirrorSetStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageTagMirrorSetStatus(ref), - configv1.ImageTagMirrors{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageTagMirrors(ref), - configv1.Infrastructure{}.OpenAPIModelName(): schema_openshift_api_config_v1_Infrastructure(ref), - configv1.InfrastructureList{}.OpenAPIModelName(): schema_openshift_api_config_v1_InfrastructureList(ref), - configv1.InfrastructureSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_InfrastructureSpec(ref), - configv1.InfrastructureStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_InfrastructureStatus(ref), - configv1.Ingress{}.OpenAPIModelName(): schema_openshift_api_config_v1_Ingress(ref), - configv1.IngressList{}.OpenAPIModelName(): schema_openshift_api_config_v1_IngressList(ref), - configv1.IngressPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_IngressPlatformSpec(ref), - configv1.IngressSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_IngressSpec(ref), - configv1.IngressStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_IngressStatus(ref), - configv1.InsightsDataGather{}.OpenAPIModelName(): schema_openshift_api_config_v1_InsightsDataGather(ref), - configv1.InsightsDataGatherList{}.OpenAPIModelName(): schema_openshift_api_config_v1_InsightsDataGatherList(ref), - configv1.InsightsDataGatherSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_InsightsDataGatherSpec(ref), - configv1.IntermediateTLSProfile{}.OpenAPIModelName(): schema_openshift_api_config_v1_IntermediateTLSProfile(ref), - configv1.KMSPluginConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_KMSPluginConfig(ref), - configv1.KeystoneIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_KeystoneIdentityProvider(ref), - configv1.KubeClientConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_KubeClientConfig(ref), - configv1.KubevirtPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_KubevirtPlatformSpec(ref), - configv1.KubevirtPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_KubevirtPlatformStatus(ref), - configv1.LDAPAttributeMapping{}.OpenAPIModelName(): schema_openshift_api_config_v1_LDAPAttributeMapping(ref), - configv1.LDAPIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_LDAPIdentityProvider(ref), - configv1.LeaderElection{}.OpenAPIModelName(): schema_openshift_api_config_v1_LeaderElection(ref), - configv1.LoadBalancer{}.OpenAPIModelName(): schema_openshift_api_config_v1_LoadBalancer(ref), - configv1.MTUMigration{}.OpenAPIModelName(): schema_openshift_api_config_v1_MTUMigration(ref), - configv1.MTUMigrationValues{}.OpenAPIModelName(): schema_openshift_api_config_v1_MTUMigrationValues(ref), - configv1.MaxAgePolicy{}.OpenAPIModelName(): schema_openshift_api_config_v1_MaxAgePolicy(ref), - configv1.ModernTLSProfile{}.OpenAPIModelName(): schema_openshift_api_config_v1_ModernTLSProfile(ref), - configv1.NamedCertificate{}.OpenAPIModelName(): schema_openshift_api_config_v1_NamedCertificate(ref), - configv1.Network{}.OpenAPIModelName(): schema_openshift_api_config_v1_Network(ref), - configv1.NetworkDiagnostics{}.OpenAPIModelName(): schema_openshift_api_config_v1_NetworkDiagnostics(ref), - configv1.NetworkDiagnosticsSourcePlacement{}.OpenAPIModelName(): schema_openshift_api_config_v1_NetworkDiagnosticsSourcePlacement(ref), - configv1.NetworkDiagnosticsTargetPlacement{}.OpenAPIModelName(): schema_openshift_api_config_v1_NetworkDiagnosticsTargetPlacement(ref), - configv1.NetworkList{}.OpenAPIModelName(): schema_openshift_api_config_v1_NetworkList(ref), - configv1.NetworkMigration{}.OpenAPIModelName(): schema_openshift_api_config_v1_NetworkMigration(ref), - configv1.NetworkObservabilitySpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_NetworkObservabilitySpec(ref), - configv1.NetworkSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_NetworkSpec(ref), - configv1.NetworkStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_NetworkStatus(ref), - configv1.Node{}.OpenAPIModelName(): schema_openshift_api_config_v1_Node(ref), - configv1.NodeList{}.OpenAPIModelName(): schema_openshift_api_config_v1_NodeList(ref), - configv1.NodeSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_NodeSpec(ref), - configv1.NodeStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_NodeStatus(ref), - configv1.NutanixFailureDomain{}.OpenAPIModelName(): schema_openshift_api_config_v1_NutanixFailureDomain(ref), - configv1.NutanixPlatformLoadBalancer{}.OpenAPIModelName(): schema_openshift_api_config_v1_NutanixPlatformLoadBalancer(ref), - configv1.NutanixPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_NutanixPlatformSpec(ref), - configv1.NutanixPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_NutanixPlatformStatus(ref), - configv1.NutanixPrismElementEndpoint{}.OpenAPIModelName(): schema_openshift_api_config_v1_NutanixPrismElementEndpoint(ref), - configv1.NutanixPrismEndpoint{}.OpenAPIModelName(): schema_openshift_api_config_v1_NutanixPrismEndpoint(ref), - configv1.NutanixResourceIdentifier{}.OpenAPIModelName(): schema_openshift_api_config_v1_NutanixResourceIdentifier(ref), - configv1.OAuth{}.OpenAPIModelName(): schema_openshift_api_config_v1_OAuth(ref), - configv1.OAuthList{}.OpenAPIModelName(): schema_openshift_api_config_v1_OAuthList(ref), - configv1.OAuthRemoteConnectionInfo{}.OpenAPIModelName(): schema_openshift_api_config_v1_OAuthRemoteConnectionInfo(ref), - configv1.OAuthSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_OAuthSpec(ref), - configv1.OAuthStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_OAuthStatus(ref), - configv1.OAuthTemplates{}.OpenAPIModelName(): schema_openshift_api_config_v1_OAuthTemplates(ref), - configv1.OIDCClientConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_OIDCClientConfig(ref), - configv1.OIDCClientReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_OIDCClientReference(ref), - configv1.OIDCClientStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_OIDCClientStatus(ref), - configv1.OIDCProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_OIDCProvider(ref), - configv1.ObjectReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_ObjectReference(ref), - configv1.OldTLSProfile{}.OpenAPIModelName(): schema_openshift_api_config_v1_OldTLSProfile(ref), - configv1.OpenIDClaims{}.OpenAPIModelName(): schema_openshift_api_config_v1_OpenIDClaims(ref), - configv1.OpenIDIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_OpenIDIdentityProvider(ref), - configv1.OpenStackPlatformLoadBalancer{}.OpenAPIModelName(): schema_openshift_api_config_v1_OpenStackPlatformLoadBalancer(ref), - configv1.OpenStackPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_OpenStackPlatformSpec(ref), - configv1.OpenStackPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_OpenStackPlatformStatus(ref), - configv1.OperandVersion{}.OpenAPIModelName(): schema_openshift_api_config_v1_OperandVersion(ref), - configv1.OperatorHub{}.OpenAPIModelName(): schema_openshift_api_config_v1_OperatorHub(ref), - configv1.OperatorHubList{}.OpenAPIModelName(): schema_openshift_api_config_v1_OperatorHubList(ref), - configv1.OperatorHubSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_OperatorHubSpec(ref), - configv1.OperatorHubStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_OperatorHubStatus(ref), - configv1.OvirtPlatformLoadBalancer{}.OpenAPIModelName(): schema_openshift_api_config_v1_OvirtPlatformLoadBalancer(ref), - configv1.OvirtPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_OvirtPlatformSpec(ref), - configv1.OvirtPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_OvirtPlatformStatus(ref), - configv1.PKICertificateSubject{}.OpenAPIModelName(): schema_openshift_api_config_v1_PKICertificateSubject(ref), - configv1.PersistentVolumeClaimReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_PersistentVolumeClaimReference(ref), - configv1.PersistentVolumeConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_PersistentVolumeConfig(ref), - configv1.PlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_PlatformSpec(ref), - configv1.PlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_PlatformStatus(ref), - configv1.PolicyFulcioSubject{}.OpenAPIModelName(): schema_openshift_api_config_v1_PolicyFulcioSubject(ref), - configv1.PolicyIdentity{}.OpenAPIModelName(): schema_openshift_api_config_v1_PolicyIdentity(ref), - configv1.PolicyMatchExactRepository{}.OpenAPIModelName(): schema_openshift_api_config_v1_PolicyMatchExactRepository(ref), - configv1.PolicyMatchRemapIdentity{}.OpenAPIModelName(): schema_openshift_api_config_v1_PolicyMatchRemapIdentity(ref), - configv1.PolicyRootOfTrust{}.OpenAPIModelName(): schema_openshift_api_config_v1_PolicyRootOfTrust(ref), - configv1.PowerVSPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_PowerVSPlatformSpec(ref), - configv1.PowerVSPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_PowerVSPlatformStatus(ref), - configv1.PowerVSServiceEndpoint{}.OpenAPIModelName(): schema_openshift_api_config_v1_PowerVSServiceEndpoint(ref), - configv1.PrefixedClaimMapping{}.OpenAPIModelName(): schema_openshift_api_config_v1_PrefixedClaimMapping(ref), - configv1.ProfileCustomizations{}.OpenAPIModelName(): schema_openshift_api_config_v1_ProfileCustomizations(ref), - configv1.Project{}.OpenAPIModelName(): schema_openshift_api_config_v1_Project(ref), - configv1.ProjectList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ProjectList(ref), - configv1.ProjectSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ProjectSpec(ref), - configv1.ProjectStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ProjectStatus(ref), - configv1.PromQLClusterCondition{}.OpenAPIModelName(): schema_openshift_api_config_v1_PromQLClusterCondition(ref), - configv1.Proxy{}.OpenAPIModelName(): schema_openshift_api_config_v1_Proxy(ref), - configv1.ProxyList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ProxyList(ref), - configv1.ProxySpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ProxySpec(ref), - configv1.ProxyStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ProxyStatus(ref), - configv1.RegistryLocation{}.OpenAPIModelName(): schema_openshift_api_config_v1_RegistryLocation(ref), - configv1.RegistrySources{}.OpenAPIModelName(): schema_openshift_api_config_v1_RegistrySources(ref), - configv1.Release{}.OpenAPIModelName(): schema_openshift_api_config_v1_Release(ref), - configv1.RemoteConnectionInfo{}.OpenAPIModelName(): schema_openshift_api_config_v1_RemoteConnectionInfo(ref), - configv1.RepositoryDigestMirrors{}.OpenAPIModelName(): schema_openshift_api_config_v1_RepositoryDigestMirrors(ref), - configv1.RequestHeaderIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_RequestHeaderIdentityProvider(ref), - configv1.RequiredHSTSPolicy{}.OpenAPIModelName(): schema_openshift_api_config_v1_RequiredHSTSPolicy(ref), - configv1.Scheduler{}.OpenAPIModelName(): schema_openshift_api_config_v1_Scheduler(ref), - configv1.SchedulerList{}.OpenAPIModelName(): schema_openshift_api_config_v1_SchedulerList(ref), - configv1.SchedulerSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_SchedulerSpec(ref), - configv1.SchedulerStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_SchedulerStatus(ref), - configv1.SecretNameReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_SecretNameReference(ref), - configv1.ServingInfo{}.OpenAPIModelName(): schema_openshift_api_config_v1_ServingInfo(ref), - configv1.SignatureStore{}.OpenAPIModelName(): schema_openshift_api_config_v1_SignatureStore(ref), - configv1.SourceURL{}.OpenAPIModelName(): schema_openshift_api_config_v1_SourceURL(ref), - configv1.SourcedClaimMapping{}.OpenAPIModelName(): schema_openshift_api_config_v1_SourcedClaimMapping(ref), - configv1.Storage{}.OpenAPIModelName(): schema_openshift_api_config_v1_Storage(ref), - configv1.StringSource{}.OpenAPIModelName(): schema_openshift_api_config_v1_StringSource(ref), - configv1.StringSourceSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_StringSourceSpec(ref), - configv1.TLSProfileSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_TLSProfileSpec(ref), - configv1.TLSSecurityProfile{}.OpenAPIModelName(): schema_openshift_api_config_v1_TLSSecurityProfile(ref), - configv1.TemplateReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_TemplateReference(ref), - configv1.TestDetails{}.OpenAPIModelName(): schema_openshift_api_config_v1_TestDetails(ref), - configv1.TestReporting{}.OpenAPIModelName(): schema_openshift_api_config_v1_TestReporting(ref), - configv1.TestReportingSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_TestReportingSpec(ref), - configv1.TestReportingStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_TestReportingStatus(ref), - configv1.TokenClaimMapping{}.OpenAPIModelName(): schema_openshift_api_config_v1_TokenClaimMapping(ref), - configv1.TokenClaimMappings{}.OpenAPIModelName(): schema_openshift_api_config_v1_TokenClaimMappings(ref), - configv1.TokenClaimOrExpressionMapping{}.OpenAPIModelName(): schema_openshift_api_config_v1_TokenClaimOrExpressionMapping(ref), - configv1.TokenClaimValidationCELRule{}.OpenAPIModelName(): schema_openshift_api_config_v1_TokenClaimValidationCELRule(ref), - configv1.TokenClaimValidationRule{}.OpenAPIModelName(): schema_openshift_api_config_v1_TokenClaimValidationRule(ref), - configv1.TokenConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_TokenConfig(ref), - configv1.TokenIssuer{}.OpenAPIModelName(): schema_openshift_api_config_v1_TokenIssuer(ref), - configv1.TokenRequiredClaim{}.OpenAPIModelName(): schema_openshift_api_config_v1_TokenRequiredClaim(ref), - configv1.TokenUserValidationRule{}.OpenAPIModelName(): schema_openshift_api_config_v1_TokenUserValidationRule(ref), - configv1.Update{}.OpenAPIModelName(): schema_openshift_api_config_v1_Update(ref), - configv1.UpdateHistory{}.OpenAPIModelName(): schema_openshift_api_config_v1_UpdateHistory(ref), - configv1.UsernameClaimMapping{}.OpenAPIModelName(): schema_openshift_api_config_v1_UsernameClaimMapping(ref), - configv1.UsernamePrefix{}.OpenAPIModelName(): schema_openshift_api_config_v1_UsernamePrefix(ref), - configv1.VSphereFailureDomainHostGroup{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSphereFailureDomainHostGroup(ref), - configv1.VSphereFailureDomainRegionAffinity{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSphereFailureDomainRegionAffinity(ref), - configv1.VSphereFailureDomainZoneAffinity{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSphereFailureDomainZoneAffinity(ref), - configv1.VSpherePlatformFailureDomainSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSpherePlatformFailureDomainSpec(ref), - configv1.VSpherePlatformLoadBalancer{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSpherePlatformLoadBalancer(ref), - configv1.VSpherePlatformNodeNetworking{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSpherePlatformNodeNetworking(ref), - configv1.VSpherePlatformNodeNetworkingSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSpherePlatformNodeNetworkingSpec(ref), - configv1.VSpherePlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSpherePlatformSpec(ref), - configv1.VSpherePlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSpherePlatformStatus(ref), - configv1.VSpherePlatformTopology{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSpherePlatformTopology(ref), - configv1.VSpherePlatformVCenterSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSpherePlatformVCenterSpec(ref), - configv1.VaultAppRoleAuthentication{}.OpenAPIModelName(): schema_openshift_api_config_v1_VaultAppRoleAuthentication(ref), - configv1.VaultAuthentication{}.OpenAPIModelName(): schema_openshift_api_config_v1_VaultAuthentication(ref), - configv1.VaultConfigMapReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_VaultConfigMapReference(ref), - configv1.VaultKMSPluginConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_VaultKMSPluginConfig(ref), - configv1.VaultSecretReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_VaultSecretReference(ref), - configv1.VaultTLSConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_VaultTLSConfig(ref), - configv1.WebhookTokenAuthenticator{}.OpenAPIModelName(): schema_openshift_api_config_v1_WebhookTokenAuthenticator(ref), - configv1alpha1.AdditionalAlertmanagerConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_AdditionalAlertmanagerConfig(ref), - configv1alpha1.AlertmanagerConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_AlertmanagerConfig(ref), - configv1alpha1.AlertmanagerCustomConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_AlertmanagerCustomConfig(ref), - configv1alpha1.Audit{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_Audit(ref), - configv1alpha1.AuthorizationConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_AuthorizationConfig(ref), - configv1alpha1.Backup{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_Backup(ref), - configv1alpha1.BackupList{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_BackupList(ref), - configv1alpha1.BackupSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_BackupSpec(ref), - configv1alpha1.BackupStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_BackupStatus(ref), - configv1alpha1.BasicAuth{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_BasicAuth(ref), - configv1alpha1.CRIOCredentialProviderConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_CRIOCredentialProviderConfig(ref), - configv1alpha1.CRIOCredentialProviderConfigList{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_CRIOCredentialProviderConfigList(ref), - configv1alpha1.CRIOCredentialProviderConfigSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_CRIOCredentialProviderConfigSpec(ref), - configv1alpha1.CRIOCredentialProviderConfigStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_CRIOCredentialProviderConfigStatus(ref), - configv1alpha1.CertificateConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_CertificateConfig(ref), - configv1alpha1.ClusterMonitoring{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_ClusterMonitoring(ref), - configv1alpha1.ClusterMonitoringList{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_ClusterMonitoringList(ref), - configv1alpha1.ClusterMonitoringSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_ClusterMonitoringSpec(ref), - configv1alpha1.ClusterMonitoringStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_ClusterMonitoringStatus(ref), - configv1alpha1.ContainerResource{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_ContainerResource(ref), - configv1alpha1.CustomPKIPolicy{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_CustomPKIPolicy(ref), - configv1alpha1.DefaultCertificateConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_DefaultCertificateConfig(ref), - configv1alpha1.DropEqualActionConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_DropEqualActionConfig(ref), - configv1alpha1.ECDSAKeyConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_ECDSAKeyConfig(ref), - configv1alpha1.EtcdBackupSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_EtcdBackupSpec(ref), - configv1alpha1.GatherConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_GatherConfig(ref), - configv1alpha1.HashModActionConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_HashModActionConfig(ref), - configv1alpha1.InsightsDataGather{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_InsightsDataGather(ref), - configv1alpha1.InsightsDataGatherList{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_InsightsDataGatherList(ref), - configv1alpha1.InsightsDataGatherSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_InsightsDataGatherSpec(ref), - configv1alpha1.InsightsDataGatherStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_InsightsDataGatherStatus(ref), - configv1alpha1.KeepEqualActionConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_KeepEqualActionConfig(ref), - configv1alpha1.KeyConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_KeyConfig(ref), - configv1alpha1.KubeStateMetricsConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_KubeStateMetricsConfig(ref), - configv1alpha1.KubeStateMetricsResourceLabels{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_KubeStateMetricsResourceLabels(ref), - configv1alpha1.Label{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_Label(ref), - configv1alpha1.LabelMapActionConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_LabelMapActionConfig(ref), - configv1alpha1.LowercaseActionConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_LowercaseActionConfig(ref), - configv1alpha1.MetadataConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_MetadataConfig(ref), - configv1alpha1.MetadataConfigCustom{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_MetadataConfigCustom(ref), - configv1alpha1.MetricsServerConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_MetricsServerConfig(ref), - configv1alpha1.MonitoringPluginConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_MonitoringPluginConfig(ref), - configv1alpha1.NodeExporterCollectorBuddyInfoConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_NodeExporterCollectorBuddyInfoConfig(ref), - configv1alpha1.NodeExporterCollectorConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_NodeExporterCollectorConfig(ref), - configv1alpha1.NodeExporterCollectorCpufreqConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_NodeExporterCollectorCpufreqConfig(ref), - configv1alpha1.NodeExporterCollectorDeviceMapperMultipathConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_NodeExporterCollectorDeviceMapperMultipathConfig(ref), - configv1alpha1.NodeExporterCollectorEthtoolConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_NodeExporterCollectorEthtoolConfig(ref), - configv1alpha1.NodeExporterCollectorKSMDConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_NodeExporterCollectorKSMDConfig(ref), - configv1alpha1.NodeExporterCollectorMountStatsConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_NodeExporterCollectorMountStatsConfig(ref), - configv1alpha1.NodeExporterCollectorNVMExpressSubsystemConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_NodeExporterCollectorNVMExpressSubsystemConfig(ref), - configv1alpha1.NodeExporterCollectorNetClassCollectConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_NodeExporterCollectorNetClassCollectConfig(ref), - configv1alpha1.NodeExporterCollectorNetClassConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_NodeExporterCollectorNetClassConfig(ref), - configv1alpha1.NodeExporterCollectorNetDevConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_NodeExporterCollectorNetDevConfig(ref), - configv1alpha1.NodeExporterCollectorProcessesConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_NodeExporterCollectorProcessesConfig(ref), - configv1alpha1.NodeExporterCollectorSoftirqsConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_NodeExporterCollectorSoftirqsConfig(ref), - configv1alpha1.NodeExporterCollectorSystemdCollectConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_NodeExporterCollectorSystemdCollectConfig(ref), - configv1alpha1.NodeExporterCollectorSystemdConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_NodeExporterCollectorSystemdConfig(ref), - configv1alpha1.NodeExporterCollectorTcpStatConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_NodeExporterCollectorTcpStatConfig(ref), - configv1alpha1.NodeExporterCollectorZoneinfoConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_NodeExporterCollectorZoneinfoConfig(ref), - configv1alpha1.NodeExporterConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_NodeExporterConfig(ref), - configv1alpha1.OAuth2{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_OAuth2(ref), - configv1alpha1.OAuth2EndpointParam{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_OAuth2EndpointParam(ref), - configv1alpha1.OpenShiftStateMetricsConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_OpenShiftStateMetricsConfig(ref), - configv1alpha1.PKI{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_PKI(ref), - configv1alpha1.PKICertificateManagement{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_PKICertificateManagement(ref), - configv1alpha1.PKIList{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_PKIList(ref), - configv1alpha1.PKIProfile{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_PKIProfile(ref), - configv1alpha1.PKISpec{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_PKISpec(ref), - configv1alpha1.PersistentVolumeClaimReference{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_PersistentVolumeClaimReference(ref), - configv1alpha1.PersistentVolumeConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_PersistentVolumeConfig(ref), - configv1alpha1.PrometheusConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_PrometheusConfig(ref), - configv1alpha1.PrometheusOperatorAdmissionWebhookConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_PrometheusOperatorAdmissionWebhookConfig(ref), - configv1alpha1.PrometheusOperatorConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_PrometheusOperatorConfig(ref), - configv1alpha1.PrometheusRemoteWriteHeader{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_PrometheusRemoteWriteHeader(ref), - configv1alpha1.QueueConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_QueueConfig(ref), - configv1alpha1.RSAKeyConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_RSAKeyConfig(ref), - configv1alpha1.RelabelActionConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_RelabelActionConfig(ref), - configv1alpha1.RelabelConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_RelabelConfig(ref), - configv1alpha1.RemoteWriteAuthorization{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_RemoteWriteAuthorization(ref), - configv1alpha1.RemoteWriteSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_RemoteWriteSpec(ref), - configv1alpha1.ReplaceActionConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_ReplaceActionConfig(ref), - configv1alpha1.Retention{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_Retention(ref), - configv1alpha1.RetentionNumberConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_RetentionNumberConfig(ref), - configv1alpha1.RetentionPolicy{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_RetentionPolicy(ref), - configv1alpha1.RetentionSizeConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_RetentionSizeConfig(ref), - configv1alpha1.SecretKeySelector{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_SecretKeySelector(ref), - configv1alpha1.Sigv4{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_Sigv4(ref), - configv1alpha1.Storage{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_Storage(ref), - configv1alpha1.TLSConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_TLSConfig(ref), - configv1alpha1.TelemeterClientConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_TelemeterClientConfig(ref), - configv1alpha1.ThanosQuerierConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_ThanosQuerierConfig(ref), - configv1alpha1.ThanosQuerierRequestLoggingConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_ThanosQuerierRequestLoggingConfig(ref), - configv1alpha1.UppercaseActionConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_UppercaseActionConfig(ref), - configv1alpha1.UserDefinedMonitoring{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha1_UserDefinedMonitoring(ref), - v1alpha2.Custom{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha2_Custom(ref), - v1alpha2.GatherConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha2_GatherConfig(ref), - v1alpha2.GathererConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha2_GathererConfig(ref), - v1alpha2.Gatherers{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha2_Gatherers(ref), - v1alpha2.InsightsDataGather{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha2_InsightsDataGather(ref), - v1alpha2.InsightsDataGatherList{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha2_InsightsDataGatherList(ref), - v1alpha2.InsightsDataGatherSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha2_InsightsDataGatherSpec(ref), - v1alpha2.InsightsDataGatherStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha2_InsightsDataGatherStatus(ref), - v1alpha2.PersistentVolumeClaimReference{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha2_PersistentVolumeClaimReference(ref), - v1alpha2.PersistentVolumeConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha2_PersistentVolumeConfig(ref), - v1alpha2.Storage{}.OpenAPIModelName(): schema_openshift_api_config_v1alpha2_Storage(ref), - consolev1.ApplicationMenuSpec{}.OpenAPIModelName(): schema_openshift_api_console_v1_ApplicationMenuSpec(ref), - consolev1.CLIDownloadLink{}.OpenAPIModelName(): schema_openshift_api_console_v1_CLIDownloadLink(ref), - consolev1.ConsoleCLIDownload{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleCLIDownload(ref), - consolev1.ConsoleCLIDownloadList{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleCLIDownloadList(ref), - consolev1.ConsoleCLIDownloadSpec{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleCLIDownloadSpec(ref), - consolev1.ConsoleExternalLogLink{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleExternalLogLink(ref), - consolev1.ConsoleExternalLogLinkList{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleExternalLogLinkList(ref), - consolev1.ConsoleExternalLogLinkSpec{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleExternalLogLinkSpec(ref), - consolev1.ConsoleLink{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleLink(ref), - consolev1.ConsoleLinkList{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleLinkList(ref), - consolev1.ConsoleLinkSpec{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleLinkSpec(ref), - consolev1.ConsoleNotification{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleNotification(ref), - consolev1.ConsoleNotificationList{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleNotificationList(ref), - consolev1.ConsoleNotificationSpec{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleNotificationSpec(ref), - consolev1.ConsolePlugin{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsolePlugin(ref), - consolev1.ConsolePluginBackend{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsolePluginBackend(ref), - consolev1.ConsolePluginCSP{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsolePluginCSP(ref), - consolev1.ConsolePluginI18n{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsolePluginI18n(ref), - consolev1.ConsolePluginList{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsolePluginList(ref), - consolev1.ConsolePluginProxy{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsolePluginProxy(ref), - consolev1.ConsolePluginProxyEndpoint{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsolePluginProxyEndpoint(ref), - consolev1.ConsolePluginProxyServiceConfig{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsolePluginProxyServiceConfig(ref), - consolev1.ConsolePluginService{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsolePluginService(ref), - consolev1.ConsolePluginSpec{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsolePluginSpec(ref), - consolev1.ConsoleQuickStart{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleQuickStart(ref), - consolev1.ConsoleQuickStartList{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleQuickStartList(ref), - consolev1.ConsoleQuickStartSpec{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleQuickStartSpec(ref), - consolev1.ConsoleQuickStartTask{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleQuickStartTask(ref), - consolev1.ConsoleQuickStartTaskReview{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleQuickStartTaskReview(ref), - consolev1.ConsoleQuickStartTaskSummary{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleQuickStartTaskSummary(ref), - consolev1.ConsoleSample{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleSample(ref), - consolev1.ConsoleSampleContainerImportSource{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleSampleContainerImportSource(ref), - consolev1.ConsoleSampleContainerImportSourceService{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleSampleContainerImportSourceService(ref), - consolev1.ConsoleSampleGitImportSource{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleSampleGitImportSource(ref), - consolev1.ConsoleSampleGitImportSourceRepository{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleSampleGitImportSourceRepository(ref), - consolev1.ConsoleSampleGitImportSourceService{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleSampleGitImportSourceService(ref), - consolev1.ConsoleSampleList{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleSampleList(ref), - consolev1.ConsoleSampleSource{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleSampleSource(ref), - consolev1.ConsoleSampleSpec{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleSampleSpec(ref), - consolev1.ConsoleYAMLSample{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleYAMLSample(ref), - consolev1.ConsoleYAMLSampleList{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleYAMLSampleList(ref), - consolev1.ConsoleYAMLSampleSpec{}.OpenAPIModelName(): schema_openshift_api_console_v1_ConsoleYAMLSampleSpec(ref), - consolev1.Link{}.OpenAPIModelName(): schema_openshift_api_console_v1_Link(ref), - consolev1.NamespaceDashboardSpec{}.OpenAPIModelName(): schema_openshift_api_console_v1_NamespaceDashboardSpec(ref), - etcdv1.PacemakerCluster{}.OpenAPIModelName(): schema_openshift_api_etcd_v1_PacemakerCluster(ref), - etcdv1.PacemakerClusterFencingAgentStatus{}.OpenAPIModelName(): schema_openshift_api_etcd_v1_PacemakerClusterFencingAgentStatus(ref), - etcdv1.PacemakerClusterList{}.OpenAPIModelName(): schema_openshift_api_etcd_v1_PacemakerClusterList(ref), - etcdv1.PacemakerClusterNodeStatus{}.OpenAPIModelName(): schema_openshift_api_etcd_v1_PacemakerClusterNodeStatus(ref), - etcdv1.PacemakerClusterResourceStatus{}.OpenAPIModelName(): schema_openshift_api_etcd_v1_PacemakerClusterResourceStatus(ref), - etcdv1.PacemakerClusterStatus{}.OpenAPIModelName(): schema_openshift_api_etcd_v1_PacemakerClusterStatus(ref), - etcdv1.PacemakerNodeAddress{}.OpenAPIModelName(): schema_openshift_api_etcd_v1_PacemakerNodeAddress(ref), - etcdv1alpha1.PacemakerCluster{}.OpenAPIModelName(): schema_openshift_api_etcd_v1alpha1_PacemakerCluster(ref), - etcdv1alpha1.PacemakerClusterFencingAgentStatus{}.OpenAPIModelName(): schema_openshift_api_etcd_v1alpha1_PacemakerClusterFencingAgentStatus(ref), - etcdv1alpha1.PacemakerClusterList{}.OpenAPIModelName(): schema_openshift_api_etcd_v1alpha1_PacemakerClusterList(ref), - etcdv1alpha1.PacemakerClusterNodeStatus{}.OpenAPIModelName(): schema_openshift_api_etcd_v1alpha1_PacemakerClusterNodeStatus(ref), - etcdv1alpha1.PacemakerClusterResourceStatus{}.OpenAPIModelName(): schema_openshift_api_etcd_v1alpha1_PacemakerClusterResourceStatus(ref), - etcdv1alpha1.PacemakerClusterStatus{}.OpenAPIModelName(): schema_openshift_api_etcd_v1alpha1_PacemakerClusterStatus(ref), - etcdv1alpha1.PacemakerNodeAddress{}.OpenAPIModelName(): schema_openshift_api_etcd_v1alpha1_PacemakerNodeAddress(ref), - examplev1.CELUnion{}.OpenAPIModelName(): schema_openshift_api_example_v1_CELUnion(ref), - examplev1.EvolvingUnion{}.OpenAPIModelName(): schema_openshift_api_example_v1_EvolvingUnion(ref), - examplev1.FormatMarkerExamples{}.OpenAPIModelName(): schema_openshift_api_example_v1_FormatMarkerExamples(ref), - examplev1.StableConfigType{}.OpenAPIModelName(): schema_openshift_api_example_v1_StableConfigType(ref), - examplev1.StableConfigTypeList{}.OpenAPIModelName(): schema_openshift_api_example_v1_StableConfigTypeList(ref), - examplev1.StableConfigTypeSpec{}.OpenAPIModelName(): schema_openshift_api_example_v1_StableConfigTypeSpec(ref), - examplev1.StableConfigTypeStatus{}.OpenAPIModelName(): schema_openshift_api_example_v1_StableConfigTypeStatus(ref), - examplev1.SubnetsWithExclusions{}.OpenAPIModelName(): schema_openshift_api_example_v1_SubnetsWithExclusions(ref), - examplev1alpha1.NotStableConfigType{}.OpenAPIModelName(): schema_openshift_api_example_v1alpha1_NotStableConfigType(ref), - examplev1alpha1.NotStableConfigTypeList{}.OpenAPIModelName(): schema_openshift_api_example_v1alpha1_NotStableConfigTypeList(ref), - examplev1alpha1.NotStableConfigTypeSpec{}.OpenAPIModelName(): schema_openshift_api_example_v1alpha1_NotStableConfigTypeSpec(ref), - examplev1alpha1.NotStableConfigTypeStatus{}.OpenAPIModelName(): schema_openshift_api_example_v1alpha1_NotStableConfigTypeStatus(ref), - v1beta1.ConnectionConfig{}.OpenAPIModelName(): schema_openshift_api_helm_v1beta1_ConnectionConfig(ref), - v1beta1.ConnectionConfigNamespaceScoped{}.OpenAPIModelName(): schema_openshift_api_helm_v1beta1_ConnectionConfigNamespaceScoped(ref), - v1beta1.HelmChartRepository{}.OpenAPIModelName(): schema_openshift_api_helm_v1beta1_HelmChartRepository(ref), - v1beta1.HelmChartRepositoryList{}.OpenAPIModelName(): schema_openshift_api_helm_v1beta1_HelmChartRepositoryList(ref), - v1beta1.HelmChartRepositorySpec{}.OpenAPIModelName(): schema_openshift_api_helm_v1beta1_HelmChartRepositorySpec(ref), - v1beta1.HelmChartRepositoryStatus{}.OpenAPIModelName(): schema_openshift_api_helm_v1beta1_HelmChartRepositoryStatus(ref), - v1beta1.ProjectHelmChartRepository{}.OpenAPIModelName(): schema_openshift_api_helm_v1beta1_ProjectHelmChartRepository(ref), - v1beta1.ProjectHelmChartRepositoryList{}.OpenAPIModelName(): schema_openshift_api_helm_v1beta1_ProjectHelmChartRepositoryList(ref), - v1beta1.ProjectHelmChartRepositorySpec{}.OpenAPIModelName(): schema_openshift_api_helm_v1beta1_ProjectHelmChartRepositorySpec(ref), - imagev1.DockerImageReference{}.OpenAPIModelName(): schema_openshift_api_image_v1_DockerImageReference(ref), - imagev1.Image{}.OpenAPIModelName(): schema_openshift_api_image_v1_Image(ref), - imagev1.ImageBlobReferences{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageBlobReferences(ref), - imagev1.ImageImportSpec{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageImportSpec(ref), - imagev1.ImageImportStatus{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageImportStatus(ref), - imagev1.ImageLayer{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageLayer(ref), - imagev1.ImageLayerData{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageLayerData(ref), - imagev1.ImageList{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageList(ref), - imagev1.ImageLookupPolicy{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageLookupPolicy(ref), - imagev1.ImageManifest{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageManifest(ref), - imagev1.ImageSignature{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageSignature(ref), - imagev1.ImageStream{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageStream(ref), - imagev1.ImageStreamImage{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageStreamImage(ref), - imagev1.ImageStreamImport{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageStreamImport(ref), - imagev1.ImageStreamImportSpec{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageStreamImportSpec(ref), - imagev1.ImageStreamImportStatus{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageStreamImportStatus(ref), - imagev1.ImageStreamLayers{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageStreamLayers(ref), - imagev1.ImageStreamList{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageStreamList(ref), - imagev1.ImageStreamMapping{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageStreamMapping(ref), - imagev1.ImageStreamSpec{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageStreamSpec(ref), - imagev1.ImageStreamStatus{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageStreamStatus(ref), - imagev1.ImageStreamTag{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageStreamTag(ref), - imagev1.ImageStreamTagList{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageStreamTagList(ref), - imagev1.ImageTag{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageTag(ref), - imagev1.ImageTagList{}.OpenAPIModelName(): schema_openshift_api_image_v1_ImageTagList(ref), - imagev1.NamedTagEventList{}.OpenAPIModelName(): schema_openshift_api_image_v1_NamedTagEventList(ref), - imagev1.RepositoryImportSpec{}.OpenAPIModelName(): schema_openshift_api_image_v1_RepositoryImportSpec(ref), - imagev1.RepositoryImportStatus{}.OpenAPIModelName(): schema_openshift_api_image_v1_RepositoryImportStatus(ref), - imagev1.SecretList{}.OpenAPIModelName(): schema_openshift_api_image_v1_SecretList(ref), - imagev1.SignatureCondition{}.OpenAPIModelName(): schema_openshift_api_image_v1_SignatureCondition(ref), - imagev1.SignatureGenericEntity{}.OpenAPIModelName(): schema_openshift_api_image_v1_SignatureGenericEntity(ref), - imagev1.SignatureIssuer{}.OpenAPIModelName(): schema_openshift_api_image_v1_SignatureIssuer(ref), - imagev1.SignatureSubject{}.OpenAPIModelName(): schema_openshift_api_image_v1_SignatureSubject(ref), - imagev1.TagEvent{}.OpenAPIModelName(): schema_openshift_api_image_v1_TagEvent(ref), - imagev1.TagEventCondition{}.OpenAPIModelName(): schema_openshift_api_image_v1_TagEventCondition(ref), - imagev1.TagImportPolicy{}.OpenAPIModelName(): schema_openshift_api_image_v1_TagImportPolicy(ref), - imagev1.TagReference{}.OpenAPIModelName(): schema_openshift_api_image_v1_TagReference(ref), - imagev1.TagReferencePolicy{}.OpenAPIModelName(): schema_openshift_api_image_v1_TagReferencePolicy(ref), - insightsv1.Custom{}.OpenAPIModelName(): schema_openshift_api_insights_v1_Custom(ref), - insightsv1.DataGather{}.OpenAPIModelName(): schema_openshift_api_insights_v1_DataGather(ref), - insightsv1.DataGatherList{}.OpenAPIModelName(): schema_openshift_api_insights_v1_DataGatherList(ref), - insightsv1.DataGatherSpec{}.OpenAPIModelName(): schema_openshift_api_insights_v1_DataGatherSpec(ref), - insightsv1.DataGatherStatus{}.OpenAPIModelName(): schema_openshift_api_insights_v1_DataGatherStatus(ref), - insightsv1.GathererConfig{}.OpenAPIModelName(): schema_openshift_api_insights_v1_GathererConfig(ref), - insightsv1.GathererStatus{}.OpenAPIModelName(): schema_openshift_api_insights_v1_GathererStatus(ref), - insightsv1.Gatherers{}.OpenAPIModelName(): schema_openshift_api_insights_v1_Gatherers(ref), - insightsv1.HealthCheck{}.OpenAPIModelName(): schema_openshift_api_insights_v1_HealthCheck(ref), - insightsv1.InsightsReport{}.OpenAPIModelName(): schema_openshift_api_insights_v1_InsightsReport(ref), - insightsv1.ObjectReference{}.OpenAPIModelName(): schema_openshift_api_insights_v1_ObjectReference(ref), - insightsv1.PersistentVolumeClaimReference{}.OpenAPIModelName(): schema_openshift_api_insights_v1_PersistentVolumeClaimReference(ref), - insightsv1.PersistentVolumeConfig{}.OpenAPIModelName(): schema_openshift_api_insights_v1_PersistentVolumeConfig(ref), - insightsv1.Storage{}.OpenAPIModelName(): schema_openshift_api_insights_v1_Storage(ref), - insightsv1alpha1.DataGather{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha1_DataGather(ref), - insightsv1alpha1.DataGatherList{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha1_DataGatherList(ref), - insightsv1alpha1.DataGatherSpec{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha1_DataGatherSpec(ref), - insightsv1alpha1.DataGatherStatus{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha1_DataGatherStatus(ref), - insightsv1alpha1.GathererConfig{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha1_GathererConfig(ref), - insightsv1alpha1.GathererStatus{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha1_GathererStatus(ref), - insightsv1alpha1.HealthCheck{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha1_HealthCheck(ref), - insightsv1alpha1.InsightsReport{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha1_InsightsReport(ref), - insightsv1alpha1.ObjectReference{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha1_ObjectReference(ref), - insightsv1alpha1.PersistentVolumeClaimReference{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha1_PersistentVolumeClaimReference(ref), - insightsv1alpha1.PersistentVolumeConfig{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha1_PersistentVolumeConfig(ref), - insightsv1alpha1.Storage{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha1_Storage(ref), - insightsv1alpha2.Custom{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha2_Custom(ref), - insightsv1alpha2.DataGather{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha2_DataGather(ref), - insightsv1alpha2.DataGatherList{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha2_DataGatherList(ref), - insightsv1alpha2.DataGatherSpec{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha2_DataGatherSpec(ref), - insightsv1alpha2.DataGatherStatus{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha2_DataGatherStatus(ref), - insightsv1alpha2.GathererConfig{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha2_GathererConfig(ref), - insightsv1alpha2.GathererStatus{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha2_GathererStatus(ref), - insightsv1alpha2.Gatherers{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha2_Gatherers(ref), - insightsv1alpha2.HealthCheck{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha2_HealthCheck(ref), - insightsv1alpha2.InsightsReport{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha2_InsightsReport(ref), - insightsv1alpha2.ObjectReference{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha2_ObjectReference(ref), - insightsv1alpha2.PersistentVolumeClaimReference{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha2_PersistentVolumeClaimReference(ref), - insightsv1alpha2.PersistentVolumeConfig{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha2_PersistentVolumeConfig(ref), - insightsv1alpha2.Storage{}.OpenAPIModelName(): schema_openshift_api_insights_v1alpha2_Storage(ref), - kubecontrolplanev1.AggregatorConfig{}.OpenAPIModelName(): schema_openshift_api_kubecontrolplane_v1_AggregatorConfig(ref), - kubecontrolplanev1.KubeAPIServerConfig{}.OpenAPIModelName(): schema_openshift_api_kubecontrolplane_v1_KubeAPIServerConfig(ref), - kubecontrolplanev1.KubeAPIServerImagePolicyConfig{}.OpenAPIModelName(): schema_openshift_api_kubecontrolplane_v1_KubeAPIServerImagePolicyConfig(ref), - kubecontrolplanev1.KubeAPIServerProjectConfig{}.OpenAPIModelName(): schema_openshift_api_kubecontrolplane_v1_KubeAPIServerProjectConfig(ref), - kubecontrolplanev1.KubeControllerManagerConfig{}.OpenAPIModelName(): schema_openshift_api_kubecontrolplane_v1_KubeControllerManagerConfig(ref), - kubecontrolplanev1.KubeControllerManagerProjectConfig{}.OpenAPIModelName(): schema_openshift_api_kubecontrolplane_v1_KubeControllerManagerProjectConfig(ref), - kubecontrolplanev1.KubeletConnectionInfo{}.OpenAPIModelName(): schema_openshift_api_kubecontrolplane_v1_KubeletConnectionInfo(ref), - kubecontrolplanev1.MasterAuthConfig{}.OpenAPIModelName(): schema_openshift_api_kubecontrolplane_v1_MasterAuthConfig(ref), - kubecontrolplanev1.RequestHeaderAuthenticationOptions{}.OpenAPIModelName(): schema_openshift_api_kubecontrolplane_v1_RequestHeaderAuthenticationOptions(ref), - kubecontrolplanev1.ServiceServingCert{}.OpenAPIModelName(): schema_openshift_api_kubecontrolplane_v1_ServiceServingCert(ref), - kubecontrolplanev1.UserAgentDenyRule{}.OpenAPIModelName(): schema_openshift_api_kubecontrolplane_v1_UserAgentDenyRule(ref), - kubecontrolplanev1.UserAgentMatchRule{}.OpenAPIModelName(): schema_openshift_api_kubecontrolplane_v1_UserAgentMatchRule(ref), - kubecontrolplanev1.UserAgentMatchingConfig{}.OpenAPIModelName(): schema_openshift_api_kubecontrolplane_v1_UserAgentMatchingConfig(ref), - kubecontrolplanev1.WebhookTokenAuthenticator{}.OpenAPIModelName(): schema_openshift_api_kubecontrolplane_v1_WebhookTokenAuthenticator(ref), - legacyconfigv1.ActiveDirectoryConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_ActiveDirectoryConfig(ref), - legacyconfigv1.AdmissionConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_AdmissionConfig(ref), - legacyconfigv1.AdmissionPluginConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_AdmissionPluginConfig(ref), - legacyconfigv1.AggregatorConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_AggregatorConfig(ref), - legacyconfigv1.AllowAllPasswordIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_AllowAllPasswordIdentityProvider(ref), - legacyconfigv1.AuditConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_AuditConfig(ref), - legacyconfigv1.AugmentedActiveDirectoryConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_AugmentedActiveDirectoryConfig(ref), - legacyconfigv1.BasicAuthPasswordIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_BasicAuthPasswordIdentityProvider(ref), - legacyconfigv1.BuildDefaultsConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_BuildDefaultsConfig(ref), - legacyconfigv1.BuildOverridesConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_BuildOverridesConfig(ref), - legacyconfigv1.CertInfo{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_CertInfo(ref), - legacyconfigv1.ClientConnectionOverrides{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_ClientConnectionOverrides(ref), - legacyconfigv1.ClusterNetworkEntry{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_ClusterNetworkEntry(ref), - legacyconfigv1.ControllerConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_ControllerConfig(ref), - legacyconfigv1.ControllerElectionConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_ControllerElectionConfig(ref), - legacyconfigv1.DNSConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_DNSConfig(ref), - legacyconfigv1.DefaultAdmissionConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_DefaultAdmissionConfig(ref), - legacyconfigv1.DenyAllPasswordIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_DenyAllPasswordIdentityProvider(ref), - legacyconfigv1.DockerConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_DockerConfig(ref), - legacyconfigv1.EtcdConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_EtcdConfig(ref), - legacyconfigv1.EtcdConnectionInfo{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_EtcdConnectionInfo(ref), - legacyconfigv1.EtcdStorageConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_EtcdStorageConfig(ref), - legacyconfigv1.GitHubIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_GitHubIdentityProvider(ref), - legacyconfigv1.GitLabIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_GitLabIdentityProvider(ref), - legacyconfigv1.GoogleIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_GoogleIdentityProvider(ref), - legacyconfigv1.GrantConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_GrantConfig(ref), - legacyconfigv1.GroupResource{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_GroupResource(ref), - legacyconfigv1.HTPasswdPasswordIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_HTPasswdPasswordIdentityProvider(ref), - legacyconfigv1.HTTPServingInfo{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_HTTPServingInfo(ref), - legacyconfigv1.IdentityProvider{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_IdentityProvider(ref), - legacyconfigv1.ImageConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_ImageConfig(ref), - legacyconfigv1.ImagePolicyConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_ImagePolicyConfig(ref), - legacyconfigv1.JenkinsPipelineConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_JenkinsPipelineConfig(ref), - legacyconfigv1.KeystonePasswordIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_KeystonePasswordIdentityProvider(ref), - legacyconfigv1.KubeletConnectionInfo{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_KubeletConnectionInfo(ref), - legacyconfigv1.KubernetesMasterConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_KubernetesMasterConfig(ref), - legacyconfigv1.LDAPAttributeMapping{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_LDAPAttributeMapping(ref), - legacyconfigv1.LDAPPasswordIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_LDAPPasswordIdentityProvider(ref), - legacyconfigv1.LDAPQuery{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_LDAPQuery(ref), - legacyconfigv1.LDAPSyncConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_LDAPSyncConfig(ref), - legacyconfigv1.LocalQuota{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_LocalQuota(ref), - legacyconfigv1.MasterAuthConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_MasterAuthConfig(ref), - legacyconfigv1.MasterClients{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_MasterClients(ref), - legacyconfigv1.MasterConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_MasterConfig(ref), - legacyconfigv1.MasterNetworkConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_MasterNetworkConfig(ref), - legacyconfigv1.MasterVolumeConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_MasterVolumeConfig(ref), - legacyconfigv1.NamedCertificate{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_NamedCertificate(ref), - legacyconfigv1.NodeAuthConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_NodeAuthConfig(ref), - legacyconfigv1.NodeConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_NodeConfig(ref), - legacyconfigv1.NodeNetworkConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_NodeNetworkConfig(ref), - legacyconfigv1.NodeVolumeConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_NodeVolumeConfig(ref), - legacyconfigv1.OAuthConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_OAuthConfig(ref), - legacyconfigv1.OAuthTemplates{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_OAuthTemplates(ref), - legacyconfigv1.OpenIDClaims{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_OpenIDClaims(ref), - legacyconfigv1.OpenIDIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_OpenIDIdentityProvider(ref), - legacyconfigv1.OpenIDURLs{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_OpenIDURLs(ref), - legacyconfigv1.PodManifestConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_PodManifestConfig(ref), - legacyconfigv1.PolicyConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_PolicyConfig(ref), - legacyconfigv1.ProjectConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_ProjectConfig(ref), - legacyconfigv1.RFC2307Config{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_RFC2307Config(ref), - legacyconfigv1.RegistryLocation{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_RegistryLocation(ref), - legacyconfigv1.RemoteConnectionInfo{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_RemoteConnectionInfo(ref), - legacyconfigv1.RequestHeaderAuthenticationOptions{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_RequestHeaderAuthenticationOptions(ref), - legacyconfigv1.RequestHeaderIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_RequestHeaderIdentityProvider(ref), - legacyconfigv1.RoutingConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_RoutingConfig(ref), - legacyconfigv1.SecurityAllocator{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_SecurityAllocator(ref), - legacyconfigv1.ServiceAccountConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_ServiceAccountConfig(ref), - legacyconfigv1.ServiceServingCert{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_ServiceServingCert(ref), - legacyconfigv1.ServingInfo{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_ServingInfo(ref), - legacyconfigv1.SessionConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_SessionConfig(ref), - legacyconfigv1.SessionSecret{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_SessionSecret(ref), - legacyconfigv1.SessionSecrets{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_SessionSecrets(ref), - legacyconfigv1.SourceStrategyDefaultsConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_SourceStrategyDefaultsConfig(ref), - legacyconfigv1.StringSource{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_StringSource(ref), - legacyconfigv1.StringSourceSpec{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_StringSourceSpec(ref), - legacyconfigv1.TokenConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_TokenConfig(ref), - legacyconfigv1.UserAgentDenyRule{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_UserAgentDenyRule(ref), - legacyconfigv1.UserAgentMatchRule{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_UserAgentMatchRule(ref), - legacyconfigv1.UserAgentMatchingConfig{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_UserAgentMatchingConfig(ref), - legacyconfigv1.WebhookTokenAuthenticator{}.OpenAPIModelName(): schema_openshift_api_legacyconfig_v1_WebhookTokenAuthenticator(ref), - machinev1.AWSFailureDomain{}.OpenAPIModelName(): schema_openshift_api_machine_v1_AWSFailureDomain(ref), - machinev1.AWSFailureDomainPlacement{}.OpenAPIModelName(): schema_openshift_api_machine_v1_AWSFailureDomainPlacement(ref), - machinev1.AWSResourceFilter{}.OpenAPIModelName(): schema_openshift_api_machine_v1_AWSResourceFilter(ref), - machinev1.AWSResourceReference{}.OpenAPIModelName(): schema_openshift_api_machine_v1_AWSResourceReference(ref), - machinev1.AlibabaCloudMachineProviderConfig{}.OpenAPIModelName(): schema_openshift_api_machine_v1_AlibabaCloudMachineProviderConfig(ref), - machinev1.AlibabaCloudMachineProviderConfigList{}.OpenAPIModelName(): schema_openshift_api_machine_v1_AlibabaCloudMachineProviderConfigList(ref), - machinev1.AlibabaCloudMachineProviderStatus{}.OpenAPIModelName(): schema_openshift_api_machine_v1_AlibabaCloudMachineProviderStatus(ref), - machinev1.AlibabaResourceReference{}.OpenAPIModelName(): schema_openshift_api_machine_v1_AlibabaResourceReference(ref), - machinev1.AzureFailureDomain{}.OpenAPIModelName(): schema_openshift_api_machine_v1_AzureFailureDomain(ref), - machinev1.BandwidthProperties{}.OpenAPIModelName(): schema_openshift_api_machine_v1_BandwidthProperties(ref), - machinev1.ControlPlaneMachineSet{}.OpenAPIModelName(): schema_openshift_api_machine_v1_ControlPlaneMachineSet(ref), - machinev1.ControlPlaneMachineSetList{}.OpenAPIModelName(): schema_openshift_api_machine_v1_ControlPlaneMachineSetList(ref), - machinev1.ControlPlaneMachineSetSpec{}.OpenAPIModelName(): schema_openshift_api_machine_v1_ControlPlaneMachineSetSpec(ref), - machinev1.ControlPlaneMachineSetStatus{}.OpenAPIModelName(): schema_openshift_api_machine_v1_ControlPlaneMachineSetStatus(ref), - machinev1.ControlPlaneMachineSetStrategy{}.OpenAPIModelName(): schema_openshift_api_machine_v1_ControlPlaneMachineSetStrategy(ref), - machinev1.ControlPlaneMachineSetTemplate{}.OpenAPIModelName(): schema_openshift_api_machine_v1_ControlPlaneMachineSetTemplate(ref), - machinev1.ControlPlaneMachineSetTemplateObjectMeta{}.OpenAPIModelName(): schema_openshift_api_machine_v1_ControlPlaneMachineSetTemplateObjectMeta(ref), - machinev1.DataDiskProperties{}.OpenAPIModelName(): schema_openshift_api_machine_v1_DataDiskProperties(ref), - machinev1.FailureDomains{}.OpenAPIModelName(): schema_openshift_api_machine_v1_FailureDomains(ref), - machinev1.GCPFailureDomain{}.OpenAPIModelName(): schema_openshift_api_machine_v1_GCPFailureDomain(ref), - machinev1.LoadBalancerReference{}.OpenAPIModelName(): schema_openshift_api_machine_v1_LoadBalancerReference(ref), - machinev1.NutanixCategory{}.OpenAPIModelName(): schema_openshift_api_machine_v1_NutanixCategory(ref), - machinev1.NutanixFailureDomainReference{}.OpenAPIModelName(): schema_openshift_api_machine_v1_NutanixFailureDomainReference(ref), - machinev1.NutanixGPU{}.OpenAPIModelName(): schema_openshift_api_machine_v1_NutanixGPU(ref), - machinev1.NutanixMachineProviderConfig{}.OpenAPIModelName(): schema_openshift_api_machine_v1_NutanixMachineProviderConfig(ref), - machinev1.NutanixMachineProviderStatus{}.OpenAPIModelName(): schema_openshift_api_machine_v1_NutanixMachineProviderStatus(ref), - machinev1.NutanixResourceIdentifier{}.OpenAPIModelName(): schema_openshift_api_machine_v1_NutanixResourceIdentifier(ref), - machinev1.NutanixStorageResourceIdentifier{}.OpenAPIModelName(): schema_openshift_api_machine_v1_NutanixStorageResourceIdentifier(ref), - machinev1.NutanixVMDisk{}.OpenAPIModelName(): schema_openshift_api_machine_v1_NutanixVMDisk(ref), - machinev1.NutanixVMDiskDeviceProperties{}.OpenAPIModelName(): schema_openshift_api_machine_v1_NutanixVMDiskDeviceProperties(ref), - machinev1.NutanixVMStorageConfig{}.OpenAPIModelName(): schema_openshift_api_machine_v1_NutanixVMStorageConfig(ref), - machinev1.OpenShiftMachineV1Beta1MachineTemplate{}.OpenAPIModelName(): schema_openshift_api_machine_v1_OpenShiftMachineV1Beta1MachineTemplate(ref), - machinev1.OpenStackFailureDomain{}.OpenAPIModelName(): schema_openshift_api_machine_v1_OpenStackFailureDomain(ref), - machinev1.PowerVSMachineProviderConfig{}.OpenAPIModelName(): schema_openshift_api_machine_v1_PowerVSMachineProviderConfig(ref), - machinev1.PowerVSMachineProviderStatus{}.OpenAPIModelName(): schema_openshift_api_machine_v1_PowerVSMachineProviderStatus(ref), - machinev1.PowerVSResource{}.OpenAPIModelName(): schema_openshift_api_machine_v1_PowerVSResource(ref), - machinev1.PowerVSSecretReference{}.OpenAPIModelName(): schema_openshift_api_machine_v1_PowerVSSecretReference(ref), - machinev1.RootVolume{}.OpenAPIModelName(): schema_openshift_api_machine_v1_RootVolume(ref), - machinev1.SystemDiskProperties{}.OpenAPIModelName(): schema_openshift_api_machine_v1_SystemDiskProperties(ref), - machinev1.Tag{}.OpenAPIModelName(): schema_openshift_api_machine_v1_Tag(ref), - machinev1.VSphereFailureDomain{}.OpenAPIModelName(): schema_openshift_api_machine_v1_VSphereFailureDomain(ref), - machinev1alpha1.AdditionalBlockDevice{}.OpenAPIModelName(): schema_openshift_api_machine_v1alpha1_AdditionalBlockDevice(ref), - machinev1alpha1.AddressPair{}.OpenAPIModelName(): schema_openshift_api_machine_v1alpha1_AddressPair(ref), - machinev1alpha1.BlockDeviceStorage{}.OpenAPIModelName(): schema_openshift_api_machine_v1alpha1_BlockDeviceStorage(ref), - machinev1alpha1.BlockDeviceVolume{}.OpenAPIModelName(): schema_openshift_api_machine_v1alpha1_BlockDeviceVolume(ref), - machinev1alpha1.Filter{}.OpenAPIModelName(): schema_openshift_api_machine_v1alpha1_Filter(ref), - machinev1alpha1.FixedIPs{}.OpenAPIModelName(): schema_openshift_api_machine_v1alpha1_FixedIPs(ref), - machinev1alpha1.NetworkParam{}.OpenAPIModelName(): schema_openshift_api_machine_v1alpha1_NetworkParam(ref), - machinev1alpha1.OpenstackProviderSpec{}.OpenAPIModelName(): schema_openshift_api_machine_v1alpha1_OpenstackProviderSpec(ref), - machinev1alpha1.PortOpts{}.OpenAPIModelName(): schema_openshift_api_machine_v1alpha1_PortOpts(ref), - machinev1alpha1.RootVolume{}.OpenAPIModelName(): schema_openshift_api_machine_v1alpha1_RootVolume(ref), - machinev1alpha1.SecurityGroupFilter{}.OpenAPIModelName(): schema_openshift_api_machine_v1alpha1_SecurityGroupFilter(ref), - machinev1alpha1.SecurityGroupParam{}.OpenAPIModelName(): schema_openshift_api_machine_v1alpha1_SecurityGroupParam(ref), - machinev1alpha1.SubnetFilter{}.OpenAPIModelName(): schema_openshift_api_machine_v1alpha1_SubnetFilter(ref), - machinev1alpha1.SubnetParam{}.OpenAPIModelName(): schema_openshift_api_machine_v1alpha1_SubnetParam(ref), - machinev1beta1.AWSMachineProviderConfig{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_AWSMachineProviderConfig(ref), - machinev1beta1.AWSMachineProviderConfigList{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_AWSMachineProviderConfigList(ref), - machinev1beta1.AWSMachineProviderStatus{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_AWSMachineProviderStatus(ref), - machinev1beta1.AWSResourceReference{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_AWSResourceReference(ref), - machinev1beta1.AddressesFromPool{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_AddressesFromPool(ref), - machinev1beta1.AzureBootDiagnostics{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_AzureBootDiagnostics(ref), - machinev1beta1.AzureCustomerManagedBootDiagnostics{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_AzureCustomerManagedBootDiagnostics(ref), - machinev1beta1.AzureDiagnostics{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_AzureDiagnostics(ref), - machinev1beta1.AzureMachineProviderSpec{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_AzureMachineProviderSpec(ref), - machinev1beta1.AzureMachineProviderStatus{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_AzureMachineProviderStatus(ref), - machinev1beta1.BlockDeviceMappingSpec{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_BlockDeviceMappingSpec(ref), - machinev1beta1.CPUOptions{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_CPUOptions(ref), - machinev1beta1.Condition{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_Condition(ref), - machinev1beta1.ConfidentialVM{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_ConfidentialVM(ref), - machinev1beta1.DataDisk{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_DataDisk(ref), - machinev1beta1.DataDiskManagedDiskParameters{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_DataDiskManagedDiskParameters(ref), - machinev1beta1.DedicatedHost{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_DedicatedHost(ref), - machinev1beta1.DedicatedHostStatus{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_DedicatedHostStatus(ref), - machinev1beta1.DiskEncryptionSetParameters{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_DiskEncryptionSetParameters(ref), - machinev1beta1.DiskSettings{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_DiskSettings(ref), - machinev1beta1.DynamicHostAllocationSpec{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_DynamicHostAllocationSpec(ref), - machinev1beta1.EBSBlockDeviceSpec{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_EBSBlockDeviceSpec(ref), - machinev1beta1.Filter{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_Filter(ref), - machinev1beta1.GCPDisk{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_GCPDisk(ref), - machinev1beta1.GCPEncryptionKeyReference{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_GCPEncryptionKeyReference(ref), - machinev1beta1.GCPGPUConfig{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_GCPGPUConfig(ref), - machinev1beta1.GCPKMSKeyReference{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_GCPKMSKeyReference(ref), - machinev1beta1.GCPMachineProviderSpec{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_GCPMachineProviderSpec(ref), - machinev1beta1.GCPMachineProviderStatus{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_GCPMachineProviderStatus(ref), - machinev1beta1.GCPMetadata{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_GCPMetadata(ref), - machinev1beta1.GCPNetworkInterface{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_GCPNetworkInterface(ref), - machinev1beta1.GCPServiceAccount{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_GCPServiceAccount(ref), - machinev1beta1.GCPShieldedInstanceConfig{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_GCPShieldedInstanceConfig(ref), - machinev1beta1.HostPlacement{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_HostPlacement(ref), - machinev1beta1.Image{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_Image(ref), - machinev1beta1.LastOperation{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_LastOperation(ref), - machinev1beta1.LifecycleHook{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_LifecycleHook(ref), - machinev1beta1.LifecycleHooks{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_LifecycleHooks(ref), - machinev1beta1.LoadBalancerReference{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_LoadBalancerReference(ref), - machinev1beta1.Machine{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_Machine(ref), - machinev1beta1.MachineHealthCheck{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_MachineHealthCheck(ref), - machinev1beta1.MachineHealthCheckList{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_MachineHealthCheckList(ref), - machinev1beta1.MachineHealthCheckSpec{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_MachineHealthCheckSpec(ref), - machinev1beta1.MachineHealthCheckStatus{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_MachineHealthCheckStatus(ref), - machinev1beta1.MachineList{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_MachineList(ref), - machinev1beta1.MachineSet{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_MachineSet(ref), - machinev1beta1.MachineSetList{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_MachineSetList(ref), - machinev1beta1.MachineSetSpec{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_MachineSetSpec(ref), - machinev1beta1.MachineSetStatus{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_MachineSetStatus(ref), - machinev1beta1.MachineSpec{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_MachineSpec(ref), - machinev1beta1.MachineStatus{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_MachineStatus(ref), - machinev1beta1.MachineTemplateSpec{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_MachineTemplateSpec(ref), - machinev1beta1.MetadataServiceOptions{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_MetadataServiceOptions(ref), - machinev1beta1.NetworkDeviceSpec{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_NetworkDeviceSpec(ref), - machinev1beta1.NetworkSpec{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_NetworkSpec(ref), - machinev1beta1.OSDisk{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_OSDisk(ref), - machinev1beta1.OSDiskManagedDiskParameters{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_OSDiskManagedDiskParameters(ref), - machinev1beta1.ObjectMeta{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_ObjectMeta(ref), - machinev1beta1.Placement{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_Placement(ref), - machinev1beta1.ProviderSpec{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_ProviderSpec(ref), - machinev1beta1.ResourceManagerTag{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_ResourceManagerTag(ref), - machinev1beta1.SecurityProfile{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_SecurityProfile(ref), - machinev1beta1.SecuritySettings{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_SecuritySettings(ref), - machinev1beta1.SpotMarketOptions{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_SpotMarketOptions(ref), - machinev1beta1.SpotVMOptions{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_SpotVMOptions(ref), - machinev1beta1.TagSpecification{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_TagSpecification(ref), - machinev1beta1.TrustedLaunch{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_TrustedLaunch(ref), - machinev1beta1.UEFISettings{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_UEFISettings(ref), - machinev1beta1.UnhealthyCondition{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_UnhealthyCondition(ref), - machinev1beta1.VMDiskSecurityProfile{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_VMDiskSecurityProfile(ref), - machinev1beta1.VSphereDisk{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_VSphereDisk(ref), - machinev1beta1.VSphereMachineProviderSpec{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_VSphereMachineProviderSpec(ref), - machinev1beta1.VSphereMachineProviderStatus{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_VSphereMachineProviderStatus(ref), - machinev1beta1.Workspace{}.OpenAPIModelName(): schema_openshift_api_machine_v1beta1_Workspace(ref), - machineconfigurationv1alpha1.InternalReleaseImage{}.OpenAPIModelName(): schema_openshift_api_machineconfiguration_v1alpha1_InternalReleaseImage(ref), - machineconfigurationv1alpha1.InternalReleaseImageBundleStatus{}.OpenAPIModelName(): schema_openshift_api_machineconfiguration_v1alpha1_InternalReleaseImageBundleStatus(ref), - machineconfigurationv1alpha1.InternalReleaseImageList{}.OpenAPIModelName(): schema_openshift_api_machineconfiguration_v1alpha1_InternalReleaseImageList(ref), - machineconfigurationv1alpha1.InternalReleaseImageRef{}.OpenAPIModelName(): schema_openshift_api_machineconfiguration_v1alpha1_InternalReleaseImageRef(ref), - machineconfigurationv1alpha1.InternalReleaseImageSpec{}.OpenAPIModelName(): schema_openshift_api_machineconfiguration_v1alpha1_InternalReleaseImageSpec(ref), - machineconfigurationv1alpha1.InternalReleaseImageStatus{}.OpenAPIModelName(): schema_openshift_api_machineconfiguration_v1alpha1_InternalReleaseImageStatus(ref), - machineconfigurationv1alpha1.OSImageStream{}.OpenAPIModelName(): schema_openshift_api_machineconfiguration_v1alpha1_OSImageStream(ref), - machineconfigurationv1alpha1.OSImageStreamList{}.OpenAPIModelName(): schema_openshift_api_machineconfiguration_v1alpha1_OSImageStreamList(ref), - machineconfigurationv1alpha1.OSImageStreamSet{}.OpenAPIModelName(): schema_openshift_api_machineconfiguration_v1alpha1_OSImageStreamSet(ref), - machineconfigurationv1alpha1.OSImageStreamSpec{}.OpenAPIModelName(): schema_openshift_api_machineconfiguration_v1alpha1_OSImageStreamSpec(ref), - machineconfigurationv1alpha1.OSImageStreamStatus{}.OpenAPIModelName(): schema_openshift_api_machineconfiguration_v1alpha1_OSImageStreamStatus(ref), - monitoringv1.AlertRelabelConfig{}.OpenAPIModelName(): schema_openshift_api_monitoring_v1_AlertRelabelConfig(ref), - monitoringv1.AlertRelabelConfigList{}.OpenAPIModelName(): schema_openshift_api_monitoring_v1_AlertRelabelConfigList(ref), - monitoringv1.AlertRelabelConfigSpec{}.OpenAPIModelName(): schema_openshift_api_monitoring_v1_AlertRelabelConfigSpec(ref), - monitoringv1.AlertRelabelConfigStatus{}.OpenAPIModelName(): schema_openshift_api_monitoring_v1_AlertRelabelConfigStatus(ref), - monitoringv1.AlertingRule{}.OpenAPIModelName(): schema_openshift_api_monitoring_v1_AlertingRule(ref), - monitoringv1.AlertingRuleList{}.OpenAPIModelName(): schema_openshift_api_monitoring_v1_AlertingRuleList(ref), - monitoringv1.AlertingRuleSpec{}.OpenAPIModelName(): schema_openshift_api_monitoring_v1_AlertingRuleSpec(ref), - monitoringv1.AlertingRuleStatus{}.OpenAPIModelName(): schema_openshift_api_monitoring_v1_AlertingRuleStatus(ref), - monitoringv1.PrometheusRuleRef{}.OpenAPIModelName(): schema_openshift_api_monitoring_v1_PrometheusRuleRef(ref), - monitoringv1.RelabelConfig{}.OpenAPIModelName(): schema_openshift_api_monitoring_v1_RelabelConfig(ref), - monitoringv1.Rule{}.OpenAPIModelName(): schema_openshift_api_monitoring_v1_Rule(ref), - monitoringv1.RuleGroup{}.OpenAPIModelName(): schema_openshift_api_monitoring_v1_RuleGroup(ref), - networkv1.ClusterNetwork{}.OpenAPIModelName(): schema_openshift_api_network_v1_ClusterNetwork(ref), - networkv1.ClusterNetworkEntry{}.OpenAPIModelName(): schema_openshift_api_network_v1_ClusterNetworkEntry(ref), - networkv1.ClusterNetworkList{}.OpenAPIModelName(): schema_openshift_api_network_v1_ClusterNetworkList(ref), - networkv1.EgressNetworkPolicy{}.OpenAPIModelName(): schema_openshift_api_network_v1_EgressNetworkPolicy(ref), - networkv1.EgressNetworkPolicyList{}.OpenAPIModelName(): schema_openshift_api_network_v1_EgressNetworkPolicyList(ref), - networkv1.EgressNetworkPolicyPeer{}.OpenAPIModelName(): schema_openshift_api_network_v1_EgressNetworkPolicyPeer(ref), - networkv1.EgressNetworkPolicyRule{}.OpenAPIModelName(): schema_openshift_api_network_v1_EgressNetworkPolicyRule(ref), - networkv1.EgressNetworkPolicySpec{}.OpenAPIModelName(): schema_openshift_api_network_v1_EgressNetworkPolicySpec(ref), - networkv1.HostSubnet{}.OpenAPIModelName(): schema_openshift_api_network_v1_HostSubnet(ref), - networkv1.HostSubnetList{}.OpenAPIModelName(): schema_openshift_api_network_v1_HostSubnetList(ref), - networkv1.NetNamespace{}.OpenAPIModelName(): schema_openshift_api_network_v1_NetNamespace(ref), - networkv1.NetNamespaceList{}.OpenAPIModelName(): schema_openshift_api_network_v1_NetNamespaceList(ref), - networkv1alpha1.DNSNameResolver{}.OpenAPIModelName(): schema_openshift_api_network_v1alpha1_DNSNameResolver(ref), - networkv1alpha1.DNSNameResolverList{}.OpenAPIModelName(): schema_openshift_api_network_v1alpha1_DNSNameResolverList(ref), - networkv1alpha1.DNSNameResolverResolvedAddress{}.OpenAPIModelName(): schema_openshift_api_network_v1alpha1_DNSNameResolverResolvedAddress(ref), - networkv1alpha1.DNSNameResolverResolvedName{}.OpenAPIModelName(): schema_openshift_api_network_v1alpha1_DNSNameResolverResolvedName(ref), - networkv1alpha1.DNSNameResolverSpec{}.OpenAPIModelName(): schema_openshift_api_network_v1alpha1_DNSNameResolverSpec(ref), - networkv1alpha1.DNSNameResolverStatus{}.OpenAPIModelName(): schema_openshift_api_network_v1alpha1_DNSNameResolverStatus(ref), - networkoperatorv1.EgressRouter{}.OpenAPIModelName(): schema_openshift_api_networkoperator_v1_EgressRouter(ref), - networkoperatorv1.EgressRouterSpec{}.OpenAPIModelName(): schema_openshift_api_networkoperator_v1_EgressRouterSpec(ref), - oauthv1.ClusterRoleScopeRestriction{}.OpenAPIModelName(): schema_openshift_api_oauth_v1_ClusterRoleScopeRestriction(ref), - oauthv1.OAuthAccessToken{}.OpenAPIModelName(): schema_openshift_api_oauth_v1_OAuthAccessToken(ref), - oauthv1.OAuthAccessTokenList{}.OpenAPIModelName(): schema_openshift_api_oauth_v1_OAuthAccessTokenList(ref), - oauthv1.OAuthAuthorizeToken{}.OpenAPIModelName(): schema_openshift_api_oauth_v1_OAuthAuthorizeToken(ref), - oauthv1.OAuthAuthorizeTokenList{}.OpenAPIModelName(): schema_openshift_api_oauth_v1_OAuthAuthorizeTokenList(ref), - oauthv1.OAuthClient{}.OpenAPIModelName(): schema_openshift_api_oauth_v1_OAuthClient(ref), - oauthv1.OAuthClientAuthorization{}.OpenAPIModelName(): schema_openshift_api_oauth_v1_OAuthClientAuthorization(ref), - oauthv1.OAuthClientAuthorizationList{}.OpenAPIModelName(): schema_openshift_api_oauth_v1_OAuthClientAuthorizationList(ref), - oauthv1.OAuthClientList{}.OpenAPIModelName(): schema_openshift_api_oauth_v1_OAuthClientList(ref), - oauthv1.OAuthRedirectReference{}.OpenAPIModelName(): schema_openshift_api_oauth_v1_OAuthRedirectReference(ref), - oauthv1.RedirectReference{}.OpenAPIModelName(): schema_openshift_api_oauth_v1_RedirectReference(ref), - oauthv1.ScopeRestriction{}.OpenAPIModelName(): schema_openshift_api_oauth_v1_ScopeRestriction(ref), - oauthv1.UserOAuthAccessToken{}.OpenAPIModelName(): schema_openshift_api_oauth_v1_UserOAuthAccessToken(ref), - oauthv1.UserOAuthAccessTokenList{}.OpenAPIModelName(): schema_openshift_api_oauth_v1_UserOAuthAccessTokenList(ref), - openshiftcontrolplanev1.APIServers{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_APIServers(ref), - openshiftcontrolplanev1.BuildControllerConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_BuildControllerConfig(ref), - openshiftcontrolplanev1.BuildDefaultsConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_BuildDefaultsConfig(ref), - openshiftcontrolplanev1.BuildOverridesConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_BuildOverridesConfig(ref), - openshiftcontrolplanev1.ClusterNetworkEntry{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_ClusterNetworkEntry(ref), - openshiftcontrolplanev1.DeployerControllerConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_DeployerControllerConfig(ref), - openshiftcontrolplanev1.DockerPullSecretControllerConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_DockerPullSecretControllerConfig(ref), - openshiftcontrolplanev1.FrontProxyConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_FrontProxyConfig(ref), - openshiftcontrolplanev1.ImageConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_ImageConfig(ref), - openshiftcontrolplanev1.ImageImportControllerConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_ImageImportControllerConfig(ref), - openshiftcontrolplanev1.ImagePolicyConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_ImagePolicyConfig(ref), - openshiftcontrolplanev1.IngressControllerConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_IngressControllerConfig(ref), - openshiftcontrolplanev1.JenkinsPipelineConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_JenkinsPipelineConfig(ref), - openshiftcontrolplanev1.NetworkControllerConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_NetworkControllerConfig(ref), - openshiftcontrolplanev1.OpenShiftAPIServerConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_OpenShiftAPIServerConfig(ref), - openshiftcontrolplanev1.OpenShiftControllerManagerConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_OpenShiftControllerManagerConfig(ref), - openshiftcontrolplanev1.PerGroupOptions{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_PerGroupOptions(ref), - openshiftcontrolplanev1.ProjectConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_ProjectConfig(ref), - openshiftcontrolplanev1.RegistryLocation{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_RegistryLocation(ref), - openshiftcontrolplanev1.ResourceQuotaControllerConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_ResourceQuotaControllerConfig(ref), - openshiftcontrolplanev1.RoutingConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_RoutingConfig(ref), - openshiftcontrolplanev1.SecurityAllocator{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_SecurityAllocator(ref), - openshiftcontrolplanev1.ServiceAccountControllerConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_ServiceAccountControllerConfig(ref), - openshiftcontrolplanev1.ServiceServingCert{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_ServiceServingCert(ref), - openshiftcontrolplanev1.SourceStrategyDefaultsConfig{}.OpenAPIModelName(): schema_openshift_api_openshiftcontrolplane_v1_SourceStrategyDefaultsConfig(ref), - operatorv1.AWSCSIDriverConfigSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_AWSCSIDriverConfigSpec(ref), - operatorv1.AWSClassicLoadBalancerParameters{}.OpenAPIModelName(): schema_openshift_api_operator_v1_AWSClassicLoadBalancerParameters(ref), - operatorv1.AWSEFSVolumeMetrics{}.OpenAPIModelName(): schema_openshift_api_operator_v1_AWSEFSVolumeMetrics(ref), - operatorv1.AWSEFSVolumeMetricsRecursiveWalkConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_AWSEFSVolumeMetricsRecursiveWalkConfig(ref), - operatorv1.AWSLoadBalancerParameters{}.OpenAPIModelName(): schema_openshift_api_operator_v1_AWSLoadBalancerParameters(ref), - operatorv1.AWSNetworkLoadBalancerParameters{}.OpenAPIModelName(): schema_openshift_api_operator_v1_AWSNetworkLoadBalancerParameters(ref), - operatorv1.AWSSubnets{}.OpenAPIModelName(): schema_openshift_api_operator_v1_AWSSubnets(ref), - operatorv1.AccessLogging{}.OpenAPIModelName(): schema_openshift_api_operator_v1_AccessLogging(ref), - operatorv1.AddPage{}.OpenAPIModelName(): schema_openshift_api_operator_v1_AddPage(ref), - operatorv1.AdditionalNetworkDefinition{}.OpenAPIModelName(): schema_openshift_api_operator_v1_AdditionalNetworkDefinition(ref), - operatorv1.AdditionalRoutingCapabilities{}.OpenAPIModelName(): schema_openshift_api_operator_v1_AdditionalRoutingCapabilities(ref), - operatorv1.Authentication{}.OpenAPIModelName(): schema_openshift_api_operator_v1_Authentication(ref), - operatorv1.AuthenticationConfigMapReference{}.OpenAPIModelName(): schema_openshift_api_operator_v1_AuthenticationConfigMapReference(ref), - operatorv1.AuthenticationList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_AuthenticationList(ref), - operatorv1.AuthenticationProxyConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_AuthenticationProxyConfig(ref), - operatorv1.AuthenticationSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_AuthenticationSpec(ref), - operatorv1.AuthenticationStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_AuthenticationStatus(ref), - operatorv1.AzureCSIDriverConfigSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_AzureCSIDriverConfigSpec(ref), - operatorv1.AzureDiskEncryptionSet{}.OpenAPIModelName(): schema_openshift_api_operator_v1_AzureDiskEncryptionSet(ref), - operatorv1.BGPManagedConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_BGPManagedConfig(ref), - operatorv1.BootImageSkewEnforcementConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_BootImageSkewEnforcementConfig(ref), - operatorv1.BootImageSkewEnforcementStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_BootImageSkewEnforcementStatus(ref), - operatorv1.CSIDriverConfigSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_CSIDriverConfigSpec(ref), - operatorv1.CSISnapshotController{}.OpenAPIModelName(): schema_openshift_api_operator_v1_CSISnapshotController(ref), - operatorv1.CSISnapshotControllerList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_CSISnapshotControllerList(ref), - operatorv1.CSISnapshotControllerSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_CSISnapshotControllerSpec(ref), - operatorv1.CSISnapshotControllerStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_CSISnapshotControllerStatus(ref), - operatorv1.Capability{}.OpenAPIModelName(): schema_openshift_api_operator_v1_Capability(ref), - operatorv1.CapabilityVisibility{}.OpenAPIModelName(): schema_openshift_api_operator_v1_CapabilityVisibility(ref), - operatorv1.ClientTLS{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ClientTLS(ref), - operatorv1.CloudCredential{}.OpenAPIModelName(): schema_openshift_api_operator_v1_CloudCredential(ref), - operatorv1.CloudCredentialList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_CloudCredentialList(ref), - operatorv1.CloudCredentialSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_CloudCredentialSpec(ref), - operatorv1.CloudCredentialStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_CloudCredentialStatus(ref), - operatorv1.ClusterBootImageAutomatic{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ClusterBootImageAutomatic(ref), - operatorv1.ClusterBootImageManual{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ClusterBootImageManual(ref), - operatorv1.ClusterCSIDriver{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ClusterCSIDriver(ref), - operatorv1.ClusterCSIDriverList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ClusterCSIDriverList(ref), - operatorv1.ClusterCSIDriverSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ClusterCSIDriverSpec(ref), - operatorv1.ClusterCSIDriverStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ClusterCSIDriverStatus(ref), - operatorv1.ClusterNetworkEntry{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ClusterNetworkEntry(ref), - operatorv1.Config{}.OpenAPIModelName(): schema_openshift_api_operator_v1_Config(ref), - operatorv1.ConfigList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ConfigList(ref), - operatorv1.ConfigMapFileReference{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ConfigMapFileReference(ref), - operatorv1.ConfigSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ConfigSpec(ref), - operatorv1.ConfigStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ConfigStatus(ref), - operatorv1.Console{}.OpenAPIModelName(): schema_openshift_api_operator_v1_Console(ref), - operatorv1.ConsoleConfigRoute{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ConsoleConfigRoute(ref), - operatorv1.ConsoleCustomization{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ConsoleCustomization(ref), - operatorv1.ConsoleList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ConsoleList(ref), - operatorv1.ConsoleProviders{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ConsoleProviders(ref), - operatorv1.ConsoleSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ConsoleSpec(ref), - operatorv1.ConsoleStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ConsoleStatus(ref), - operatorv1.ContainerLoggingDestinationParameters{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ContainerLoggingDestinationParameters(ref), - operatorv1.CustomSecretRotation{}.OpenAPIModelName(): schema_openshift_api_operator_v1_CustomSecretRotation(ref), - operatorv1.DNS{}.OpenAPIModelName(): schema_openshift_api_operator_v1_DNS(ref), - operatorv1.DNSCache{}.OpenAPIModelName(): schema_openshift_api_operator_v1_DNSCache(ref), - operatorv1.DNSList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_DNSList(ref), - operatorv1.DNSNodePlacement{}.OpenAPIModelName(): schema_openshift_api_operator_v1_DNSNodePlacement(ref), - operatorv1.DNSOverTLSConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_DNSOverTLSConfig(ref), - operatorv1.DNSSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_DNSSpec(ref), - operatorv1.DNSStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_DNSStatus(ref), - operatorv1.DNSTransportConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_DNSTransportConfig(ref), - operatorv1.DefaultNetworkDefinition{}.OpenAPIModelName(): schema_openshift_api_operator_v1_DefaultNetworkDefinition(ref), - operatorv1.DeveloperConsoleCatalogCategory{}.OpenAPIModelName(): schema_openshift_api_operator_v1_DeveloperConsoleCatalogCategory(ref), - operatorv1.DeveloperConsoleCatalogCategoryMeta{}.OpenAPIModelName(): schema_openshift_api_operator_v1_DeveloperConsoleCatalogCategoryMeta(ref), - operatorv1.DeveloperConsoleCatalogCustomization{}.OpenAPIModelName(): schema_openshift_api_operator_v1_DeveloperConsoleCatalogCustomization(ref), - operatorv1.DeveloperConsoleCatalogTypes{}.OpenAPIModelName(): schema_openshift_api_operator_v1_DeveloperConsoleCatalogTypes(ref), - operatorv1.EgressIPConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_EgressIPConfig(ref), - operatorv1.EndpointPublishingStrategy{}.OpenAPIModelName(): schema_openshift_api_operator_v1_EndpointPublishingStrategy(ref), - operatorv1.Etcd{}.OpenAPIModelName(): schema_openshift_api_operator_v1_Etcd(ref), - operatorv1.EtcdList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_EtcdList(ref), - operatorv1.EtcdSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_EtcdSpec(ref), - operatorv1.EtcdStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_EtcdStatus(ref), - operatorv1.ExportNetworkFlows{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ExportNetworkFlows(ref), - operatorv1.FeaturesMigration{}.OpenAPIModelName(): schema_openshift_api_operator_v1_FeaturesMigration(ref), - operatorv1.FileReferenceSource{}.OpenAPIModelName(): schema_openshift_api_operator_v1_FileReferenceSource(ref), - operatorv1.ForwardPlugin{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ForwardPlugin(ref), - operatorv1.GCPCSIDriverConfigSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_GCPCSIDriverConfigSpec(ref), - operatorv1.GCPKMSKeyReference{}.OpenAPIModelName(): schema_openshift_api_operator_v1_GCPKMSKeyReference(ref), - operatorv1.GCPLoadBalancerParameters{}.OpenAPIModelName(): schema_openshift_api_operator_v1_GCPLoadBalancerParameters(ref), - operatorv1.GatewayConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_GatewayConfig(ref), - operatorv1.GatherStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_GatherStatus(ref), - operatorv1.GathererStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_GathererStatus(ref), - operatorv1.GenerationStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_GenerationStatus(ref), - operatorv1.HTTPCompressionPolicy{}.OpenAPIModelName(): schema_openshift_api_operator_v1_HTTPCompressionPolicy(ref), - operatorv1.HealthCheck{}.OpenAPIModelName(): schema_openshift_api_operator_v1_HealthCheck(ref), - operatorv1.HostNetworkStrategy{}.OpenAPIModelName(): schema_openshift_api_operator_v1_HostNetworkStrategy(ref), - operatorv1.HybridOverlayConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_HybridOverlayConfig(ref), - operatorv1.IBMCloudCSIDriverConfigSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IBMCloudCSIDriverConfigSpec(ref), - operatorv1.IBMLoadBalancerParameters{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IBMLoadBalancerParameters(ref), - operatorv1.IPAMConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IPAMConfig(ref), - operatorv1.IPFIXConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IPFIXConfig(ref), - operatorv1.IPsecConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IPsecConfig(ref), - operatorv1.IPsecFullModeConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IPsecFullModeConfig(ref), - operatorv1.IPv4GatewayConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IPv4GatewayConfig(ref), - operatorv1.IPv4OVNKubernetesConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IPv4OVNKubernetesConfig(ref), - operatorv1.IPv6GatewayConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IPv6GatewayConfig(ref), - operatorv1.IPv6OVNKubernetesConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IPv6OVNKubernetesConfig(ref), - operatorv1.Ingress{}.OpenAPIModelName(): schema_openshift_api_operator_v1_Ingress(ref), - operatorv1.IngressController{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IngressController(ref), - operatorv1.IngressControllerCaptureHTTPCookie{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IngressControllerCaptureHTTPCookie(ref), - operatorv1.IngressControllerCaptureHTTPCookieUnion{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IngressControllerCaptureHTTPCookieUnion(ref), - operatorv1.IngressControllerCaptureHTTPHeader{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IngressControllerCaptureHTTPHeader(ref), - operatorv1.IngressControllerCaptureHTTPHeaders{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IngressControllerCaptureHTTPHeaders(ref), - operatorv1.IngressControllerHTTPHeader{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IngressControllerHTTPHeader(ref), - operatorv1.IngressControllerHTTPHeaderActionUnion{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IngressControllerHTTPHeaderActionUnion(ref), - operatorv1.IngressControllerHTTPHeaderActions{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IngressControllerHTTPHeaderActions(ref), - operatorv1.IngressControllerHTTPHeaders{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IngressControllerHTTPHeaders(ref), - operatorv1.IngressControllerHTTPUniqueIdHeaderPolicy{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IngressControllerHTTPUniqueIdHeaderPolicy(ref), - operatorv1.IngressControllerList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IngressControllerList(ref), - operatorv1.IngressControllerLogging{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IngressControllerLogging(ref), - operatorv1.IngressControllerSetHTTPHeader{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IngressControllerSetHTTPHeader(ref), - operatorv1.IngressControllerSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IngressControllerSpec(ref), - operatorv1.IngressControllerStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IngressControllerStatus(ref), - operatorv1.IngressControllerTuningOptions{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IngressControllerTuningOptions(ref), - operatorv1.InsightsOperator{}.OpenAPIModelName(): schema_openshift_api_operator_v1_InsightsOperator(ref), - operatorv1.InsightsOperatorList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_InsightsOperatorList(ref), - operatorv1.InsightsOperatorSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_InsightsOperatorSpec(ref), - operatorv1.InsightsOperatorStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_InsightsOperatorStatus(ref), - operatorv1.InsightsReport{}.OpenAPIModelName(): schema_openshift_api_operator_v1_InsightsReport(ref), - operatorv1.IrreconcilableValidationOverrides{}.OpenAPIModelName(): schema_openshift_api_operator_v1_IrreconcilableValidationOverrides(ref), - operatorv1.KMSEncryptionStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KMSEncryptionStatus(ref), - operatorv1.KMSPluginHealthReport{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KMSPluginHealthReport(ref), - operatorv1.KMSPreflightCheck{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KMSPreflightCheck(ref), - operatorv1.KMSPreflightResult{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KMSPreflightResult(ref), - operatorv1.KubeAPIServer{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KubeAPIServer(ref), - operatorv1.KubeAPIServerList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KubeAPIServerList(ref), - operatorv1.KubeAPIServerSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KubeAPIServerSpec(ref), - operatorv1.KubeAPIServerStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KubeAPIServerStatus(ref), - operatorv1.KubeControllerManager{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KubeControllerManager(ref), - operatorv1.KubeControllerManagerList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KubeControllerManagerList(ref), - operatorv1.KubeControllerManagerSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KubeControllerManagerSpec(ref), - operatorv1.KubeControllerManagerStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KubeControllerManagerStatus(ref), - operatorv1.KubeScheduler{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KubeScheduler(ref), - operatorv1.KubeSchedulerList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KubeSchedulerList(ref), - operatorv1.KubeSchedulerSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KubeSchedulerSpec(ref), - operatorv1.KubeSchedulerStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KubeSchedulerStatus(ref), - operatorv1.KubeStorageVersionMigrator{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KubeStorageVersionMigrator(ref), - operatorv1.KubeStorageVersionMigratorList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KubeStorageVersionMigratorList(ref), - operatorv1.KubeStorageVersionMigratorSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KubeStorageVersionMigratorSpec(ref), - operatorv1.KubeStorageVersionMigratorStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_KubeStorageVersionMigratorStatus(ref), - operatorv1.LoadBalancerStrategy{}.OpenAPIModelName(): schema_openshift_api_operator_v1_LoadBalancerStrategy(ref), - operatorv1.LoggingDestination{}.OpenAPIModelName(): schema_openshift_api_operator_v1_LoggingDestination(ref), - operatorv1.Logo{}.OpenAPIModelName(): schema_openshift_api_operator_v1_Logo(ref), - operatorv1.MTUMigration{}.OpenAPIModelName(): schema_openshift_api_operator_v1_MTUMigration(ref), - operatorv1.MTUMigrationValues{}.OpenAPIModelName(): schema_openshift_api_operator_v1_MTUMigrationValues(ref), - operatorv1.MachineConfiguration{}.OpenAPIModelName(): schema_openshift_api_operator_v1_MachineConfiguration(ref), - operatorv1.MachineConfigurationList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_MachineConfigurationList(ref), - operatorv1.MachineConfigurationSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_MachineConfigurationSpec(ref), - operatorv1.MachineConfigurationStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_MachineConfigurationStatus(ref), - operatorv1.MachineManager{}.OpenAPIModelName(): schema_openshift_api_operator_v1_MachineManager(ref), - operatorv1.MachineManagerSelector{}.OpenAPIModelName(): schema_openshift_api_operator_v1_MachineManagerSelector(ref), - operatorv1.ManagedBootImages{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ManagedBootImages(ref), - operatorv1.ManagedTokenRequests{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ManagedTokenRequests(ref), - operatorv1.MyOperatorResource{}.OpenAPIModelName(): schema_openshift_api_operator_v1_MyOperatorResource(ref), - operatorv1.MyOperatorResourceSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_MyOperatorResourceSpec(ref), - operatorv1.MyOperatorResourceStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_MyOperatorResourceStatus(ref), - operatorv1.NetFlowConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NetFlowConfig(ref), - operatorv1.Network{}.OpenAPIModelName(): schema_openshift_api_operator_v1_Network(ref), - operatorv1.NetworkList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NetworkList(ref), - operatorv1.NetworkMigration{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NetworkMigration(ref), - operatorv1.NetworkSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NetworkSpec(ref), - operatorv1.NetworkStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NetworkStatus(ref), - operatorv1.NoOverlayConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NoOverlayConfig(ref), - operatorv1.NodeDisruptionPolicyClusterStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NodeDisruptionPolicyClusterStatus(ref), - operatorv1.NodeDisruptionPolicyConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NodeDisruptionPolicyConfig(ref), - operatorv1.NodeDisruptionPolicySpecAction{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NodeDisruptionPolicySpecAction(ref), - operatorv1.NodeDisruptionPolicySpecFile{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NodeDisruptionPolicySpecFile(ref), - operatorv1.NodeDisruptionPolicySpecSSHKey{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NodeDisruptionPolicySpecSSHKey(ref), - operatorv1.NodeDisruptionPolicySpecUnit{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NodeDisruptionPolicySpecUnit(ref), - operatorv1.NodeDisruptionPolicyStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NodeDisruptionPolicyStatus(ref), - operatorv1.NodeDisruptionPolicyStatusAction{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NodeDisruptionPolicyStatusAction(ref), - operatorv1.NodeDisruptionPolicyStatusFile{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NodeDisruptionPolicyStatusFile(ref), - operatorv1.NodeDisruptionPolicyStatusSSHKey{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NodeDisruptionPolicyStatusSSHKey(ref), - operatorv1.NodeDisruptionPolicyStatusUnit{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NodeDisruptionPolicyStatusUnit(ref), - operatorv1.NodePlacement{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NodePlacement(ref), - operatorv1.NodePortStrategy{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NodePortStrategy(ref), - operatorv1.NodeStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_NodeStatus(ref), - operatorv1.OAuthAPIServerStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OAuthAPIServerStatus(ref), - operatorv1.OLM{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OLM(ref), - operatorv1.OLMList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OLMList(ref), - operatorv1.OLMSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OLMSpec(ref), - operatorv1.OLMStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OLMStatus(ref), - operatorv1.OVNKubernetesConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OVNKubernetesConfig(ref), - operatorv1.OpenShiftAPIServer{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OpenShiftAPIServer(ref), - operatorv1.OpenShiftAPIServerList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OpenShiftAPIServerList(ref), - operatorv1.OpenShiftAPIServerSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OpenShiftAPIServerSpec(ref), - operatorv1.OpenShiftAPIServerStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OpenShiftAPIServerStatus(ref), - operatorv1.OpenShiftControllerManager{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OpenShiftControllerManager(ref), - operatorv1.OpenShiftControllerManagerList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OpenShiftControllerManagerList(ref), - operatorv1.OpenShiftControllerManagerSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OpenShiftControllerManagerSpec(ref), - operatorv1.OpenShiftControllerManagerStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OpenShiftControllerManagerStatus(ref), - operatorv1.OpenShiftSDNConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OpenShiftSDNConfig(ref), - operatorv1.OpenStackLoadBalancerParameters{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OpenStackLoadBalancerParameters(ref), - operatorv1.OperatorCondition{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OperatorCondition(ref), - operatorv1.OperatorSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OperatorSpec(ref), - operatorv1.OperatorStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_OperatorStatus(ref), - operatorv1.PartialSelector{}.OpenAPIModelName(): schema_openshift_api_operator_v1_PartialSelector(ref), - operatorv1.Perspective{}.OpenAPIModelName(): schema_openshift_api_operator_v1_Perspective(ref), - operatorv1.PerspectiveVisibility{}.OpenAPIModelName(): schema_openshift_api_operator_v1_PerspectiveVisibility(ref), - operatorv1.PinnedResourceReference{}.OpenAPIModelName(): schema_openshift_api_operator_v1_PinnedResourceReference(ref), - operatorv1.PolicyAuditConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_PolicyAuditConfig(ref), - operatorv1.PrivateStrategy{}.OpenAPIModelName(): schema_openshift_api_operator_v1_PrivateStrategy(ref), - operatorv1.ProjectAccess{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ProjectAccess(ref), - operatorv1.ProviderLoadBalancerParameters{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ProviderLoadBalancerParameters(ref), - operatorv1.ProxyConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ProxyConfig(ref), - operatorv1.QuickStarts{}.OpenAPIModelName(): schema_openshift_api_operator_v1_QuickStarts(ref), - operatorv1.ReloadService{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ReloadService(ref), - operatorv1.ResourceAttributesAccessReview{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ResourceAttributesAccessReview(ref), - operatorv1.RestartService{}.OpenAPIModelName(): schema_openshift_api_operator_v1_RestartService(ref), - operatorv1.RouteAdmissionPolicy{}.OpenAPIModelName(): schema_openshift_api_operator_v1_RouteAdmissionPolicy(ref), - operatorv1.SFlowConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_SFlowConfig(ref), - operatorv1.SecretsStoreCSIDriverConfigSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_SecretsStoreCSIDriverConfigSpec(ref), - operatorv1.SecretsStoreSecretRotation{}.OpenAPIModelName(): schema_openshift_api_operator_v1_SecretsStoreSecretRotation(ref), - operatorv1.SecretsStoreTokenRequest{}.OpenAPIModelName(): schema_openshift_api_operator_v1_SecretsStoreTokenRequest(ref), - operatorv1.SecretsStoreTokenRequests{}.OpenAPIModelName(): schema_openshift_api_operator_v1_SecretsStoreTokenRequests(ref), - operatorv1.Server{}.OpenAPIModelName(): schema_openshift_api_operator_v1_Server(ref), - operatorv1.ServiceAccountIssuerStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ServiceAccountIssuerStatus(ref), - operatorv1.ServiceCA{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ServiceCA(ref), - operatorv1.ServiceCAList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ServiceCAList(ref), - operatorv1.ServiceCASpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ServiceCASpec(ref), - operatorv1.ServiceCAStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ServiceCAStatus(ref), - operatorv1.ServiceCatalogAPIServer{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ServiceCatalogAPIServer(ref), - operatorv1.ServiceCatalogAPIServerList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ServiceCatalogAPIServerList(ref), - operatorv1.ServiceCatalogAPIServerSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ServiceCatalogAPIServerSpec(ref), - operatorv1.ServiceCatalogAPIServerStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ServiceCatalogAPIServerStatus(ref), - operatorv1.ServiceCatalogControllerManager{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ServiceCatalogControllerManager(ref), - operatorv1.ServiceCatalogControllerManagerList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ServiceCatalogControllerManagerList(ref), - operatorv1.ServiceCatalogControllerManagerSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ServiceCatalogControllerManagerSpec(ref), - operatorv1.ServiceCatalogControllerManagerStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_ServiceCatalogControllerManagerStatus(ref), - operatorv1.SimpleMacvlanConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_SimpleMacvlanConfig(ref), - operatorv1.StaticIPAMAddresses{}.OpenAPIModelName(): schema_openshift_api_operator_v1_StaticIPAMAddresses(ref), - operatorv1.StaticIPAMConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1_StaticIPAMConfig(ref), - operatorv1.StaticIPAMDNS{}.OpenAPIModelName(): schema_openshift_api_operator_v1_StaticIPAMDNS(ref), - operatorv1.StaticIPAMRoutes{}.OpenAPIModelName(): schema_openshift_api_operator_v1_StaticIPAMRoutes(ref), - operatorv1.StaticPodOperatorSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_StaticPodOperatorSpec(ref), - operatorv1.StaticPodOperatorStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_StaticPodOperatorStatus(ref), - operatorv1.StatuspageProvider{}.OpenAPIModelName(): schema_openshift_api_operator_v1_StatuspageProvider(ref), - operatorv1.Storage{}.OpenAPIModelName(): schema_openshift_api_operator_v1_Storage(ref), - operatorv1.StorageList{}.OpenAPIModelName(): schema_openshift_api_operator_v1_StorageList(ref), - operatorv1.StorageSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_StorageSpec(ref), - operatorv1.StorageStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1_StorageStatus(ref), - operatorv1.SyslogLoggingDestinationParameters{}.OpenAPIModelName(): schema_openshift_api_operator_v1_SyslogLoggingDestinationParameters(ref), - operatorv1.Theme{}.OpenAPIModelName(): schema_openshift_api_operator_v1_Theme(ref), - operatorv1.Upstream{}.OpenAPIModelName(): schema_openshift_api_operator_v1_Upstream(ref), - operatorv1.UpstreamResolvers{}.OpenAPIModelName(): schema_openshift_api_operator_v1_UpstreamResolvers(ref), - operatorv1.VSphereCSIDriverConfigSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1_VSphereCSIDriverConfigSpec(ref), - operatorv1alpha1.BackupJobReference{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_BackupJobReference(ref), - operatorv1alpha1.ClusterAPI{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_ClusterAPI(ref), - operatorv1alpha1.ClusterAPIInstallerComponent{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_ClusterAPIInstallerComponent(ref), - operatorv1alpha1.ClusterAPIInstallerComponentImage{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_ClusterAPIInstallerComponentImage(ref), - operatorv1alpha1.ClusterAPIInstallerComponentSource{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_ClusterAPIInstallerComponentSource(ref), - operatorv1alpha1.ClusterAPIInstallerRevision{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_ClusterAPIInstallerRevision(ref), - operatorv1alpha1.ClusterAPIInstallerRevisionManifestSubstitution{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_ClusterAPIInstallerRevisionManifestSubstitution(ref), - operatorv1alpha1.ClusterAPIList{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_ClusterAPIList(ref), - operatorv1alpha1.ClusterAPISpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_ClusterAPISpec(ref), - operatorv1alpha1.ClusterAPIStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_ClusterAPIStatus(ref), - operatorv1alpha1.ClusterVersionOperator{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_ClusterVersionOperator(ref), - operatorv1alpha1.ClusterVersionOperatorList{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_ClusterVersionOperatorList(ref), - operatorv1alpha1.ClusterVersionOperatorSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_ClusterVersionOperatorSpec(ref), - operatorv1alpha1.ClusterVersionOperatorStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_ClusterVersionOperatorStatus(ref), - operatorv1alpha1.DelegatedAuthentication{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_DelegatedAuthentication(ref), - operatorv1alpha1.DelegatedAuthorization{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_DelegatedAuthorization(ref), - operatorv1alpha1.EtcdBackup{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_EtcdBackup(ref), - operatorv1alpha1.EtcdBackupList{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_EtcdBackupList(ref), - operatorv1alpha1.EtcdBackupSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_EtcdBackupSpec(ref), - operatorv1alpha1.EtcdBackupStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_EtcdBackupStatus(ref), - operatorv1alpha1.GatewayAPIIngressConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_GatewayAPIIngressConfig(ref), - operatorv1alpha1.GenerationHistory{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_GenerationHistory(ref), - operatorv1alpha1.GenericOperatorConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_GenericOperatorConfig(ref), - operatorv1alpha1.ImageContentSourcePolicy{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_ImageContentSourcePolicy(ref), - operatorv1alpha1.ImageContentSourcePolicyList{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_ImageContentSourcePolicyList(ref), - operatorv1alpha1.ImageContentSourcePolicySpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_ImageContentSourcePolicySpec(ref), - operatorv1alpha1.Ingress{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_Ingress(ref), - operatorv1alpha1.IngressList{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_IngressList(ref), - operatorv1alpha1.IngressSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_IngressSpec(ref), - operatorv1alpha1.IngressStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_IngressStatus(ref), - operatorv1alpha1.LoggingConfig{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_LoggingConfig(ref), - operatorv1alpha1.NodeStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_NodeStatus(ref), - operatorv1alpha1.OLM{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_OLM(ref), - operatorv1alpha1.OLMList{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_OLMList(ref), - operatorv1alpha1.OLMSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_OLMSpec(ref), - operatorv1alpha1.OLMStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_OLMStatus(ref), - operatorv1alpha1.OperatorCondition{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_OperatorCondition(ref), - operatorv1alpha1.OperatorSpec{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_OperatorSpec(ref), - operatorv1alpha1.OperatorStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_OperatorStatus(ref), - operatorv1alpha1.RepositoryDigestMirrors{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_RepositoryDigestMirrors(ref), - operatorv1alpha1.StaticPodOperatorStatus{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_StaticPodOperatorStatus(ref), - operatorv1alpha1.VersionAvailability{}.OpenAPIModelName(): schema_openshift_api_operator_v1alpha1_VersionAvailability(ref), - operatorcontrolplanev1alpha1.LogEntry{}.OpenAPIModelName(): schema_openshift_api_operatorcontrolplane_v1alpha1_LogEntry(ref), - operatorcontrolplanev1alpha1.OutageEntry{}.OpenAPIModelName(): schema_openshift_api_operatorcontrolplane_v1alpha1_OutageEntry(ref), - operatorcontrolplanev1alpha1.PodNetworkConnectivityCheck{}.OpenAPIModelName(): schema_openshift_api_operatorcontrolplane_v1alpha1_PodNetworkConnectivityCheck(ref), - operatorcontrolplanev1alpha1.PodNetworkConnectivityCheckCondition{}.OpenAPIModelName(): schema_openshift_api_operatorcontrolplane_v1alpha1_PodNetworkConnectivityCheckCondition(ref), - operatorcontrolplanev1alpha1.PodNetworkConnectivityCheckList{}.OpenAPIModelName(): schema_openshift_api_operatorcontrolplane_v1alpha1_PodNetworkConnectivityCheckList(ref), - operatorcontrolplanev1alpha1.PodNetworkConnectivityCheckSpec{}.OpenAPIModelName(): schema_openshift_api_operatorcontrolplane_v1alpha1_PodNetworkConnectivityCheckSpec(ref), - operatorcontrolplanev1alpha1.PodNetworkConnectivityCheckStatus{}.OpenAPIModelName(): schema_openshift_api_operatorcontrolplane_v1alpha1_PodNetworkConnectivityCheckStatus(ref), - operatoringressv1.DNSRecord{}.OpenAPIModelName(): schema_openshift_api_operatoringress_v1_DNSRecord(ref), - operatoringressv1.DNSRecordList{}.OpenAPIModelName(): schema_openshift_api_operatoringress_v1_DNSRecordList(ref), - operatoringressv1.DNSRecordSpec{}.OpenAPIModelName(): schema_openshift_api_operatoringress_v1_DNSRecordSpec(ref), - operatoringressv1.DNSRecordStatus{}.OpenAPIModelName(): schema_openshift_api_operatoringress_v1_DNSRecordStatus(ref), - operatoringressv1.DNSZoneCondition{}.OpenAPIModelName(): schema_openshift_api_operatoringress_v1_DNSZoneCondition(ref), - operatoringressv1.DNSZoneStatus{}.OpenAPIModelName(): schema_openshift_api_operatoringress_v1_DNSZoneStatus(ref), - osinv1.AllowAllPasswordIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_osin_v1_AllowAllPasswordIdentityProvider(ref), - osinv1.BasicAuthPasswordIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_osin_v1_BasicAuthPasswordIdentityProvider(ref), - osinv1.DenyAllPasswordIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_osin_v1_DenyAllPasswordIdentityProvider(ref), - osinv1.GitHubIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_osin_v1_GitHubIdentityProvider(ref), - osinv1.GitLabIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_osin_v1_GitLabIdentityProvider(ref), - osinv1.GoogleIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_osin_v1_GoogleIdentityProvider(ref), - osinv1.GrantConfig{}.OpenAPIModelName(): schema_openshift_api_osin_v1_GrantConfig(ref), - osinv1.HTPasswdPasswordIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_osin_v1_HTPasswdPasswordIdentityProvider(ref), - osinv1.IdentityProvider{}.OpenAPIModelName(): schema_openshift_api_osin_v1_IdentityProvider(ref), - osinv1.KeystonePasswordIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_osin_v1_KeystonePasswordIdentityProvider(ref), - osinv1.LDAPAttributeMapping{}.OpenAPIModelName(): schema_openshift_api_osin_v1_LDAPAttributeMapping(ref), - osinv1.LDAPPasswordIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_osin_v1_LDAPPasswordIdentityProvider(ref), - osinv1.OAuthConfig{}.OpenAPIModelName(): schema_openshift_api_osin_v1_OAuthConfig(ref), - osinv1.OAuthTemplates{}.OpenAPIModelName(): schema_openshift_api_osin_v1_OAuthTemplates(ref), - osinv1.OpenIDClaims{}.OpenAPIModelName(): schema_openshift_api_osin_v1_OpenIDClaims(ref), - osinv1.OpenIDIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_osin_v1_OpenIDIdentityProvider(ref), - osinv1.OpenIDURLs{}.OpenAPIModelName(): schema_openshift_api_osin_v1_OpenIDURLs(ref), - osinv1.OsinServerConfig{}.OpenAPIModelName(): schema_openshift_api_osin_v1_OsinServerConfig(ref), - osinv1.RequestHeaderIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_osin_v1_RequestHeaderIdentityProvider(ref), - osinv1.SessionConfig{}.OpenAPIModelName(): schema_openshift_api_osin_v1_SessionConfig(ref), - osinv1.SessionSecret{}.OpenAPIModelName(): schema_openshift_api_osin_v1_SessionSecret(ref), - osinv1.SessionSecrets{}.OpenAPIModelName(): schema_openshift_api_osin_v1_SessionSecrets(ref), - osinv1.TokenConfig{}.OpenAPIModelName(): schema_openshift_api_osin_v1_TokenConfig(ref), - projectv1.Project{}.OpenAPIModelName(): schema_openshift_api_project_v1_Project(ref), - projectv1.ProjectList{}.OpenAPIModelName(): schema_openshift_api_project_v1_ProjectList(ref), - projectv1.ProjectRequest{}.OpenAPIModelName(): schema_openshift_api_project_v1_ProjectRequest(ref), - projectv1.ProjectSpec{}.OpenAPIModelName(): schema_openshift_api_project_v1_ProjectSpec(ref), - projectv1.ProjectStatus{}.OpenAPIModelName(): schema_openshift_api_project_v1_ProjectStatus(ref), - quotav1.AppliedClusterResourceQuota{}.OpenAPIModelName(): schema_openshift_api_quota_v1_AppliedClusterResourceQuota(ref), - quotav1.AppliedClusterResourceQuotaList{}.OpenAPIModelName(): schema_openshift_api_quota_v1_AppliedClusterResourceQuotaList(ref), - quotav1.ClusterResourceQuota{}.OpenAPIModelName(): schema_openshift_api_quota_v1_ClusterResourceQuota(ref), - quotav1.ClusterResourceQuotaList{}.OpenAPIModelName(): schema_openshift_api_quota_v1_ClusterResourceQuotaList(ref), - quotav1.ClusterResourceQuotaSelector{}.OpenAPIModelName(): schema_openshift_api_quota_v1_ClusterResourceQuotaSelector(ref), - quotav1.ClusterResourceQuotaSpec{}.OpenAPIModelName(): schema_openshift_api_quota_v1_ClusterResourceQuotaSpec(ref), - quotav1.ClusterResourceQuotaStatus{}.OpenAPIModelName(): schema_openshift_api_quota_v1_ClusterResourceQuotaStatus(ref), - quotav1.ResourceQuotaStatusByNamespace{}.OpenAPIModelName(): schema_openshift_api_quota_v1_ResourceQuotaStatusByNamespace(ref), - routev1.LocalObjectReference{}.OpenAPIModelName(): schema_openshift_api_route_v1_LocalObjectReference(ref), - routev1.Route{}.OpenAPIModelName(): schema_openshift_api_route_v1_Route(ref), - routev1.RouteHTTPHeader{}.OpenAPIModelName(): schema_openshift_api_route_v1_RouteHTTPHeader(ref), - routev1.RouteHTTPHeaderActionUnion{}.OpenAPIModelName(): schema_openshift_api_route_v1_RouteHTTPHeaderActionUnion(ref), - routev1.RouteHTTPHeaderActions{}.OpenAPIModelName(): schema_openshift_api_route_v1_RouteHTTPHeaderActions(ref), - routev1.RouteHTTPHeaders{}.OpenAPIModelName(): schema_openshift_api_route_v1_RouteHTTPHeaders(ref), - routev1.RouteIngress{}.OpenAPIModelName(): schema_openshift_api_route_v1_RouteIngress(ref), - routev1.RouteIngressCondition{}.OpenAPIModelName(): schema_openshift_api_route_v1_RouteIngressCondition(ref), - routev1.RouteList{}.OpenAPIModelName(): schema_openshift_api_route_v1_RouteList(ref), - routev1.RoutePort{}.OpenAPIModelName(): schema_openshift_api_route_v1_RoutePort(ref), - routev1.RouteSetHTTPHeader{}.OpenAPIModelName(): schema_openshift_api_route_v1_RouteSetHTTPHeader(ref), - routev1.RouteSpec{}.OpenAPIModelName(): schema_openshift_api_route_v1_RouteSpec(ref), - routev1.RouteStatus{}.OpenAPIModelName(): schema_openshift_api_route_v1_RouteStatus(ref), - routev1.RouteTargetReference{}.OpenAPIModelName(): schema_openshift_api_route_v1_RouteTargetReference(ref), - routev1.RouterShard{}.OpenAPIModelName(): schema_openshift_api_route_v1_RouterShard(ref), - routev1.TLSConfig{}.OpenAPIModelName(): schema_openshift_api_route_v1_TLSConfig(ref), - samplesv1.Config{}.OpenAPIModelName(): schema_openshift_api_samples_v1_Config(ref), - samplesv1.ConfigCondition{}.OpenAPIModelName(): schema_openshift_api_samples_v1_ConfigCondition(ref), - samplesv1.ConfigList{}.OpenAPIModelName(): schema_openshift_api_samples_v1_ConfigList(ref), - samplesv1.ConfigSpec{}.OpenAPIModelName(): schema_openshift_api_samples_v1_ConfigSpec(ref), - samplesv1.ConfigStatus{}.OpenAPIModelName(): schema_openshift_api_samples_v1_ConfigStatus(ref), - securityv1.AllowedFlexVolume{}.OpenAPIModelName(): schema_openshift_api_security_v1_AllowedFlexVolume(ref), - securityv1.FSGroupStrategyOptions{}.OpenAPIModelName(): schema_openshift_api_security_v1_FSGroupStrategyOptions(ref), - securityv1.IDRange{}.OpenAPIModelName(): schema_openshift_api_security_v1_IDRange(ref), - securityv1.PodSecurityPolicyReview{}.OpenAPIModelName(): schema_openshift_api_security_v1_PodSecurityPolicyReview(ref), - securityv1.PodSecurityPolicyReviewSpec{}.OpenAPIModelName(): schema_openshift_api_security_v1_PodSecurityPolicyReviewSpec(ref), - securityv1.PodSecurityPolicyReviewStatus{}.OpenAPIModelName(): schema_openshift_api_security_v1_PodSecurityPolicyReviewStatus(ref), - securityv1.PodSecurityPolicySelfSubjectReview{}.OpenAPIModelName(): schema_openshift_api_security_v1_PodSecurityPolicySelfSubjectReview(ref), - securityv1.PodSecurityPolicySelfSubjectReviewSpec{}.OpenAPIModelName(): schema_openshift_api_security_v1_PodSecurityPolicySelfSubjectReviewSpec(ref), - securityv1.PodSecurityPolicySubjectReview{}.OpenAPIModelName(): schema_openshift_api_security_v1_PodSecurityPolicySubjectReview(ref), - securityv1.PodSecurityPolicySubjectReviewSpec{}.OpenAPIModelName(): schema_openshift_api_security_v1_PodSecurityPolicySubjectReviewSpec(ref), - securityv1.PodSecurityPolicySubjectReviewStatus{}.OpenAPIModelName(): schema_openshift_api_security_v1_PodSecurityPolicySubjectReviewStatus(ref), - securityv1.RangeAllocation{}.OpenAPIModelName(): schema_openshift_api_security_v1_RangeAllocation(ref), - securityv1.RangeAllocationList{}.OpenAPIModelName(): schema_openshift_api_security_v1_RangeAllocationList(ref), - securityv1.RunAsUserStrategyOptions{}.OpenAPIModelName(): schema_openshift_api_security_v1_RunAsUserStrategyOptions(ref), - securityv1.SELinuxContextStrategyOptions{}.OpenAPIModelName(): schema_openshift_api_security_v1_SELinuxContextStrategyOptions(ref), - securityv1.SecurityContextConstraints{}.OpenAPIModelName(): schema_openshift_api_security_v1_SecurityContextConstraints(ref), - securityv1.SecurityContextConstraintsList{}.OpenAPIModelName(): schema_openshift_api_security_v1_SecurityContextConstraintsList(ref), - securityv1.ServiceAccountPodSecurityPolicyReviewStatus{}.OpenAPIModelName(): schema_openshift_api_security_v1_ServiceAccountPodSecurityPolicyReviewStatus(ref), - securityv1.SupplementalGroupsStrategyOptions{}.OpenAPIModelName(): schema_openshift_api_security_v1_SupplementalGroupsStrategyOptions(ref), - securityinternalv1.RangeAllocation{}.OpenAPIModelName(): schema_openshift_api_securityinternal_v1_RangeAllocation(ref), - securityinternalv1.RangeAllocationList{}.OpenAPIModelName(): schema_openshift_api_securityinternal_v1_RangeAllocationList(ref), - servicecertsignerv1alpha1.ServiceCertSignerOperatorConfig{}.OpenAPIModelName(): schema_openshift_api_servicecertsigner_v1alpha1_ServiceCertSignerOperatorConfig(ref), - servicecertsignerv1alpha1.ServiceCertSignerOperatorConfigList{}.OpenAPIModelName(): schema_openshift_api_servicecertsigner_v1alpha1_ServiceCertSignerOperatorConfigList(ref), - servicecertsignerv1alpha1.ServiceCertSignerOperatorConfigSpec{}.OpenAPIModelName(): schema_openshift_api_servicecertsigner_v1alpha1_ServiceCertSignerOperatorConfigSpec(ref), - servicecertsignerv1alpha1.ServiceCertSignerOperatorConfigStatus{}.OpenAPIModelName(): schema_openshift_api_servicecertsigner_v1alpha1_ServiceCertSignerOperatorConfigStatus(ref), - sharedresourcev1alpha1.SharedConfigMap{}.OpenAPIModelName(): schema_openshift_api_sharedresource_v1alpha1_SharedConfigMap(ref), - sharedresourcev1alpha1.SharedConfigMapList{}.OpenAPIModelName(): schema_openshift_api_sharedresource_v1alpha1_SharedConfigMapList(ref), - sharedresourcev1alpha1.SharedConfigMapReference{}.OpenAPIModelName(): schema_openshift_api_sharedresource_v1alpha1_SharedConfigMapReference(ref), - sharedresourcev1alpha1.SharedConfigMapSpec{}.OpenAPIModelName(): schema_openshift_api_sharedresource_v1alpha1_SharedConfigMapSpec(ref), - sharedresourcev1alpha1.SharedConfigMapStatus{}.OpenAPIModelName(): schema_openshift_api_sharedresource_v1alpha1_SharedConfigMapStatus(ref), - sharedresourcev1alpha1.SharedSecret{}.OpenAPIModelName(): schema_openshift_api_sharedresource_v1alpha1_SharedSecret(ref), - sharedresourcev1alpha1.SharedSecretList{}.OpenAPIModelName(): schema_openshift_api_sharedresource_v1alpha1_SharedSecretList(ref), - sharedresourcev1alpha1.SharedSecretReference{}.OpenAPIModelName(): schema_openshift_api_sharedresource_v1alpha1_SharedSecretReference(ref), - sharedresourcev1alpha1.SharedSecretSpec{}.OpenAPIModelName(): schema_openshift_api_sharedresource_v1alpha1_SharedSecretSpec(ref), - sharedresourcev1alpha1.SharedSecretStatus{}.OpenAPIModelName(): schema_openshift_api_sharedresource_v1alpha1_SharedSecretStatus(ref), - templatev1.BrokerTemplateInstance{}.OpenAPIModelName(): schema_openshift_api_template_v1_BrokerTemplateInstance(ref), - templatev1.BrokerTemplateInstanceList{}.OpenAPIModelName(): schema_openshift_api_template_v1_BrokerTemplateInstanceList(ref), - templatev1.BrokerTemplateInstanceSpec{}.OpenAPIModelName(): schema_openshift_api_template_v1_BrokerTemplateInstanceSpec(ref), - templatev1.Parameter{}.OpenAPIModelName(): schema_openshift_api_template_v1_Parameter(ref), - templatev1.Template{}.OpenAPIModelName(): schema_openshift_api_template_v1_Template(ref), - templatev1.TemplateInstance{}.OpenAPIModelName(): schema_openshift_api_template_v1_TemplateInstance(ref), - templatev1.TemplateInstanceCondition{}.OpenAPIModelName(): schema_openshift_api_template_v1_TemplateInstanceCondition(ref), - templatev1.TemplateInstanceList{}.OpenAPIModelName(): schema_openshift_api_template_v1_TemplateInstanceList(ref), - templatev1.TemplateInstanceObject{}.OpenAPIModelName(): schema_openshift_api_template_v1_TemplateInstanceObject(ref), - templatev1.TemplateInstanceRequester{}.OpenAPIModelName(): schema_openshift_api_template_v1_TemplateInstanceRequester(ref), - templatev1.TemplateInstanceSpec{}.OpenAPIModelName(): schema_openshift_api_template_v1_TemplateInstanceSpec(ref), - templatev1.TemplateInstanceStatus{}.OpenAPIModelName(): schema_openshift_api_template_v1_TemplateInstanceStatus(ref), - templatev1.TemplateList{}.OpenAPIModelName(): schema_openshift_api_template_v1_TemplateList(ref), - userv1.Group{}.OpenAPIModelName(): schema_openshift_api_user_v1_Group(ref), - userv1.GroupList{}.OpenAPIModelName(): schema_openshift_api_user_v1_GroupList(ref), - userv1.Identity{}.OpenAPIModelName(): schema_openshift_api_user_v1_Identity(ref), - userv1.IdentityList{}.OpenAPIModelName(): schema_openshift_api_user_v1_IdentityList(ref), - userv1.User{}.OpenAPIModelName(): schema_openshift_api_user_v1_User(ref), - userv1.UserIdentityMapping{}.OpenAPIModelName(): schema_openshift_api_user_v1_UserIdentityMapping(ref), - userv1.UserList{}.OpenAPIModelName(): schema_openshift_api_user_v1_UserList(ref), - admissionregistrationv1.ApplyConfiguration{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ApplyConfiguration(ref), - admissionregistrationv1.AuditAnnotation{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_AuditAnnotation(ref), - admissionregistrationv1.ExpressionWarning{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ExpressionWarning(ref), - admissionregistrationv1.JSONPatch{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_JSONPatch(ref), - admissionregistrationv1.MatchCondition{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MatchCondition(ref), - admissionregistrationv1.MatchResources{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MatchResources(ref), - admissionregistrationv1.MutatingAdmissionPolicy{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MutatingAdmissionPolicy(ref), - admissionregistrationv1.MutatingAdmissionPolicyBinding{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MutatingAdmissionPolicyBinding(ref), - admissionregistrationv1.MutatingAdmissionPolicyBindingList{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MutatingAdmissionPolicyBindingList(ref), - admissionregistrationv1.MutatingAdmissionPolicyBindingSpec{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MutatingAdmissionPolicyBindingSpec(ref), - admissionregistrationv1.MutatingAdmissionPolicyList{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MutatingAdmissionPolicyList(ref), - admissionregistrationv1.MutatingAdmissionPolicySpec{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MutatingAdmissionPolicySpec(ref), - admissionregistrationv1.MutatingWebhook{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MutatingWebhook(ref), - admissionregistrationv1.MutatingWebhookConfiguration{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MutatingWebhookConfiguration(ref), - admissionregistrationv1.MutatingWebhookConfigurationList{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MutatingWebhookConfigurationList(ref), - admissionregistrationv1.Mutation{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_Mutation(ref), - admissionregistrationv1.NamedRuleWithOperations{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_NamedRuleWithOperations(ref), - admissionregistrationv1.ParamKind{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ParamKind(ref), - admissionregistrationv1.ParamRef{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ParamRef(ref), - admissionregistrationv1.Rule{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_Rule(ref), - admissionregistrationv1.RuleWithOperations{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_RuleWithOperations(ref), - admissionregistrationv1.ServiceReference{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ServiceReference(ref), - admissionregistrationv1.TypeChecking{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_TypeChecking(ref), - admissionregistrationv1.ValidatingAdmissionPolicy{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingAdmissionPolicy(ref), - admissionregistrationv1.ValidatingAdmissionPolicyBinding{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingAdmissionPolicyBinding(ref), - admissionregistrationv1.ValidatingAdmissionPolicyBindingList{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingAdmissionPolicyBindingList(ref), - admissionregistrationv1.ValidatingAdmissionPolicyBindingSpec{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingAdmissionPolicyBindingSpec(ref), - admissionregistrationv1.ValidatingAdmissionPolicyList{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingAdmissionPolicyList(ref), - admissionregistrationv1.ValidatingAdmissionPolicySpec{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingAdmissionPolicySpec(ref), - admissionregistrationv1.ValidatingAdmissionPolicyStatus{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingAdmissionPolicyStatus(ref), - admissionregistrationv1.ValidatingWebhook{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingWebhook(ref), - admissionregistrationv1.ValidatingWebhookConfiguration{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingWebhookConfiguration(ref), - admissionregistrationv1.ValidatingWebhookConfigurationList{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingWebhookConfigurationList(ref), - admissionregistrationv1.Validation{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_Validation(ref), - admissionregistrationv1.Variable{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_Variable(ref), - admissionregistrationv1.WebhookClientConfig{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_WebhookClientConfig(ref), - apiauthorizationv1.FieldSelectorAttributes{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_FieldSelectorAttributes(ref), - apiauthorizationv1.LabelSelectorAttributes{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_LabelSelectorAttributes(ref), - apiauthorizationv1.LocalSubjectAccessReview{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_LocalSubjectAccessReview(ref), - apiauthorizationv1.NonResourceAttributes{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_NonResourceAttributes(ref), - apiauthorizationv1.NonResourceRule{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_NonResourceRule(ref), - apiauthorizationv1.ResourceAttributes{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_ResourceAttributes(ref), - apiauthorizationv1.ResourceRule{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_ResourceRule(ref), - apiauthorizationv1.SelfSubjectAccessReview{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_SelfSubjectAccessReview(ref), - apiauthorizationv1.SelfSubjectAccessReviewSpec{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_SelfSubjectAccessReviewSpec(ref), - apiauthorizationv1.SelfSubjectRulesReview{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_SelfSubjectRulesReview(ref), - apiauthorizationv1.SelfSubjectRulesReviewSpec{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_SelfSubjectRulesReviewSpec(ref), - apiauthorizationv1.SubjectAccessReview{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_SubjectAccessReview(ref), - apiauthorizationv1.SubjectAccessReviewSpec{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_SubjectAccessReviewSpec(ref), - apiauthorizationv1.SubjectAccessReviewStatus{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_SubjectAccessReviewStatus(ref), - apiauthorizationv1.SubjectRulesReviewStatus{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_SubjectRulesReviewStatus(ref), - corev1.AWSElasticBlockStoreVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_AWSElasticBlockStoreVolumeSource(ref), - corev1.Affinity{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Affinity(ref), - corev1.AppArmorProfile{}.OpenAPIModelName(): schema_k8sio_api_core_v1_AppArmorProfile(ref), - corev1.AttachedVolume{}.OpenAPIModelName(): schema_k8sio_api_core_v1_AttachedVolume(ref), - corev1.AvoidPods{}.OpenAPIModelName(): schema_k8sio_api_core_v1_AvoidPods(ref), - corev1.AzureDiskVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_AzureDiskVolumeSource(ref), - corev1.AzureFilePersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_AzureFilePersistentVolumeSource(ref), - corev1.AzureFileVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_AzureFileVolumeSource(ref), - corev1.Binding{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Binding(ref), - corev1.CSIPersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_CSIPersistentVolumeSource(ref), - corev1.CSIVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_CSIVolumeSource(ref), - corev1.Capabilities{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Capabilities(ref), - corev1.CephFSPersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_CephFSPersistentVolumeSource(ref), - corev1.CephFSVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_CephFSVolumeSource(ref), - corev1.CinderPersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_CinderPersistentVolumeSource(ref), - corev1.CinderVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_CinderVolumeSource(ref), - corev1.ClientIPConfig{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ClientIPConfig(ref), - corev1.ClusterTrustBundleProjection{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ClusterTrustBundleProjection(ref), - corev1.ComponentCondition{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ComponentCondition(ref), - corev1.ComponentStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ComponentStatus(ref), - corev1.ComponentStatusList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ComponentStatusList(ref), - corev1.ConfigMap{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ConfigMap(ref), - corev1.ConfigMapEnvSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ConfigMapEnvSource(ref), - corev1.ConfigMapKeySelector{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ConfigMapKeySelector(ref), - corev1.ConfigMapList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ConfigMapList(ref), - corev1.ConfigMapNodeConfigSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ConfigMapNodeConfigSource(ref), - corev1.ConfigMapProjection{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ConfigMapProjection(ref), - corev1.ConfigMapVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ConfigMapVolumeSource(ref), - corev1.Container{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Container(ref), - corev1.ContainerExtendedResourceRequest{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerExtendedResourceRequest(ref), - corev1.ContainerImage{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerImage(ref), - corev1.ContainerPort{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerPort(ref), - corev1.ContainerResizePolicy{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerResizePolicy(ref), - corev1.ContainerRestartRule{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerRestartRule(ref), - corev1.ContainerRestartRuleOnExitCodes{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerRestartRuleOnExitCodes(ref), - corev1.ContainerState{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerState(ref), - corev1.ContainerStateRunning{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerStateRunning(ref), - corev1.ContainerStateTerminated{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerStateTerminated(ref), - corev1.ContainerStateWaiting{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerStateWaiting(ref), - corev1.ContainerStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerStatus(ref), - corev1.ContainerUser{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerUser(ref), - corev1.DaemonEndpoint{}.OpenAPIModelName(): schema_k8sio_api_core_v1_DaemonEndpoint(ref), - corev1.DownwardAPIProjection{}.OpenAPIModelName(): schema_k8sio_api_core_v1_DownwardAPIProjection(ref), - corev1.DownwardAPIVolumeFile{}.OpenAPIModelName(): schema_k8sio_api_core_v1_DownwardAPIVolumeFile(ref), - corev1.DownwardAPIVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_DownwardAPIVolumeSource(ref), - corev1.EmptyDirVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EmptyDirVolumeSource(ref), - corev1.EndpointAddress{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EndpointAddress(ref), - corev1.EndpointPort{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EndpointPort(ref), - corev1.EndpointSubset{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EndpointSubset(ref), - corev1.Endpoints{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Endpoints(ref), - corev1.EndpointsList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EndpointsList(ref), - corev1.EnvFromSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EnvFromSource(ref), - corev1.EnvVar{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EnvVar(ref), - corev1.EnvVarSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EnvVarSource(ref), - corev1.EphemeralContainer{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EphemeralContainer(ref), - corev1.EphemeralContainerCommon{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EphemeralContainerCommon(ref), - corev1.EphemeralVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EphemeralVolumeSource(ref), - corev1.Event{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Event(ref), - corev1.EventList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EventList(ref), - corev1.EventSeries{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EventSeries(ref), - corev1.EventSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EventSource(ref), - corev1.ExecAction{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ExecAction(ref), - corev1.FCVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_FCVolumeSource(ref), - corev1.FileKeySelector{}.OpenAPIModelName(): schema_k8sio_api_core_v1_FileKeySelector(ref), - corev1.FlexPersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_FlexPersistentVolumeSource(ref), - corev1.FlexVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_FlexVolumeSource(ref), - corev1.FlockerVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_FlockerVolumeSource(ref), - corev1.GCEPersistentDiskVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_GCEPersistentDiskVolumeSource(ref), - corev1.GRPCAction{}.OpenAPIModelName(): schema_k8sio_api_core_v1_GRPCAction(ref), - corev1.GitRepoVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_GitRepoVolumeSource(ref), - corev1.GlusterfsPersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_GlusterfsPersistentVolumeSource(ref), - corev1.GlusterfsVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_GlusterfsVolumeSource(ref), - corev1.HTTPGetAction{}.OpenAPIModelName(): schema_k8sio_api_core_v1_HTTPGetAction(ref), - corev1.HTTPHeader{}.OpenAPIModelName(): schema_k8sio_api_core_v1_HTTPHeader(ref), - corev1.HostAlias{}.OpenAPIModelName(): schema_k8sio_api_core_v1_HostAlias(ref), - corev1.HostIP{}.OpenAPIModelName(): schema_k8sio_api_core_v1_HostIP(ref), - corev1.HostPathVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_HostPathVolumeSource(ref), - corev1.ISCSIPersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ISCSIPersistentVolumeSource(ref), - corev1.ISCSIVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ISCSIVolumeSource(ref), - corev1.ImageVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ImageVolumeSource(ref), - corev1.ImageVolumeStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ImageVolumeStatus(ref), - corev1.KeyToPath{}.OpenAPIModelName(): schema_k8sio_api_core_v1_KeyToPath(ref), - corev1.Lifecycle{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Lifecycle(ref), - corev1.LifecycleHandler{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LifecycleHandler(ref), - corev1.LimitRange{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LimitRange(ref), - corev1.LimitRangeItem{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LimitRangeItem(ref), - corev1.LimitRangeList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LimitRangeList(ref), - corev1.LimitRangeSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LimitRangeSpec(ref), - corev1.LinuxContainerUser{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LinuxContainerUser(ref), - corev1.List{}.OpenAPIModelName(): schema_k8sio_api_core_v1_List(ref), - corev1.LoadBalancerIngress{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LoadBalancerIngress(ref), - corev1.LoadBalancerStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LoadBalancerStatus(ref), - corev1.LocalObjectReference{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LocalObjectReference(ref), - corev1.LocalVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LocalVolumeSource(ref), - corev1.ModifyVolumeStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ModifyVolumeStatus(ref), - corev1.NFSVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NFSVolumeSource(ref), - corev1.Namespace{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Namespace(ref), - corev1.NamespaceCondition{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NamespaceCondition(ref), - corev1.NamespaceList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NamespaceList(ref), - corev1.NamespaceSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NamespaceSpec(ref), - corev1.NamespaceStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NamespaceStatus(ref), - corev1.Node{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Node(ref), - corev1.NodeAddress{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeAddress(ref), - corev1.NodeAffinity{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeAffinity(ref), - corev1.NodeAllocatableResourceClaimStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeAllocatableResourceClaimStatus(ref), - corev1.NodeCondition{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeCondition(ref), - corev1.NodeConfigSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeConfigSource(ref), - corev1.NodeConfigStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeConfigStatus(ref), - corev1.NodeDaemonEndpoints{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeDaemonEndpoints(ref), - corev1.NodeFeatures{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeFeatures(ref), - corev1.NodeList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeList(ref), - corev1.NodeProxyOptions{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeProxyOptions(ref), - corev1.NodeRuntimeHandler{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeRuntimeHandler(ref), - corev1.NodeRuntimeHandlerFeatures{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeRuntimeHandlerFeatures(ref), - corev1.NodeSelector{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeSelector(ref), - corev1.NodeSelectorRequirement{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeSelectorRequirement(ref), - corev1.NodeSelectorTerm{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeSelectorTerm(ref), - corev1.NodeSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeSpec(ref), - corev1.NodeStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeStatus(ref), - corev1.NodeSwapStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeSwapStatus(ref), - corev1.NodeSystemInfo{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeSystemInfo(ref), - corev1.ObjectFieldSelector{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ObjectFieldSelector(ref), - corev1.ObjectReference{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ObjectReference(ref), - corev1.PersistentVolume{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolume(ref), - corev1.PersistentVolumeClaim{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeClaim(ref), - corev1.PersistentVolumeClaimCondition{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeClaimCondition(ref), - corev1.PersistentVolumeClaimList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeClaimList(ref), - corev1.PersistentVolumeClaimSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeClaimSpec(ref), - corev1.PersistentVolumeClaimStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeClaimStatus(ref), - corev1.PersistentVolumeClaimTemplate{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeClaimTemplate(ref), - corev1.PersistentVolumeClaimVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeClaimVolumeSource(ref), - corev1.PersistentVolumeList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeList(ref), - corev1.PersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeSource(ref), - corev1.PersistentVolumeSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeSpec(ref), - corev1.PersistentVolumeStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeStatus(ref), - corev1.PhotonPersistentDiskVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PhotonPersistentDiskVolumeSource(ref), - corev1.Pod{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Pod(ref), - corev1.PodAffinity{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodAffinity(ref), - corev1.PodAffinityTerm{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodAffinityTerm(ref), - corev1.PodAntiAffinity{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodAntiAffinity(ref), - corev1.PodAttachOptions{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodAttachOptions(ref), - corev1.PodCertificateProjection{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodCertificateProjection(ref), - corev1.PodCondition{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodCondition(ref), - corev1.PodDNSConfig{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodDNSConfig(ref), - corev1.PodDNSConfigOption{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodDNSConfigOption(ref), - corev1.PodExecOptions{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodExecOptions(ref), - corev1.PodExtendedResourceClaimStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodExtendedResourceClaimStatus(ref), - corev1.PodIP{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodIP(ref), - corev1.PodList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodList(ref), - corev1.PodLogOptions{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodLogOptions(ref), - corev1.PodOS{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodOS(ref), - corev1.PodPortForwardOptions{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodPortForwardOptions(ref), - corev1.PodProxyOptions{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodProxyOptions(ref), - corev1.PodReadinessGate{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodReadinessGate(ref), - corev1.PodResourceClaim{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodResourceClaim(ref), - corev1.PodResourceClaimStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodResourceClaimStatus(ref), - corev1.PodSchedulingGate{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodSchedulingGate(ref), - corev1.PodSchedulingGroup{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodSchedulingGroup(ref), - corev1.PodSecurityContext{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodSecurityContext(ref), - corev1.PodSignature{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodSignature(ref), - corev1.PodSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodSpec(ref), - corev1.PodStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodStatus(ref), - corev1.PodStatusResult{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodStatusResult(ref), - corev1.PodTemplate{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodTemplate(ref), - corev1.PodTemplateList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodTemplateList(ref), - corev1.PodTemplateSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodTemplateSpec(ref), - corev1.PortStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PortStatus(ref), - corev1.PortworxVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PortworxVolumeSource(ref), - corev1.PreferAvoidPodsEntry{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PreferAvoidPodsEntry(ref), - corev1.PreferredSchedulingTerm{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PreferredSchedulingTerm(ref), - corev1.Probe{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Probe(ref), - corev1.ProbeHandler{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ProbeHandler(ref), - corev1.ProjectedVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ProjectedVolumeSource(ref), - corev1.QuobyteVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_QuobyteVolumeSource(ref), - corev1.RBDPersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_RBDPersistentVolumeSource(ref), - corev1.RBDVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_RBDVolumeSource(ref), - corev1.RangeAllocation{}.OpenAPIModelName(): schema_k8sio_api_core_v1_RangeAllocation(ref), - corev1.ReplicationController{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ReplicationController(ref), - corev1.ReplicationControllerCondition{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ReplicationControllerCondition(ref), - corev1.ReplicationControllerList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ReplicationControllerList(ref), - corev1.ReplicationControllerSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ReplicationControllerSpec(ref), - corev1.ReplicationControllerStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ReplicationControllerStatus(ref), - corev1.ResourceClaim{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ResourceClaim(ref), - corev1.ResourceFieldSelector{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ResourceFieldSelector(ref), - corev1.ResourceHealth{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ResourceHealth(ref), - corev1.ResourceQuota{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ResourceQuota(ref), - corev1.ResourceQuotaList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ResourceQuotaList(ref), - corev1.ResourceQuotaSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ResourceQuotaSpec(ref), - corev1.ResourceQuotaStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ResourceQuotaStatus(ref), - corev1.ResourceRequirements{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ResourceRequirements(ref), - corev1.ResourceStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ResourceStatus(ref), - corev1.SELinuxOptions{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SELinuxOptions(ref), - corev1.ScaleIOPersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ScaleIOPersistentVolumeSource(ref), - corev1.ScaleIOVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ScaleIOVolumeSource(ref), - corev1.ScopeSelector{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ScopeSelector(ref), - corev1.ScopedResourceSelectorRequirement{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ScopedResourceSelectorRequirement(ref), - corev1.SeccompProfile{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SeccompProfile(ref), - corev1.Secret{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Secret(ref), - corev1.SecretEnvSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SecretEnvSource(ref), - corev1.SecretKeySelector{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SecretKeySelector(ref), - corev1.SecretList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SecretList(ref), - corev1.SecretProjection{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SecretProjection(ref), - corev1.SecretReference{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SecretReference(ref), - corev1.SecretVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SecretVolumeSource(ref), - corev1.SecurityContext{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SecurityContext(ref), - corev1.SerializedReference{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SerializedReference(ref), - corev1.Service{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Service(ref), - corev1.ServiceAccount{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ServiceAccount(ref), - corev1.ServiceAccountList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ServiceAccountList(ref), - corev1.ServiceAccountTokenProjection{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ServiceAccountTokenProjection(ref), - corev1.ServiceList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ServiceList(ref), - corev1.ServicePort{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ServicePort(ref), - corev1.ServiceProxyOptions{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ServiceProxyOptions(ref), - corev1.ServiceSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ServiceSpec(ref), - corev1.ServiceStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ServiceStatus(ref), - corev1.SessionAffinityConfig{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SessionAffinityConfig(ref), - corev1.SleepAction{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SleepAction(ref), - corev1.StorageOSPersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_StorageOSPersistentVolumeSource(ref), - corev1.StorageOSVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_StorageOSVolumeSource(ref), - corev1.Sysctl{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Sysctl(ref), - corev1.TCPSocketAction{}.OpenAPIModelName(): schema_k8sio_api_core_v1_TCPSocketAction(ref), - corev1.Taint{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Taint(ref), - corev1.Toleration{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Toleration(ref), - corev1.TopologySelectorLabelRequirement{}.OpenAPIModelName(): schema_k8sio_api_core_v1_TopologySelectorLabelRequirement(ref), - corev1.TopologySelectorTerm{}.OpenAPIModelName(): schema_k8sio_api_core_v1_TopologySelectorTerm(ref), - corev1.TopologySpreadConstraint{}.OpenAPIModelName(): schema_k8sio_api_core_v1_TopologySpreadConstraint(ref), - corev1.TypedLocalObjectReference{}.OpenAPIModelName(): schema_k8sio_api_core_v1_TypedLocalObjectReference(ref), - corev1.TypedObjectReference{}.OpenAPIModelName(): schema_k8sio_api_core_v1_TypedObjectReference(ref), - corev1.Volume{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Volume(ref), - corev1.VolumeDevice{}.OpenAPIModelName(): schema_k8sio_api_core_v1_VolumeDevice(ref), - corev1.VolumeMount{}.OpenAPIModelName(): schema_k8sio_api_core_v1_VolumeMount(ref), - corev1.VolumeMountStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_VolumeMountStatus(ref), - corev1.VolumeNodeAffinity{}.OpenAPIModelName(): schema_k8sio_api_core_v1_VolumeNodeAffinity(ref), - corev1.VolumeProjection{}.OpenAPIModelName(): schema_k8sio_api_core_v1_VolumeProjection(ref), - corev1.VolumeResourceRequirements{}.OpenAPIModelName(): schema_k8sio_api_core_v1_VolumeResourceRequirements(ref), - corev1.VolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_VolumeSource(ref), - corev1.VolumeStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_VolumeStatus(ref), - corev1.VsphereVirtualDiskVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_VsphereVirtualDiskVolumeSource(ref), - corev1.WeightedPodAffinityTerm{}.OpenAPIModelName(): schema_k8sio_api_core_v1_WeightedPodAffinityTerm(ref), - corev1.WindowsSecurityContextOptions{}.OpenAPIModelName(): schema_k8sio_api_core_v1_WindowsSecurityContextOptions(ref), - rbacv1.AggregationRule{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_AggregationRule(ref), - rbacv1.ClusterRole{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_ClusterRole(ref), - rbacv1.ClusterRoleBinding{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_ClusterRoleBinding(ref), - rbacv1.ClusterRoleBindingList{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_ClusterRoleBindingList(ref), - rbacv1.ClusterRoleList{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_ClusterRoleList(ref), - rbacv1.PolicyRule{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_PolicyRule(ref), - rbacv1.Role{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_Role(ref), - rbacv1.RoleBinding{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_RoleBinding(ref), - rbacv1.RoleBindingList{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_RoleBindingList(ref), - rbacv1.RoleList{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_RoleList(ref), - rbacv1.RoleRef{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_RoleRef(ref), - rbacv1.Subject{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_Subject(ref), - resource.Quantity{}.OpenAPIModelName(): schema_apimachinery_pkg_api_resource_Quantity(ref), - metav1.APIGroup{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_APIGroup(ref), - metav1.APIGroupList{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_APIGroupList(ref), - metav1.APIResource{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_APIResource(ref), - metav1.APIResourceList{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_APIResourceList(ref), - metav1.APIVersions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_APIVersions(ref), - metav1.ApplyOptions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_ApplyOptions(ref), - metav1.Condition{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_Condition(ref), - metav1.CreateOptions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_CreateOptions(ref), - metav1.DeleteOptions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_DeleteOptions(ref), - metav1.Duration{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_Duration(ref), - metav1.FieldSelectorRequirement{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_FieldSelectorRequirement(ref), - metav1.FieldsV1{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_FieldsV1(ref), - metav1.GetOptions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_GetOptions(ref), - metav1.GroupKind{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_GroupKind(ref), - metav1.GroupResource{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_GroupResource(ref), - metav1.GroupVersion{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_GroupVersion(ref), - metav1.GroupVersionForDiscovery{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_GroupVersionForDiscovery(ref), - metav1.GroupVersionKind{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_GroupVersionKind(ref), - metav1.GroupVersionResource{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_GroupVersionResource(ref), - metav1.InternalEvent{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_InternalEvent(ref), - metav1.LabelSelector{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_LabelSelector(ref), - metav1.LabelSelectorRequirement{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_LabelSelectorRequirement(ref), - metav1.List{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_List(ref), - metav1.ListMeta{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_ListMeta(ref), - metav1.ListOptions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_ListOptions(ref), - metav1.ManagedFieldsEntry{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_ManagedFieldsEntry(ref), - metav1.MicroTime{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_MicroTime(ref), - metav1.ObjectMeta{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_ObjectMeta(ref), - metav1.OwnerReference{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_OwnerReference(ref), - metav1.PartialObjectMetadata{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_PartialObjectMetadata(ref), - metav1.PartialObjectMetadataList{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_PartialObjectMetadataList(ref), - metav1.Patch{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_Patch(ref), - metav1.PatchOptions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_PatchOptions(ref), - metav1.Preconditions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_Preconditions(ref), - metav1.RootPaths{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_RootPaths(ref), - metav1.ServerAddressByClientCIDR{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_ServerAddressByClientCIDR(ref), - metav1.ShardInfo{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_ShardInfo(ref), - metav1.Status{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_Status(ref), - metav1.StatusCause{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_StatusCause(ref), - metav1.StatusDetails{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_StatusDetails(ref), - metav1.Table{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_Table(ref), - metav1.TableColumnDefinition{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_TableColumnDefinition(ref), - metav1.TableOptions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_TableOptions(ref), - metav1.TableRow{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_TableRow(ref), - metav1.TableRowCondition{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_TableRowCondition(ref), - metav1.Time{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_Time(ref), - metav1.Timestamp{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_Timestamp(ref), - metav1.TypeMeta{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_TypeMeta(ref), - metav1.UpdateOptions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_UpdateOptions(ref), - metav1.WatchEvent{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_WatchEvent(ref), - runtime.RawExtension{}.OpenAPIModelName(): schema_k8sio_apimachinery_pkg_runtime_RawExtension(ref), - runtime.TypeMeta{}.OpenAPIModelName(): schema_k8sio_apimachinery_pkg_runtime_TypeMeta(ref), - runtime.Unknown{}.OpenAPIModelName(): schema_k8sio_apimachinery_pkg_runtime_Unknown(ref), - intstr.IntOrString{}.OpenAPIModelName(): schema_apimachinery_pkg_util_intstr_IntOrString(ref), - } -} - -func schema_openshift_api_apiextensions_v1alpha1_APIExcludedField(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "APIExcludedField describes a field in the schema which will not be validated by crdSchemaValidation or objectSchemaValidation.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "path": { - SchemaProps: spec.SchemaProps{ - Description: "path is the path to the field in the schema. Paths are dot-separated field names (e.g., \"fieldA.fieldB.fieldC\") representing nested object fields. If part of the path is a slice (e.g., \"status.conditions\") the remaining path is applied to all items in the slice (e.g., \"status.conditions.lastTransitionTimestamp\"). Each field name must be a valid Kubernetes CRD field name: start with a letter, contain only letters, digits, and underscores, and be between 1 and 63 characters in length. A path may contain at most 16 fields.", - Type: []string{"string"}, - Format: "", - }, - }, - "versions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "versions are the API versions the field is excluded from. When not specified, the field is excluded from all versions.\n\nEach item must be at most 63 characters in length, and must must consist of only lowercase alphanumeric characters and hyphens, and must start with an alphabetic character and end with an alphanumeric character. At most 32 versions may be specified.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"path", "versions"}, - }, - }, + v1.APIServer{}.OpenAPIModelName(): schema_openshift_api_config_v1_APIServer(ref), + v1.APIServerEncryption{}.OpenAPIModelName(): schema_openshift_api_config_v1_APIServerEncryption(ref), + v1.APIServerList{}.OpenAPIModelName(): schema_openshift_api_config_v1_APIServerList(ref), + v1.APIServerNamedServingCert{}.OpenAPIModelName(): schema_openshift_api_config_v1_APIServerNamedServingCert(ref), + v1.APIServerServingCerts{}.OpenAPIModelName(): schema_openshift_api_config_v1_APIServerServingCerts(ref), + v1.APIServerSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_APIServerSpec(ref), + v1.APIServerStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_APIServerStatus(ref), + v1.AWSDNSSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_AWSDNSSpec(ref), + v1.AWSIngressSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_AWSIngressSpec(ref), + v1.AWSPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_AWSPlatformSpec(ref), + v1.AWSPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_AWSPlatformStatus(ref), + v1.AWSResourceTag{}.OpenAPIModelName(): schema_openshift_api_config_v1_AWSResourceTag(ref), + v1.AWSServiceEndpoint{}.OpenAPIModelName(): schema_openshift_api_config_v1_AWSServiceEndpoint(ref), + v1.AcceptRisk{}.OpenAPIModelName(): schema_openshift_api_config_v1_AcceptRisk(ref), + v1.AdmissionConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_AdmissionConfig(ref), + v1.AdmissionPluginConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_AdmissionPluginConfig(ref), + v1.AlibabaCloudPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_AlibabaCloudPlatformSpec(ref), + v1.AlibabaCloudPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_AlibabaCloudPlatformStatus(ref), + v1.AlibabaCloudResourceTag{}.OpenAPIModelName(): schema_openshift_api_config_v1_AlibabaCloudResourceTag(ref), + v1.Audit{}.OpenAPIModelName(): schema_openshift_api_config_v1_Audit(ref), + v1.AuditConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_AuditConfig(ref), + v1.AuditCustomRule{}.OpenAPIModelName(): schema_openshift_api_config_v1_AuditCustomRule(ref), + v1.Authentication{}.OpenAPIModelName(): schema_openshift_api_config_v1_Authentication(ref), + v1.AuthenticationList{}.OpenAPIModelName(): schema_openshift_api_config_v1_AuthenticationList(ref), + v1.AuthenticationSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_AuthenticationSpec(ref), + v1.AuthenticationStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_AuthenticationStatus(ref), + v1.AzurePlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_AzurePlatformSpec(ref), + v1.AzurePlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_AzurePlatformStatus(ref), + v1.AzureResourceTag{}.OpenAPIModelName(): schema_openshift_api_config_v1_AzureResourceTag(ref), + v1.BareMetalPlatformLoadBalancer{}.OpenAPIModelName(): schema_openshift_api_config_v1_BareMetalPlatformLoadBalancer(ref), + v1.BareMetalPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_BareMetalPlatformSpec(ref), + v1.BareMetalPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_BareMetalPlatformStatus(ref), + v1.BasicAuthIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_BasicAuthIdentityProvider(ref), + v1.Build{}.OpenAPIModelName(): schema_openshift_api_config_v1_Build(ref), + v1.BuildDefaults{}.OpenAPIModelName(): schema_openshift_api_config_v1_BuildDefaults(ref), + v1.BuildList{}.OpenAPIModelName(): schema_openshift_api_config_v1_BuildList(ref), + v1.BuildOverrides{}.OpenAPIModelName(): schema_openshift_api_config_v1_BuildOverrides(ref), + v1.BuildSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_BuildSpec(ref), + v1.CRIOCredentialProviderConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_CRIOCredentialProviderConfig(ref), + v1.CRIOCredentialProviderConfigList{}.OpenAPIModelName(): schema_openshift_api_config_v1_CRIOCredentialProviderConfigList(ref), + v1.CRIOCredentialProviderConfigSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_CRIOCredentialProviderConfigSpec(ref), + v1.CRIOCredentialProviderConfigStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_CRIOCredentialProviderConfigStatus(ref), + v1.CertInfo{}.OpenAPIModelName(): schema_openshift_api_config_v1_CertInfo(ref), + v1.ClientConnectionOverrides{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClientConnectionOverrides(ref), + v1.ClientCredentialConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClientCredentialConfig(ref), + v1.ClientSecretSecretReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClientSecretSecretReference(ref), + v1.CloudControllerManagerStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_CloudControllerManagerStatus(ref), + v1.CloudLoadBalancerConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_CloudLoadBalancerConfig(ref), + v1.CloudLoadBalancerIPs{}.OpenAPIModelName(): schema_openshift_api_config_v1_CloudLoadBalancerIPs(ref), + v1.ClusterCondition{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterCondition(ref), + v1.ClusterImagePolicy{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterImagePolicy(ref), + v1.ClusterImagePolicyList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterImagePolicyList(ref), + v1.ClusterImagePolicySpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterImagePolicySpec(ref), + v1.ClusterImagePolicyStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterImagePolicyStatus(ref), + v1.ClusterNetworkEntry{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterNetworkEntry(ref), + v1.ClusterOperator{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterOperator(ref), + v1.ClusterOperatorList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterOperatorList(ref), + v1.ClusterOperatorSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterOperatorSpec(ref), + v1.ClusterOperatorStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterOperatorStatus(ref), + v1.ClusterOperatorStatusCondition{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterOperatorStatusCondition(ref), + v1.ClusterVersion{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterVersion(ref), + v1.ClusterVersionCapabilitiesSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterVersionCapabilitiesSpec(ref), + v1.ClusterVersionCapabilitiesStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterVersionCapabilitiesStatus(ref), + v1.ClusterVersionList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterVersionList(ref), + v1.ClusterVersionSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterVersionSpec(ref), + v1.ClusterVersionStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ClusterVersionStatus(ref), + v1.ComponentOverride{}.OpenAPIModelName(): schema_openshift_api_config_v1_ComponentOverride(ref), + v1.ComponentRouteSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ComponentRouteSpec(ref), + v1.ComponentRouteStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ComponentRouteStatus(ref), + v1.ConditionalUpdate{}.OpenAPIModelName(): schema_openshift_api_config_v1_ConditionalUpdate(ref), + v1.ConditionalUpdateRisk{}.OpenAPIModelName(): schema_openshift_api_config_v1_ConditionalUpdateRisk(ref), + v1.ConfigMapFileReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_ConfigMapFileReference(ref), + v1.ConfigMapNameReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_ConfigMapNameReference(ref), + v1.Console{}.OpenAPIModelName(): schema_openshift_api_config_v1_Console(ref), + v1.ConsoleAuthentication{}.OpenAPIModelName(): schema_openshift_api_config_v1_ConsoleAuthentication(ref), + v1.ConsoleList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ConsoleList(ref), + v1.ConsoleSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ConsoleSpec(ref), + v1.ConsoleStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ConsoleStatus(ref), + v1.Custom{}.OpenAPIModelName(): schema_openshift_api_config_v1_Custom(ref), + v1.CustomFeatureGates{}.OpenAPIModelName(): schema_openshift_api_config_v1_CustomFeatureGates(ref), + v1.CustomTLSProfile{}.OpenAPIModelName(): schema_openshift_api_config_v1_CustomTLSProfile(ref), + v1.DNS{}.OpenAPIModelName(): schema_openshift_api_config_v1_DNS(ref), + v1.DNSList{}.OpenAPIModelName(): schema_openshift_api_config_v1_DNSList(ref), + v1.DNSPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_DNSPlatformSpec(ref), + v1.DNSSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_DNSSpec(ref), + v1.DNSStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_DNSStatus(ref), + v1.DNSZone{}.OpenAPIModelName(): schema_openshift_api_config_v1_DNSZone(ref), + v1.DelegatedAuthentication{}.OpenAPIModelName(): schema_openshift_api_config_v1_DelegatedAuthentication(ref), + v1.DelegatedAuthorization{}.OpenAPIModelName(): schema_openshift_api_config_v1_DelegatedAuthorization(ref), + v1.DeprecatedWebhookTokenAuthenticator{}.OpenAPIModelName(): schema_openshift_api_config_v1_DeprecatedWebhookTokenAuthenticator(ref), + v1.EquinixMetalPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_EquinixMetalPlatformSpec(ref), + v1.EquinixMetalPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_EquinixMetalPlatformStatus(ref), + v1.EtcdConnectionInfo{}.OpenAPIModelName(): schema_openshift_api_config_v1_EtcdConnectionInfo(ref), + v1.EtcdStorageConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_EtcdStorageConfig(ref), + v1.ExternalClaimsSource{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExternalClaimsSource(ref), + v1.ExternalIPConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExternalIPConfig(ref), + v1.ExternalIPPolicy{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExternalIPPolicy(ref), + v1.ExternalPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExternalPlatformSpec(ref), + v1.ExternalPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExternalPlatformStatus(ref), + v1.ExternalSourceAuthentication{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExternalSourceAuthentication(ref), + v1.ExternalSourceCertificateAuthorityConfigMapReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExternalSourceCertificateAuthorityConfigMapReference(ref), + v1.ExternalSourcePredicate{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExternalSourcePredicate(ref), + v1.ExternalSourceTLS{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExternalSourceTLS(ref), + v1.ExtraMapping{}.OpenAPIModelName(): schema_openshift_api_config_v1_ExtraMapping(ref), + v1.FeatureGate{}.OpenAPIModelName(): schema_openshift_api_config_v1_FeatureGate(ref), + v1.FeatureGateAttributes{}.OpenAPIModelName(): schema_openshift_api_config_v1_FeatureGateAttributes(ref), + v1.FeatureGateDetails{}.OpenAPIModelName(): schema_openshift_api_config_v1_FeatureGateDetails(ref), + v1.FeatureGateList{}.OpenAPIModelName(): schema_openshift_api_config_v1_FeatureGateList(ref), + v1.FeatureGateSelection{}.OpenAPIModelName(): schema_openshift_api_config_v1_FeatureGateSelection(ref), + v1.FeatureGateSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_FeatureGateSpec(ref), + v1.FeatureGateStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_FeatureGateStatus(ref), + v1.FeatureGateTests{}.OpenAPIModelName(): schema_openshift_api_config_v1_FeatureGateTests(ref), + v1.GCPPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_GCPPlatformSpec(ref), + v1.GCPPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_GCPPlatformStatus(ref), + v1.GCPResourceLabel{}.OpenAPIModelName(): schema_openshift_api_config_v1_GCPResourceLabel(ref), + v1.GCPResourceTag{}.OpenAPIModelName(): schema_openshift_api_config_v1_GCPResourceTag(ref), + v1.GatherConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_GatherConfig(ref), + v1.GathererConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_GathererConfig(ref), + v1.Gatherers{}.OpenAPIModelName(): schema_openshift_api_config_v1_Gatherers(ref), + v1.GenericAPIServerConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_GenericAPIServerConfig(ref), + v1.GenericControllerConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_GenericControllerConfig(ref), + v1.GitHubIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_GitHubIdentityProvider(ref), + v1.GitLabIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_GitLabIdentityProvider(ref), + v1.GoogleIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_GoogleIdentityProvider(ref), + v1.HTPasswdIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_HTPasswdIdentityProvider(ref), + v1.HTTPServingInfo{}.OpenAPIModelName(): schema_openshift_api_config_v1_HTTPServingInfo(ref), + v1.HubSource{}.OpenAPIModelName(): schema_openshift_api_config_v1_HubSource(ref), + v1.HubSourceStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_HubSourceStatus(ref), + v1.IBMCloudPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_IBMCloudPlatformSpec(ref), + v1.IBMCloudPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_IBMCloudPlatformStatus(ref), + v1.IBMCloudServiceEndpoint{}.OpenAPIModelName(): schema_openshift_api_config_v1_IBMCloudServiceEndpoint(ref), + v1.IdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_IdentityProvider(ref), + v1.IdentityProviderConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_IdentityProviderConfig(ref), + v1.Image{}.OpenAPIModelName(): schema_openshift_api_config_v1_Image(ref), + v1.ImageContentPolicy{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageContentPolicy(ref), + v1.ImageContentPolicyList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageContentPolicyList(ref), + v1.ImageContentPolicySpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageContentPolicySpec(ref), + v1.ImageDigestMirrorSet{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageDigestMirrorSet(ref), + v1.ImageDigestMirrorSetList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageDigestMirrorSetList(ref), + v1.ImageDigestMirrorSetSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageDigestMirrorSetSpec(ref), + v1.ImageDigestMirrorSetStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageDigestMirrorSetStatus(ref), + v1.ImageDigestMirrors{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageDigestMirrors(ref), + v1.ImageLabel{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageLabel(ref), + v1.ImageList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageList(ref), + v1.ImagePolicy{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImagePolicy(ref), + v1.ImagePolicyFulcioCAWithRekorRootOfTrust{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImagePolicyFulcioCAWithRekorRootOfTrust(ref), + v1.ImagePolicyList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImagePolicyList(ref), + v1.ImagePolicyPKIRootOfTrust{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImagePolicyPKIRootOfTrust(ref), + v1.ImagePolicyPublicKeyRootOfTrust{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImagePolicyPublicKeyRootOfTrust(ref), + v1.ImagePolicySpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImagePolicySpec(ref), + v1.ImagePolicyStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImagePolicyStatus(ref), + v1.ImageSigstoreVerificationPolicy{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageSigstoreVerificationPolicy(ref), + v1.ImageSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageSpec(ref), + v1.ImageStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageStatus(ref), + v1.ImageTagMirrorSet{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageTagMirrorSet(ref), + v1.ImageTagMirrorSetList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageTagMirrorSetList(ref), + v1.ImageTagMirrorSetSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageTagMirrorSetSpec(ref), + v1.ImageTagMirrorSetStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageTagMirrorSetStatus(ref), + v1.ImageTagMirrors{}.OpenAPIModelName(): schema_openshift_api_config_v1_ImageTagMirrors(ref), + v1.Infrastructure{}.OpenAPIModelName(): schema_openshift_api_config_v1_Infrastructure(ref), + v1.InfrastructureList{}.OpenAPIModelName(): schema_openshift_api_config_v1_InfrastructureList(ref), + v1.InfrastructureSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_InfrastructureSpec(ref), + v1.InfrastructureStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_InfrastructureStatus(ref), + v1.Ingress{}.OpenAPIModelName(): schema_openshift_api_config_v1_Ingress(ref), + v1.IngressList{}.OpenAPIModelName(): schema_openshift_api_config_v1_IngressList(ref), + v1.IngressPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_IngressPlatformSpec(ref), + v1.IngressSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_IngressSpec(ref), + v1.IngressStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_IngressStatus(ref), + v1.InsightsDataGather{}.OpenAPIModelName(): schema_openshift_api_config_v1_InsightsDataGather(ref), + v1.InsightsDataGatherList{}.OpenAPIModelName(): schema_openshift_api_config_v1_InsightsDataGatherList(ref), + v1.InsightsDataGatherSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_InsightsDataGatherSpec(ref), + v1.IntermediateTLSProfile{}.OpenAPIModelName(): schema_openshift_api_config_v1_IntermediateTLSProfile(ref), + v1.KMSPluginConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_KMSPluginConfig(ref), + v1.KeystoneIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_KeystoneIdentityProvider(ref), + v1.KubeClientConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_KubeClientConfig(ref), + v1.KubevirtPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_KubevirtPlatformSpec(ref), + v1.KubevirtPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_KubevirtPlatformStatus(ref), + v1.LDAPAttributeMapping{}.OpenAPIModelName(): schema_openshift_api_config_v1_LDAPAttributeMapping(ref), + v1.LDAPIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_LDAPIdentityProvider(ref), + v1.LeaderElection{}.OpenAPIModelName(): schema_openshift_api_config_v1_LeaderElection(ref), + v1.LoadBalancer{}.OpenAPIModelName(): schema_openshift_api_config_v1_LoadBalancer(ref), + v1.MTUMigration{}.OpenAPIModelName(): schema_openshift_api_config_v1_MTUMigration(ref), + v1.MTUMigrationValues{}.OpenAPIModelName(): schema_openshift_api_config_v1_MTUMigrationValues(ref), + v1.MaxAgePolicy{}.OpenAPIModelName(): schema_openshift_api_config_v1_MaxAgePolicy(ref), + v1.ModernTLSProfile{}.OpenAPIModelName(): schema_openshift_api_config_v1_ModernTLSProfile(ref), + v1.NamedCertificate{}.OpenAPIModelName(): schema_openshift_api_config_v1_NamedCertificate(ref), + v1.Network{}.OpenAPIModelName(): schema_openshift_api_config_v1_Network(ref), + v1.NetworkDiagnostics{}.OpenAPIModelName(): schema_openshift_api_config_v1_NetworkDiagnostics(ref), + v1.NetworkDiagnosticsSourcePlacement{}.OpenAPIModelName(): schema_openshift_api_config_v1_NetworkDiagnosticsSourcePlacement(ref), + v1.NetworkDiagnosticsTargetPlacement{}.OpenAPIModelName(): schema_openshift_api_config_v1_NetworkDiagnosticsTargetPlacement(ref), + v1.NetworkList{}.OpenAPIModelName(): schema_openshift_api_config_v1_NetworkList(ref), + v1.NetworkMigration{}.OpenAPIModelName(): schema_openshift_api_config_v1_NetworkMigration(ref), + v1.NetworkObservabilitySpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_NetworkObservabilitySpec(ref), + v1.NetworkSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_NetworkSpec(ref), + v1.NetworkStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_NetworkStatus(ref), + v1.Node{}.OpenAPIModelName(): schema_openshift_api_config_v1_Node(ref), + v1.NodeList{}.OpenAPIModelName(): schema_openshift_api_config_v1_NodeList(ref), + v1.NodeSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_NodeSpec(ref), + v1.NodeStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_NodeStatus(ref), + v1.NutanixFailureDomain{}.OpenAPIModelName(): schema_openshift_api_config_v1_NutanixFailureDomain(ref), + v1.NutanixPlatformLoadBalancer{}.OpenAPIModelName(): schema_openshift_api_config_v1_NutanixPlatformLoadBalancer(ref), + v1.NutanixPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_NutanixPlatformSpec(ref), + v1.NutanixPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_NutanixPlatformStatus(ref), + v1.NutanixPrismElementEndpoint{}.OpenAPIModelName(): schema_openshift_api_config_v1_NutanixPrismElementEndpoint(ref), + v1.NutanixPrismEndpoint{}.OpenAPIModelName(): schema_openshift_api_config_v1_NutanixPrismEndpoint(ref), + v1.NutanixResourceIdentifier{}.OpenAPIModelName(): schema_openshift_api_config_v1_NutanixResourceIdentifier(ref), + v1.OAuth{}.OpenAPIModelName(): schema_openshift_api_config_v1_OAuth(ref), + v1.OAuthList{}.OpenAPIModelName(): schema_openshift_api_config_v1_OAuthList(ref), + v1.OAuthRemoteConnectionInfo{}.OpenAPIModelName(): schema_openshift_api_config_v1_OAuthRemoteConnectionInfo(ref), + v1.OAuthSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_OAuthSpec(ref), + v1.OAuthStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_OAuthStatus(ref), + v1.OAuthTemplates{}.OpenAPIModelName(): schema_openshift_api_config_v1_OAuthTemplates(ref), + v1.OIDCClientConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_OIDCClientConfig(ref), + v1.OIDCClientReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_OIDCClientReference(ref), + v1.OIDCClientStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_OIDCClientStatus(ref), + v1.OIDCProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_OIDCProvider(ref), + v1.ObjectReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_ObjectReference(ref), + v1.OldTLSProfile{}.OpenAPIModelName(): schema_openshift_api_config_v1_OldTLSProfile(ref), + v1.OpenIDClaims{}.OpenAPIModelName(): schema_openshift_api_config_v1_OpenIDClaims(ref), + v1.OpenIDIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_OpenIDIdentityProvider(ref), + v1.OpenStackPlatformLoadBalancer{}.OpenAPIModelName(): schema_openshift_api_config_v1_OpenStackPlatformLoadBalancer(ref), + v1.OpenStackPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_OpenStackPlatformSpec(ref), + v1.OpenStackPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_OpenStackPlatformStatus(ref), + v1.OperandVersion{}.OpenAPIModelName(): schema_openshift_api_config_v1_OperandVersion(ref), + v1.OperatorHub{}.OpenAPIModelName(): schema_openshift_api_config_v1_OperatorHub(ref), + v1.OperatorHubList{}.OpenAPIModelName(): schema_openshift_api_config_v1_OperatorHubList(ref), + v1.OperatorHubSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_OperatorHubSpec(ref), + v1.OperatorHubStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_OperatorHubStatus(ref), + v1.OvirtPlatformLoadBalancer{}.OpenAPIModelName(): schema_openshift_api_config_v1_OvirtPlatformLoadBalancer(ref), + v1.OvirtPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_OvirtPlatformSpec(ref), + v1.OvirtPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_OvirtPlatformStatus(ref), + v1.PKICertificateSubject{}.OpenAPIModelName(): schema_openshift_api_config_v1_PKICertificateSubject(ref), + v1.PersistentVolumeClaimReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_PersistentVolumeClaimReference(ref), + v1.PersistentVolumeConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_PersistentVolumeConfig(ref), + v1.PlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_PlatformSpec(ref), + v1.PlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_PlatformStatus(ref), + v1.PolicyFulcioSubject{}.OpenAPIModelName(): schema_openshift_api_config_v1_PolicyFulcioSubject(ref), + v1.PolicyIdentity{}.OpenAPIModelName(): schema_openshift_api_config_v1_PolicyIdentity(ref), + v1.PolicyMatchExactRepository{}.OpenAPIModelName(): schema_openshift_api_config_v1_PolicyMatchExactRepository(ref), + v1.PolicyMatchRemapIdentity{}.OpenAPIModelName(): schema_openshift_api_config_v1_PolicyMatchRemapIdentity(ref), + v1.PolicyRootOfTrust{}.OpenAPIModelName(): schema_openshift_api_config_v1_PolicyRootOfTrust(ref), + v1.PowerVSPlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_PowerVSPlatformSpec(ref), + v1.PowerVSPlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_PowerVSPlatformStatus(ref), + v1.PowerVSServiceEndpoint{}.OpenAPIModelName(): schema_openshift_api_config_v1_PowerVSServiceEndpoint(ref), + v1.PrefixedClaimMapping{}.OpenAPIModelName(): schema_openshift_api_config_v1_PrefixedClaimMapping(ref), + v1.ProfileCustomizations{}.OpenAPIModelName(): schema_openshift_api_config_v1_ProfileCustomizations(ref), + v1.Project{}.OpenAPIModelName(): schema_openshift_api_config_v1_Project(ref), + v1.ProjectList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ProjectList(ref), + v1.ProjectSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ProjectSpec(ref), + v1.ProjectStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ProjectStatus(ref), + v1.PromQLClusterCondition{}.OpenAPIModelName(): schema_openshift_api_config_v1_PromQLClusterCondition(ref), + v1.Proxy{}.OpenAPIModelName(): schema_openshift_api_config_v1_Proxy(ref), + v1.ProxyList{}.OpenAPIModelName(): schema_openshift_api_config_v1_ProxyList(ref), + v1.ProxySpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_ProxySpec(ref), + v1.ProxyStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_ProxyStatus(ref), + v1.RegistryLocation{}.OpenAPIModelName(): schema_openshift_api_config_v1_RegistryLocation(ref), + v1.RegistrySources{}.OpenAPIModelName(): schema_openshift_api_config_v1_RegistrySources(ref), + v1.Release{}.OpenAPIModelName(): schema_openshift_api_config_v1_Release(ref), + v1.RemoteConnectionInfo{}.OpenAPIModelName(): schema_openshift_api_config_v1_RemoteConnectionInfo(ref), + v1.RepositoryDigestMirrors{}.OpenAPIModelName(): schema_openshift_api_config_v1_RepositoryDigestMirrors(ref), + v1.RequestHeaderIdentityProvider{}.OpenAPIModelName(): schema_openshift_api_config_v1_RequestHeaderIdentityProvider(ref), + v1.RequiredHSTSPolicy{}.OpenAPIModelName(): schema_openshift_api_config_v1_RequiredHSTSPolicy(ref), + v1.Scheduler{}.OpenAPIModelName(): schema_openshift_api_config_v1_Scheduler(ref), + v1.SchedulerList{}.OpenAPIModelName(): schema_openshift_api_config_v1_SchedulerList(ref), + v1.SchedulerSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_SchedulerSpec(ref), + v1.SchedulerStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_SchedulerStatus(ref), + v1.SecretNameReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_SecretNameReference(ref), + v1.ServingInfo{}.OpenAPIModelName(): schema_openshift_api_config_v1_ServingInfo(ref), + v1.SignatureStore{}.OpenAPIModelName(): schema_openshift_api_config_v1_SignatureStore(ref), + v1.SourceURL{}.OpenAPIModelName(): schema_openshift_api_config_v1_SourceURL(ref), + v1.SourcedClaimMapping{}.OpenAPIModelName(): schema_openshift_api_config_v1_SourcedClaimMapping(ref), + v1.Storage{}.OpenAPIModelName(): schema_openshift_api_config_v1_Storage(ref), + v1.StringSource{}.OpenAPIModelName(): schema_openshift_api_config_v1_StringSource(ref), + v1.StringSourceSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_StringSourceSpec(ref), + v1.TLSProfileSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_TLSProfileSpec(ref), + v1.TLSSecurityProfile{}.OpenAPIModelName(): schema_openshift_api_config_v1_TLSSecurityProfile(ref), + v1.TemplateReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_TemplateReference(ref), + v1.TestDetails{}.OpenAPIModelName(): schema_openshift_api_config_v1_TestDetails(ref), + v1.TestReporting{}.OpenAPIModelName(): schema_openshift_api_config_v1_TestReporting(ref), + v1.TestReportingSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_TestReportingSpec(ref), + v1.TestReportingStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_TestReportingStatus(ref), + v1.TokenClaimMapping{}.OpenAPIModelName(): schema_openshift_api_config_v1_TokenClaimMapping(ref), + v1.TokenClaimMappings{}.OpenAPIModelName(): schema_openshift_api_config_v1_TokenClaimMappings(ref), + v1.TokenClaimOrExpressionMapping{}.OpenAPIModelName(): schema_openshift_api_config_v1_TokenClaimOrExpressionMapping(ref), + v1.TokenClaimValidationCELRule{}.OpenAPIModelName(): schema_openshift_api_config_v1_TokenClaimValidationCELRule(ref), + v1.TokenClaimValidationRule{}.OpenAPIModelName(): schema_openshift_api_config_v1_TokenClaimValidationRule(ref), + v1.TokenConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_TokenConfig(ref), + v1.TokenIssuer{}.OpenAPIModelName(): schema_openshift_api_config_v1_TokenIssuer(ref), + v1.TokenRequiredClaim{}.OpenAPIModelName(): schema_openshift_api_config_v1_TokenRequiredClaim(ref), + v1.TokenUserValidationRule{}.OpenAPIModelName(): schema_openshift_api_config_v1_TokenUserValidationRule(ref), + v1.Update{}.OpenAPIModelName(): schema_openshift_api_config_v1_Update(ref), + v1.UpdateHistory{}.OpenAPIModelName(): schema_openshift_api_config_v1_UpdateHistory(ref), + v1.UsernameClaimMapping{}.OpenAPIModelName(): schema_openshift_api_config_v1_UsernameClaimMapping(ref), + v1.UsernamePrefix{}.OpenAPIModelName(): schema_openshift_api_config_v1_UsernamePrefix(ref), + v1.VSphereFailureDomainHostGroup{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSphereFailureDomainHostGroup(ref), + v1.VSphereFailureDomainRegionAffinity{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSphereFailureDomainRegionAffinity(ref), + v1.VSphereFailureDomainZoneAffinity{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSphereFailureDomainZoneAffinity(ref), + v1.VSpherePlatformFailureDomainSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSpherePlatformFailureDomainSpec(ref), + v1.VSpherePlatformLoadBalancer{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSpherePlatformLoadBalancer(ref), + v1.VSpherePlatformNodeNetworking{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSpherePlatformNodeNetworking(ref), + v1.VSpherePlatformNodeNetworkingSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSpherePlatformNodeNetworkingSpec(ref), + v1.VSpherePlatformSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSpherePlatformSpec(ref), + v1.VSpherePlatformStatus{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSpherePlatformStatus(ref), + v1.VSpherePlatformTopology{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSpherePlatformTopology(ref), + v1.VSpherePlatformVCenterSpec{}.OpenAPIModelName(): schema_openshift_api_config_v1_VSpherePlatformVCenterSpec(ref), + v1.VaultAppRoleAuthentication{}.OpenAPIModelName(): schema_openshift_api_config_v1_VaultAppRoleAuthentication(ref), + v1.VaultAuthentication{}.OpenAPIModelName(): schema_openshift_api_config_v1_VaultAuthentication(ref), + v1.VaultConfigMapReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_VaultConfigMapReference(ref), + v1.VaultKMSPluginConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_VaultKMSPluginConfig(ref), + v1.VaultSecretReference{}.OpenAPIModelName(): schema_openshift_api_config_v1_VaultSecretReference(ref), + v1.VaultTLSConfig{}.OpenAPIModelName(): schema_openshift_api_config_v1_VaultTLSConfig(ref), + v1.WebhookTokenAuthenticator{}.OpenAPIModelName(): schema_openshift_api_config_v1_WebhookTokenAuthenticator(ref), + admissionregistrationv1.ApplyConfiguration{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ApplyConfiguration(ref), + admissionregistrationv1.AuditAnnotation{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_AuditAnnotation(ref), + admissionregistrationv1.ExpressionWarning{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ExpressionWarning(ref), + admissionregistrationv1.JSONPatch{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_JSONPatch(ref), + admissionregistrationv1.MatchCondition{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MatchCondition(ref), + admissionregistrationv1.MatchResources{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MatchResources(ref), + admissionregistrationv1.MutatingAdmissionPolicy{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MutatingAdmissionPolicy(ref), + admissionregistrationv1.MutatingAdmissionPolicyBinding{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MutatingAdmissionPolicyBinding(ref), + admissionregistrationv1.MutatingAdmissionPolicyBindingList{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MutatingAdmissionPolicyBindingList(ref), + admissionregistrationv1.MutatingAdmissionPolicyBindingSpec{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MutatingAdmissionPolicyBindingSpec(ref), + admissionregistrationv1.MutatingAdmissionPolicyList{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MutatingAdmissionPolicyList(ref), + admissionregistrationv1.MutatingAdmissionPolicySpec{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MutatingAdmissionPolicySpec(ref), + admissionregistrationv1.MutatingWebhook{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MutatingWebhook(ref), + admissionregistrationv1.MutatingWebhookConfiguration{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MutatingWebhookConfiguration(ref), + admissionregistrationv1.MutatingWebhookConfigurationList{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_MutatingWebhookConfigurationList(ref), + admissionregistrationv1.Mutation{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_Mutation(ref), + admissionregistrationv1.NamedRuleWithOperations{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_NamedRuleWithOperations(ref), + admissionregistrationv1.ParamKind{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ParamKind(ref), + admissionregistrationv1.ParamRef{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ParamRef(ref), + admissionregistrationv1.Rule{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_Rule(ref), + admissionregistrationv1.RuleWithOperations{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_RuleWithOperations(ref), + admissionregistrationv1.ServiceReference{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ServiceReference(ref), + admissionregistrationv1.TypeChecking{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_TypeChecking(ref), + admissionregistrationv1.ValidatingAdmissionPolicy{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingAdmissionPolicy(ref), + admissionregistrationv1.ValidatingAdmissionPolicyBinding{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingAdmissionPolicyBinding(ref), + admissionregistrationv1.ValidatingAdmissionPolicyBindingList{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingAdmissionPolicyBindingList(ref), + admissionregistrationv1.ValidatingAdmissionPolicyBindingSpec{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingAdmissionPolicyBindingSpec(ref), + admissionregistrationv1.ValidatingAdmissionPolicyList{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingAdmissionPolicyList(ref), + admissionregistrationv1.ValidatingAdmissionPolicySpec{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingAdmissionPolicySpec(ref), + admissionregistrationv1.ValidatingAdmissionPolicyStatus{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingAdmissionPolicyStatus(ref), + admissionregistrationv1.ValidatingWebhook{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingWebhook(ref), + admissionregistrationv1.ValidatingWebhookConfiguration{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingWebhookConfiguration(ref), + admissionregistrationv1.ValidatingWebhookConfigurationList{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_ValidatingWebhookConfigurationList(ref), + admissionregistrationv1.Validation{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_Validation(ref), + admissionregistrationv1.Variable{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_Variable(ref), + admissionregistrationv1.WebhookClientConfig{}.OpenAPIModelName(): schema_k8sio_api_admissionregistration_v1_WebhookClientConfig(ref), + authorizationv1.FieldSelectorAttributes{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_FieldSelectorAttributes(ref), + authorizationv1.LabelSelectorAttributes{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_LabelSelectorAttributes(ref), + authorizationv1.LocalSubjectAccessReview{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_LocalSubjectAccessReview(ref), + authorizationv1.NonResourceAttributes{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_NonResourceAttributes(ref), + authorizationv1.NonResourceRule{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_NonResourceRule(ref), + authorizationv1.ResourceAttributes{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_ResourceAttributes(ref), + authorizationv1.ResourceRule{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_ResourceRule(ref), + authorizationv1.SelfSubjectAccessReview{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_SelfSubjectAccessReview(ref), + authorizationv1.SelfSubjectAccessReviewSpec{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_SelfSubjectAccessReviewSpec(ref), + authorizationv1.SelfSubjectRulesReview{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_SelfSubjectRulesReview(ref), + authorizationv1.SelfSubjectRulesReviewSpec{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_SelfSubjectRulesReviewSpec(ref), + authorizationv1.SubjectAccessReview{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_SubjectAccessReview(ref), + authorizationv1.SubjectAccessReviewSpec{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_SubjectAccessReviewSpec(ref), + authorizationv1.SubjectAccessReviewStatus{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_SubjectAccessReviewStatus(ref), + authorizationv1.SubjectRulesReviewStatus{}.OpenAPIModelName(): schema_k8sio_api_authorization_v1_SubjectRulesReviewStatus(ref), + corev1.AWSElasticBlockStoreVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_AWSElasticBlockStoreVolumeSource(ref), + corev1.Affinity{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Affinity(ref), + corev1.AppArmorProfile{}.OpenAPIModelName(): schema_k8sio_api_core_v1_AppArmorProfile(ref), + corev1.AttachedVolume{}.OpenAPIModelName(): schema_k8sio_api_core_v1_AttachedVolume(ref), + corev1.AvoidPods{}.OpenAPIModelName(): schema_k8sio_api_core_v1_AvoidPods(ref), + corev1.AzureDiskVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_AzureDiskVolumeSource(ref), + corev1.AzureFilePersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_AzureFilePersistentVolumeSource(ref), + corev1.AzureFileVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_AzureFileVolumeSource(ref), + corev1.Binding{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Binding(ref), + corev1.CSIPersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_CSIPersistentVolumeSource(ref), + corev1.CSIVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_CSIVolumeSource(ref), + corev1.Capabilities{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Capabilities(ref), + corev1.CephFSPersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_CephFSPersistentVolumeSource(ref), + corev1.CephFSVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_CephFSVolumeSource(ref), + corev1.CinderPersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_CinderPersistentVolumeSource(ref), + corev1.CinderVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_CinderVolumeSource(ref), + corev1.ClientIPConfig{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ClientIPConfig(ref), + corev1.ClusterTrustBundleProjection{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ClusterTrustBundleProjection(ref), + corev1.ComponentCondition{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ComponentCondition(ref), + corev1.ComponentStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ComponentStatus(ref), + corev1.ComponentStatusList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ComponentStatusList(ref), + corev1.ConfigMap{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ConfigMap(ref), + corev1.ConfigMapEnvSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ConfigMapEnvSource(ref), + corev1.ConfigMapKeySelector{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ConfigMapKeySelector(ref), + corev1.ConfigMapList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ConfigMapList(ref), + corev1.ConfigMapNodeConfigSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ConfigMapNodeConfigSource(ref), + corev1.ConfigMapProjection{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ConfigMapProjection(ref), + corev1.ConfigMapVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ConfigMapVolumeSource(ref), + corev1.Container{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Container(ref), + corev1.ContainerExtendedResourceRequest{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerExtendedResourceRequest(ref), + corev1.ContainerImage{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerImage(ref), + corev1.ContainerPort{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerPort(ref), + corev1.ContainerResizePolicy{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerResizePolicy(ref), + corev1.ContainerRestartRule{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerRestartRule(ref), + corev1.ContainerRestartRuleOnExitCodes{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerRestartRuleOnExitCodes(ref), + corev1.ContainerState{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerState(ref), + corev1.ContainerStateRunning{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerStateRunning(ref), + corev1.ContainerStateTerminated{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerStateTerminated(ref), + corev1.ContainerStateWaiting{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerStateWaiting(ref), + corev1.ContainerStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerStatus(ref), + corev1.ContainerUser{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ContainerUser(ref), + corev1.DaemonEndpoint{}.OpenAPIModelName(): schema_k8sio_api_core_v1_DaemonEndpoint(ref), + corev1.DownwardAPIProjection{}.OpenAPIModelName(): schema_k8sio_api_core_v1_DownwardAPIProjection(ref), + corev1.DownwardAPIVolumeFile{}.OpenAPIModelName(): schema_k8sio_api_core_v1_DownwardAPIVolumeFile(ref), + corev1.DownwardAPIVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_DownwardAPIVolumeSource(ref), + corev1.EmptyDirVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EmptyDirVolumeSource(ref), + corev1.EndpointAddress{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EndpointAddress(ref), + corev1.EndpointPort{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EndpointPort(ref), + corev1.EndpointSubset{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EndpointSubset(ref), + corev1.Endpoints{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Endpoints(ref), + corev1.EndpointsList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EndpointsList(ref), + corev1.EnvFromSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EnvFromSource(ref), + corev1.EnvVar{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EnvVar(ref), + corev1.EnvVarSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EnvVarSource(ref), + corev1.EphemeralContainer{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EphemeralContainer(ref), + corev1.EphemeralContainerCommon{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EphemeralContainerCommon(ref), + corev1.EphemeralVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EphemeralVolumeSource(ref), + corev1.Event{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Event(ref), + corev1.EventList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EventList(ref), + corev1.EventSeries{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EventSeries(ref), + corev1.EventSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_EventSource(ref), + corev1.ExecAction{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ExecAction(ref), + corev1.FCVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_FCVolumeSource(ref), + corev1.FileKeySelector{}.OpenAPIModelName(): schema_k8sio_api_core_v1_FileKeySelector(ref), + corev1.FlexPersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_FlexPersistentVolumeSource(ref), + corev1.FlexVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_FlexVolumeSource(ref), + corev1.FlockerVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_FlockerVolumeSource(ref), + corev1.GCEPersistentDiskVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_GCEPersistentDiskVolumeSource(ref), + corev1.GRPCAction{}.OpenAPIModelName(): schema_k8sio_api_core_v1_GRPCAction(ref), + corev1.GitRepoVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_GitRepoVolumeSource(ref), + corev1.GlusterfsPersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_GlusterfsPersistentVolumeSource(ref), + corev1.GlusterfsVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_GlusterfsVolumeSource(ref), + corev1.HTTPGetAction{}.OpenAPIModelName(): schema_k8sio_api_core_v1_HTTPGetAction(ref), + corev1.HTTPHeader{}.OpenAPIModelName(): schema_k8sio_api_core_v1_HTTPHeader(ref), + corev1.HostAlias{}.OpenAPIModelName(): schema_k8sio_api_core_v1_HostAlias(ref), + corev1.HostIP{}.OpenAPIModelName(): schema_k8sio_api_core_v1_HostIP(ref), + corev1.HostPathVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_HostPathVolumeSource(ref), + corev1.ISCSIPersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ISCSIPersistentVolumeSource(ref), + corev1.ISCSIVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ISCSIVolumeSource(ref), + corev1.ImageVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ImageVolumeSource(ref), + corev1.ImageVolumeStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ImageVolumeStatus(ref), + corev1.KeyToPath{}.OpenAPIModelName(): schema_k8sio_api_core_v1_KeyToPath(ref), + corev1.Lifecycle{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Lifecycle(ref), + corev1.LifecycleHandler{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LifecycleHandler(ref), + corev1.LimitRange{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LimitRange(ref), + corev1.LimitRangeItem{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LimitRangeItem(ref), + corev1.LimitRangeList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LimitRangeList(ref), + corev1.LimitRangeSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LimitRangeSpec(ref), + corev1.LinuxContainerUser{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LinuxContainerUser(ref), + corev1.List{}.OpenAPIModelName(): schema_k8sio_api_core_v1_List(ref), + corev1.LoadBalancerIngress{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LoadBalancerIngress(ref), + corev1.LoadBalancerStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LoadBalancerStatus(ref), + corev1.LocalObjectReference{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LocalObjectReference(ref), + corev1.LocalVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_LocalVolumeSource(ref), + corev1.ModifyVolumeStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ModifyVolumeStatus(ref), + corev1.NFSVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NFSVolumeSource(ref), + corev1.Namespace{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Namespace(ref), + corev1.NamespaceCondition{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NamespaceCondition(ref), + corev1.NamespaceList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NamespaceList(ref), + corev1.NamespaceSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NamespaceSpec(ref), + corev1.NamespaceStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NamespaceStatus(ref), + corev1.Node{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Node(ref), + corev1.NodeAddress{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeAddress(ref), + corev1.NodeAffinity{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeAffinity(ref), + corev1.NodeAllocatableResourceClaimStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeAllocatableResourceClaimStatus(ref), + corev1.NodeCondition{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeCondition(ref), + corev1.NodeConfigSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeConfigSource(ref), + corev1.NodeConfigStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeConfigStatus(ref), + corev1.NodeDaemonEndpoints{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeDaemonEndpoints(ref), + corev1.NodeFeatures{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeFeatures(ref), + corev1.NodeList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeList(ref), + corev1.NodeProxyOptions{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeProxyOptions(ref), + corev1.NodeRuntimeHandler{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeRuntimeHandler(ref), + corev1.NodeRuntimeHandlerFeatures{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeRuntimeHandlerFeatures(ref), + corev1.NodeSelector{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeSelector(ref), + corev1.NodeSelectorRequirement{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeSelectorRequirement(ref), + corev1.NodeSelectorTerm{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeSelectorTerm(ref), + corev1.NodeSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeSpec(ref), + corev1.NodeStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeStatus(ref), + corev1.NodeSwapStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeSwapStatus(ref), + corev1.NodeSystemInfo{}.OpenAPIModelName(): schema_k8sio_api_core_v1_NodeSystemInfo(ref), + corev1.ObjectFieldSelector{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ObjectFieldSelector(ref), + corev1.ObjectReference{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ObjectReference(ref), + corev1.PersistentVolume{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolume(ref), + corev1.PersistentVolumeClaim{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeClaim(ref), + corev1.PersistentVolumeClaimCondition{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeClaimCondition(ref), + corev1.PersistentVolumeClaimList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeClaimList(ref), + corev1.PersistentVolumeClaimSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeClaimSpec(ref), + corev1.PersistentVolumeClaimStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeClaimStatus(ref), + corev1.PersistentVolumeClaimTemplate{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeClaimTemplate(ref), + corev1.PersistentVolumeClaimVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeClaimVolumeSource(ref), + corev1.PersistentVolumeList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeList(ref), + corev1.PersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeSource(ref), + corev1.PersistentVolumeSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeSpec(ref), + corev1.PersistentVolumeStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PersistentVolumeStatus(ref), + corev1.PhotonPersistentDiskVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PhotonPersistentDiskVolumeSource(ref), + corev1.Pod{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Pod(ref), + corev1.PodAffinity{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodAffinity(ref), + corev1.PodAffinityTerm{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodAffinityTerm(ref), + corev1.PodAntiAffinity{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodAntiAffinity(ref), + corev1.PodAttachOptions{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodAttachOptions(ref), + corev1.PodCertificateProjection{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodCertificateProjection(ref), + corev1.PodCondition{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodCondition(ref), + corev1.PodDNSConfig{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodDNSConfig(ref), + corev1.PodDNSConfigOption{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodDNSConfigOption(ref), + corev1.PodExecOptions{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodExecOptions(ref), + corev1.PodExtendedResourceClaimStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodExtendedResourceClaimStatus(ref), + corev1.PodIP{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodIP(ref), + corev1.PodList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodList(ref), + corev1.PodLogOptions{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodLogOptions(ref), + corev1.PodOS{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodOS(ref), + corev1.PodPortForwardOptions{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodPortForwardOptions(ref), + corev1.PodProxyOptions{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodProxyOptions(ref), + corev1.PodReadinessGate{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodReadinessGate(ref), + corev1.PodResourceClaim{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodResourceClaim(ref), + corev1.PodResourceClaimStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodResourceClaimStatus(ref), + corev1.PodSchedulingGate{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodSchedulingGate(ref), + corev1.PodSchedulingGroup{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodSchedulingGroup(ref), + corev1.PodSecurityContext{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodSecurityContext(ref), + corev1.PodSignature{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodSignature(ref), + corev1.PodSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodSpec(ref), + corev1.PodStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodStatus(ref), + corev1.PodStatusResult{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodStatusResult(ref), + corev1.PodTemplate{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodTemplate(ref), + corev1.PodTemplateList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodTemplateList(ref), + corev1.PodTemplateSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PodTemplateSpec(ref), + corev1.PortStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PortStatus(ref), + corev1.PortworxVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PortworxVolumeSource(ref), + corev1.PreferAvoidPodsEntry{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PreferAvoidPodsEntry(ref), + corev1.PreferredSchedulingTerm{}.OpenAPIModelName(): schema_k8sio_api_core_v1_PreferredSchedulingTerm(ref), + corev1.Probe{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Probe(ref), + corev1.ProbeHandler{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ProbeHandler(ref), + corev1.ProjectedVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ProjectedVolumeSource(ref), + corev1.QuobyteVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_QuobyteVolumeSource(ref), + corev1.RBDPersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_RBDPersistentVolumeSource(ref), + corev1.RBDVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_RBDVolumeSource(ref), + corev1.RangeAllocation{}.OpenAPIModelName(): schema_k8sio_api_core_v1_RangeAllocation(ref), + corev1.ReplicationController{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ReplicationController(ref), + corev1.ReplicationControllerCondition{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ReplicationControllerCondition(ref), + corev1.ReplicationControllerList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ReplicationControllerList(ref), + corev1.ReplicationControllerSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ReplicationControllerSpec(ref), + corev1.ReplicationControllerStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ReplicationControllerStatus(ref), + corev1.ResourceClaim{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ResourceClaim(ref), + corev1.ResourceFieldSelector{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ResourceFieldSelector(ref), + corev1.ResourceHealth{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ResourceHealth(ref), + corev1.ResourceQuota{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ResourceQuota(ref), + corev1.ResourceQuotaList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ResourceQuotaList(ref), + corev1.ResourceQuotaSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ResourceQuotaSpec(ref), + corev1.ResourceQuotaStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ResourceQuotaStatus(ref), + corev1.ResourceRequirements{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ResourceRequirements(ref), + corev1.ResourceStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ResourceStatus(ref), + corev1.SELinuxOptions{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SELinuxOptions(ref), + corev1.ScaleIOPersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ScaleIOPersistentVolumeSource(ref), + corev1.ScaleIOVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ScaleIOVolumeSource(ref), + corev1.ScopeSelector{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ScopeSelector(ref), + corev1.ScopedResourceSelectorRequirement{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ScopedResourceSelectorRequirement(ref), + corev1.SeccompProfile{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SeccompProfile(ref), + corev1.Secret{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Secret(ref), + corev1.SecretEnvSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SecretEnvSource(ref), + corev1.SecretKeySelector{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SecretKeySelector(ref), + corev1.SecretList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SecretList(ref), + corev1.SecretProjection{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SecretProjection(ref), + corev1.SecretReference{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SecretReference(ref), + corev1.SecretVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SecretVolumeSource(ref), + corev1.SecurityContext{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SecurityContext(ref), + corev1.SerializedReference{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SerializedReference(ref), + corev1.Service{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Service(ref), + corev1.ServiceAccount{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ServiceAccount(ref), + corev1.ServiceAccountList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ServiceAccountList(ref), + corev1.ServiceAccountTokenProjection{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ServiceAccountTokenProjection(ref), + corev1.ServiceList{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ServiceList(ref), + corev1.ServicePort{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ServicePort(ref), + corev1.ServiceProxyOptions{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ServiceProxyOptions(ref), + corev1.ServiceSpec{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ServiceSpec(ref), + corev1.ServiceStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_ServiceStatus(ref), + corev1.SessionAffinityConfig{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SessionAffinityConfig(ref), + corev1.SleepAction{}.OpenAPIModelName(): schema_k8sio_api_core_v1_SleepAction(ref), + corev1.StorageOSPersistentVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_StorageOSPersistentVolumeSource(ref), + corev1.StorageOSVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_StorageOSVolumeSource(ref), + corev1.Sysctl{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Sysctl(ref), + corev1.TCPSocketAction{}.OpenAPIModelName(): schema_k8sio_api_core_v1_TCPSocketAction(ref), + corev1.Taint{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Taint(ref), + corev1.Toleration{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Toleration(ref), + corev1.TopologySelectorLabelRequirement{}.OpenAPIModelName(): schema_k8sio_api_core_v1_TopologySelectorLabelRequirement(ref), + corev1.TopologySelectorTerm{}.OpenAPIModelName(): schema_k8sio_api_core_v1_TopologySelectorTerm(ref), + corev1.TopologySpreadConstraint{}.OpenAPIModelName(): schema_k8sio_api_core_v1_TopologySpreadConstraint(ref), + corev1.TypedLocalObjectReference{}.OpenAPIModelName(): schema_k8sio_api_core_v1_TypedLocalObjectReference(ref), + corev1.TypedObjectReference{}.OpenAPIModelName(): schema_k8sio_api_core_v1_TypedObjectReference(ref), + corev1.Volume{}.OpenAPIModelName(): schema_k8sio_api_core_v1_Volume(ref), + corev1.VolumeDevice{}.OpenAPIModelName(): schema_k8sio_api_core_v1_VolumeDevice(ref), + corev1.VolumeMount{}.OpenAPIModelName(): schema_k8sio_api_core_v1_VolumeMount(ref), + corev1.VolumeMountStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_VolumeMountStatus(ref), + corev1.VolumeNodeAffinity{}.OpenAPIModelName(): schema_k8sio_api_core_v1_VolumeNodeAffinity(ref), + corev1.VolumeProjection{}.OpenAPIModelName(): schema_k8sio_api_core_v1_VolumeProjection(ref), + corev1.VolumeResourceRequirements{}.OpenAPIModelName(): schema_k8sio_api_core_v1_VolumeResourceRequirements(ref), + corev1.VolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_VolumeSource(ref), + corev1.VolumeStatus{}.OpenAPIModelName(): schema_k8sio_api_core_v1_VolumeStatus(ref), + corev1.VsphereVirtualDiskVolumeSource{}.OpenAPIModelName(): schema_k8sio_api_core_v1_VsphereVirtualDiskVolumeSource(ref), + corev1.WeightedPodAffinityTerm{}.OpenAPIModelName(): schema_k8sio_api_core_v1_WeightedPodAffinityTerm(ref), + corev1.WindowsSecurityContextOptions{}.OpenAPIModelName(): schema_k8sio_api_core_v1_WindowsSecurityContextOptions(ref), + rbacv1.AggregationRule{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_AggregationRule(ref), + rbacv1.ClusterRole{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_ClusterRole(ref), + rbacv1.ClusterRoleBinding{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_ClusterRoleBinding(ref), + rbacv1.ClusterRoleBindingList{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_ClusterRoleBindingList(ref), + rbacv1.ClusterRoleList{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_ClusterRoleList(ref), + rbacv1.PolicyRule{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_PolicyRule(ref), + rbacv1.Role{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_Role(ref), + rbacv1.RoleBinding{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_RoleBinding(ref), + rbacv1.RoleBindingList{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_RoleBindingList(ref), + rbacv1.RoleList{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_RoleList(ref), + rbacv1.RoleRef{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_RoleRef(ref), + rbacv1.Subject{}.OpenAPIModelName(): schema_k8sio_api_rbac_v1_Subject(ref), + resource.Quantity{}.OpenAPIModelName(): schema_apimachinery_pkg_api_resource_Quantity(ref), + metav1.APIGroup{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_APIGroup(ref), + metav1.APIGroupList{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_APIGroupList(ref), + metav1.APIResource{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_APIResource(ref), + metav1.APIResourceList{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_APIResourceList(ref), + metav1.APIVersions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_APIVersions(ref), + metav1.ApplyOptions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_ApplyOptions(ref), + metav1.Condition{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_Condition(ref), + metav1.CreateOptions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_CreateOptions(ref), + metav1.DeleteOptions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_DeleteOptions(ref), + metav1.Duration{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_Duration(ref), + metav1.FieldSelectorRequirement{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_FieldSelectorRequirement(ref), + metav1.FieldsV1{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_FieldsV1(ref), + metav1.GetOptions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_GetOptions(ref), + metav1.GroupKind{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_GroupKind(ref), + metav1.GroupResource{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_GroupResource(ref), + metav1.GroupVersion{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_GroupVersion(ref), + metav1.GroupVersionForDiscovery{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_GroupVersionForDiscovery(ref), + metav1.GroupVersionKind{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_GroupVersionKind(ref), + metav1.GroupVersionResource{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_GroupVersionResource(ref), + metav1.InternalEvent{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_InternalEvent(ref), + metav1.LabelSelector{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_LabelSelector(ref), + metav1.LabelSelectorRequirement{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_LabelSelectorRequirement(ref), + metav1.List{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_List(ref), + metav1.ListMeta{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_ListMeta(ref), + metav1.ListOptions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_ListOptions(ref), + metav1.ManagedFieldsEntry{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_ManagedFieldsEntry(ref), + metav1.MicroTime{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_MicroTime(ref), + metav1.ObjectMeta{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_ObjectMeta(ref), + metav1.OwnerReference{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_OwnerReference(ref), + metav1.PartialObjectMetadata{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_PartialObjectMetadata(ref), + metav1.PartialObjectMetadataList{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_PartialObjectMetadataList(ref), + metav1.Patch{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_Patch(ref), + metav1.PatchOptions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_PatchOptions(ref), + metav1.Preconditions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_Preconditions(ref), + metav1.RootPaths{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_RootPaths(ref), + metav1.ServerAddressByClientCIDR{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_ServerAddressByClientCIDR(ref), + metav1.ShardInfo{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_ShardInfo(ref), + metav1.Status{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_Status(ref), + metav1.StatusCause{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_StatusCause(ref), + metav1.StatusDetails{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_StatusDetails(ref), + metav1.Table{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_Table(ref), + metav1.TableColumnDefinition{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_TableColumnDefinition(ref), + metav1.TableOptions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_TableOptions(ref), + metav1.TableRow{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_TableRow(ref), + metav1.TableRowCondition{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_TableRowCondition(ref), + metav1.Time{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_Time(ref), + metav1.Timestamp{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_Timestamp(ref), + metav1.TypeMeta{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_TypeMeta(ref), + metav1.UpdateOptions{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_UpdateOptions(ref), + metav1.WatchEvent{}.OpenAPIModelName(): schema_pkg_apis_meta_v1_WatchEvent(ref), + runtime.RawExtension{}.OpenAPIModelName(): schema_k8sio_apimachinery_pkg_runtime_RawExtension(ref), + runtime.TypeMeta{}.OpenAPIModelName(): schema_k8sio_apimachinery_pkg_runtime_TypeMeta(ref), + runtime.Unknown{}.OpenAPIModelName(): schema_k8sio_apimachinery_pkg_runtime_Unknown(ref), + intstr.IntOrString{}.OpenAPIModelName(): schema_apimachinery_pkg_util_intstr_IntOrString(ref), } } -func schema_openshift_api_apiextensions_v1alpha1_APIVersions(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_APIServer(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "APIVersions specifies a set of API versions of a CRD.", + Description: "APIServer holds configuration (like serving certificates, client CA and CORS domains) shared by all API servers in the system, among them especially kube-apiserver and openshift-apiserver. The canonical name of an instance is 'cluster'.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "defaultSelection": { + "kind": { SchemaProps: spec.SchemaProps{ - Description: "defaultSelection specifies a method for automatically selecting a set of versions to require.\n\nValid options are StorageOnly and AllServed. When set to StorageOnly, only the storage version is selected for compatibility assessment. When set to AllServed, all served versions are selected for compatibility assessment.\n\nThis field is required.", + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", Type: []string{"string"}, Format: "", }, }, - "additionalVersions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, + "apiVersion": { + SchemaProps: spec.SchemaProps{ + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Type: []string{"string"}, + Format: "", }, + }, + "metadata": { SchemaProps: spec.SchemaProps{ - Description: "additionalVersions specifies a set api versions to require in addition to the default selection. It is explicitly permitted to specify a version in additionalVersions which was also selected by the default selection. The selections will be merged and deduplicated.\n\nEach item must be at most 63 characters in length, and must must consist of only lowercase alphanumeric characters and hyphens, and must start with an alphabetic character and end with an alphanumeric character.// with an alphabetic character and end with an alphanumeric character. At most 32 additional versions may be specified.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), }, }, - }, - Required: []string{"defaultSelection"}, - }, - }, - } -} - -func schema_openshift_api_apiextensions_v1alpha1_CRDData(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CRDData contains the complete definition of a CRD.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { + "spec": { SchemaProps: spec.SchemaProps{ - Description: "type indicates the type of the CRD data. The only supported type is \"YAML\". This field is required.", - Type: []string{"string"}, - Format: "", + Description: "spec holds user settable values for configuration", + Default: map[string]interface{}{}, + Ref: ref(v1.APIServerSpec{}.OpenAPIModelName()), }, }, - "data": { + "status": { SchemaProps: spec.SchemaProps{ - Description: "data contains the complete definition of the CRD. This field must be in the format specified by the type field. It may not be longer than 1572864 characters. This field is required.", - Type: []string{"string"}, - Format: "", + Description: "status holds observed values from the cluster. They may not be overridden.", + Default: map[string]interface{}{}, + Ref: ref(v1.APIServerStatus{}.OpenAPIModelName()), }, }, }, - Required: []string{"type", "data"}, + Required: []string{"spec"}, }, }, + Dependencies: []string{ + v1.APIServerSpec{}.OpenAPIModelName(), v1.APIServerStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_apiextensions_v1alpha1_CompatibilityRequirement(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_APIServerEncryption(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "CompatibilityRequirement expresses a set of requirements on a target CRD. It is used to ensure compatibility between different actors using the same CRD.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "APIServerEncryption is used to encrypt sensitive resources on the cluster.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { + "type": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "type defines what encryption type should be used to encrypt resources at the datastore layer. When this field is unset (i.e. when it is set to the empty string), identity is implied. The behavior of unset can and will change over time. Even if encryption is enabled by default, the meaning of unset may change to a different encryption type based on changes in best practices.\n\nWhen encryption is enabled, all sensitive resources shipped with the platform are encrypted. This list of sensitive resources can and will change over time. The current authoritative list is:\n\n 1. secrets\n 2. configmaps\n 3. routes.route.openshift.io\n 4. oauthaccesstokens.oauth.openshift.io\n 5. oauthauthorizetokens.oauth.openshift.io", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { + "kms": { SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the desired behavior of the Compatibility Requirement.", + Description: "kms defines the configuration for the external KMS instance that manages the encryption keys, when KMS encryption is enabled sensitive resources will be encrypted using keys managed by an externally configured KMS instance.\n\nThe Key Management Service (KMS) instance provides symmetric encryption and is responsible for managing the lifecyle of the encryption keys outside of the control plane. This allows integration with an external provider to manage the data encryption keys securely.", Default: map[string]interface{}{}, - Ref: ref(v1alpha1.CompatibilityRequirementSpec{}.OpenAPIModelName()), + Ref: ref(v1.KMSPluginConfig{}.OpenAPIModelName()), }, }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status is the most recently observed status of the Compatibility Requirement.", - Default: map[string]interface{}{}, - Ref: ref(v1alpha1.CompatibilityRequirementStatus{}.OpenAPIModelName()), + }, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "type", + "fields-to-discriminateBy": map[string]interface{}{ + "kms": "KMS", + }, }, }, }, - Required: []string{"metadata", "spec"}, }, }, Dependencies: []string{ - v1alpha1.CompatibilityRequirementSpec{}.OpenAPIModelName(), v1alpha1.CompatibilityRequirementStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.KMSPluginConfig{}.OpenAPIModelName()}, } } -func schema_openshift_api_apiextensions_v1alpha1_CompatibilityRequirementList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_APIServerList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "CompatibilityRequirementList is a collection of CompatibilityRequirements.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -2048,673 +816,644 @@ func schema_openshift_api_apiextensions_v1alpha1_CompatibilityRequirementList(re }, "items": { SchemaProps: spec.SchemaProps{ - Description: "items is a list of CompatibilityRequirements.", - Type: []string{"array"}, + Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(v1alpha1.CompatibilityRequirement{}.OpenAPIModelName()), + Ref: ref(v1.APIServer{}.OpenAPIModelName()), }, }, }, }, }, }, + Required: []string{"metadata", "items"}, }, }, Dependencies: []string{ - v1alpha1.CompatibilityRequirement{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.APIServer{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_apiextensions_v1alpha1_CompatibilityRequirementSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_APIServerNamedServingCert(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "CompatibilityRequirementSpec is the specification of the desired behavior of the Compatibility Requirement.", + Description: "APIServerNamedServingCert maps a server DNS name, as understood by a client, to a certificate.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "compatibilitySchema": { - SchemaProps: spec.SchemaProps{ - Description: "compatibilitySchema defines the schema used by customResourceDefinitionSchemaValidation and objectSchemaValidation. This field is required.", - Default: map[string]interface{}{}, - Ref: ref(v1alpha1.CompatibilitySchema{}.OpenAPIModelName()), + "names": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, }, - }, - "customResourceDefinitionSchemaValidation": { SchemaProps: spec.SchemaProps{ - Description: "customResourceDefinitionSchemaValidation ensures that updates to the installed CRD are compatible with this compatibility requirement. If not specified, admission of the target CRD will not be validated. This field is optional.", - Default: map[string]interface{}{}, - Ref: ref(v1alpha1.CustomResourceDefinitionSchemaValidation{}.OpenAPIModelName()), + Description: "names is a optional list of explicit DNS names (leading wildcards allowed) that should use this certificate to serve secure traffic. If no names are provided, the implicit names will be extracted from the certificates. Exact names trump over wildcard names. Explicit names defined here trump over extracted implicit names.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "objectSchemaValidation": { + "servingCertificate": { SchemaProps: spec.SchemaProps{ - Description: "objectSchemaValidation ensures that matching resources conform to compatibilitySchema. If not specified, admission of matching resources will not be validated. This field is optional.", + Description: "servingCertificate references a kubernetes.io/tls type secret containing the TLS cert info for serving secure traffic. The secret must exist in the openshift-config namespace and contain the following required fields: - Secret.Data[\"tls.key\"] - TLS private key. - Secret.Data[\"tls.crt\"] - TLS certificate.", Default: map[string]interface{}{}, - Ref: ref(v1alpha1.ObjectSchemaValidation{}.OpenAPIModelName()), + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), }, }, }, - Required: []string{"compatibilitySchema"}, + Required: []string{"servingCertificate"}, }, }, Dependencies: []string{ - v1alpha1.CompatibilitySchema{}.OpenAPIModelName(), v1alpha1.CustomResourceDefinitionSchemaValidation{}.OpenAPIModelName(), v1alpha1.ObjectSchemaValidation{}.OpenAPIModelName()}, + v1.SecretNameReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_apiextensions_v1alpha1_CompatibilityRequirementStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_APIServerServingCerts(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "CompatibilityRequirementStatus defines the observed status of the Compatibility Requirement.", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "conditions": { + "namedCertificates": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", + "x-kubernetes-list-type": "atomic", }, }, SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status. Known condition types are Progressing, Admitted, and Compatible.\n\nThe Progressing condition indicates if reconciliation of a CompatibilityRequirement is still progressing or has finished.\n\nThe Admitted condition indicates if the validating webhook has been configured.\n\nThe Compatible condition indicates if the observed CRD is compatible with the requirement.", + Description: "namedCertificates references secrets containing the TLS cert info for serving secure traffic to specific hostnames. If no named certificates are provided, or no named certificates match the server name as understood by a client, the defaultServingCertificate will be used.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), + Ref: ref(v1.APIServerNamedServingCert{}.OpenAPIModelName()), }, }, }, }, }, - "observedCRD": { - SchemaProps: spec.SchemaProps{ - Description: "observedCRD documents the uid and generation of the CRD object when the current status was written. This field will be omitted if the target CRD does not exist or could not be retrieved.", - Default: map[string]interface{}{}, - Ref: ref(v1alpha1.ObservedCRD{}.OpenAPIModelName()), - }, - }, - "crdName": { - SchemaProps: spec.SchemaProps{ - Description: "crdName is the name of the target CRD. The target CRD is not required to exist, as we may legitimately place requirements on it before it is created. The observed CRD is given in status.observedCRD, which will be empty if no CRD is observed. When present, must be between 1 and 253 characters and conform to RFC 1123 subdomain format: lowercase alphanumeric characters, '-' or '.', starting and ending with alphanumeric characters. When not specified, the requirement applies to any CRD name discovered from the compatibility schema. This field is optional. Once set, the value cannot be changed and must always remain set.", - Type: []string{"string"}, - Format: "", - }, - }, }, }, }, Dependencies: []string{ - v1alpha1.ObservedCRD{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, + v1.APIServerNamedServingCert{}.OpenAPIModelName()}, } } -func schema_openshift_api_apiextensions_v1alpha1_CompatibilitySchema(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_APIServerSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "CompatibilitySchema defines the schema used by crdSchemaValidation and objectSchemaValidation.", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "customResourceDefinition": { + "servingCerts": { SchemaProps: spec.SchemaProps{ - Description: "customResourceDefinition contains the complete definition of the CRD for schema and object validation purposes. This field is required.", + Description: "servingCert is the TLS cert info for serving secure traffic. If not specified, operator managed certificates will be used for serving secure traffic.", Default: map[string]interface{}{}, - Ref: ref(v1alpha1.CRDData{}.OpenAPIModelName()), + Ref: ref(v1.APIServerServingCerts{}.OpenAPIModelName()), }, }, - "requiredVersions": { + "clientCA": { SchemaProps: spec.SchemaProps{ - Description: "requiredVersions specifies a subset of the CRD's API versions which will be asserted for compatibility. This field is required.", + Description: "clientCA references a ConfigMap containing a certificate bundle for the signers that will be recognized for incoming client certificates in addition to the operator managed signers. If this is empty, then only operator managed signers are valid. You usually only have to set this if you have your own PKI you wish to honor client certificates from. The ConfigMap must exist in the openshift-config namespace and contain the following required fields: - ConfigMap.Data[\"ca-bundle.crt\"] - CA bundle.", Default: map[string]interface{}{}, - Ref: ref(v1alpha1.APIVersions{}.OpenAPIModelName()), + Ref: ref(v1.ConfigMapNameReference{}.OpenAPIModelName()), }, }, - "excludedFields": { + "additionalCORSAllowedOrigins": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ "x-kubernetes-list-type": "atomic", }, }, SchemaProps: spec.SchemaProps{ - Description: "excludedFields is a set of fields in the schema which will not be validated by crdSchemaValidation or objectSchemaValidation. The list may contain at most 64 fields. Each path in the list must be unique. When not specified, all fields in the schema will be validated.", + Description: "additionalCORSAllowedOrigins lists additional, user-defined regular expressions describing hosts for which the API server allows access using the CORS headers. This may be needed to access the API and the integrated OAuth server from JavaScript applications. The values are regular expressions that correspond to the Golang regular expression language.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(v1alpha1.APIExcludedField{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, + "encryption": { + SchemaProps: spec.SchemaProps{ + Description: "encryption allows the configuration of encryption of resources at the datastore layer.", + Default: map[string]interface{}{}, + Ref: ref(v1.APIServerEncryption{}.OpenAPIModelName()), + }, + }, + "tlsSecurityProfile": { + SchemaProps: spec.SchemaProps{ + Description: "tlsSecurityProfile specifies settings for TLS connections for externally exposed servers.\n\nWhen omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is the Intermediate profile.", + Ref: ref(v1.TLSSecurityProfile{}.OpenAPIModelName()), + }, + }, + "tlsAdherence": { + SchemaProps: spec.SchemaProps{ + Description: "tlsAdherence controls if components in the cluster adhere to the TLS security profile configured on this APIServer resource.\n\nValid values are \"LegacyAdheringComponentsOnly\" and \"StrictAllComponents\".\n\nWhen set to \"LegacyAdheringComponentsOnly\", components that already honor the cluster-wide TLS profile continue to do so. Components that do not already honor it continue to use their individual TLS configurations.\n\nWhen set to \"StrictAllComponents\", all components must honor the configured TLS profile unless they have a component-specific TLS configuration that overrides it. This mode is recommended for security-conscious deployments and is required for certain compliance frameworks.\n\nNote: Some components such as Kubelet and IngressController have their own dedicated TLS configuration mechanisms via KubeletConfig and IngressController CRs respectively. When these component-specific TLS configurations are set, they take precedence over the cluster-wide tlsSecurityProfile. When not set, these components fall back to the cluster-wide default.\n\nComponents that encounter an unknown value for tlsAdherence should treat it as \"StrictAllComponents\" and log a warning to ensure forward compatibility while defaulting to the more secure behavior.\n\nThis field is optional. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is LegacyAdheringComponentsOnly.\n\nOnce set, this field may be changed to a different value, but may not be removed.", + Type: []string{"string"}, + Format: "", + }, + }, + "audit": { + SchemaProps: spec.SchemaProps{ + Description: "audit specifies the settings for audit configuration to be applied to all OpenShift-provided API servers in the cluster.", + Default: map[string]interface{}{}, + Ref: ref(v1.Audit{}.OpenAPIModelName()), + }, + }, }, - Required: []string{"customResourceDefinition", "requiredVersions"}, }, }, Dependencies: []string{ - v1alpha1.APIExcludedField{}.OpenAPIModelName(), v1alpha1.APIVersions{}.OpenAPIModelName(), v1alpha1.CRDData{}.OpenAPIModelName()}, + v1.APIServerEncryption{}.OpenAPIModelName(), v1.APIServerServingCerts{}.OpenAPIModelName(), v1.Audit{}.OpenAPIModelName(), v1.ConfigMapNameReference{}.OpenAPIModelName(), v1.TLSSecurityProfile{}.OpenAPIModelName()}, } } -func schema_openshift_api_apiextensions_v1alpha1_CustomResourceDefinitionSchemaValidation(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_APIServerStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Type: []string{"object"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_AWSDNSSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "CustomResourceDefinitionSchemaValidation ensures that updates to the installed CRD are compatible with this compatibility requirement.", + Description: "AWSDNSSpec contains DNS configuration specific to the Amazon Web Services cloud provider.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "action": { + "privateZoneIAMRole": { SchemaProps: spec.SchemaProps{ - Description: "action determines whether violations are rejected (Deny) or admitted with an API warning (Warn). Valid options are Deny and Warn. When set to Deny, incompatible CRDs will be rejected and not admitted to the cluster. When set to Warn, incompatible CRDs will be allowed but a warning will be generated in the API response. This field is required.\n\nPossible enum values:\n - `\"Deny\"` means that incompatible CRDs will be rejected.\n - `\"Warn\"` means that incompatible CRDs will be allowed but a warning will be generated.", + Description: "privateZoneIAMRole contains the ARN of an IAM role that should be assumed when performing operations on the cluster's private hosted zone specified in the cluster DNS config. When left empty, no role should be assumed.\n\nThe ARN must follow the format: arn::iam:::role/, where: is the AWS partition (aws, aws-cn, aws-us-gov, or aws-eusc), is a 12-digit numeric identifier for the AWS account, is the IAM role name.", + Default: "", Type: []string{"string"}, Format: "", - Enum: []interface{}{"Deny", "Warn"}, }, }, }, - Required: []string{"action"}, }, }, } } -func schema_openshift_api_apiextensions_v1alpha1_ObjectSchemaValidation(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_AWSIngressSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ObjectSchemaValidation ensures that matching objects conform to the compatibilitySchema.", + Description: "AWSIngressSpec holds the desired state of the Ingress for Amazon Web Services infrastructure provider. This only includes fields that can be modified in the cluster.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "action": { + "type": { SchemaProps: spec.SchemaProps{ - Description: "action determines whether violations are rejected (Deny) or admitted with an API warning (Warn). Valid options are Deny and Warn. When set to Deny, incompatible Objects will be rejected and not admitted to the cluster. When set to Warn, incompatible Objects will be allowed but a warning will be generated in the API response. This field is required.\n\nPossible enum values:\n - `\"Deny\"` means that incompatible CRDs will be rejected.\n - `\"Warn\"` means that incompatible CRDs will be allowed but a warning will be generated.", + Description: "type allows user to set a load balancer type. When this field is set the default ingresscontroller will get created using the specified LBType. If this field is not set then the default ingress controller of LBType Classic will be created. Valid values are:\n\n* \"Classic\": A Classic Load Balancer that makes routing decisions at either\n the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See\n the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb\n\n* \"NLB\": A Network Load Balancer that makes routing decisions at the\n transport layer (TCP/SSL). See the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb", + Default: "", Type: []string{"string"}, Format: "", - Enum: []interface{}{"Deny", "Warn"}, - }, - }, - "namespaceSelector": { - SchemaProps: spec.SchemaProps{ - Description: "namespaceSelector defines a label selector for namespaces. If defined, only objects in a namespace with matching labels will be subject to validation. When not specified, objects for validation will not be filtered by namespace.", - Default: map[string]interface{}{}, - Ref: ref(metav1.LabelSelector{}.OpenAPIModelName()), }, }, - "objectSelector": { - SchemaProps: spec.SchemaProps{ - Description: "objectSelector defines a label selector for objects. If defined, only objects with matching labels will be subject to validation. When not specified, objects for validation will not be filtered by label.", - Default: map[string]interface{}{}, - Ref: ref(metav1.LabelSelector{}.OpenAPIModelName()), + }, + Required: []string{"type"}, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "type", + "fields-to-discriminateBy": map[string]interface{}{}, }, }, - "matchConditions": { + }, + }, + }, + } +} + +func schema_openshift_api_config_v1_AWSPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "AWSPlatformSpec holds the desired state of the Amazon Web Services infrastructure provider. This only includes fields that can be modified in the cluster.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "serviceEndpoints": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", + "x-kubernetes-list-type": "atomic", }, }, SchemaProps: spec.SchemaProps{ - Description: "matchConditions defines the matchConditions field of the resulting ValidatingWebhookConfiguration. When present, must contain between 1 and 64 match conditions. When not specified, the webhook will match all requests according to its other selectors.", + Description: "serviceEndpoints list contains custom endpoints which will override default service endpoint of AWS Services. There must be only one ServiceEndpoint for a service.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(admissionregistrationv1.MatchCondition{}.OpenAPIModelName()), + Ref: ref(v1.AWSServiceEndpoint{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"action"}, }, }, Dependencies: []string{ - admissionregistrationv1.MatchCondition{}.OpenAPIModelName(), metav1.LabelSelector{}.OpenAPIModelName()}, + v1.AWSServiceEndpoint{}.OpenAPIModelName()}, } } -func schema_openshift_api_apiextensions_v1alpha1_ObservedCRD(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_AWSPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ObservedCRD contains information about the observed target CRD.", + Description: "AWSPlatformStatus holds the current status of the Amazon Web Services infrastructure provider.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "uid": { + "region": { SchemaProps: spec.SchemaProps{ - Description: "uid is the uid of the observed CRD. Must be a valid UUID consisting of lowercase hexadecimal digits in 5 hyphenated blocks (8-4-4-4-12 format). Length must be between 1 and 36 characters.", + Description: "region holds the default AWS region for new AWS resources created by the cluster.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "generation": { + "serviceEndpoints": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "generation is the observed generation of the CRD. Must be a positive integer (minimum value of 1).", - Type: []string{"integer"}, - Format: "int64", + Description: "serviceEndpoints list contains custom endpoints which will override default service endpoint of AWS Services. There must be only one ServiceEndpoint for a service.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.AWSServiceEndpoint{}.OpenAPIModelName()), + }, + }, + }, + }, + }, + "resourceTags": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, + SchemaProps: spec.SchemaProps{ + Description: "resourceTags is a list of additional tags to apply to AWS resources created for the cluster. See https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html for information on tagging AWS resources. AWS supports a maximum of 50 tags per resource. OpenShift reserves 25 tags for its use, leaving 25 tags available for the user.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.AWSResourceTag{}.OpenAPIModelName()), + }, + }, + }, + }, + }, + "cloudLoadBalancerConfig": { + SchemaProps: spec.SchemaProps{ + Description: "cloudLoadBalancerConfig holds configuration related to DNS and cloud load balancers. It allows configuration of in-cluster DNS as an alternative to the platform default DNS implementation. When using the ClusterHosted DNS type, Load Balancer IP addresses must be provided for the API and internal API load balancers as well as the ingress load balancer.", + Default: map[string]interface{}{"dnsType": "PlatformDefault"}, + Ref: ref(v1.CloudLoadBalancerConfig{}.OpenAPIModelName()), + }, + }, + "ipFamily": { + SchemaProps: spec.SchemaProps{ + Description: "ipFamily specifies the IP protocol family that should be used for AWS network resources. This controls whether AWS resources are created with IPv4-only, or dual-stack networking with IPv4 or IPv6 as the primary protocol family.\n\nValid values are: * \"IPv4\" (default): Cloud platform resources use IPv4 addressing only. * \"DualStackIPv6Primary\": Cloud platform resources use dual-stack networking with IPv6 as the primary protocol family. * \"DualStackIPv4Primary\": Cloud platform resources use dual-stack networking with IPv4 as the primary protocol family.\n\nWhen omitted, this field defaults to \"IPv4\".\n\nThis field is immutable and cannot be changed once set.", + Default: "IPv4", + Type: []string{"string"}, + Format: "", }, }, }, - Required: []string{"uid", "generation"}, + Required: []string{"region"}, }, }, + Dependencies: []string{ + v1.AWSResourceTag{}.OpenAPIModelName(), v1.AWSServiceEndpoint{}.OpenAPIModelName(), v1.CloudLoadBalancerConfig{}.OpenAPIModelName()}, } } -func schema_openshift_api_apiserver_v1_APIRequestCount(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_AWSResourceTag(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "APIRequestCount tracks requests made to an API. The instance name must be of the form `resource.version.group`, matching the resource.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "AWSResourceTag is a tag to apply to AWS resources created for the cluster.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "key": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "key sets the key of the AWS resource tag key-value pair. Key is required when defining an AWS resource tag. Key should consist of between 1 and 128 characters, and may contain only the set of alphanumeric characters, space (' '), '_', '.', '/', '=', '+', '-', ':', and '@'.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "value": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "value sets the value of the AWS resource tag key-value pair. Value is required when defining an AWS resource tag. Value should consist of between 1 and 256 characters, and may contain only the set of alphanumeric characters, space (' '), '_', '.', '/', '=', '+', '-', ':', and '@'. Some AWS service do not support empty values. Since tags are added to resources in many services, the length of the tag value must meet the requirements of all services.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec defines the characteristics of the resource.", - Default: map[string]interface{}{}, - Ref: ref(v1.APIRequestCountSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status contains the observed state of the resource.", - Default: map[string]interface{}{}, - Ref: ref(v1.APIRequestCountStatus{}.OpenAPIModelName()), - }, - }, }, - Required: []string{"spec"}, + Required: []string{"key", "value"}, }, }, - Dependencies: []string{ - v1.APIRequestCountSpec{}.OpenAPIModelName(), v1.APIRequestCountStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_apiserver_v1_APIRequestCountList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_AWSServiceEndpoint(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "APIRequestCountList is a list of APIRequestCount resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "AWSServiceEndpoint store the configuration of a custom url to override existing defaults of AWS Services.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "name is the name of the AWS service. The list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html This must be provided and cannot be empty.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "url": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(v1.APIRequestCount{}.OpenAPIModelName()), - }, - }, - }, - }, - }, }, - Required: []string{"metadata", "items"}, + Required: []string{"name", "url"}, }, }, - Dependencies: []string{ - v1.APIRequestCount{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_apiserver_v1_APIRequestCountSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_AcceptRisk(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, + Description: "AcceptRisk represents a risk that is considered acceptable.", + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "numberOfUsersToReport": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "numberOfUsersToReport is the number of users to include in the report. If unspecified or zero, the default is ten. This is default is subject to change.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", + Description: "name is the name of the acceptable risk. It must be a non-empty string and must not exceed 256 characters.", + Type: []string{"string"}, + Format: "", }, }, }, + Required: []string{"name"}, }, }, } } -func schema_openshift_api_apiserver_v1_APIRequestCountStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_AdmissionConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ Type: []string{"object"}, Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", + "pluginConfig": { + SchemaProps: spec.SchemaProps{ + Type: []string{"object"}, + AdditionalProperties: &spec.SchemaOrBool{ + Allows: true, + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.AdmissionPluginConfig{}.OpenAPIModelName()), + }, }, - "x-kubernetes-list-type": "map", }, }, + }, + "enabledPlugins": { SchemaProps: spec.SchemaProps{ - Description: "conditions contains details of the current status of this API Resource.", + Description: "enabledPlugins is a list of admission plugins that must be on in addition to the default list. Some admission plugins are disabled by default, but certain configurations require them. This is fairly uncommon and can result in performance penalties and unexpected behavior.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, - "removedInRelease": { - SchemaProps: spec.SchemaProps{ - Description: "removedInRelease is when the API will be removed.", - Type: []string{"string"}, - Format: "", - }, - }, - "requestCount": { - SchemaProps: spec.SchemaProps{ - Description: "requestCount is a sum of all requestCounts across all current hours, nodes, and users.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - "currentHour": { - SchemaProps: spec.SchemaProps{ - Description: "currentHour contains request history for the current hour. This is porcelain to make the API easier to read by humans seeing if they addressed a problem. This field is reset on the hour.", - Default: map[string]interface{}{}, - Ref: ref(v1.PerResourceAPIRequestLog{}.OpenAPIModelName()), - }, - }, - "last24h": { + "disabledPlugins": { SchemaProps: spec.SchemaProps{ - Description: "last24h contains request history for the last 24 hours, indexed by the hour, so 12:00AM-12:59 is in index 0, 6am-6:59am is index 6, etc. The index of the current hour is updated live and then duplicated into the requestsLastHour field.", + Description: "disabledPlugins is a list of admission plugins that must be off. Putting something in this list is almost always a mistake and likely to result in cluster instability.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(v1.PerResourceAPIRequestLog{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, }, - Required: []string{"requestCount"}, }, }, Dependencies: []string{ - v1.PerResourceAPIRequestLog{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, + v1.AdmissionPluginConfig{}.OpenAPIModelName()}, } } -func schema_openshift_api_apiserver_v1_PerNodeAPIRequestLog(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_AdmissionPluginConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "PerNodeAPIRequestLog contains logs of requests to a certain node.", + Description: "AdmissionPluginConfig holds the necessary configuration options for admission plugins", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "nodeName": { + "location": { SchemaProps: spec.SchemaProps{ - Description: "nodeName where the request are being handled.", + Description: "location is the path to a configuration file that contains the plugin's configuration", Default: "", Type: []string{"string"}, Format: "", }, }, - "requestCount": { - SchemaProps: spec.SchemaProps{ - Description: "requestCount is a sum of all requestCounts across all users, even those outside of the top 10 users.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - "byUser": { + "configuration": { SchemaProps: spec.SchemaProps{ - Description: "byUser contains request details by top .spec.numberOfUsersToReport users. Note that because in the case of an apiserver, restart the list of top users is determined on a best-effort basis, the list might be imprecise. In addition, some system users may be explicitly included in the list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(v1.PerUserAPIRequestCount{}.OpenAPIModelName()), - }, - }, - }, + Description: "configuration is an embedded configuration object to be used as the plugin's configuration. If present, it will be used instead of the path to the configuration file.", + Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), }, }, }, - Required: []string{"nodeName", "requestCount", "byUser"}, + Required: []string{"location", "configuration"}, }, }, Dependencies: []string{ - v1.PerUserAPIRequestCount{}.OpenAPIModelName()}, + runtime.RawExtension{}.OpenAPIModelName()}, } } -func schema_openshift_api_apiserver_v1_PerResourceAPIRequestLog(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_AlibabaCloudPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "PerResourceAPIRequestLog logs request for various nodes.", + Description: "AlibabaCloudPlatformSpec holds the desired state of the Alibaba Cloud infrastructure provider. This only includes fields that can be modified in the cluster.", Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "byNode": { - SchemaProps: spec.SchemaProps{ - Description: "byNode contains logs of requests per node.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(v1.PerNodeAPIRequestLog{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "requestCount": { - SchemaProps: spec.SchemaProps{ - Description: "requestCount is a sum of all requestCounts across nodes.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - Required: []string{"requestCount"}, }, }, - Dependencies: []string{ - v1.PerNodeAPIRequestLog{}.OpenAPIModelName()}, } } -func schema_openshift_api_apiserver_v1_PerUserAPIRequestCount(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_AlibabaCloudPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "PerUserAPIRequestCount contains logs of a user's requests.", + Description: "AlibabaCloudPlatformStatus holds the current status of the Alibaba Cloud infrastructure provider.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "username": { + "region": { SchemaProps: spec.SchemaProps{ - Description: "username that made the request.", + Description: "region specifies the region for Alibaba Cloud resources created for the cluster.", Default: "", Type: []string{"string"}, Format: "", }, }, - "userAgent": { + "resourceGroupID": { SchemaProps: spec.SchemaProps{ - Description: "userAgent that made the request. The same user often has multiple binaries which connect (pods with many containers). The different binaries will have different userAgents, but the same user. In addition, we have userAgents with version information embedded and the userName isn't likely to change.", - Default: "", + Description: "resourceGroupID is the ID of the resource group for the cluster.", Type: []string{"string"}, Format: "", }, }, - "requestCount": { - SchemaProps: spec.SchemaProps{ - Description: "requestCount of requests by the user across all verbs.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", + "resourceTags": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "key", + }, + "x-kubernetes-list-type": "map", + }, }, - }, - "byVerb": { SchemaProps: spec.SchemaProps{ - Description: "byVerb details by verb.", + Description: "resourceTags is a list of additional tags to apply to Alibaba Cloud resources created for the cluster.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(v1.PerVerbAPIRequestCount{}.OpenAPIModelName()), + Ref: ref(v1.AlibabaCloudResourceTag{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"username", "userAgent", "requestCount", "byVerb"}, + Required: []string{"region"}, }, }, Dependencies: []string{ - v1.PerVerbAPIRequestCount{}.OpenAPIModelName()}, + v1.AlibabaCloudResourceTag{}.OpenAPIModelName()}, } } -func schema_openshift_api_apiserver_v1_PerVerbAPIRequestCount(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_AlibabaCloudResourceTag(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "PerVerbAPIRequestCount requestCounts requests by API request verb.", + Description: "AlibabaCloudResourceTag is the set of tags to add to apply to resources.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "verb": { + "key": { SchemaProps: spec.SchemaProps{ - Description: "verb of API request (get, list, create, etc...)", + Description: "key is the key of the tag.", Default: "", Type: []string{"string"}, Format: "", }, }, - "requestCount": { + "value": { SchemaProps: spec.SchemaProps{ - Description: "requestCount of requests for verb.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", + Description: "value is the value of the tag.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, - Required: []string{"verb", "requestCount"}, + Required: []string{"key", "value"}, }, }, } } -func schema_openshift_api_apps_v1_CustomDeploymentStrategyParams(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_Audit(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "CustomDeploymentStrategyParams are the input to the Custom deployment strategy.", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "image": { + "profile": { SchemaProps: spec.SchemaProps{ - Description: "image specifies a container image which can carry out a deployment.", + Description: "profile specifies the name of the desired top-level audit profile to be applied to all requests sent to any of the OpenShift-provided API servers in the cluster (kube-apiserver, openshift-apiserver and oauth-apiserver), with the exception of those requests that match one or more of the customRules.\n\nThe following profiles are provided: - Default: default policy which means MetaData level logging with the exception of events\n (not logged at all), oauthaccesstokens and oauthauthorizetokens (both logged at RequestBody\n level).\n- WriteRequestBodies: like 'Default', but logs request and response HTTP payloads for write requests (create, update, patch). - AllRequestBodies: like 'WriteRequestBodies', but also logs request and response HTTP payloads for read requests (get, list). - None: no requests are logged at all, not even oauthaccesstokens and oauthauthorizetokens.\n\nWarning: It is not recommended to disable audit logging by using the `None` profile unless you are fully aware of the risks of not logging data that can be beneficial when troubleshooting issues. If you disable audit logging and a support situation arises, you might need to enable audit logging and reproduce the issue in order to troubleshoot properly.\n\nIf unset, the 'Default' profile is used as the default.", Type: []string{"string"}, Format: "", }, }, - "environment": { - SchemaProps: spec.SchemaProps{ - Description: "environment holds the environment which will be given to the container for Image.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.EnvVar{}.OpenAPIModelName()), - }, + "customRules": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "group", }, + "x-kubernetes-list-type": "map", }, }, - }, - "command": { SchemaProps: spec.SchemaProps{ - Description: "command is optional and overrides CMD in the container Image.", + Description: "customRules specify profiles per group. These profile take precedence over the top-level profile field if they apply. They are evaluation from top to bottom and the first one that matches, applies.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.AuditCustomRule{}.OpenAPIModelName()), }, }, }, @@ -2724,126 +1463,139 @@ func schema_openshift_api_apps_v1_CustomDeploymentStrategyParams(ref common.Refe }, }, Dependencies: []string{ - corev1.EnvVar{}.OpenAPIModelName()}, + v1.AuditCustomRule{}.OpenAPIModelName()}, } } -func schema_openshift_api_apps_v1_DeploymentCause(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_AuditConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "DeploymentCause captures information about a particular cause of a deployment.", + Description: "AuditConfig holds configuration for the audit capabilities", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "type": { + "enabled": { + SchemaProps: spec.SchemaProps{ + Description: "If this flag is set, audit log will be printed in the logs. The logs contains, method, user and a requested URL.", + Default: false, + Type: []string{"boolean"}, + Format: "", + }, + }, + "auditFilePath": { SchemaProps: spec.SchemaProps{ - Description: "type of the trigger that resulted in the creation of a new deployment", + Description: "All requests coming to the apiserver will be logged to this file.", Default: "", Type: []string{"string"}, Format: "", }, }, - "imageTrigger": { + "maximumFileRetentionDays": { SchemaProps: spec.SchemaProps{ - Description: "imageTrigger contains the image trigger details, if this trigger was fired based on an image change", - Ref: ref(appsv1.DeploymentCauseImageTrigger{}.OpenAPIModelName()), + Description: "Maximum number of days to retain old log files based on the timestamp encoded in their filename.", + Default: 0, + Type: []string{"integer"}, + Format: "int32", }, }, - }, - Required: []string{"type"}, - }, - }, - Dependencies: []string{ - appsv1.DeploymentCauseImageTrigger{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_apps_v1_DeploymentCauseImageTrigger(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DeploymentCauseImageTrigger represents details about the cause of a deployment originating from an image change trigger", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "from": { + "maximumRetainedFiles": { SchemaProps: spec.SchemaProps{ - Description: "from is a reference to the changed object which triggered a deployment. The field may have the kinds DockerImage, ImageStreamTag, or ImageStreamImage.", - Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), + Description: "Maximum number of old log files to retain.", + Default: 0, + Type: []string{"integer"}, + Format: "int32", }, }, - }, - Required: []string{"from"}, - }, - }, - Dependencies: []string{ - corev1.ObjectReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_apps_v1_DeploymentCondition(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DeploymentCondition describes the state of a deployment config at a certain point.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { + "maximumFileSizeMegabytes": { + SchemaProps: spec.SchemaProps{ + Description: "Maximum size in megabytes of the log file before it gets rotated. Defaults to 100MB.", + Default: 0, + Type: []string{"integer"}, + Format: "int32", + }, + }, + "policyFile": { SchemaProps: spec.SchemaProps{ - Description: "type of deployment condition.", + Description: "policyFile is a path to the file that defines the audit policy configuration.", Default: "", Type: []string{"string"}, Format: "", }, }, - "status": { + "policyConfiguration": { SchemaProps: spec.SchemaProps{ - Description: "status of the condition, one of True, False, Unknown.", + Description: "policyConfiguration is an embedded policy configuration object to be used as the audit policy configuration. If present, it will be used instead of the path to the policy file.", + Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), + }, + }, + "logFormat": { + SchemaProps: spec.SchemaProps{ + Description: "Format of saved audits (legacy or json).", Default: "", Type: []string{"string"}, Format: "", }, }, - "lastUpdateTime": { + "webHookKubeConfig": { SchemaProps: spec.SchemaProps{ - Description: "The last time this condition was updated.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), + Description: "Path to a .kubeconfig formatted file that defines the audit webhook configuration.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "lastTransitionTime": { + "webHookMode": { SchemaProps: spec.SchemaProps{ - Description: "The last time the condition transitioned from one status to another.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), + Description: "Strategy for sending audit events (block or batch).", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "reason": { + }, + Required: []string{"enabled", "auditFilePath", "maximumFileRetentionDays", "maximumRetainedFiles", "maximumFileSizeMegabytes", "policyFile", "policyConfiguration", "logFormat", "webHookKubeConfig", "webHookMode"}, + }, + }, + Dependencies: []string{ + runtime.RawExtension{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_AuditCustomRule(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "AuditCustomRule describes a custom rule for an audit profile that takes precedence over the top-level profile.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "group": { SchemaProps: spec.SchemaProps{ - Description: "The reason for the condition's last transition.", + Description: "group is a name of group a request user must be member of in order to this profile to apply.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "message": { + "profile": { SchemaProps: spec.SchemaProps{ - Description: "A human readable message indicating details about the transition.", + Description: "profile specifies the name of the desired audit policy configuration to be deployed to all OpenShift-provided API servers in the cluster.\n\nThe following profiles are provided: - Default: the existing default policy. - WriteRequestBodies: like 'Default', but logs request and response HTTP payloads for write requests (create, update, patch). - AllRequestBodies: like 'WriteRequestBodies', but also logs request and response HTTP payloads for read requests (get, list). - None: no requests are logged at all, not even oauthaccesstokens and oauthauthorizetokens.\n\nIf unset, the 'Default' profile is used as the default.", + Default: "", Type: []string{"string"}, Format: "", }, }, }, - Required: []string{"type", "status"}, + Required: []string{"group", "profile"}, }, }, - Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, } } -func schema_openshift_api_apps_v1_DeploymentConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_Authentication(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "Deployment Configs define the template for a pod and manages deploying new images or configuration changes. A single deployment configuration is usually analogous to a single micro-service. Can support many different deployment patterns, including full restart, customizable rolling updates, and fully custom behaviors, as well as pre- and post- deployment hooks. Each individual deployment is represented as a replication controller.\n\nA deployment is \"triggered\" when its configuration is changed or a tag in an Image Stream is changed. Triggers can be disabled to allow manual control over a deployment. The \"strategy\" determines how the deployment is carried out and may be changed at any time. The `latestVersion` field is updated when a new deployment is triggered by any means.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). Deprecated: Use deployments or other means for declarative updates for pods instead.", + Description: "Authentication specifies cluster-wide settings for authentication (like OAuth and webhook token authenticators). The canonical name of an instance is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -2869,16 +1621,16 @@ func schema_openshift_api_apps_v1_DeploymentConfig(ref common.ReferenceCallback) }, "spec": { SchemaProps: spec.SchemaProps{ - Description: "spec represents a desired deployment state and how to deploy to it.", + Description: "spec holds user settable values for configuration", Default: map[string]interface{}{}, - Ref: ref(appsv1.DeploymentConfigSpec{}.OpenAPIModelName()), + Ref: ref(v1.AuthenticationSpec{}.OpenAPIModelName()), }, }, "status": { SchemaProps: spec.SchemaProps{ - Description: "status represents the current deployment state.", + Description: "status holds observed values from the cluster. They may not be overridden.", Default: map[string]interface{}{}, - Ref: ref(appsv1.DeploymentConfigStatus{}.OpenAPIModelName()), + Ref: ref(v1.AuthenticationStatus{}.OpenAPIModelName()), }, }, }, @@ -2886,15 +1638,15 @@ func schema_openshift_api_apps_v1_DeploymentConfig(ref common.ReferenceCallback) }, }, Dependencies: []string{ - appsv1.DeploymentConfigSpec{}.OpenAPIModelName(), appsv1.DeploymentConfigStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.AuthenticationSpec{}.OpenAPIModelName(), v1.AuthenticationStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_apps_v1_DeploymentConfigList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_AuthenticationList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "DeploymentConfigList is a collection of deployment configs.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -2920,397 +1672,297 @@ func schema_openshift_api_apps_v1_DeploymentConfigList(ref common.ReferenceCallb }, "items": { SchemaProps: spec.SchemaProps{ - Description: "items is a list of deployment configs", - Type: []string{"array"}, + Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(appsv1.DeploymentConfig{}.OpenAPIModelName()), + Ref: ref(v1.Authentication{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"items"}, + Required: []string{"metadata", "items"}, }, }, Dependencies: []string{ - appsv1.DeploymentConfig{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.Authentication{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_apps_v1_DeploymentConfigRollback(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_AuthenticationSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "DeploymentConfigRollback provides the input to rollback generation.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "type": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "type identifies the cluster managed, user facing authentication mode in use. Specifically, it manages the component that responds to login attempts. The default is IntegratedOAuth.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "oauthMetadata": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + Description: "oauthMetadata contains the discovery endpoint data for OAuth 2.0 Authorization Server Metadata for an external OAuth server. This discovery document can be viewed from its served location: oc get --raw '/.well-known/oauth-authorization-server' For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 If oauthMetadata.name is non-empty, this value has precedence over any metadata reference stored in status. The key \"oauthMetadata\" is used to locate the data. If specified and the config map or expected key is not found, no metadata is served. If the specified metadata is not valid, no metadata is served. The namespace for this config map is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.ConfigMapNameReference{}.OpenAPIModelName()), }, }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of the deployment config that will be rolled back.", - Default: "", - Type: []string{"string"}, - Format: "", + "webhookTokenAuthenticators": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, }, - }, - "updatedAnnotations": { SchemaProps: spec.SchemaProps{ - Description: "updatedAnnotations is a set of new annotations that will be added in the deployment config.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, + Description: "webhookTokenAuthenticators is DEPRECATED, setting it has no effect.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.DeprecatedWebhookTokenAuthenticator{}.OpenAPIModelName()), }, }, }, }, }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec defines the options to rollback generation.", - Default: map[string]interface{}{}, - Ref: ref(appsv1.DeploymentConfigRollbackSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"name", "spec"}, - }, - }, - Dependencies: []string{ - appsv1.DeploymentConfigRollbackSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_apps_v1_DeploymentConfigRollbackSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DeploymentConfigRollbackSpec represents the options for rollback generation.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "from": { - SchemaProps: spec.SchemaProps{ - Description: "from points to a ReplicationController which is a deployment.", - Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - "revision": { - SchemaProps: spec.SchemaProps{ - Description: "revision to rollback to. If set to 0, rollback to the last revision.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "includeTriggers": { + "webhookTokenAuthenticator": { SchemaProps: spec.SchemaProps{ - Description: "includeTriggers specifies whether to include config Triggers.", - Default: false, - Type: []string{"boolean"}, - Format: "", + Description: "webhookTokenAuthenticator configures a remote token reviewer. These remote authentication webhooks can be used to verify bearer tokens via the tokenreviews.authentication.k8s.io REST API. This is required to honor bearer tokens that are provisioned by an external authentication service.\n\nCan only be set if \"Type\" is set to \"None\".", + Ref: ref(v1.WebhookTokenAuthenticator{}.OpenAPIModelName()), }, }, - "includeTemplate": { + "serviceAccountIssuer": { SchemaProps: spec.SchemaProps{ - Description: "includeTemplate specifies whether to include the PodTemplateSpec.", - Default: false, - Type: []string{"boolean"}, + Description: "serviceAccountIssuer is the identifier of the bound service account token issuer. The default is https://kubernetes.default.svc WARNING: Updating this field will not result in immediate invalidation of all bound tokens with the previous issuer value. Instead, the tokens issued by previous service account issuer will continue to be trusted for a time period chosen by the platform (currently set to 24h). This time period is subject to change over time. This allows internal components to transition to use new service account issuer without service distruption.", + Default: "", + Type: []string{"string"}, Format: "", }, }, - "includeReplicationMeta": { - SchemaProps: spec.SchemaProps{ - Description: "includeReplicationMeta specifies whether to include the replica count and selector.", - Default: false, - Type: []string{"boolean"}, - Format: "", + "oidcProviders": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "name", + }, + "x-kubernetes-list-type": "map", + }, }, - }, - "includeStrategy": { SchemaProps: spec.SchemaProps{ - Description: "includeStrategy specifies whether to include the deployment Strategy.", - Default: false, - Type: []string{"boolean"}, - Format: "", + Description: "oidcProviders are OIDC identity providers that can issue tokens for this cluster Can only be set if \"Type\" is set to \"OIDC\".\n\nAt most one provider can be configured.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.OIDCProvider{}.OpenAPIModelName()), + }, + }, + }, }, }, }, - Required: []string{"from", "includeTriggers", "includeTemplate", "includeReplicationMeta", "includeStrategy"}, }, }, Dependencies: []string{ - corev1.ObjectReference{}.OpenAPIModelName()}, + v1.ConfigMapNameReference{}.OpenAPIModelName(), v1.DeprecatedWebhookTokenAuthenticator{}.OpenAPIModelName(), v1.OIDCProvider{}.OpenAPIModelName(), v1.WebhookTokenAuthenticator{}.OpenAPIModelName()}, } } -func schema_openshift_api_apps_v1_DeploymentConfigSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_AuthenticationStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "DeploymentConfigSpec represents the desired state of the deployment.", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "strategy": { + "integratedOAuthMetadata": { SchemaProps: spec.SchemaProps{ - Description: "strategy describes how a deployment is executed.", + Description: "integratedOAuthMetadata contains the discovery endpoint data for OAuth 2.0 Authorization Server Metadata for the in-cluster integrated OAuth server. This discovery document can be viewed from its served location: oc get --raw '/.well-known/oauth-authorization-server' For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This contains the observed value based on cluster state. An explicitly set value in spec.oauthMetadata has precedence over this field. This field has no meaning if authentication spec.type is not set to IntegratedOAuth. The key \"oauthMetadata\" is used to locate the data. If the config map or expected key is not found, no metadata is served. If the specified metadata is not valid, no metadata is served. The namespace for this config map is openshift-config-managed.", Default: map[string]interface{}{}, - Ref: ref(appsv1.DeploymentStrategy{}.OpenAPIModelName()), + Ref: ref(v1.ConfigMapNameReference{}.OpenAPIModelName()), }, }, - "minReadySeconds": { - SchemaProps: spec.SchemaProps{ - Description: "minReadySeconds is the minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", - Type: []string{"integer"}, - Format: "int32", + "oidcClients": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "componentNamespace", + "componentName", + }, + "x-kubernetes-list-type": "map", + }, }, - }, - "triggers": { SchemaProps: spec.SchemaProps{ - Description: "triggers determine how updates to a DeploymentConfig result in new deployments. If no triggers are defined, a new deployment can only occur as a result of an explicit client update to the DeploymentConfig with a new LatestVersion. If null, defaults to having a config change trigger.", + Description: "oidcClients is where participating operators place the current OIDC client status for OIDC clients that can be customized by the cluster-admin.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(appsv1.DeploymentTriggerPolicy{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "replicas": { - SchemaProps: spec.SchemaProps{ - Description: "replicas is the number of desired replicas.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "revisionHistoryLimit": { - SchemaProps: spec.SchemaProps{ - Description: "revisionHistoryLimit is the number of old ReplicationControllers to retain to allow for rollbacks. This field is a pointer to allow for differentiation between an explicit zero and not specified. Defaults to 10. (This only applies to DeploymentConfigs created via the new group API resource, not the legacy resource.)", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "test": { - SchemaProps: spec.SchemaProps{ - Description: "test ensures that this deployment config will have zero replicas except while a deployment is running. This allows the deployment config to be used as a continuous deployment test - triggering on images, running the deployment, and then succeeding or failing. Post strategy hooks and After actions can be used to integrate successful deployment with an action.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "paused": { - SchemaProps: spec.SchemaProps{ - Description: "paused indicates that the deployment config is paused resulting in no new deployments on template changes or changes in the template caused by other triggers.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "selector": { - SchemaProps: spec.SchemaProps{ - Description: "selector is a label query over pods that should match the Replicas count.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Ref: ref(v1.OIDCClientStatus{}.OpenAPIModelName()), }, }, }, }, }, - "template": { - SchemaProps: spec.SchemaProps{ - Description: "template is the object that describes the pod that will be created if insufficient replicas are detected.", - Ref: ref(corev1.PodTemplateSpec{}.OpenAPIModelName()), - }, - }, }, }, }, Dependencies: []string{ - appsv1.DeploymentStrategy{}.OpenAPIModelName(), appsv1.DeploymentTriggerPolicy{}.OpenAPIModelName(), corev1.PodTemplateSpec{}.OpenAPIModelName()}, + v1.ConfigMapNameReference{}.OpenAPIModelName(), v1.OIDCClientStatus{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_AzurePlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "AzurePlatformSpec holds the desired state of the Azure infrastructure provider. This only includes fields that can be modified in the cluster.", + Type: []string{"object"}, + }, + }, } } -func schema_openshift_api_apps_v1_DeploymentConfigStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_AzurePlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "DeploymentConfigStatus represents the current deployment state.", + Description: "AzurePlatformStatus holds the current status of the Azure infrastructure provider.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "latestVersion": { - SchemaProps: spec.SchemaProps{ - Description: "latestVersion is used to determine whether the current deployment associated with a deployment config is out of sync.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the most recent generation observed by the deployment config controller.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - "replicas": { - SchemaProps: spec.SchemaProps{ - Description: "replicas is the total number of pods targeted by this deployment config.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "updatedReplicas": { + "resourceGroupName": { SchemaProps: spec.SchemaProps{ - Description: "updatedReplicas is the total number of non-terminated pods targeted by this deployment config that have the desired template spec.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", + Description: "resourceGroupName is the Resource Group for new Azure resources created for the cluster.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "availableReplicas": { + "networkResourceGroupName": { SchemaProps: spec.SchemaProps{ - Description: "availableReplicas is the total number of available pods targeted by this deployment config.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", + Description: "networkResourceGroupName is the Resource Group for network resources like the Virtual Network and Subnets used by the cluster. If empty, the value is same as ResourceGroupName.", + Type: []string{"string"}, + Format: "", }, }, - "unavailableReplicas": { + "cloudName": { SchemaProps: spec.SchemaProps{ - Description: "unavailableReplicas is the total number of unavailable pods targeted by this deployment config.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", + Description: "cloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK with the appropriate Azure API endpoints. If empty, the value is equal to `AzurePublicCloud`.", + Type: []string{"string"}, + Format: "", }, }, - "details": { + "armEndpoint": { SchemaProps: spec.SchemaProps{ - Description: "details are the reasons for the update to this deployment config. This could be based on a change made by the user or caused by an automatic trigger", - Ref: ref(appsv1.DeploymentDetails{}.OpenAPIModelName()), + Description: "armEndpoint specifies a URL to use for resource management in non-soverign clouds such as Azure Stack.", + Type: []string{"string"}, + Format: "", }, }, - "conditions": { + "resourceTags": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge", + "x-kubernetes-list-type": "atomic", }, }, SchemaProps: spec.SchemaProps{ - Description: "conditions represents the latest available observations of a deployment config's current state.", + Description: "resourceTags is a list of additional tags to apply to Azure resources created for the cluster. See https://docs.microsoft.com/en-us/rest/api/resources/tags for information on tagging Azure resources. Due to limitations on Automation, Content Delivery Network, DNS Azure resources, a maximum of 15 tags may be applied. OpenShift reserves 5 tags for internal use, allowing 10 tags for user configuration.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(appsv1.DeploymentCondition{}.OpenAPIModelName()), + Ref: ref(v1.AzureResourceTag{}.OpenAPIModelName()), }, }, }, }, }, - "readyReplicas": { + "cloudLoadBalancerConfig": { SchemaProps: spec.SchemaProps{ - Description: "Total number of ready pods targeted by this deployment.", - Type: []string{"integer"}, - Format: "int32", + Description: "cloudLoadBalancerConfig holds configuration related to DNS and cloud load balancers. It allows configuration of in-cluster DNS as an alternative to the platform default DNS implementation. When using the ClusterHosted DNS type, Load Balancer IP addresses must be provided for the API and internal API load balancers as well as the ingress load balancer.", + Default: map[string]interface{}{"dnsType": "PlatformDefault"}, + Ref: ref(v1.CloudLoadBalancerConfig{}.OpenAPIModelName()), + }, + }, + "ipFamily": { + SchemaProps: spec.SchemaProps{ + Description: "ipFamily specifies the IP protocol family that should be used for Azure network resources. This controls whether Azure resources are created with IPv4-only, or dual-stack networking with IPv4 or IPv6 as the primary protocol family.", + Default: "IPv4", + Type: []string{"string"}, + Format: "", }, }, }, + Required: []string{"resourceGroupName"}, }, }, Dependencies: []string{ - appsv1.DeploymentCondition{}.OpenAPIModelName(), appsv1.DeploymentDetails{}.OpenAPIModelName()}, + v1.AzureResourceTag{}.OpenAPIModelName(), v1.CloudLoadBalancerConfig{}.OpenAPIModelName()}, } } -func schema_openshift_api_apps_v1_DeploymentDetails(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_AzureResourceTag(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "DeploymentDetails captures information about the causes of a deployment.", + Description: "AzureResourceTag is a tag to apply to Azure resources created for the cluster.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "message": { + "key": { SchemaProps: spec.SchemaProps{ - Description: "message is the user specified change message, if this deployment was triggered manually by the user", + Description: "key is the key part of the tag. A tag key can have a maximum of 128 characters and cannot be empty. Key must begin with a letter, end with a letter, number or underscore, and must contain only alphanumeric characters and the following special characters `_ . -`.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "causes": { + "value": { SchemaProps: spec.SchemaProps{ - Description: "causes are extended data associated with all the causes for creating a new deployment", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(appsv1.DeploymentCause{}.OpenAPIModelName()), - }, - }, - }, + Description: "value is the value part of the tag. A tag value can have a maximum of 256 characters and cannot be empty. Value must contain only alphanumeric characters and the following special characters `_ + , - . / : ; < = > ? @`.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, - Required: []string{"causes"}, + Required: []string{"key", "value"}, }, }, - Dependencies: []string{ - appsv1.DeploymentCause{}.OpenAPIModelName()}, } } -func schema_openshift_api_apps_v1_DeploymentLog(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_BareMetalPlatformLoadBalancer(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "DeploymentLog represents the logs for a deployment\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "BareMetalPlatformLoadBalancer defines the load balancer used by the cluster on BareMetal platform.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "type": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "type defines the type of load balancer used by the cluster on BareMetal platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", + Default: "OpenShiftManagedDefault", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + }, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "type", + "fields-to-discriminateBy": map[string]interface{}{}, }, }, }, @@ -3319,152 +1971,128 @@ func schema_openshift_api_apps_v1_DeploymentLog(ref common.ReferenceCallback) co } } -func schema_openshift_api_apps_v1_DeploymentLogOptions(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_BareMetalPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "DeploymentLogOptions is the REST options for a deployment log\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "BareMetalPlatformSpec holds the desired state of the BareMetal infrastructure provider. This only includes fields that can be modified in the cluster.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", + "apiServerInternalIPs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, }, - }, - "apiVersion": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + Description: "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "container": { - SchemaProps: spec.SchemaProps{ - Description: "The container for which to stream logs. Defaults to only container if there is one container in the pod.", - Type: []string{"string"}, - Format: "", + "ingressIPs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, }, - }, - "follow": { SchemaProps: spec.SchemaProps{ - Description: "follow if true indicates that the build log should be streamed until the build terminates.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "previous": { - SchemaProps: spec.SchemaProps{ - Description: "Return previous deployment logs. Defaults to false.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "sinceSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "A relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "sinceTime": { - SchemaProps: spec.SchemaProps{ - Description: "An RFC3339 timestamp from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "timestamps": { - SchemaProps: spec.SchemaProps{ - Description: "If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "tailLines": { - SchemaProps: spec.SchemaProps{ - Description: "If set, the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "limitBytes": { - SchemaProps: spec.SchemaProps{ - Description: "If set, the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.", - Type: []string{"integer"}, - Format: "int64", + Description: "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "nowait": { - SchemaProps: spec.SchemaProps{ - Description: "nowait if true causes the call to return immediately even if the deployment is not available yet. Otherwise the server will wait until the deployment has started.", - Type: []string{"boolean"}, - Format: "", + "machineNetworks": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, }, - }, - "version": { SchemaProps: spec.SchemaProps{ - Description: "version of the deployment for which to view logs.", - Type: []string{"integer"}, - Format: "int64", + Description: "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, }, }, }, - Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, } } -func schema_openshift_api_apps_v1_DeploymentRequest(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_BareMetalPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "DeploymentRequest is a request to a deployment config for a new deployment.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "BareMetalPlatformStatus holds the current status of the BareMetal infrastructure provider. For more information about the network architecture used with the BareMetal platform type, see: https://github.com/openshift/installer/blob/master/docs/design/baremetal/networking-infrastructure.md", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "apiServerInternalIP": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + "apiServerInternalIPs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, }, - }, - "name": { SchemaProps: spec.SchemaProps{ - Description: "name of the deployment config for requesting a new deployment.", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "latest": { + "ingressIP": { SchemaProps: spec.SchemaProps{ - Description: "latest will update the deployment config with the latest state from all triggers.", - Default: false, - Type: []string{"boolean"}, + Description: "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", + Type: []string{"string"}, Format: "", }, }, - "force": { - SchemaProps: spec.SchemaProps{ - Description: "force will try to force a new deployment to run. If the deployment config is paused, then setting this to true will return an Invalid error.", - Default: false, - Type: []string{"boolean"}, - Format: "", + "ingressIPs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, }, - }, - "excludeTriggers": { SchemaProps: spec.SchemaProps{ - Description: "excludeTriggers instructs the instantiator to avoid processing the specified triggers. This field overrides the triggers from latest and allows clients to control specific logic. This field is ignored if not specified.", + Description: "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -3477,74 +2105,46 @@ func schema_openshift_api_apps_v1_DeploymentRequest(ref common.ReferenceCallback }, }, }, - }, - Required: []string{"name", "latest", "force"}, - }, - }, - } -} - -func schema_openshift_api_apps_v1_DeploymentStrategy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DeploymentStrategy describes how to perform a deployment.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { + "nodeDNSIP": { SchemaProps: spec.SchemaProps{ - Description: "type is the name of a deployment strategy.", + Description: "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for BareMetal deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.", Type: []string{"string"}, Format: "", }, }, - "customParams": { - SchemaProps: spec.SchemaProps{ - Description: "customParams are the input to the Custom deployment strategy, and may also be specified for the Recreate and Rolling strategies to customize the execution process that runs the deployment.", - Ref: ref(appsv1.CustomDeploymentStrategyParams{}.OpenAPIModelName()), - }, - }, - "recreateParams": { + "loadBalancer": { SchemaProps: spec.SchemaProps{ - Description: "recreateParams are the input to the Recreate deployment strategy.", - Ref: ref(appsv1.RecreateDeploymentStrategyParams{}.OpenAPIModelName()), + Description: "loadBalancer defines how the load balancer used by the cluster is configured.", + Default: map[string]interface{}{"type": "OpenShiftManagedDefault"}, + Ref: ref(v1.BareMetalPlatformLoadBalancer{}.OpenAPIModelName()), }, }, - "rollingParams": { + "vipManagement": { SchemaProps: spec.SchemaProps{ - Description: "rollingParams are the input to the Rolling deployment strategy.", - Ref: ref(appsv1.RollingDeploymentStrategyParams{}.OpenAPIModelName()), + Description: "vipManagement indicates which VIP management mechanism is active on this cluster. Allowed values are `Keepalived`, `BGP`, and omitted. Once set to a non-empty value, this field is immutable. When set to `BGP`, kube-vip (Routing Table Mode) and frr-k8s are deployed as static pods to advertise VIPs via BGP, replacing the default keepalived/VRRP mechanism. When set to `Keepalived`, the default keepalived-based VIP management is used. When omitted, the default keepalived-based VIP management is used.\n\nPossible enum values:\n - `\"BGP\"` means the VIPs are advertised via BGP by kube-vip (Routing Table Mode) and frr-k8s running as static pods.\n - `\"Keepalived\"` means the VIPs are managed by the default keepalived/VRRP mechanism.", + Type: []string{"string"}, + Format: "", + Enum: []interface{}{"BGP", "Keepalived"}, }, }, - "resources": { + "dnsRecordsType": { SchemaProps: spec.SchemaProps{ - Description: "resources contains resource requirements to execute the deployment and any hooks.", - Default: map[string]interface{}{}, - Ref: ref(corev1.ResourceRequirements{}.OpenAPIModelName()), + Description: "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", + Type: []string{"string"}, + Format: "", + Enum: []interface{}{"External", "Internal"}, }, }, - "labels": { - SchemaProps: spec.SchemaProps{ - Description: "labels is a set of key, value pairs added to custom deployer and lifecycle pre/post hook pods.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, + "machineNetworks": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", }, }, - }, - "annotations": { SchemaProps: spec.SchemaProps{ - Description: "annotations is a set of key, value pairs added to custom deployer and lifecycle pre/post hook pods.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, + Description: "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: "", @@ -3555,126 +2155,125 @@ func schema_openshift_api_apps_v1_DeploymentStrategy(ref common.ReferenceCallbac }, }, }, - "activeDeadlineSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "activeDeadlineSeconds is the duration in seconds that the deployer pods for this deployment config may be active on a node before the system actively tries to terminate them.", - Type: []string{"integer"}, - Format: "int64", - }, - }, }, + Required: []string{"apiServerInternalIPs", "ingressIPs"}, }, }, Dependencies: []string{ - appsv1.CustomDeploymentStrategyParams{}.OpenAPIModelName(), appsv1.RecreateDeploymentStrategyParams{}.OpenAPIModelName(), appsv1.RollingDeploymentStrategyParams{}.OpenAPIModelName(), corev1.ResourceRequirements{}.OpenAPIModelName()}, + v1.BareMetalPlatformLoadBalancer{}.OpenAPIModelName()}, } } -func schema_openshift_api_apps_v1_DeploymentTriggerImageChangeParams(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_BasicAuthIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "DeploymentTriggerImageChangeParams represents the parameters to the ImageChange trigger.", + Description: "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "automatic": { + "url": { SchemaProps: spec.SchemaProps{ - Description: "automatic means that the detection of a new tag value should result in an image update inside the pod template.", - Type: []string{"boolean"}, + Description: "url is the remote URL to connect to", + Default: "", + Type: []string{"string"}, Format: "", }, }, - "containerNames": { + "ca": { SchemaProps: spec.SchemaProps{ - Description: "containerNames is used to restrict tag updates to the specified set of container names in a pod. If multiple triggers point to the same containers, the resulting behavior is undefined. Future API versions will make this a validation error. If ContainerNames does not point to a valid container, the trigger will be ignored. Future API versions will make this a validation error.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.ConfigMapNameReference{}.OpenAPIModelName()), }, }, - "from": { + "tlsClientCert": { SchemaProps: spec.SchemaProps{ - Description: "from is a reference to an image stream tag to watch for changes. From.Name is the only required subfield - if From.Namespace is blank, the namespace of the current deployment trigger will be used.", + Description: "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), }, }, - "lastTriggeredImage": { + "tlsClientKey": { SchemaProps: spec.SchemaProps{ - Description: "lastTriggeredImage is the last image to be triggered.", - Type: []string{"string"}, - Format: "", + Description: "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), }, }, }, - Required: []string{"from"}, + Required: []string{"url"}, }, }, Dependencies: []string{ - corev1.ObjectReference{}.OpenAPIModelName()}, + v1.ConfigMapNameReference{}.OpenAPIModelName(), v1.SecretNameReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_apps_v1_DeploymentTriggerPolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_Build(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "DeploymentTriggerPolicy describes a policy for a single trigger that results in a new deployment.", + Description: "Build configures the behavior of OpenShift builds for the entire cluster. This includes default settings that can be overridden in BuildConfig objects, and overrides which are applied to all builds.\n\nThe canonical name is \"cluster\"\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "type": { + "kind": { + SchemaProps: spec.SchemaProps{ + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Type: []string{"string"}, + Format: "", + }, + }, + "apiVersion": { SchemaProps: spec.SchemaProps{ - Description: "type of the trigger", + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", Type: []string{"string"}, Format: "", }, }, - "imageChangeParams": { + "metadata": { + SchemaProps: spec.SchemaProps{ + Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + }, + }, + "spec": { SchemaProps: spec.SchemaProps{ - Description: "imageChangeParams represents the parameters for the ImageChange trigger.", - Ref: ref(appsv1.DeploymentTriggerImageChangeParams{}.OpenAPIModelName()), + Description: "spec holds user-settable values for the build controller configuration", + Default: map[string]interface{}{}, + Ref: ref(v1.BuildSpec{}.OpenAPIModelName()), }, }, }, + Required: []string{"spec"}, }, }, Dependencies: []string{ - appsv1.DeploymentTriggerImageChangeParams{}.OpenAPIModelName()}, + v1.BuildSpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_apps_v1_ExecNewPodHook(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_BuildDefaults(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ExecNewPodHook is a hook implementation which runs a command in a new pod based on the specified container which is assumed to be part of the deployment template.", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "command": { + "defaultProxy": { SchemaProps: spec.SchemaProps{ - Description: "command is the action command and its arguments.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "defaultProxy contains the default proxy settings for all build operations, including image pull/push and source download.\n\nValues can be overrode by setting the `HTTP_PROXY`, `HTTPS_PROXY`, and `NO_PROXY` environment variables in the build config's strategy.", + Ref: ref(v1.ProxySpec{}.OpenAPIModelName()), + }, + }, + "gitProxy": { + SchemaProps: spec.SchemaProps{ + Description: "gitProxy contains the proxy settings for git operations only. If set, this will override any Proxy settings for all git commands, such as git clone.\n\nValues that are not set here will be inherited from DefaultProxy.", + Ref: ref(v1.ProxySpec{}.OpenAPIModelName()), }, }, "env": { SchemaProps: spec.SchemaProps{ - Description: "env is a set of environment variables to supply to the hook pod's container.", + Description: "env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -3686,304 +2285,240 @@ func schema_openshift_api_apps_v1_ExecNewPodHook(ref common.ReferenceCallback) c }, }, }, - "containerName": { - SchemaProps: spec.SchemaProps{ - Description: "containerName is the name of a container in the deployment pod template whose container image will be used for the hook pod's container.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "volumes": { + "imageLabels": { SchemaProps: spec.SchemaProps{ - Description: "volumes is a list of named volumes from the pod template which should be copied to the hook pod. Volumes names not found in pod spec are ignored. An empty list means no volumes will be copied.", + Description: "imageLabels is a list of docker labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.ImageLabel{}.OpenAPIModelName()), }, }, }, }, }, + "resources": { + SchemaProps: spec.SchemaProps{ + Description: "resources defines resource requirements to execute the build.", + Default: map[string]interface{}{}, + Ref: ref(corev1.ResourceRequirements{}.OpenAPIModelName()), + }, + }, }, - Required: []string{"command", "containerName"}, }, }, Dependencies: []string{ - corev1.EnvVar{}.OpenAPIModelName()}, + v1.ImageLabel{}.OpenAPIModelName(), v1.ProxySpec{}.OpenAPIModelName(), corev1.EnvVar{}.OpenAPIModelName(), corev1.ResourceRequirements{}.OpenAPIModelName()}, } } -func schema_openshift_api_apps_v1_LifecycleHook(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_BuildList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "LifecycleHook defines a specific deployment lifecycle action. Only one type of action may be specified at any time.", + Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "failurePolicy": { + "kind": { SchemaProps: spec.SchemaProps{ - Description: "failurePolicy specifies what action to take if the hook fails.", - Default: "", + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", Type: []string{"string"}, Format: "", }, }, - "execNewPod": { + "apiVersion": { SchemaProps: spec.SchemaProps{ - Description: "execNewPod specifies the options for a lifecycle hook backed by a pod.", - Ref: ref(appsv1.ExecNewPodHook{}.OpenAPIModelName()), + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Type: []string{"string"}, + Format: "", }, }, - "tagImages": { + "metadata": { SchemaProps: spec.SchemaProps{ - Description: "tagImages instructs the deployer to tag the current image referenced under a container onto an image stream tag.", - Type: []string{"array"}, + Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + }, + }, + "items": { + SchemaProps: spec.SchemaProps{ + Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(appsv1.TagImageHook{}.OpenAPIModelName()), + Ref: ref(v1.Build{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"failurePolicy"}, + Required: []string{"metadata", "items"}, }, }, Dependencies: []string{ - appsv1.ExecNewPodHook{}.OpenAPIModelName(), appsv1.TagImageHook{}.OpenAPIModelName()}, + v1.Build{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_apps_v1_RecreateDeploymentStrategyParams(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_BuildOverrides(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RecreateDeploymentStrategyParams are the input to the Recreate deployment strategy.", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "timeoutSeconds": { + "imageLabels": { SchemaProps: spec.SchemaProps{ - Description: "timeoutSeconds is the time to wait for updates before giving up. If the value is nil, a default will be used.", - Type: []string{"integer"}, - Format: "int64", + Description: "imageLabels is a list of docker labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.ImageLabel{}.OpenAPIModelName()), + }, + }, + }, }, }, - "pre": { + "nodeSelector": { SchemaProps: spec.SchemaProps{ - Description: "pre is a lifecycle hook which is executed before the strategy manipulates the deployment. All LifecycleHookFailurePolicy values are supported.", - Ref: ref(appsv1.LifecycleHook{}.OpenAPIModelName()), + Description: "nodeSelector is a selector which must be true for the build pod to fit on a node", + Type: []string{"object"}, + AdditionalProperties: &spec.SchemaOrBool{ + Allows: true, + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "mid": { + "tolerations": { SchemaProps: spec.SchemaProps{ - Description: "mid is a lifecycle hook which is executed while the deployment is scaled down to zero before the first new pod is created. All LifecycleHookFailurePolicy values are supported.", - Ref: ref(appsv1.LifecycleHook{}.OpenAPIModelName()), + Description: "tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(corev1.Toleration{}.OpenAPIModelName()), + }, + }, + }, }, }, - "post": { + "forcePull": { SchemaProps: spec.SchemaProps{ - Description: "post is a lifecycle hook which is executed after the strategy has finished all deployment logic. All LifecycleHookFailurePolicy values are supported.", - Ref: ref(appsv1.LifecycleHook{}.OpenAPIModelName()), + Description: "forcePull overrides, if set, the equivalent value in the builds, i.e. false disables force pull for all builds, true enables force pull for all builds, independently of what each build specifies itself", + Type: []string{"boolean"}, + Format: "", }, }, }, }, }, Dependencies: []string{ - appsv1.LifecycleHook{}.OpenAPIModelName()}, + v1.ImageLabel{}.OpenAPIModelName(), corev1.Toleration{}.OpenAPIModelName()}, } } -func schema_openshift_api_apps_v1_RollingDeploymentStrategyParams(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_BuildSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RollingDeploymentStrategyParams are the input to the Rolling deployment strategy.", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "updatePeriodSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "updatePeriodSeconds is the time to wait between individual pod updates. If the value is nil, a default will be used.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "intervalSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "intervalSeconds is the time to wait between polling deployment status after update. If the value is nil, a default will be used.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "timeoutSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "timeoutSeconds is the time to wait for updates before giving up. If the value is nil, a default will be used.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "maxUnavailable": { - SchemaProps: spec.SchemaProps{ - Description: "maxUnavailable is the maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total pods at the start of update (ex: 10%). Absolute number is calculated from percentage by rounding down.\n\nThis cannot be 0 if MaxSurge is 0. By default, 25% is used.\n\nExample: when this is set to 30%, the old RC can be scaled down by 30% immediately when the rolling update starts. Once new pods are ready, old RC can be scaled down further, followed by scaling up the new RC, ensuring that at least 70% of original number of pods are available at all times during the update.", - Ref: ref(intstr.IntOrString{}.OpenAPIModelName()), - }, - }, - "maxSurge": { - SchemaProps: spec.SchemaProps{ - Description: "maxSurge is the maximum number of pods that can be scheduled above the original number of pods. Value can be an absolute number (ex: 5) or a percentage of total pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding up.\n\nThis cannot be 0 if MaxUnavailable is 0. By default, 25% is used.\n\nExample: when this is set to 30%, the new RC can be scaled up by 30% immediately when the rolling update starts. Once old pods have been killed, new RC can be scaled up further, ensuring that total number of pods running at any time during the update is atmost 130% of original pods.", - Ref: ref(intstr.IntOrString{}.OpenAPIModelName()), - }, - }, - "pre": { - SchemaProps: spec.SchemaProps{ - Description: "pre is a lifecycle hook which is executed before the deployment process begins. All LifecycleHookFailurePolicy values are supported.", - Ref: ref(appsv1.LifecycleHook{}.OpenAPIModelName()), - }, - }, - "post": { + "additionalTrustedCA": { SchemaProps: spec.SchemaProps{ - Description: "post is a lifecycle hook which is executed after the strategy has finished all deployment logic. All LifecycleHookFailurePolicy values are supported.", - Ref: ref(appsv1.LifecycleHook{}.OpenAPIModelName()), + Description: "additionalTrustedCA is a reference to a ConfigMap containing additional CAs that should be trusted for image pushes and pulls during builds. The namespace for this config map is openshift-config.\n\nDEPRECATED: Additional CAs for image pull and push should be set on image.config.openshift.io/cluster instead.", + Default: map[string]interface{}{}, + Ref: ref(v1.ConfigMapNameReference{}.OpenAPIModelName()), }, }, - }, - }, - }, - Dependencies: []string{ - appsv1.LifecycleHook{}.OpenAPIModelName(), intstr.IntOrString{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_apps_v1_TagImageHook(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TagImageHook is a request to tag the image in a particular container onto an ImageStreamTag.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "containerName": { + "buildDefaults": { SchemaProps: spec.SchemaProps{ - Description: "containerName is the name of a container in the deployment config whose image value will be used as the source of the tag. If there is only a single container this value will be defaulted to the name of that container.", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "buildDefaults controls the default information for Builds", + Default: map[string]interface{}{}, + Ref: ref(v1.BuildDefaults{}.OpenAPIModelName()), }, }, - "to": { + "buildOverrides": { SchemaProps: spec.SchemaProps{ - Description: "to is the target ImageStreamTag to set the container's image onto.", + Description: "buildOverrides controls override settings for builds", Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), + Ref: ref(v1.BuildOverrides{}.OpenAPIModelName()), }, }, }, - Required: []string{"containerName", "to"}, }, }, Dependencies: []string{ - corev1.ObjectReference{}.OpenAPIModelName()}, + v1.BuildDefaults{}.OpenAPIModelName(), v1.BuildOverrides{}.OpenAPIModelName(), v1.ConfigMapNameReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_Action(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_CRIOCredentialProviderConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "Action describes a request to the API server", + Description: "CRIOCredentialProviderConfig holds cluster-wide singleton resource configurations for CRI-O credential provider, the name of this instance is \"cluster\". CRI-O credential provider is a binary shipped with CRI-O that provides a way to obtain container image pull credentials from external sources. For example, it can be used to fetch mirror registry credentials from secrets resources in the cluster within the same namespace the pod will be running in. CRIOCredentialProviderConfig configuration specifies the pod image sources registries that should trigger the CRI-O credential provider execution, which will resolve the CRI-O mirror configurations and obtain the necessary credentials for pod creation. Note: Configuration changes will only take effect after the kubelet restarts, which is automatically managed by the cluster during rollout.\n\nThe resource is a singleton named \"cluster\".\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "verb": { - SchemaProps: spec.SchemaProps{ - Description: "verb is one of: get, list, watch, create, update, delete", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resourceAPIGroup": { - SchemaProps: spec.SchemaProps{ - Description: "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resourceAPIVersion": { - SchemaProps: spec.SchemaProps{ - Description: "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resource": { + "kind": { SchemaProps: spec.SchemaProps{ - Description: "resource is one of the existing resource types", - Default: "", + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", Type: []string{"string"}, Format: "", }, }, - "resourceName": { + "apiVersion": { SchemaProps: spec.SchemaProps{ - Description: "resourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", - Default: "", + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", Type: []string{"string"}, Format: "", }, }, - "path": { + "metadata": { SchemaProps: spec.SchemaProps{ - Description: "path is the path of a non resource URL", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), }, }, - "isNonResourceURL": { + "spec": { SchemaProps: spec.SchemaProps{ - Description: "isNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", - Default: false, - Type: []string{"boolean"}, - Format: "", + Description: "spec defines the desired configuration of the CRI-O Credential Provider. This field is required and must be provided when creating the resource.", + Ref: ref(v1.CRIOCredentialProviderConfigSpec{}.OpenAPIModelName()), }, }, - "content": { + "status": { SchemaProps: spec.SchemaProps{ - Description: "content is the actual content of the request for create and update", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), + Description: "status represents the current state of the CRIOCredentialProviderConfig. When omitted or nil, it indicates that the status has not yet been set by the controller. The controller will populate this field with validation conditions and operational state.", + Default: map[string]interface{}{}, + Ref: ref(v1.CRIOCredentialProviderConfigStatus{}.OpenAPIModelName()), }, }, }, - Required: []string{"namespace", "verb", "resourceAPIGroup", "resourceAPIVersion", "resource", "resourceName", "path", "isNonResourceURL"}, + Required: []string{"spec"}, }, }, Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, + v1.CRIOCredentialProviderConfigSpec{}.OpenAPIModelName(), v1.CRIOCredentialProviderConfigStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_ClusterRole(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_CRIOCredentialProviderConfigList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterRole is a logical grouping of PolicyRules that can be referenced as a unit by ClusterRoleBindings.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "CRIOCredentialProviderConfigList contains a list of CRIOCredentialProviderConfig resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -4002,71 +2537,48 @@ func schema_openshift_api_authorization_v1_ClusterRole(ref common.ReferenceCallb }, "metadata": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), }, }, - "rules": { + "items": { SchemaProps: spec.SchemaProps{ - Description: "rules holds all the PolicyRules for this ClusterRole", - Type: []string{"array"}, + Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(authorizationv1.PolicyRule{}.OpenAPIModelName()), + Ref: ref(v1.CRIOCredentialProviderConfig{}.OpenAPIModelName()), }, }, }, }, }, - "aggregationRule": { - SchemaProps: spec.SchemaProps{ - Description: "aggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.", - Ref: ref(rbacv1.AggregationRule{}.OpenAPIModelName()), - }, - }, }, - Required: []string{"rules"}, + Required: []string{"metadata", "items"}, }, }, Dependencies: []string{ - authorizationv1.PolicyRule{}.OpenAPIModelName(), rbacv1.AggregationRule{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.CRIOCredentialProviderConfig{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_ClusterRoleBinding(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_CRIOCredentialProviderConfigSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterRoleBinding references a ClusterRole, but not contain it. It can reference any ClusterRole in the same namespace or in the global namespace. It adds who information via (Users and Groups) OR Subjects and namespace information by which namespace it exists in. ClusterRoleBindings in a given namespace only have effect in that namespace (excepting the master namespace which has power in all namespaces).\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "CRIOCredentialProviderConfigSpec defines the desired configuration of the CRI-O Credential Provider.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + "matchImages": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "set", + }, }, - }, - "userNames": { SchemaProps: spec.SchemaProps{ - Description: "userNames holds all the usernames directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.", + Description: "matchImages is a list of string patterns used to determine whether the CRI-O credential provider should be invoked for a given image. This list is passed to the kubelet CredentialProviderConfig, and if any pattern matches the requested image, CRI-O credential provider will be invoked to obtain credentials for pulling that image or its mirrors. Depending on the platform, the CRI-O credential provider may be installed alongside an existing platform specific provider. Conflicts between the existing platform specific provider image match configuration and this list will be handled by the following precedence rule: credentials from built-in kubelet providers (e.g., ECR, GCR, ACR) take precedence over those from the CRIOCredentialProviderConfig when both match the same image. To avoid uncertainty, it is recommended to avoid configuring your private image patterns to overlap with existing platform specific provider config(e.g., the entries from https://github.com/openshift/machine-config-operator/blob/main/templates/common/aws/files/etc-kubernetes-credential-providers-ecr-credential-provider.yaml). You can check the resource's Status conditions to see if any entries were ignored due to exact matches with known built-in provider patterns.\n\nThis field is optional, the items of the list must contain between 1 and 50 entries. The list is treated as a set, so duplicate entries are not allowed.\n\nFor more details, see: https://kubernetes.io/docs/tasks/administer-cluster/kubelet-credential-provider/ https://github.com/cri-o/crio-credential-provider#architecture\n\nEach entry in matchImages is a pattern which can optionally contain a port and a path. Each entry must be no longer than 512 characters. Wildcards ('*') are supported for full subdomain labels, such as '*.k8s.io' or 'k8s.*.io', and for top-level domains, such as 'k8s.*' (which matches 'k8s.io' or 'k8s.net'). A global wildcard '*' (matching any domain) is not allowed. Wildcards may replace an entire hostname label (e.g., *.example.com), but they cannot appear within a label (e.g., f*oo.example.com) and are not allowed in the port or path. For example, 'example.*.com' is valid, but 'exa*mple.*.com' is not. Each wildcard matches only a single domain label, so '*.io' does **not** match '*.k8s.io'.\n\nA match exists between an image and a matchImage when all of the below are true: Both contain the same number of domain parts and each part matches. The URL path of an matchImages must be a prefix of the target image URL path. If the matchImages contains a port, then the port must match in the image as well.\n\nExample values of matchImages: - 123456789.dkr.ecr.us-east-1.amazonaws.com - *.azurecr.io - gcr.io - *.*.registry.io - registry.io:8080/path", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -4079,163 +2591,160 @@ func schema_openshift_api_authorization_v1_ClusterRoleBinding(ref common.Referen }, }, }, - "groupNames": { - SchemaProps: spec.SchemaProps{ - Description: "groupNames holds all the groups directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, + }, + }, + }, + } +} + +func schema_openshift_api_config_v1_CRIOCredentialProviderConfigStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "CRIOCredentialProviderConfigStatus defines the observed state of CRIOCredentialProviderConfig", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "conditions": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "type", }, + "x-kubernetes-list-type": "map", }, }, - }, - "subjects": { SchemaProps: spec.SchemaProps{ - Description: "subjects hold object references to authorize with this rule. This field is ignored if UserNames or GroupNames are specified to support legacy clients and servers. Thus newer clients that do not need to support backwards compatibility should send only fully qualified Subjects and should omit the UserNames and GroupNames fields. Clients that need to support backwards compatibility can use this field to build the UserNames and GroupNames.", + Description: "conditions represent the latest available observations of the configuration state. When omitted, it indicates that no conditions have been reported yet. The maximum number of conditions is 16. Conditions are stored as a map keyed by condition type, ensuring uniqueness.\n\nExpected condition types include: \"Validated\": indicates whether the matchImages configuration is valid", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), + Ref: ref(metav1.Condition{}.OpenAPIModelName()), }, }, }, }, }, - "roleRef": { - SchemaProps: spec.SchemaProps{ - Description: "roleRef can only reference the current namespace and the global namespace. If the ClusterRoleRef cannot be resolved, the Authorizer must return an error. Since Policy is a singleton, this is sufficient knowledge to locate a role.", - Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, }, - Required: []string{"subjects", "roleRef"}, }, }, Dependencies: []string{ - corev1.ObjectReference{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + metav1.Condition{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_ClusterRoleBindingList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_CertInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterRoleBindingList is a collection of ClusterRoleBindings\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "CertInfo relates a certificate with a private key", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "certFile": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "certFile is a file containing a PEM-encoded certificate", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "keyFile": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is a list of ClusterRoleBindings", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(authorizationv1.ClusterRoleBinding{}.OpenAPIModelName()), - }, - }, - }, - }, - }, }, - Required: []string{"items"}, + Required: []string{"certFile", "keyFile"}, }, }, - Dependencies: []string{ - authorizationv1.ClusterRoleBinding{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_ClusterRoleList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ClientConnectionOverrides(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterRoleList is a collection of ClusterRoles\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "acceptContentTypes": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "acceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the default value of 'application/json'. This field will control all connections to the server used by a particular client.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "contentType": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "contentType is the content type used when sending data to the server from this client.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { + "qps": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + Description: "qps controls the number of queries per second allowed for this connection.", + Default: 0, + Type: []string{"number"}, + Format: "float", }, }, - "items": { + "burst": { SchemaProps: spec.SchemaProps{ - Description: "items is a list of ClusterRoles", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(authorizationv1.ClusterRole{}.OpenAPIModelName()), - }, - }, - }, + Description: "burst allows extra queries to accumulate when a client is exceeding its rate.", + Default: 0, + Type: []string{"integer"}, + Format: "int32", }, }, }, - Required: []string{"items"}, + Required: []string{"acceptContentTypes", "contentType", "qps", "burst"}, }, }, - Dependencies: []string{ - authorizationv1.ClusterRole{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_GroupRestriction(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ClientCredentialConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "GroupRestriction matches a group either by a string match on the group name or a label selector applied to group labels.", + Description: "ClientCredentialConfig configures the client credentials and token endpoint to use to get an access token via the OAuth2 client credentials grant flow.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "groups": { + "clientID": { + SchemaProps: spec.SchemaProps{ + Description: "clientID is a required client identifier to use during the OAuth2 client credentials flow. clientID must be at least 1 character in length, must not exceed 256 characters in length, and must only contain printable ASCII characters.", + Type: []string{"string"}, + Format: "", + }, + }, + "clientSecret": { + SchemaProps: spec.SchemaProps{ + Description: "clientSecret is a required reference to a Secret in the openshift-config namespace to be used as the client secret during the OAuth2 client credentials flow.\n\nThe key 'client-secret' is used to locate the client secret data in the Secret.", + Default: map[string]interface{}{}, + Ref: ref(v1.ClientSecretSecretReference{}.OpenAPIModelName()), + }, + }, + "tokenEndpoint": { + SchemaProps: spec.SchemaProps{ + Description: "tokenEndpoint is a required URL to query for an access token using the client credential OAuth2 flow. tokenEndpoint must be at least 1 character in length and must not exceed 2048 characters in length. tokenEndpoint must be a valid HTTPS URL. tokenEndpoint must have a host and a path. tokenEndpoint must not contain query parameters, fragments, or user information (e.g., \"user:password@host\").", + Type: []string{"string"}, + Format: "", + }, + }, + "scopes": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "set", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "groups is a list of groups used to match against an individual user's groups. If the user is a member of one of the whitelisted groups, the user is allowed to be bound to a role.", + Description: "scopes is an optional list of OAuth2 scopes to request when obtaining an access token.\n\nIf not specified, the token endpoint's default scopes will be used.\n\nWhen specified, there must be at least 1 entry and must not exceed 16 entries. Each entry must be at least 1 character in length and must not exceed 256 characters in length. Each entry must only contain printable ASCII characters, excluding spaces, double quotes and backslashes. Entries must be unique.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -4248,46 +2757,54 @@ func schema_openshift_api_authorization_v1_GroupRestriction(ref common.Reference }, }, }, - "labels": { + "tls": { SchemaProps: spec.SchemaProps{ - Description: "Selectors specifies a list of label selectors over group labels.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.LabelSelector{}.OpenAPIModelName()), - }, - }, - }, + Description: "tls is an optional field that allows configuring the TLS settings used to interact with the identity provider as an OAuth2 client.\n\nWhen omitted, system default TLS settings will be used for the OAuth2 client.", + Default: map[string]interface{}{}, + Ref: ref(v1.ExternalSourceTLS{}.OpenAPIModelName()), }, }, }, - Required: []string{"groups", "labels"}, + Required: []string{"clientID", "clientSecret", "tokenEndpoint"}, }, }, Dependencies: []string{ - metav1.LabelSelector{}.OpenAPIModelName()}, + v1.ClientSecretSecretReference{}.OpenAPIModelName(), v1.ExternalSourceTLS{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_IsPersonalSubjectAccessReview(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ClientSecretSecretReference(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "IsPersonalSubjectAccessReview is a marker for PolicyRule.AttributeRestrictions that denotes that subjectaccessreviews on self should be allowed\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "ClientSecretSecretReference is a reference to a Secret in the openshift-config namespace that should be used for configuring the client secret to be used when sourcing claims from external sources with the client credential authentication flow.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "name is the required name of the Secret that exists in the openshift-config namespace.\n\nIt must be at least 1 character in length, must not exceed 253 characters in length, must start and end with a lowercase alphanumeric character, and must only contain lowercase alphanumeric characters, '-' or '.'.", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + }, + Required: []string{"name"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_CloudControllerManagerStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "CloudControllerManagerStatus holds the state of Cloud Controller Manager (a.k.a. CCM or CPI) related settings", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "state": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "state determines whether or not an external Cloud Controller Manager is expected to be installed within the cluster. https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/#running-cloud-controller-manager\n\nValid values are \"External\", \"None\" and omitted. When set to \"External\", new nodes will be tainted as uninitialized when created, preventing them from running workloads until they are initialized by the cloud controller manager. When omitted or set to \"None\", new nodes will be not tainted and no extra initialization from the cloud controller manager is expected.", + Default: "", Type: []string{"string"}, Format: "", }, @@ -4298,118 +2815,155 @@ func schema_openshift_api_authorization_v1_IsPersonalSubjectAccessReview(ref com } } -func schema_openshift_api_authorization_v1_LocalResourceAccessReview(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_CloudLoadBalancerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "LocalResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec in a particular namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "CloudLoadBalancerConfig contains an union discriminator indicating the type of DNS solution in use within the cluster. When the DNSType is `ClusterHosted`, the cloud's Load Balancer configuration needs to be provided so that the DNS solution hosted within the cluster can be configured with those values.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "dnsType": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "dnsType indicates the type of DNS solution in use within the cluster. Its default value of `PlatformDefault` indicates that the cluster's DNS is the default provided by the cloud platform. It can be set to `ClusterHosted` to bypass the configuration of the cloud default DNS. In this mode, the cluster needs to provide a self-hosted DNS solution for the cluster's installation to succeed. The cluster's use of the cloud's Load Balancers is unaffected by this setting. The value is immutable after it has been set at install time. Currently, there is no way for the customer to add additional DNS entries into the cluster hosted DNS. Enabling this functionality allows the user to start their own DNS solution outside the cluster after installation is complete. The customer would be responsible for configuring this custom DNS solution, and it can be run in addition to the in-cluster DNS solution.", + Default: "PlatformDefault", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "clusterHosted": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + Description: "clusterHosted holds the IP addresses of API, API-Int and Ingress Load Balancers on Cloud Platforms. The DNS solution hosted within the cluster use these IP addresses to provide resolution for API, API-Int and Ingress services.", + Ref: ref(v1.CloudLoadBalancerIPs{}.OpenAPIModelName()), }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + }, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "dnsType", + "fields-to-discriminateBy": map[string]interface{}{ + "clusterHosted": "ClusterHosted", + }, }, }, - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", - Default: "", - Type: []string{"string"}, - Format: "", + }, + }, + }, + Dependencies: []string{ + v1.CloudLoadBalancerIPs{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_CloudLoadBalancerIPs(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "CloudLoadBalancerIPs contains the Load Balancer IPs for the cloud's API, API-Int and Ingress Load balancers. They will be populated as soon as the respective Load Balancers have been configured. These values are utilized to configure the DNS solution hosted within the cluster.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "apiIntLoadBalancerIPs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "set", + }, }, - }, - "verb": { SchemaProps: spec.SchemaProps{ - Description: "verb is one of: get, list, watch, create, update, delete", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "apiIntLoadBalancerIPs holds Load Balancer IPs for the internal API service. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Entries in the apiIntLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "resourceAPIGroup": { - SchemaProps: spec.SchemaProps{ - Description: "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", - Default: "", - Type: []string{"string"}, - Format: "", + "apiLoadBalancerIPs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "set", + }, }, - }, - "resourceAPIVersion": { SchemaProps: spec.SchemaProps{ - Description: "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "apiLoadBalancerIPs holds Load Balancer IPs for the API service. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Could be empty for private clusters. Entries in the apiLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "resource": { - SchemaProps: spec.SchemaProps{ - Description: "resource is one of the existing resource types", - Default: "", - Type: []string{"string"}, - Format: "", + "ingressLoadBalancerIPs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "set", + }, }, - }, - "resourceName": { SchemaProps: spec.SchemaProps{ - Description: "resourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "ingressLoadBalancerIPs holds IPs for Ingress Load Balancers. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Entries in the ingressLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "path": { + }, + }, + }, + } +} + +func schema_openshift_api_config_v1_ClusterCondition(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "ClusterCondition is a union of typed cluster conditions. The 'type' property determines which of the type-specific properties are relevant. When evaluated on a cluster, the condition may match, not match, or fail to evaluate.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "type": { SchemaProps: spec.SchemaProps{ - Description: "path is the path of a non resource URL", + Description: "type represents the cluster-condition type. This defines the members and semantics of any additional properties.", Default: "", Type: []string{"string"}, Format: "", }, }, - "isNonResourceURL": { - SchemaProps: spec.SchemaProps{ - Description: "isNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "content": { + "promql": { SchemaProps: spec.SchemaProps{ - Description: "content is the actual content of the request for create and update", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), + Description: "promql represents a cluster condition based on PromQL.", + Ref: ref(v1.PromQLClusterCondition{}.OpenAPIModelName()), }, }, }, - Required: []string{"namespace", "verb", "resourceAPIGroup", "resourceAPIVersion", "resource", "resourceName", "path", "isNonResourceURL"}, + Required: []string{"type"}, }, }, Dependencies: []string{ - metav1.ObjectMeta{}.OpenAPIModelName(), runtime.RawExtension{}.OpenAPIModelName()}, + v1.PromQLClusterCondition{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_LocalSubjectAccessReview(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ClusterImagePolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "LocalSubjectAccessReview is an object for requesting information about whether a user or group can perform an action in a particular namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "ClusterImagePolicy holds cluster-wide configuration for image signature verification\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -4433,102 +2987,95 @@ func schema_openshift_api_authorization_v1_LocalSubjectAccessReview(ref common.R Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), }, }, - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "verb": { - SchemaProps: spec.SchemaProps{ - Description: "verb is one of: get, list, watch, create, update, delete", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resourceAPIGroup": { - SchemaProps: spec.SchemaProps{ - Description: "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resourceAPIVersion": { + "spec": { SchemaProps: spec.SchemaProps{ - Description: "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "spec contains the configuration for the cluster image policy.", + Default: map[string]interface{}{}, + Ref: ref(v1.ClusterImagePolicySpec{}.OpenAPIModelName()), }, }, - "resource": { + "status": { SchemaProps: spec.SchemaProps{ - Description: "resource is one of the existing resource types", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "status contains the observed state of the resource.", + Default: map[string]interface{}{}, + Ref: ref(v1.ClusterImagePolicyStatus{}.OpenAPIModelName()), }, }, - "resourceName": { + }, + Required: []string{"spec"}, + }, + }, + Dependencies: []string{ + v1.ClusterImagePolicySpec{}.OpenAPIModelName(), v1.ClusterImagePolicyStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_ClusterImagePolicyList(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "ClusterImagePolicyList is a list of ClusterImagePolicy resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "kind": { SchemaProps: spec.SchemaProps{ - Description: "resourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", - Default: "", + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", Type: []string{"string"}, Format: "", }, }, - "path": { + "apiVersion": { SchemaProps: spec.SchemaProps{ - Description: "path is the path of a non resource URL", - Default: "", + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", Type: []string{"string"}, Format: "", }, }, - "isNonResourceURL": { - SchemaProps: spec.SchemaProps{ - Description: "isNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "content": { - SchemaProps: spec.SchemaProps{ - Description: "content is the actual content of the request for create and update", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "user": { + "metadata": { SchemaProps: spec.SchemaProps{ - Description: "user is optional. If both User and Groups are empty, the current authenticated user is used.", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), }, }, - "groups": { + "items": { SchemaProps: spec.SchemaProps{ - Description: "groups is optional. Groups is the list of groups to which the User belongs.", + Description: "items is a list of ClusterImagePolices", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.ClusterImagePolicy{}.OpenAPIModelName()), }, }, }, }, }, + }, + Required: []string{"metadata", "items"}, + }, + }, + Dependencies: []string{ + v1.ClusterImagePolicy{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_ClusterImagePolicySpec(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "CLusterImagePolicySpec is the specification of the ClusterImagePolicy custom resource.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ "scopes": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "set", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\". Nil for a self-SAR, means \"use the scopes on this request\". Nil for a regular SAR, means the same as empty.", + Description: "scopes is a required field that defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. This support no more than 256 scopes in one object. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. If a scope is configured in both the ClusterImagePolicy and the ImagePolicy, or if the scope in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy, only the policy from the ClusterImagePolicy will be applied. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -4541,374 +3088,397 @@ func schema_openshift_api_authorization_v1_LocalSubjectAccessReview(ref common.R }, }, }, + "policy": { + SchemaProps: spec.SchemaProps{ + Description: "policy is a required field that contains configuration to allow scopes to be verified, and defines how images not matching the verification policy will be treated.", + Default: map[string]interface{}{}, + Ref: ref(v1.ImageSigstoreVerificationPolicy{}.OpenAPIModelName()), + }, + }, }, - Required: []string{"namespace", "verb", "resourceAPIGroup", "resourceAPIVersion", "resource", "resourceName", "path", "isNonResourceURL", "user", "groups", "scopes"}, + Required: []string{"scopes", "policy"}, }, }, Dependencies: []string{ - metav1.ObjectMeta{}.OpenAPIModelName(), runtime.RawExtension{}.OpenAPIModelName()}, + v1.ImageSigstoreVerificationPolicy{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_NamedClusterRole(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ClusterImagePolicyStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "NamedClusterRole relates a name with a cluster role", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the cluster role", - Default: "", - Type: []string{"string"}, - Format: "", + "conditions": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "type", + }, + "x-kubernetes-list-type": "map", + }, }, - }, - "role": { SchemaProps: spec.SchemaProps{ - Description: "role is the cluster role being named", - Default: map[string]interface{}{}, - Ref: ref(authorizationv1.ClusterRole{}.OpenAPIModelName()), + Description: "conditions provide details on the status of this API Resource.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(metav1.Condition{}.OpenAPIModelName()), + }, + }, + }, }, }, }, - Required: []string{"name", "role"}, }, }, Dependencies: []string{ - authorizationv1.ClusterRole{}.OpenAPIModelName()}, + metav1.Condition{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_NamedClusterRoleBinding(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ClusterNetworkEntry(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "NamedClusterRoleBinding relates a name with a cluster role binding", + Description: "ClusterNetworkEntry is a contiguous block of IP addresses from which pod IPs are allocated.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "name": { + "cidr": { SchemaProps: spec.SchemaProps{ - Description: "name is the name of the cluster role binding", + Description: "The complete block for pod IPs.", Default: "", Type: []string{"string"}, Format: "", }, }, - "roleBinding": { + "hostPrefix": { SchemaProps: spec.SchemaProps{ - Description: "roleBinding is the cluster role binding being named", - Default: map[string]interface{}{}, - Ref: ref(authorizationv1.ClusterRoleBinding{}.OpenAPIModelName()), + Description: "The size (prefix) of block to allocate to each node. If this field is not used by the plugin, it can be left unset.", + Type: []string{"integer"}, + Format: "int64", }, }, }, - Required: []string{"name", "roleBinding"}, + Required: []string{"cidr"}, }, }, - Dependencies: []string{ - authorizationv1.ClusterRoleBinding{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_NamedRole(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ClusterOperator(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "NamedRole relates a Role with a name", + Description: "ClusterOperator holds the status of a core or optional OpenShift component managed by the Cluster Version Operator (CVO). This object is used by operators to convey their state to the rest of the cluster. Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "name": { + "kind": { SchemaProps: spec.SchemaProps{ - Description: "name is the name of the role", - Default: "", + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", Type: []string{"string"}, Format: "", }, }, - "role": { + "apiVersion": { + SchemaProps: spec.SchemaProps{ + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Type: []string{"string"}, + Format: "", + }, + }, + "metadata": { + SchemaProps: spec.SchemaProps{ + Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + }, + }, + "spec": { SchemaProps: spec.SchemaProps{ - Description: "role is the role being named", + Description: "spec holds configuration that could apply to any operator.", + Default: map[string]interface{}{}, + Ref: ref(v1.ClusterOperatorSpec{}.OpenAPIModelName()), + }, + }, + "status": { + SchemaProps: spec.SchemaProps{ + Description: "status holds the information about the state of an operator. It is consistent with status information across the Kubernetes ecosystem.", Default: map[string]interface{}{}, - Ref: ref(authorizationv1.Role{}.OpenAPIModelName()), + Ref: ref(v1.ClusterOperatorStatus{}.OpenAPIModelName()), }, }, }, - Required: []string{"name", "role"}, + Required: []string{"metadata", "spec"}, }, }, Dependencies: []string{ - authorizationv1.Role{}.OpenAPIModelName()}, + v1.ClusterOperatorSpec{}.OpenAPIModelName(), v1.ClusterOperatorStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_NamedRoleBinding(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ClusterOperatorList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "NamedRoleBinding relates a role binding with a name", + Description: "ClusterOperatorList is a list of OperatorStatus resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "name": { + "kind": { SchemaProps: spec.SchemaProps{ - Description: "name is the name of the role binding", - Default: "", + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", Type: []string{"string"}, Format: "", }, }, - "roleBinding": { + "apiVersion": { SchemaProps: spec.SchemaProps{ - Description: "roleBinding is the role binding being named", - Default: map[string]interface{}{}, - Ref: ref(authorizationv1.RoleBinding{}.OpenAPIModelName()), + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Type: []string{"string"}, + Format: "", + }, + }, + "metadata": { + SchemaProps: spec.SchemaProps{ + Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + }, + }, + "items": { + SchemaProps: spec.SchemaProps{ + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.ClusterOperator{}.OpenAPIModelName()), + }, + }, + }, }, }, }, - Required: []string{"name", "roleBinding"}, + Required: []string{"metadata", "items"}, }, }, Dependencies: []string{ - authorizationv1.RoleBinding{}.OpenAPIModelName()}, + v1.ClusterOperator{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_PolicyRule(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ClusterOperatorSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.", + Description: "ClusterOperatorSpec is empty for now, but you could imagine holding information like \"pause\".", + Type: []string{"object"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_ClusterOperatorStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "ClusterOperatorStatus provides information about the status of the operator.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "verbs": { - SchemaProps: spec.SchemaProps{ - Description: "verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, + "conditions": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "type", }, + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge", }, }, - }, - "attributeRestrictions": { - SchemaProps: spec.SchemaProps{ - Description: "attributeRestrictions will vary depending on what the Authorizer/AuthorizationAttributeBuilder pair supports. If the Authorizer does not recognize how to handle the AttributeRestrictions, the Authorizer should report an error.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "apiGroups": { SchemaProps: spec.SchemaProps{ - Description: "apiGroups is the name of the APIGroup that contains the resources. If this field is empty, then both kubernetes and origin API groups are assumed. That means that if an action is requested against one of the enumerated resources in either the kubernetes or the origin API group, the request will be allowed", + Description: "conditions describes the state of the operator's managed and monitored components.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.ClusterOperatorStatusCondition{}.OpenAPIModelName()), }, }, }, }, }, - "resources": { + "versions": { SchemaProps: spec.SchemaProps{ - Description: "resources is a list of resources this rule applies to. ResourceAll represents all resources.", + Description: "versions is a slice of operator and operand version tuples. Operators which manage multiple operands will have multiple operand entries in the array. Available operators must report the version of the operator itself with the name \"operator\". An operator reports a new \"operator\" version when it has rolled out the new version to all of its operands.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.OperandVersion{}.OpenAPIModelName()), }, }, }, }, }, - "resourceNames": { + "relatedObjects": { SchemaProps: spec.SchemaProps{ - Description: "resourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.", + Description: "relatedObjects is a list of objects that are \"interesting\" or related to this operator. Common uses are: 1. the detailed resource driving the operator 2. operator namespaces 3. operand namespaces", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.ObjectReference{}.OpenAPIModelName()), }, }, }, }, }, - "nonResourceURLs": { + "extension": { SchemaProps: spec.SchemaProps{ - Description: "NonResourceURLsSlice is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path This name is intentionally different than the internal type so that the DefaultConvert works nicely and because the ordering may be different.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "extension contains any additional status information specific to the operator which owns this status object.", + Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), }, }, }, - Required: []string{"verbs", "resources"}, }, }, Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, + v1.ClusterOperatorStatusCondition{}.OpenAPIModelName(), v1.ObjectReference{}.OpenAPIModelName(), v1.OperandVersion{}.OpenAPIModelName(), runtime.RawExtension{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_ResourceAccessReview(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ClusterOperatorStatusCondition(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "ClusterOperatorStatusCondition represents the state of the operator's managed and monitored components.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { + "type": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "type specifies the aspect reported by this condition.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "namespace": { + "status": { SchemaProps: spec.SchemaProps{ - Description: "namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", + Description: "status of the condition, one of True, False, Unknown.", Default: "", Type: []string{"string"}, Format: "", }, }, - "verb": { + "lastTransitionTime": { SchemaProps: spec.SchemaProps{ - Description: "verb is one of: get, list, watch, create, update, delete", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "lastTransitionTime is the time of the last update to the current status property.", + Ref: ref(metav1.Time{}.OpenAPIModelName()), }, }, - "resourceAPIGroup": { + "reason": { SchemaProps: spec.SchemaProps{ - Description: "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", - Default: "", + Description: "reason is the CamelCase reason for the condition's current status.", Type: []string{"string"}, Format: "", }, }, - "resourceAPIVersion": { + "message": { SchemaProps: spec.SchemaProps{ - Description: "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", - Default: "", + Description: "message provides additional information about the current condition. This is only to be consumed by humans. It may contain Line Feed characters (U+000A), which should be rendered as new lines.", Type: []string{"string"}, Format: "", }, }, - "resource": { + }, + Required: []string{"type", "status", "lastTransitionTime"}, + }, + }, + Dependencies: []string{ + metav1.Time{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_ClusterVersion(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "ClusterVersion is the configuration for the ClusterVersionOperator. This is where parameters related to automatic updates can be set.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "kind": { SchemaProps: spec.SchemaProps{ - Description: "resource is one of the existing resource types", - Default: "", + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", Type: []string{"string"}, Format: "", }, }, - "resourceName": { + "apiVersion": { SchemaProps: spec.SchemaProps{ - Description: "resourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", - Default: "", + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", Type: []string{"string"}, Format: "", }, }, - "path": { + "metadata": { SchemaProps: spec.SchemaProps{ - Description: "path is the path of a non resource URL", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), }, }, - "isNonResourceURL": { + "spec": { SchemaProps: spec.SchemaProps{ - Description: "isNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", - Default: false, - Type: []string{"boolean"}, - Format: "", + Description: "spec is the desired state of the cluster version - the operator will work to ensure that the desired version is applied to the cluster.", + Default: map[string]interface{}{}, + Ref: ref(v1.ClusterVersionSpec{}.OpenAPIModelName()), }, }, - "content": { + "status": { SchemaProps: spec.SchemaProps{ - Description: "content is the actual content of the request for create and update", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), + Description: "status contains information about the available updates and any in-progress updates.", + Default: map[string]interface{}{}, + Ref: ref(v1.ClusterVersionStatus{}.OpenAPIModelName()), }, }, }, - Required: []string{"namespace", "verb", "resourceAPIGroup", "resourceAPIVersion", "resource", "resourceName", "path", "isNonResourceURL"}, + Required: []string{"spec"}, }, }, Dependencies: []string{ - metav1.ObjectMeta{}.OpenAPIModelName(), runtime.RawExtension{}.OpenAPIModelName()}, + v1.ClusterVersionSpec{}.OpenAPIModelName(), v1.ClusterVersionStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_ResourceAccessReviewResponse(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ClusterVersionCapabilitiesSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ResourceAccessReviewResponse describes who can perform the action\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "ClusterVersionCapabilitiesSpec selects the managed set of optional, core cluster components.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { + "baselineCapabilitySet": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "baselineCapabilitySet selects an initial set of optional capabilities to enable, which can be extended via additionalEnabledCapabilities. If unset, the cluster will choose a default, and the default may change over time. The current default is vCurrent.", Type: []string{"string"}, Format: "", }, }, - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace is the namespace used for the access review", - Type: []string{"string"}, - Format: "", + "additionalEnabledCapabilities": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, }, - }, - "users": { SchemaProps: spec.SchemaProps{ - Description: "UsersSlice is the list of users who can perform the action", + Description: "additionalEnabledCapabilities extends the set of managed capabilities beyond the baseline defined in baselineCapabilitySet. The default is an empty set.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -4921,9 +3491,27 @@ func schema_openshift_api_authorization_v1_ResourceAccessReviewResponse(ref comm }, }, }, - "groups": { + }, + }, + }, + } +} + +func schema_openshift_api_config_v1_ClusterVersionCapabilitiesStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "ClusterVersionCapabilitiesStatus describes the state of optional, core cluster components.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "enabledCapabilities": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "GroupsSlice is the list of groups who can perform the action", + Description: "enabledCapabilities lists all the capabilities that are currently managed.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -4936,26 +3524,37 @@ func schema_openshift_api_authorization_v1_ResourceAccessReviewResponse(ref comm }, }, }, - "evalutionError": { + "knownCapabilities": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "EvaluationError is an indication that some error occurred during resolution, but partial results can still be returned. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. This is most common when a bound role is missing, but enough roles are still present and bound to reason about the request.", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "knownCapabilities lists all the capabilities known to the current cluster.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, }, - Required: []string{"users", "groups", "evalutionError"}, }, }, } } -func schema_openshift_api_authorization_v1_Role(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ClusterVersionList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "Role is a logical grouping of PolicyRules that can be referenced as a unit by RoleBindings.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "ClusterVersionList is a list of ClusterVersion resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -4974,414 +3573,450 @@ func schema_openshift_api_authorization_v1_Role(ref common.ReferenceCallback) co }, "metadata": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), }, }, - "rules": { + "items": { SchemaProps: spec.SchemaProps{ - Description: "rules holds all the PolicyRules for this Role", - Type: []string{"array"}, + Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(authorizationv1.PolicyRule{}.OpenAPIModelName()), + Ref: ref(v1.ClusterVersion{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"rules"}, + Required: []string{"metadata", "items"}, }, }, Dependencies: []string{ - authorizationv1.PolicyRule{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.ClusterVersion{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_RoleBinding(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ClusterVersionSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RoleBinding references a Role, but not contain it. It can reference any Role in the same namespace or in the global namespace. It adds who information via (Users and Groups) OR Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace (excepting the master namespace which has power in all namespaces).\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "ClusterVersionSpec is the desired version state of the cluster. It includes the version the cluster should be at, how the cluster is identified, and where the cluster should look for version updates.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "clusterID": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "clusterID uniquely identifies this cluster. This is expected to be an RFC4122 UUID value (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx in hexadecimal values). This is a required field.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "desiredUpdate": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "desiredUpdate is an optional field that indicates the desired value of the cluster version. Setting this value will trigger an upgrade (if the current version does not match the desired version). The set of recommended update values is listed as part of available updates in status, and setting values outside that range may cause the upgrade to fail.\n\nSome of the fields are inter-related with restrictions and meanings described here. 1. image is specified, version is specified, architecture is specified. API validation error. 2. image is specified, version is specified, architecture is not specified. The version extracted from the referenced image must match the specified version. 3. image is specified, version is not specified, architecture is specified. API validation error. 4. image is specified, version is not specified, architecture is not specified. image is used. 5. image is not specified, version is specified, architecture is specified. version and desired architecture are used to select an image. 6. image is not specified, version is specified, architecture is not specified. version and current architecture are used to select an image. 7. image is not specified, version is not specified, architecture is specified. API validation error. 8. image is not specified, version is not specified, architecture is not specified. API validation error.\n\nIf an upgrade fails the operator will halt and report status about the failing component. Setting the desired update value back to the previous version will cause a rollback to be attempted if the previous version is within the current minor version. Not all rollbacks will succeed, and some may unrecoverably break the cluster.", + Ref: ref(v1.Update{}.OpenAPIModelName()), + }, + }, + "upstream": { + SchemaProps: spec.SchemaProps{ + Description: "upstream may be used to specify the preferred update server. By default it will use the appropriate update server for the cluster and region.", Type: []string{"string"}, Format: "", }, }, - "metadata": { + "channel": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + Description: "channel is an identifier for explicitly requesting a non-default set of updates to be applied to this cluster. The default channel will contain stable updates that are appropriate for production clusters.", + Type: []string{"string"}, + Format: "", }, }, - "userNames": { + "capabilities": { SchemaProps: spec.SchemaProps{ - Description: "userNames holds all the usernames directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, + Description: "capabilities configures the installation of optional, core cluster components. A null value here is identical to an empty object; see the child properties for default semantics.", + Ref: ref(v1.ClusterVersionCapabilitiesSpec{}.OpenAPIModelName()), + }, + }, + "signatureStores": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "url", }, + "x-kubernetes-list-type": "map", }, }, - }, - "groupNames": { SchemaProps: spec.SchemaProps{ - Description: "groupNames holds all the groups directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.", + Description: "signatureStores contains the upstream URIs to verify release signatures and optional reference to a config map by name containing the PEM-encoded CA bundle.\n\nBy default, CVO will use existing signature stores if this property is empty. The CVO will check the release signatures in the local ConfigMaps first. It will search for a valid signature in these stores in parallel only when local ConfigMaps did not include a valid signature. Validation will fail if none of the signature stores reply with valid signature before timeout. Setting signatureStores will replace the default signature stores with custom signature stores. Default stores can be used with custom signature stores by adding them manually.\n\nA maximum of 32 signature stores may be configured.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.SignatureStore{}.OpenAPIModelName()), }, }, }, }, }, - "subjects": { + "overrides": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "kind", + "group", + "namespace", + "name", + }, + "x-kubernetes-list-type": "map", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "subjects hold object references to authorize with this rule. This field is ignored if UserNames or GroupNames are specified to support legacy clients and servers. Thus newer clients that do not need to support backwards compatibility should send only fully qualified Subjects and should omit the UserNames and GroupNames fields. Clients that need to support backwards compatibility can use this field to build the UserNames and GroupNames.", + Description: "overrides is list of overides for components that are managed by cluster version operator. Marking a component unmanaged will prevent the operator from creating or updating the object.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), + Ref: ref(v1.ComponentOverride{}.OpenAPIModelName()), }, }, }, }, }, - "roleRef": { - SchemaProps: spec.SchemaProps{ - Description: "roleRef can only reference the current namespace and the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. Since Policy is a singleton, this is sufficient knowledge to locate a role.", - Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, }, - Required: []string{"subjects", "roleRef"}, + Required: []string{"clusterID"}, }, }, Dependencies: []string{ - corev1.ObjectReference{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.ClusterVersionCapabilitiesSpec{}.OpenAPIModelName(), v1.ComponentOverride{}.OpenAPIModelName(), v1.SignatureStore{}.OpenAPIModelName(), v1.Update{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_RoleBindingList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ClusterVersionStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RoleBindingList is a collection of RoleBindings\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "ClusterVersionStatus reports the status of the cluster versioning, including any upgrades that are in progress. The current field will be set to whichever version the cluster is reconciling to, and the conditions array will report whether the update succeeded, is in progress, or is failing.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { + "desired": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Description: "desired is the version that the cluster is reconciling towards. If the cluster is not yet fully initialized desired will be set with the information available, which may be an image or a tag.", Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + Ref: ref(v1.Release{}.OpenAPIModelName()), }, }, - "items": { + "history": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "items is a list of RoleBindings", + Description: "history contains a list of the most recent versions applied to the cluster. This value may be empty during cluster startup, and then will be updated when a new update is being applied. The newest update is first in the list and it is ordered by recency. Updates in the history have state Completed if the rollout completed - if an update was failing or halfway applied the state will be Partial. Only a limited amount of update history is preserved.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(authorizationv1.RoleBinding{}.OpenAPIModelName()), + Ref: ref(v1.UpdateHistory{}.OpenAPIModelName()), }, }, }, }, }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - authorizationv1.RoleBinding{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_authorization_v1_RoleBindingRestriction(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RoleBindingRestriction is an object that can be matched against a subject (user, group, or service account) to determine whether rolebindings on that subject are allowed in the namespace to which the RoleBindingRestriction belongs. If any one of those RoleBindingRestriction objects matches a subject, rolebindings on that subject in the namespace are allowed.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { + "observedGeneration": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", + Description: "observedGeneration reports which version of the spec is being synced. If this value is not equal to metadata.generation, then the desired and conditions fields may represent a previous version.", + Default: 0, + Type: []string{"integer"}, + Format: "int64", }, }, - "apiVersion": { + "versionHash": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "versionHash is a fingerprint of the content that the cluster will be updated with. It is used by the operator to avoid unnecessary work and is for internal use only.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { + "capabilities": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Description: "capabilities describes the state of optional, core cluster components.", Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + Ref: ref(v1.ClusterVersionCapabilitiesStatus{}.OpenAPIModelName()), }, }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec defines the matcher.", - Default: map[string]interface{}{}, - Ref: ref(authorizationv1.RoleBindingRestrictionSpec{}.OpenAPIModelName()), + "conditions": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "type", + }, + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge", + }, }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - authorizationv1.RoleBindingRestrictionSpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_authorization_v1_RoleBindingRestrictionList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RoleBindingRestrictionList is a collection of RoleBindingRestriction objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", + Description: "conditions provides information about the cluster version. The condition \"Available\" is set to true if the desiredUpdate has been reached. The condition \"Progressing\" is set to true if an update is being applied. The condition \"Degraded\" is set to true if an update is currently blocked by a temporary or permanent error. Conditions are only valid for the current desiredUpdate when metadata.generation is equal to status.generation.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.ClusterOperatorStatusCondition{}.OpenAPIModelName()), + }, + }, + }, }, }, - "apiVersion": { + "availableUpdates": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + Description: "availableUpdates contains updates recommended for this cluster. Updates which appear in conditionalUpdates but not in availableUpdates may expose this cluster to known issues. This list may be empty if no updates are recommended, if the update service is unavailable, or if an invalid channel has been specified.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.Release{}.OpenAPIModelName()), + }, + }, + }, }, }, - "metadata": { + "conditionalUpdates": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + Description: "conditionalUpdates contains the list of updates that may be recommended for this cluster if it meets specific required conditions. Consumers interested in the set of updates that are actually recommended for this cluster should use availableUpdates. This list may be empty if no updates are recommended, if the update service is unavailable, or if an empty or invalid channel has been specified.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.ConditionalUpdate{}.OpenAPIModelName()), + }, + }, + }, }, }, - "items": { + "conditionalUpdateRisks": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "name", + }, + "x-kubernetes-list-type": "map", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "items is a list of RoleBindingRestriction objects.", + Description: "conditionalUpdateRisks contains the list of risks associated with conditionalUpdates. When performing a conditional update, all its associated risks will be compared with the set of accepted risks in the spec.desiredUpdate.acceptRisks field. If all risks for a conditional update are included in the spec.desiredUpdate.acceptRisks set, the conditional update can proceed, otherwise it is blocked. The risk names in the list must be unique. conditionalUpdateRisks must not contain more than 500 entries.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(authorizationv1.RoleBindingRestriction{}.OpenAPIModelName()), + Ref: ref(v1.ConditionalUpdateRisk{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"items"}, + Required: []string{"desired", "observedGeneration", "versionHash", "availableUpdates"}, }, }, Dependencies: []string{ - authorizationv1.RoleBindingRestriction{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.ClusterOperatorStatusCondition{}.OpenAPIModelName(), v1.ClusterVersionCapabilitiesStatus{}.OpenAPIModelName(), v1.ConditionalUpdate{}.OpenAPIModelName(), v1.ConditionalUpdateRisk{}.OpenAPIModelName(), v1.Release{}.OpenAPIModelName(), v1.UpdateHistory{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_RoleBindingRestrictionSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ComponentOverride(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RoleBindingRestrictionSpec defines a rolebinding restriction. Exactly one field must be non-nil.", + Description: "ComponentOverride allows overriding cluster version operator's behavior for a component.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "userrestriction": { + "kind": { + SchemaProps: spec.SchemaProps{ + Description: "kind indentifies which object to override.", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "group": { + SchemaProps: spec.SchemaProps{ + Description: "group identifies the API group that the kind is in.", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "namespace": { SchemaProps: spec.SchemaProps{ - Description: "userrestriction matches against user subjects.", - Ref: ref(authorizationv1.UserRestriction{}.OpenAPIModelName()), + Description: "namespace is the component's namespace. If the resource is cluster scoped, the namespace should be empty.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "grouprestriction": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "grouprestriction matches against group subjects.", - Ref: ref(authorizationv1.GroupRestriction{}.OpenAPIModelName()), + Description: "name is the component's name.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "serviceaccountrestriction": { + "unmanaged": { SchemaProps: spec.SchemaProps{ - Description: "serviceaccountrestriction matches against service-account subjects.", - Ref: ref(authorizationv1.ServiceAccountRestriction{}.OpenAPIModelName()), + Description: "unmanaged controls if cluster version operator should stop managing the resources in this cluster. Default: false", + Default: false, + Type: []string{"boolean"}, + Format: "", }, }, }, - Required: []string{"userrestriction", "grouprestriction", "serviceaccountrestriction"}, + Required: []string{"kind", "group", "namespace", "name", "unmanaged"}, }, }, - Dependencies: []string{ - authorizationv1.GroupRestriction{}.OpenAPIModelName(), authorizationv1.ServiceAccountRestriction{}.OpenAPIModelName(), authorizationv1.UserRestriction{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_RoleList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ComponentRouteSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RoleList is a collection of Roles\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "ComponentRouteSpec allows for configuration of a route's hostname and serving certificate.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "namespace": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "namespace is the namespace of the route to customize.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of status.componentRoutes if the route is to be customized.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "name is the logical name of the route to customize.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of status.componentRoutes if the route is to be customized.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { + "hostname": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Description: "hostname is the hostname that should be used by the route.", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "servingCertKeyPairSecret": { + SchemaProps: spec.SchemaProps{ + Description: "servingCertKeyPairSecret is a reference to a secret of type `kubernetes.io/tls` in the openshift-config namespace. The serving cert/key pair must match and will be used by the operator to fulfill the intent of serving with this name. If the custom hostname uses the default routing suffix of the cluster, the Secret specification for a serving certificate will not be needed.", Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), }, }, - "items": { + "labels": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-map-type": "granular", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "items is a list of Roles", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ + Description: "labels defines additional labels to be applied to the route created for the component. These labels are used by the IngressController to determine which routes it should manage. Changing labels may cause the route to be reassigned to a different IngressController. When omitted, no additional labels are applied to the component route. When specified, labels must contain at least one entry, up to a maximum of 8. Label keys must be valid qualified names, consisting of a name segment and an optional prefix separated by a slash (/). The name segment must be at most 63 characters in length and must consist only of alphanumeric characters, dashes (-), underscores (_), and dots (.), and must start and end with alphanumeric characters. The prefix, if specified, must be a DNS subdomain: at most 253 characters in length, consisting of dot-separated segments where each segment starts and ends with an alphanumeric character. Label values must be either empty or 1-63 characters, consisting of alphanumeric characters, dashes (-), underscores (_), or dots (.), starting and ending with an alphanumeric character. Keys with the \"kubernetes.io/\", \"k8s.io/\", and \"openshift.io/\" prefixes are reserved and may not be used.", + Type: []string{"object"}, + AdditionalProperties: &spec.SchemaOrBool{ + Allows: true, Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(authorizationv1.Role{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, }, - Required: []string{"items"}, + Required: []string{"namespace", "name", "hostname"}, }, }, Dependencies: []string{ - authorizationv1.Role{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.SecretNameReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_SelfSubjectRulesReview(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ComponentRouteStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SelfSubjectRulesReview is a resource you can create to determine which actions you can perform in a namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "ComponentRouteStatus contains information allowing configuration of a route's hostname and serving certificate.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "namespace": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "namespace is the namespace of the route to customize. It must be a real namespace. Using an actual namespace ensures that no two components will conflict and the same component can be installed multiple times.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of spec.componentRoutes if the route is to be customized.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "name is the logical name of the route to customize. It does not have to be the actual name of a route resource but it cannot be renamed.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of spec.componentRoutes if the route is to be customized.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { + "defaultHostname": { SchemaProps: spec.SchemaProps{ - Description: "spec adds information about how to conduct the check", - Default: map[string]interface{}{}, - Ref: ref(authorizationv1.SelfSubjectRulesReviewSpec{}.OpenAPIModelName()), + Description: "defaultHostname is the hostname of this route prior to customization.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "status": { + "consumingUsers": { SchemaProps: spec.SchemaProps{ - Description: "status is completed by the server to tell which permissions you have", - Default: map[string]interface{}{}, - Ref: ref(authorizationv1.SubjectRulesReviewStatus{}.OpenAPIModelName()), + Description: "consumingUsers is a slice of ServiceAccounts that need to have read permission on the servingCertKeyPairSecret secret.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - authorizationv1.SelfSubjectRulesReviewSpec{}.OpenAPIModelName(), authorizationv1.SubjectRulesReviewStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_authorization_v1_SelfSubjectRulesReviewSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SelfSubjectRulesReviewSpec adds information about how to conduct the check", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "scopes": { + "currentHostnames": { SchemaProps: spec.SchemaProps{ - Description: "scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\". Nil means \"use the scopes on this request\".", + Description: "currentHostnames is the list of current names used by the route. Typically, this list should consist of a single hostname, but if multiple hostnames are supported by the route the operator may write multiple entries to this list.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -5394,295 +4029,276 @@ func schema_openshift_api_authorization_v1_SelfSubjectRulesReviewSpec(ref common }, }, }, - }, - Required: []string{"scopes"}, - }, - }, - } -} - -func schema_openshift_api_authorization_v1_ServiceAccountReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ServiceAccountReference specifies a service account and namespace by their names.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { + "conditions": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "type", + }, + "x-kubernetes-list-type": "map", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "name is the name of the service account.", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "conditions are used to communicate the state of the componentRoutes entry.\n\nSupported conditions include Available, Degraded and Progressing.\n\nIf available is true, the content served by the route can be accessed by users. This includes cases where a default may continue to serve content while the customized route specified by the cluster-admin is being configured.\n\nIf Degraded is true, that means something has gone wrong trying to handle the componentRoutes entry. The currentHostnames field may or may not be in effect.\n\nIf Progressing is true, that means the component is taking some action related to the componentRoutes entry.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(metav1.Condition{}.OpenAPIModelName()), + }, + }, + }, }, }, - "namespace": { + "relatedObjects": { SchemaProps: spec.SchemaProps{ - Description: "namespace is the namespace of the service account. Service accounts from inside the whitelisted namespaces are allowed to be bound to roles. If Namespace is empty, then the namespace of the RoleBindingRestriction in which the ServiceAccountReference is embedded is used.", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "relatedObjects is a list of resources which are useful when debugging or inspecting how spec.componentRoutes is applied.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.ObjectReference{}.OpenAPIModelName()), + }, + }, + }, }, }, }, - Required: []string{"name", "namespace"}, + Required: []string{"namespace", "name", "defaultHostname", "relatedObjects"}, }, }, + Dependencies: []string{ + v1.ObjectReference{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_ServiceAccountRestriction(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ConditionalUpdate(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ServiceAccountRestriction matches a service account by a string match on either the service-account name or the name of the service account's namespace.", + Description: "ConditionalUpdate represents an update which is recommended to some clusters on the version the current cluster is reconciling, but which may not be recommended for the current cluster.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "serviceaccounts": { + "release": { + SchemaProps: spec.SchemaProps{ + Description: "release is the target of the update.", + Default: map[string]interface{}{}, + Ref: ref(v1.Release{}.OpenAPIModelName()), + }, + }, + "riskNames": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "set", + }, + }, + SchemaProps: spec.SchemaProps{ + Description: "riskNames represents the set of the names of conditionalUpdateRisks that are relevant to this update for some clusters. The Applies condition of each conditionalUpdateRisks entry declares if that risk applies to this cluster. A conditional update is accepted only if each of its risks either does not apply to the cluster or is considered acceptable by the cluster administrator. The latter means that the risk names are included in value of the spec.desiredUpdate.acceptRisks field. Entries must be unique and must not exceed 256 characters. riskNames must not contain more than 500 entries.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, + }, + }, + "risks": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "name", + }, + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "serviceaccounts specifies a list of literal service-account names.", + Description: "risks represents the range of issues associated with updating to the target release. The cluster-version operator will evaluate all entries, and only recommend the update if there is at least one entry and all entries recommend the update.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(authorizationv1.ServiceAccountReference{}.OpenAPIModelName()), + Ref: ref(v1.ConditionalUpdateRisk{}.OpenAPIModelName()), }, }, }, }, }, - "namespaces": { + "conditions": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "type", + }, + "x-kubernetes-list-type": "map", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "namespaces specifies a list of literal namespace names.", + Description: "conditions represents the observations of the conditional update's current status. Known types are: * Recommended, for whether the update is recommended for the current cluster.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(metav1.Condition{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"serviceaccounts", "namespaces"}, + Required: []string{"release", "risks"}, }, }, Dependencies: []string{ - authorizationv1.ServiceAccountReference{}.OpenAPIModelName()}, + v1.ConditionalUpdateRisk{}.OpenAPIModelName(), v1.Release{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_SubjectAccessReview(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ConditionalUpdateRisk(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SubjectAccessReview is an object for requesting information about whether a user or group can perform an action\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "ConditionalUpdateRisk represents a reason and cluster-state for not recommending a conditional update.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "verb": { - SchemaProps: spec.SchemaProps{ - Description: "verb is one of: get, list, watch, create, update, delete", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resourceAPIGroup": { - SchemaProps: spec.SchemaProps{ - Description: "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resourceAPIVersion": { - SchemaProps: spec.SchemaProps{ - Description: "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", - Default: "", - Type: []string{"string"}, - Format: "", + "conditions": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "type", + }, + "x-kubernetes-list-type": "map", + }, }, - }, - "resource": { SchemaProps: spec.SchemaProps{ - Description: "resource is one of the existing resource types", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "conditions represents the observations of the conditional update risk's current status. Known types are: * Applies, for whether the risk applies to the current cluster. The condition's types in the list must be unique. conditions must not contain more than one entry.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(metav1.Condition{}.OpenAPIModelName()), + }, + }, + }, }, }, - "resourceName": { + "url": { SchemaProps: spec.SchemaProps{ - Description: "resourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", + Description: "url contains information about this risk.", Default: "", Type: []string{"string"}, Format: "", }, }, - "path": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "path is the path of a non resource URL", + Description: "name is the CamelCase reason for not recommending a conditional update, in the event that matchingRules match the cluster state.", Default: "", Type: []string{"string"}, Format: "", }, }, - "isNonResourceURL": { - SchemaProps: spec.SchemaProps{ - Description: "isNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "content": { - SchemaProps: spec.SchemaProps{ - Description: "content is the actual content of the request for create and update", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "user": { + "message": { SchemaProps: spec.SchemaProps{ - Description: "user is optional. If both User and Groups are empty, the current authenticated user is used.", + Description: "message provides additional information about the risk of updating, in the event that matchingRules match the cluster state. This is only to be consumed by humans. It may contain Line Feed characters (U+000A), which should be rendered as new lines.", Default: "", Type: []string{"string"}, Format: "", }, }, - "groups": { - SchemaProps: spec.SchemaProps{ - Description: "GroupsSlice is optional. Groups is the list of groups to which the User belongs.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, + "matchingRules": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", }, }, - }, - "scopes": { SchemaProps: spec.SchemaProps{ - Description: "scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\". Nil for a self-SAR, means \"use the scopes on this request\". Nil for a regular SAR, means the same as empty.", + Description: "matchingRules is a slice of conditions for deciding which clusters match the risk and which do not. The slice is ordered by decreasing precedence. The cluster-version operator will walk the slice in order, and stop after the first it can successfully evaluate. If no condition can be successfully evaluated, the update will not be recommended.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.ClusterCondition{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"namespace", "verb", "resourceAPIGroup", "resourceAPIVersion", "resource", "resourceName", "path", "isNonResourceURL", "user", "groups", "scopes"}, + Required: []string{"url", "name", "message", "matchingRules"}, }, }, Dependencies: []string{ - metav1.ObjectMeta{}.OpenAPIModelName(), runtime.RawExtension{}.OpenAPIModelName()}, + v1.ClusterCondition{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_SubjectAccessReviewResponse(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ConfigMapFileReference(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SubjectAccessReviewResponse describes whether or not a user or group can perform an action\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "ConfigMapFileReference references a config map in a specific namespace. The namespace must be specified at the point of use.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace is the namespace used for the access review", - Type: []string{"string"}, - Format: "", - }, - }, - "allowed": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "allowed is required. True if the action would be allowed, false otherwise.", - Default: false, - Type: []string{"boolean"}, - Format: "", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "reason": { + "key": { SchemaProps: spec.SchemaProps{ - Description: "reason is optional. It indicates why a request was allowed or denied.", + Description: "key allows pointing to a specific key/value inside of the configmap. This is useful for logical file references.", Type: []string{"string"}, Format: "", }, }, - "evaluationError": { + }, + Required: []string{"name"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_ConfigMapNameReference(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "ConfigMapNameReference references a config map in a specific namespace. The namespace must be specified at the point of use.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "name": { SchemaProps: spec.SchemaProps{ - Description: "evaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. This is most common when a bound role is missing, but enough roles are still present and bound to reason about the request.", + Description: "name is the metadata.name of the referenced config map", + Default: "", Type: []string{"string"}, Format: "", }, }, }, - Required: []string{"allowed"}, + Required: []string{"name"}, }, }, } } -func schema_openshift_api_authorization_v1_SubjectRulesReview(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_Console(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SubjectRulesReview is a resource you can create to determine which actions another user can perform in a namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "Console holds cluster-wide configuration for the web console, including the logout URL, and reports the public URL of the console. The canonical name is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -5708,16 +4324,16 @@ func schema_openshift_api_authorization_v1_SubjectRulesReview(ref common.Referen }, "spec": { SchemaProps: spec.SchemaProps{ - Description: "spec adds information about how to conduct the check", + Description: "spec holds user settable values for configuration", Default: map[string]interface{}{}, - Ref: ref(authorizationv1.SubjectRulesReviewSpec{}.OpenAPIModelName()), + Ref: ref(v1.ConsoleSpec{}.OpenAPIModelName()), }, }, "status": { SchemaProps: spec.SchemaProps{ - Description: "status is completed by the server to tell which permissions you have", + Description: "status holds observed values from the cluster. They may not be overridden.", Default: map[string]interface{}{}, - Ref: ref(authorizationv1.SubjectRulesReviewStatus{}.OpenAPIModelName()), + Ref: ref(v1.ConsoleStatus{}.OpenAPIModelName()), }, }, }, @@ -5725,86 +4341,112 @@ func schema_openshift_api_authorization_v1_SubjectRulesReview(ref common.Referen }, }, Dependencies: []string{ - authorizationv1.SubjectRulesReviewSpec{}.OpenAPIModelName(), authorizationv1.SubjectRulesReviewStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.ConsoleSpec{}.OpenAPIModelName(), v1.ConsoleStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_SubjectRulesReviewSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ConsoleAuthentication(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SubjectRulesReviewSpec adds information about how to conduct the check", + Description: "ConsoleAuthentication defines a list of optional configuration for console authentication.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "user": { + "logoutRedirect": { SchemaProps: spec.SchemaProps{ - Description: "user is optional. At least one of User and Groups must be specified.", - Default: "", + Description: "An optional, absolute URL to redirect web browsers to after logging out of the console. If not specified, it will redirect to the default login page. This is required when using an identity provider that supports single sign-on (SSO) such as: - OpenID (Keycloak, Azure) - RequestHeader (GSSAPI, SSPI, SAML) - OAuth (GitHub, GitLab, Google) Logging out of the console will destroy the user's token. The logoutRedirect provides the user the option to perform single logout (SLO) through the identity provider to destroy their single sign-on session.", Type: []string{"string"}, Format: "", }, }, - "groups": { + }, + }, + }, + } +} + +func schema_openshift_api_config_v1_ConsoleList(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "kind": { SchemaProps: spec.SchemaProps{ - Description: "groups is optional. Groups is the list of groups to which the User belongs. At least one of User and Groups must be specified.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Type: []string{"string"}, + Format: "", }, }, - "scopes": { + "apiVersion": { SchemaProps: spec.SchemaProps{ - Description: "scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\".", - Type: []string{"array"}, + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Type: []string{"string"}, + Format: "", + }, + }, + "metadata": { + SchemaProps: spec.SchemaProps{ + Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + }, + }, + "items": { + SchemaProps: spec.SchemaProps{ + Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.Console{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"user", "groups", "scopes"}, + Required: []string{"metadata", "items"}, }, }, + Dependencies: []string{ + v1.Console{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_SubjectRulesReviewStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ConsoleSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SubjectRulesReviewStatus is contains the result of a rules check", + Description: "ConsoleSpec is the specification of the desired behavior of the Console.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "rules": { + "authentication": { SchemaProps: spec.SchemaProps{ - Description: "rules is the list of rules (no particular sort) that are allowed for the subject", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(authorizationv1.PolicyRule{}.OpenAPIModelName()), - }, - }, - }, + Default: map[string]interface{}{}, + Ref: ref(v1.ConsoleAuthentication{}.OpenAPIModelName()), }, }, - "evaluationError": { + }, + }, + }, + Dependencies: []string{ + v1.ConsoleAuthentication{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_ConsoleStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "ConsoleStatus defines the observed status of the Console.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "consoleURL": { SchemaProps: spec.SchemaProps{ - Description: "evaluationError can appear in combination with Rules. It means some error happened during evaluation that may have prevented additional rules from being populated.", + Description: "The URL for the console. This will be derived from the host for the route that is created for the console.", + Default: "", Type: []string{"string"}, Format: "", }, @@ -5812,36 +4454,56 @@ func schema_openshift_api_authorization_v1_SubjectRulesReviewStatus(ref common.R }, }, }, - Dependencies: []string{ - authorizationv1.PolicyRule{}.OpenAPIModelName()}, } } -func schema_openshift_api_authorization_v1_UserRestriction(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_Custom(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "UserRestriction matches a user either by a string match on the user name, a string match on the name of a group to which the user belongs, or a label selector applied to the user labels.", + Description: "Custom provides the custom configuration of gatherers", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "users": { + "configs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "name", + }, + "x-kubernetes-list-type": "map", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "users specifies a list of literal user names.", + Description: "configs is a required list of gatherers configurations that can be used to enable or disable specific gatherers. It may not exceed 100 items and each gatherer can be present only once. It is possible to disable an entire set of gatherers while allowing a specific function within that set. The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.GathererConfig{}.OpenAPIModelName()), }, }, }, }, }, - "groups": { + }, + Required: []string{"configs"}, + }, + }, + Dependencies: []string{ + v1.GathererConfig{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_CustomFeatureGates(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "enabled": { SchemaProps: spec.SchemaProps{ - Description: "groups specifies a list of literal group names.", + Description: "enabled is a list of all feature gates that you want to force on", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -5854,57322 +4516,221 @@ func schema_openshift_api_authorization_v1_UserRestriction(ref common.ReferenceC }, }, }, - "labels": { + "disabled": { SchemaProps: spec.SchemaProps{ - Description: "Selectors specifies a list of label selectors over user labels.", + Description: "disabled is a list of all feature gates that you want to force off", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.LabelSelector{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, }, - Required: []string{"users", "groups", "labels"}, }, }, - Dependencies: []string{ - metav1.LabelSelector{}.OpenAPIModelName()}, } } -func schema_openshift_api_build_v1_BinaryBuildRequestOptions(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BinaryBuildRequestOptions are the options required to fully speficy a binary build request\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "asFile": { - SchemaProps: spec.SchemaProps{ - Description: "asFile determines if the binary should be created as a file within the source rather than extracted as an archive", - Type: []string{"string"}, - Format: "", - }, - }, - "revision.commit": { - SchemaProps: spec.SchemaProps{ - Description: "revision.commit is the value identifying a specific commit", - Type: []string{"string"}, - Format: "", - }, - }, - "revision.message": { - SchemaProps: spec.SchemaProps{ - Description: "revision.message is the description of a specific commit", - Type: []string{"string"}, - Format: "", - }, - }, - "revision.authorName": { - SchemaProps: spec.SchemaProps{ - Description: "revision.authorName of the source control user", - Type: []string{"string"}, - Format: "", - }, - }, - "revision.authorEmail": { - SchemaProps: spec.SchemaProps{ - Description: "revision.authorEmail of the source control user", - Type: []string{"string"}, - Format: "", - }, - }, - "revision.committerName": { - SchemaProps: spec.SchemaProps{ - Description: "revision.committerName of the source control user", - Type: []string{"string"}, - Format: "", - }, - }, - "revision.committerEmail": { - SchemaProps: spec.SchemaProps{ - Description: "revision.committerEmail of the source control user", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BinaryBuildSource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BinaryBuildSource describes a binary file to be used for the Docker and Source build strategies, where the file will be extracted and used as the build source.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "asFile": { - SchemaProps: spec.SchemaProps{ - Description: "asFile indicates that the provided binary input should be considered a single file within the build input. For example, specifying \"webapp.war\" would place the provided binary as `/webapp.war` for the builder. If left empty, the Docker and Source build strategies assume this file is a zip, tar, or tar.gz file and extract it as the source. The custom strategy receives this binary as standard input. This filename may not contain slashes or be '..' or '.'.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_build_v1_BitbucketWebHookCause(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BitbucketWebHookCause has information about a Bitbucket webhook that triggered a build.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "revision": { - SchemaProps: spec.SchemaProps{ - Description: "revision is the git source revision information of the trigger.", - Ref: ref(buildv1.SourceRevision{}.OpenAPIModelName()), - }, - }, - "secret": { - SchemaProps: spec.SchemaProps{ - Description: "secret is the obfuscated webhook secret that triggered a build.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.SourceRevision{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_Build(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Build encapsulates the inputs needed to produce a new deployable image, as well as the status of the execution and a reference to the Pod which executed the build.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is all the inputs used to execute the build.", - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status is the current status of the build.", - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.BuildSpec{}.OpenAPIModelName(), buildv1.BuildStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BuildCondition(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildCondition describes the state of a build at a certain point.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type of build condition.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status of the condition, one of True, False, Unknown.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "lastUpdateTime": { - SchemaProps: spec.SchemaProps{ - Description: "The last time this condition was updated.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "lastTransitionTime": { - SchemaProps: spec.SchemaProps{ - Description: "The last time the condition transitioned from one status to another.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "reason": { - SchemaProps: spec.SchemaProps{ - Description: "The reason for the condition's last transition.", - Type: []string{"string"}, - Format: "", - }, - }, - "message": { - SchemaProps: spec.SchemaProps{ - Description: "A human readable message indicating details about the transition.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"type", "status"}, - }, - }, - Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BuildConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Build configurations define a build process for new container images. There are three types of builds possible - a container image build using a Dockerfile, a Source-to-Image build that uses a specially prepared base image that accepts source code that it can make runnable, and a custom build that can run // arbitrary container images as a base and accept the build parameters. Builds run on the cluster and on completion are pushed to the container image registry specified in the \"output\" section. A build can be triggered via a webhook, when the base image changes, or when a user manually requests a new build be // created.\n\nEach build created by a build configuration is numbered and refers back to its parent configuration. Multiple builds can be triggered at once. Builds that do not have \"output\" set can be used to test code or run a verification build.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds all the input necessary to produce a new build, and the conditions when to trigger them.", - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildConfigSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds any relevant information about a build config", - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildConfigStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - buildv1.BuildConfigSpec{}.OpenAPIModelName(), buildv1.BuildConfigStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BuildConfigList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildConfigList is a collection of BuildConfigs.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is a list of build configs", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - buildv1.BuildConfig{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BuildConfigSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildConfigSpec describes when and how builds are created", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "triggers": { - SchemaProps: spec.SchemaProps{ - Description: "triggers determine how new Builds can be launched from a BuildConfig. If no triggers are defined, a new build can only occur as a result of an explicit client build creation.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildTriggerPolicy{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "runPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "runPolicy describes how the new build created from this build configuration will be scheduled for execution. This is optional, if not specified we default to \"Serial\".", - Type: []string{"string"}, - Format: "", - }, - }, - "serviceAccount": { - SchemaProps: spec.SchemaProps{ - Description: "serviceAccount is the name of the ServiceAccount to use to run the pod created by this build. The pod will be allowed to use secrets referenced by the ServiceAccount", - Type: []string{"string"}, - Format: "", - }, - }, - "source": { - SchemaProps: spec.SchemaProps{ - Description: "source describes the SCM in use.", - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildSource{}.OpenAPIModelName()), - }, - }, - "revision": { - SchemaProps: spec.SchemaProps{ - Description: "revision is the information from the source for a specific repo snapshot. This is optional.", - Ref: ref(buildv1.SourceRevision{}.OpenAPIModelName()), - }, - }, - "strategy": { - SchemaProps: spec.SchemaProps{ - Description: "strategy defines how to perform a build.", - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildStrategy{}.OpenAPIModelName()), - }, - }, - "output": { - SchemaProps: spec.SchemaProps{ - Description: "output describes the container image the Strategy should produce.", - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildOutput{}.OpenAPIModelName()), - }, - }, - "resources": { - SchemaProps: spec.SchemaProps{ - Description: "resources computes resource requirements to execute the build.", - Default: map[string]interface{}{}, - Ref: ref(corev1.ResourceRequirements{}.OpenAPIModelName()), - }, - }, - "postCommit": { - SchemaProps: spec.SchemaProps{ - Description: "postCommit is a build hook executed after the build output image is committed, before it is pushed to a registry.", - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildPostCommitSpec{}.OpenAPIModelName()), - }, - }, - "completionDeadlineSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "completionDeadlineSeconds is an optional duration in seconds, counted from the time when a build pod gets scheduled in the system, that the build may be active on a node before the system actively tries to terminate the build; value must be positive integer", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector is a selector which must be true for the build pod to fit on a node If nil, it can be overridden by default build nodeselector values for the cluster. If set to an empty map or a map with any values, default build nodeselector values are ignored.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "mountTrustedCA": { - SchemaProps: spec.SchemaProps{ - Description: "mountTrustedCA bind mounts the cluster's trusted certificate authorities, as defined in the cluster's proxy configuration, into the build. This lets processes within a build trust components signed by custom PKI certificate authorities, such as private artifact repositories and HTTPS proxies.\n\nWhen this field is set to true, the contents of `/etc/pki/ca-trust` within the build are managed by the build container, and any changes to this directory or its subdirectories (for example - within a Dockerfile `RUN` instruction) are not persisted in the build's output image.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "successfulBuildsHistoryLimit": { - SchemaProps: spec.SchemaProps{ - Description: "successfulBuildsHistoryLimit is the number of old successful builds to retain. When a BuildConfig is created, the 5 most recent successful builds are retained unless this value is set. If removed after the BuildConfig has been created, all successful builds are retained.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "failedBuildsHistoryLimit": { - SchemaProps: spec.SchemaProps{ - Description: "failedBuildsHistoryLimit is the number of old failed builds to retain. When a BuildConfig is created, the 5 most recent failed builds are retained unless this value is set. If removed after the BuildConfig has been created, all failed builds are retained.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"strategy"}, - }, - }, - Dependencies: []string{ - buildv1.BuildOutput{}.OpenAPIModelName(), buildv1.BuildPostCommitSpec{}.OpenAPIModelName(), buildv1.BuildSource{}.OpenAPIModelName(), buildv1.BuildStrategy{}.OpenAPIModelName(), buildv1.BuildTriggerPolicy{}.OpenAPIModelName(), buildv1.SourceRevision{}.OpenAPIModelName(), corev1.ResourceRequirements{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BuildConfigStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildConfigStatus contains current state of the build config object.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "lastVersion": { - SchemaProps: spec.SchemaProps{ - Description: "lastVersion is used to inform about number of last triggered build.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - "imageChangeTriggers": { - SchemaProps: spec.SchemaProps{ - Description: "imageChangeTriggers captures the runtime state of any ImageChangeTrigger specified in the BuildConfigSpec, including the value reconciled by the OpenShift APIServer for the lastTriggeredImageID. There is a single entry in this array for each image change trigger in spec. Each trigger status references the ImageStreamTag that acts as the source of the trigger.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.ImageChangeTriggerStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.ImageChangeTriggerStatus{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BuildList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildList is a collection of Builds.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is a list of builds", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.Build{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - buildv1.Build{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BuildLog(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildLog is the (unused) resource associated with the build log redirector\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_build_v1_BuildLogOptions(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildLogOptions is the REST options for a build log\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "container": { - SchemaProps: spec.SchemaProps{ - Description: "cointainer for which to stream logs. Defaults to only container if there is one container in the pod.", - Type: []string{"string"}, - Format: "", - }, - }, - "follow": { - SchemaProps: spec.SchemaProps{ - Description: "follow if true indicates that the build log should be streamed until the build terminates.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "previous": { - SchemaProps: spec.SchemaProps{ - Description: "previous returns previous build logs. Defaults to false.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "sinceSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "sinceSeconds is a relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "sinceTime": { - SchemaProps: spec.SchemaProps{ - Description: "sinceTime is an RFC3339 timestamp from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "timestamps": { - SchemaProps: spec.SchemaProps{ - Description: "timestamps, If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "tailLines": { - SchemaProps: spec.SchemaProps{ - Description: "tailLines, If set, is the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "limitBytes": { - SchemaProps: spec.SchemaProps{ - Description: "limitBytes, If set, is the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "nowait": { - SchemaProps: spec.SchemaProps{ - Description: "nowait if true causes the call to return immediately even if the build is not available yet. Otherwise the server will wait until the build has started.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version of the build for which to view logs.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "insecureSkipTLSVerifyBackend": { - SchemaProps: spec.SchemaProps{ - Description: "insecureSkipTLSVerifyBackend indicates that the apiserver should not confirm the validity of the serving certificate of the backend it is connecting to. This will make the HTTPS connection between the apiserver and the backend insecure. This means the apiserver cannot verify the log data it is receiving came from the real kubelet. If the kubelet is configured to verify the apiserver's TLS credentials, it does not mean the connection to the real kubelet is vulnerable to a man in the middle attack (e.g. an attacker could not intercept the actual log data coming from the real kubelet).", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BuildOutput(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildOutput is input to a build strategy and describes the container image that the strategy should produce.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "to": { - SchemaProps: spec.SchemaProps{ - Description: "to defines an optional location to push the output of this build to. Kind must be one of 'ImageStreamTag' or 'DockerImage'. This value will be used to look up a container image repository to push to. In the case of an ImageStreamTag, the ImageStreamTag will be looked for in the namespace of the build unless Namespace is specified.", - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - "pushSecret": { - SchemaProps: spec.SchemaProps{ - Description: "pushSecret is the name of a Secret that would be used for setting up the authentication for executing the Docker push to authentication enabled Docker Registry (or Docker Hub).", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "imageLabels": { - SchemaProps: spec.SchemaProps{ - Description: "imageLabels define a list of labels that are applied to the resulting image. If there are multiple labels with the same name then the last one in the list is used.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.ImageLabel{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.ImageLabel{}.OpenAPIModelName(), corev1.LocalObjectReference{}.OpenAPIModelName(), corev1.ObjectReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BuildPostCommitSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "A BuildPostCommitSpec holds a build post commit hook specification. The hook executes a command in a temporary container running the build output image, immediately after the last layer of the image is committed and before the image is pushed to a registry. The command is executed with the current working directory ($PWD) set to the image's WORKDIR.\n\nThe build will be marked as failed if the hook execution fails. It will fail if the script or command return a non-zero exit code, or if there is any other error related to starting the temporary container.\n\nThere are five different ways to configure the hook. As an example, all forms below are equivalent and will execute `rake test --verbose`.\n\n1. Shell script:\n\n\t \"postCommit\": {\n\t \"script\": \"rake test --verbose\",\n\t }\n\n\tThe above is a convenient form which is equivalent to:\n\n\t \"postCommit\": {\n\t \"command\": [\"/bin/sh\", \"-ic\"],\n\t \"args\": [\"rake test --verbose\"]\n\t }\n\n2. A command as the image entrypoint:\n\n\t \"postCommit\": {\n\t \"commit\": [\"rake\", \"test\", \"--verbose\"]\n\t }\n\n\tCommand overrides the image entrypoint in the exec form, as documented in\n\tDocker: https://docs.docker.com/engine/reference/builder/#entrypoint.\n\n3. Pass arguments to the default entrypoint:\n\n\t \"postCommit\": {\n\t\t\t \"args\": [\"rake\", \"test\", \"--verbose\"]\n\t\t }\n\n\t This form is only useful if the image entrypoint can handle arguments.\n\n4. Shell script with arguments:\n\n\t \"postCommit\": {\n\t \"script\": \"rake test $1\",\n\t \"args\": [\"--verbose\"]\n\t }\n\n\tThis form is useful if you need to pass arguments that would otherwise be\n\thard to quote properly in the shell script. In the script, $0 will be\n\t\"/bin/sh\" and $1, $2, etc, are the positional arguments from Args.\n\n5. Command with arguments:\n\n\t \"postCommit\": {\n\t \"command\": [\"rake\", \"test\"],\n\t \"args\": [\"--verbose\"]\n\t }\n\n\tThis form is equivalent to appending the arguments to the Command slice.\n\nIt is invalid to provide both Script and Command simultaneously. If none of the fields are specified, the hook is not executed.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "command": { - SchemaProps: spec.SchemaProps{ - Description: "command is the command to run. It may not be specified with Script. This might be needed if the image doesn't have `/bin/sh`, or if you do not want to use a shell. In all other cases, using Script might be more convenient.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "args": { - SchemaProps: spec.SchemaProps{ - Description: "args is a list of arguments that are provided to either Command, Script or the container image's default entrypoint. The arguments are placed immediately after the command to be run.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "script": { - SchemaProps: spec.SchemaProps{ - Description: "script is a shell script to be run with `/bin/sh -ic`. It may not be specified with Command. Use Script when a shell script is appropriate to execute the post build hook, for example for running unit tests with `rake test`. If you need control over the image entrypoint, or if the image does not have `/bin/sh`, use Command and/or Args. The `-i` flag is needed to support CentOS and RHEL images that use Software Collections (SCL), in order to have the appropriate collections enabled in the shell. E.g., in the Ruby image, this is necessary to make `ruby`, `bundle` and other binaries available in the PATH.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_build_v1_BuildRequest(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildRequest is the resource used to pass parameters to build generator\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "revision": { - SchemaProps: spec.SchemaProps{ - Description: "revision is the information from the source for a specific repo snapshot.", - Ref: ref(buildv1.SourceRevision{}.OpenAPIModelName()), - }, - }, - "triggeredByImage": { - SchemaProps: spec.SchemaProps{ - Description: "triggeredByImage is the Image that triggered this build.", - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - "from": { - SchemaProps: spec.SchemaProps{ - Description: "from is the reference to the ImageStreamTag that triggered the build.", - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - "binary": { - SchemaProps: spec.SchemaProps{ - Description: "binary indicates a request to build from a binary provided to the builder", - Ref: ref(buildv1.BinaryBuildSource{}.OpenAPIModelName()), - }, - }, - "lastVersion": { - SchemaProps: spec.SchemaProps{ - Description: "lastVersion (optional) is the LastVersion of the BuildConfig that was used to generate the build. If the BuildConfig in the generator doesn't match, a build will not be generated.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "env": { - SchemaProps: spec.SchemaProps{ - Description: "env contains additional environment variables you want to pass into a builder container.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.EnvVar{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "triggeredBy": { - SchemaProps: spec.SchemaProps{ - Description: "triggeredBy describes which triggers started the most recent update to the build configuration and contains information about those triggers.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildTriggerCause{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "dockerStrategyOptions": { - SchemaProps: spec.SchemaProps{ - Description: "dockerStrategyOptions contains additional docker-strategy specific options for the build", - Ref: ref(buildv1.DockerStrategyOptions{}.OpenAPIModelName()), - }, - }, - "sourceStrategyOptions": { - SchemaProps: spec.SchemaProps{ - Description: "sourceStrategyOptions contains additional source-strategy specific options for the build", - Ref: ref(buildv1.SourceStrategyOptions{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.BinaryBuildSource{}.OpenAPIModelName(), buildv1.BuildTriggerCause{}.OpenAPIModelName(), buildv1.DockerStrategyOptions{}.OpenAPIModelName(), buildv1.SourceRevision{}.OpenAPIModelName(), buildv1.SourceStrategyOptions{}.OpenAPIModelName(), corev1.EnvVar{}.OpenAPIModelName(), corev1.ObjectReference{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BuildSource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildSource is the SCM used for the build.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type of build input to accept", - Type: []string{"string"}, - Format: "", - }, - }, - "binary": { - SchemaProps: spec.SchemaProps{ - Description: "binary builds accept a binary as their input. The binary is generally assumed to be a tar, gzipped tar, or zip file depending on the strategy. For container image builds, this is the build context and an optional Dockerfile may be specified to override any Dockerfile in the build context. For Source builds, this is assumed to be an archive as described above. For Source and container image builds, if binary.asFile is set the build will receive a directory with a single file. contextDir may be used when an archive is provided. Custom builds will receive this binary as input on STDIN.", - Ref: ref(buildv1.BinaryBuildSource{}.OpenAPIModelName()), - }, - }, - "dockerfile": { - SchemaProps: spec.SchemaProps{ - Description: "dockerfile is the raw contents of a Dockerfile which should be built. When this option is specified, the FROM may be modified based on your strategy base image and additional ENV stanzas from your strategy environment will be added after the FROM, but before the rest of your Dockerfile stanzas. The Dockerfile source type may be used with other options like git - in those cases the Git repo will have any innate Dockerfile replaced in the context dir.", - Type: []string{"string"}, - Format: "", - }, - }, - "git": { - SchemaProps: spec.SchemaProps{ - Description: "git contains optional information about git build source", - Ref: ref(buildv1.GitBuildSource{}.OpenAPIModelName()), - }, - }, - "images": { - SchemaProps: spec.SchemaProps{ - Description: "images describes a set of images to be used to provide source for the build", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.ImageSource{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "contextDir": { - SchemaProps: spec.SchemaProps{ - Description: "contextDir specifies the sub-directory where the source code for the application exists. This allows to have buildable sources in directory other than root of repository.", - Type: []string{"string"}, - Format: "", - }, - }, - "sourceSecret": { - SchemaProps: spec.SchemaProps{ - Description: "sourceSecret is the name of a Secret that would be used for setting up the authentication for cloning private repository. The secret contains valid credentials for remote repository, where the data's key represent the authentication method to be used and value is the base64 encoded credentials. Supported auth methods are: ssh-privatekey.", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "secrets": { - SchemaProps: spec.SchemaProps{ - Description: "secrets represents a list of secrets and their destinations that will be used only for the build.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.SecretBuildSource{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "configMaps": { - SchemaProps: spec.SchemaProps{ - Description: "configMaps represents a list of configMaps and their destinations that will be used for the build.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.ConfigMapBuildSource{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.BinaryBuildSource{}.OpenAPIModelName(), buildv1.ConfigMapBuildSource{}.OpenAPIModelName(), buildv1.GitBuildSource{}.OpenAPIModelName(), buildv1.ImageSource{}.OpenAPIModelName(), buildv1.SecretBuildSource{}.OpenAPIModelName(), corev1.LocalObjectReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BuildSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildSpec has the information to represent a build and also additional information about a build", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "serviceAccount": { - SchemaProps: spec.SchemaProps{ - Description: "serviceAccount is the name of the ServiceAccount to use to run the pod created by this build. The pod will be allowed to use secrets referenced by the ServiceAccount", - Type: []string{"string"}, - Format: "", - }, - }, - "source": { - SchemaProps: spec.SchemaProps{ - Description: "source describes the SCM in use.", - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildSource{}.OpenAPIModelName()), - }, - }, - "revision": { - SchemaProps: spec.SchemaProps{ - Description: "revision is the information from the source for a specific repo snapshot. This is optional.", - Ref: ref(buildv1.SourceRevision{}.OpenAPIModelName()), - }, - }, - "strategy": { - SchemaProps: spec.SchemaProps{ - Description: "strategy defines how to perform a build.", - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildStrategy{}.OpenAPIModelName()), - }, - }, - "output": { - SchemaProps: spec.SchemaProps{ - Description: "output describes the container image the Strategy should produce.", - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildOutput{}.OpenAPIModelName()), - }, - }, - "resources": { - SchemaProps: spec.SchemaProps{ - Description: "resources computes resource requirements to execute the build.", - Default: map[string]interface{}{}, - Ref: ref(corev1.ResourceRequirements{}.OpenAPIModelName()), - }, - }, - "postCommit": { - SchemaProps: spec.SchemaProps{ - Description: "postCommit is a build hook executed after the build output image is committed, before it is pushed to a registry.", - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildPostCommitSpec{}.OpenAPIModelName()), - }, - }, - "completionDeadlineSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "completionDeadlineSeconds is an optional duration in seconds, counted from the time when a build pod gets scheduled in the system, that the build may be active on a node before the system actively tries to terminate the build; value must be positive integer", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector is a selector which must be true for the build pod to fit on a node If nil, it can be overridden by default build nodeselector values for the cluster. If set to an empty map or a map with any values, default build nodeselector values are ignored.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "mountTrustedCA": { - SchemaProps: spec.SchemaProps{ - Description: "mountTrustedCA bind mounts the cluster's trusted certificate authorities, as defined in the cluster's proxy configuration, into the build. This lets processes within a build trust components signed by custom PKI certificate authorities, such as private artifact repositories and HTTPS proxies.\n\nWhen this field is set to true, the contents of `/etc/pki/ca-trust` within the build are managed by the build container, and any changes to this directory or its subdirectories (for example - within a Dockerfile `RUN` instruction) are not persisted in the build's output image.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "triggeredBy": { - SchemaProps: spec.SchemaProps{ - Description: "triggeredBy describes which triggers started the most recent update to the build configuration and contains information about those triggers.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildTriggerCause{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"strategy"}, - }, - }, - Dependencies: []string{ - buildv1.BuildOutput{}.OpenAPIModelName(), buildv1.BuildPostCommitSpec{}.OpenAPIModelName(), buildv1.BuildSource{}.OpenAPIModelName(), buildv1.BuildStrategy{}.OpenAPIModelName(), buildv1.BuildTriggerCause{}.OpenAPIModelName(), buildv1.SourceRevision{}.OpenAPIModelName(), corev1.ResourceRequirements{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BuildStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildStatus contains the status of a build", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "phase": { - SchemaProps: spec.SchemaProps{ - Description: "phase is the point in the build lifecycle. Possible values are \"New\", \"Pending\", \"Running\", \"Complete\", \"Failed\", \"Error\", and \"Cancelled\".", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "cancelled": { - SchemaProps: spec.SchemaProps{ - Description: "cancelled describes if a cancel event was triggered for the build.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "reason": { - SchemaProps: spec.SchemaProps{ - Description: "reason is a brief CamelCase string that describes any failure and is meant for machine parsing and tidy display in the CLI.", - Type: []string{"string"}, - Format: "", - }, - }, - "message": { - SchemaProps: spec.SchemaProps{ - Description: "message is a human-readable message indicating details about why the build has this status.", - Type: []string{"string"}, - Format: "", - }, - }, - "startTimestamp": { - SchemaProps: spec.SchemaProps{ - Description: "startTimestamp is a timestamp representing the server time when this Build started running in a Pod. It is represented in RFC3339 form and is in UTC.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "completionTimestamp": { - SchemaProps: spec.SchemaProps{ - Description: "completionTimestamp is a timestamp representing the server time when this Build was finished, whether that build failed or succeeded. It reflects the time at which the Pod running the Build terminated. It is represented in RFC3339 form and is in UTC.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "duration": { - SchemaProps: spec.SchemaProps{ - Description: "duration contains time.Duration object describing build time.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "outputDockerImageReference": { - SchemaProps: spec.SchemaProps{ - Description: "outputDockerImageReference contains a reference to the container image that will be built by this build. Its value is computed from Build.Spec.Output.To, and should include the registry address, so that it can be used to push and pull the image.", - Type: []string{"string"}, - Format: "", - }, - }, - "config": { - SchemaProps: spec.SchemaProps{ - Description: "config is an ObjectReference to the BuildConfig this Build is based on.", - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - "output": { - SchemaProps: spec.SchemaProps{ - Description: "output describes the container image the build has produced.", - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildStatusOutput{}.OpenAPIModelName()), - }, - }, - "stages": { - SchemaProps: spec.SchemaProps{ - Description: "stages contains details about each stage that occurs during the build including start time, duration (in milliseconds), and the steps that occured within each stage.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.StageInfo{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "logSnippet": { - SchemaProps: spec.SchemaProps{ - Description: "logSnippet is the last few lines of the build log. This value is only set for builds that failed.", - Type: []string{"string"}, - Format: "", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represents the latest available observations of a build's current state.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.BuildCondition{}.OpenAPIModelName(), buildv1.BuildStatusOutput{}.OpenAPIModelName(), buildv1.StageInfo{}.OpenAPIModelName(), corev1.ObjectReference{}.OpenAPIModelName(), metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BuildStatusOutput(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildStatusOutput contains the status of the built image.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "to": { - SchemaProps: spec.SchemaProps{ - Description: "to describes the status of the built image being pushed to a registry.", - Ref: ref(buildv1.BuildStatusOutputTo{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.BuildStatusOutputTo{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BuildStatusOutputTo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildStatusOutputTo describes the status of the built image with regards to image registry to which it was supposed to be pushed.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "imageDigest": { - SchemaProps: spec.SchemaProps{ - Description: "imageDigest is the digest of the built container image. The digest uniquely identifies the image in the registry to which it was pushed.\n\nPlease note that this field may not always be set even if the push completes successfully - e.g. when the registry returns no digest or returns it in a format that the builder doesn't understand.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_build_v1_BuildStrategy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildStrategy contains the details of how to perform a build.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the kind of build strategy.", - Type: []string{"string"}, - Format: "", - }, - }, - "dockerStrategy": { - SchemaProps: spec.SchemaProps{ - Description: "dockerStrategy holds the parameters to the container image build strategy.", - Ref: ref(buildv1.DockerBuildStrategy{}.OpenAPIModelName()), - }, - }, - "sourceStrategy": { - SchemaProps: spec.SchemaProps{ - Description: "sourceStrategy holds the parameters to the Source build strategy.", - Ref: ref(buildv1.SourceBuildStrategy{}.OpenAPIModelName()), - }, - }, - "customStrategy": { - SchemaProps: spec.SchemaProps{ - Description: "customStrategy holds the parameters to the Custom build strategy", - Ref: ref(buildv1.CustomBuildStrategy{}.OpenAPIModelName()), - }, - }, - "jenkinsPipelineStrategy": { - SchemaProps: spec.SchemaProps{ - Description: "jenkinsPipelineStrategy holds the parameters to the Jenkins Pipeline build strategy. Deprecated: use OpenShift Pipelines", - Ref: ref(buildv1.JenkinsPipelineBuildStrategy{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.CustomBuildStrategy{}.OpenAPIModelName(), buildv1.DockerBuildStrategy{}.OpenAPIModelName(), buildv1.JenkinsPipelineBuildStrategy{}.OpenAPIModelName(), buildv1.SourceBuildStrategy{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BuildTriggerCause(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildTriggerCause holds information about a triggered build. It is used for displaying build trigger data for each build and build configuration in oc describe. It is also used to describe which triggers led to the most recent update in the build configuration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "message": { - SchemaProps: spec.SchemaProps{ - Description: "message is used to store a human readable message for why the build was triggered. E.g.: \"Manually triggered by user\", \"Configuration change\",etc.", - Type: []string{"string"}, - Format: "", - }, - }, - "genericWebHook": { - SchemaProps: spec.SchemaProps{ - Description: "genericWebHook holds data about a builds generic webhook trigger.", - Ref: ref(buildv1.GenericWebHookCause{}.OpenAPIModelName()), - }, - }, - "githubWebHook": { - SchemaProps: spec.SchemaProps{ - Description: "githubWebHook represents data for a GitHub webhook that fired a specific build.", - Ref: ref(buildv1.GitHubWebHookCause{}.OpenAPIModelName()), - }, - }, - "imageChangeBuild": { - SchemaProps: spec.SchemaProps{ - Description: "imageChangeBuild stores information about an imagechange event that triggered a new build.", - Ref: ref(buildv1.ImageChangeCause{}.OpenAPIModelName()), - }, - }, - "gitlabWebHook": { - SchemaProps: spec.SchemaProps{ - Description: "gitlabWebHook represents data for a GitLab webhook that fired a specific build.", - Ref: ref(buildv1.GitLabWebHookCause{}.OpenAPIModelName()), - }, - }, - "bitbucketWebHook": { - SchemaProps: spec.SchemaProps{ - Description: "bitbucketWebHook represents data for a Bitbucket webhook that fired a specific build.", - Ref: ref(buildv1.BitbucketWebHookCause{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.BitbucketWebHookCause{}.OpenAPIModelName(), buildv1.GenericWebHookCause{}.OpenAPIModelName(), buildv1.GitHubWebHookCause{}.OpenAPIModelName(), buildv1.GitLabWebHookCause{}.OpenAPIModelName(), buildv1.ImageChangeCause{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BuildTriggerPolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildTriggerPolicy describes a policy for a single trigger that results in a new Build.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the type of build trigger. Valid values:\n\n- GitHub GitHubWebHookBuildTriggerType represents a trigger that launches builds on GitHub webhook invocations\n\n- Generic GenericWebHookBuildTriggerType represents a trigger that launches builds on generic webhook invocations\n\n- GitLab GitLabWebHookBuildTriggerType represents a trigger that launches builds on GitLab webhook invocations\n\n- Bitbucket BitbucketWebHookBuildTriggerType represents a trigger that launches builds on Bitbucket webhook invocations\n\n- ImageChange ImageChangeBuildTriggerType represents a trigger that launches builds on availability of a new version of an image\n\n- ConfigChange ConfigChangeBuildTriggerType will trigger a build on an initial build config creation WARNING: In the future the behavior will change to trigger a build on any config change", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "github": { - SchemaProps: spec.SchemaProps{ - Description: "github contains the parameters for a GitHub webhook type of trigger", - Ref: ref(buildv1.WebHookTrigger{}.OpenAPIModelName()), - }, - }, - "generic": { - SchemaProps: spec.SchemaProps{ - Description: "generic contains the parameters for a Generic webhook type of trigger", - Ref: ref(buildv1.WebHookTrigger{}.OpenAPIModelName()), - }, - }, - "imageChange": { - SchemaProps: spec.SchemaProps{ - Description: "imageChange contains parameters for an ImageChange type of trigger", - Ref: ref(buildv1.ImageChangeTrigger{}.OpenAPIModelName()), - }, - }, - "gitlab": { - SchemaProps: spec.SchemaProps{ - Description: "GitLabWebHook contains the parameters for a GitLab webhook type of trigger", - Ref: ref(buildv1.WebHookTrigger{}.OpenAPIModelName()), - }, - }, - "bitbucket": { - SchemaProps: spec.SchemaProps{ - Description: "BitbucketWebHook contains the parameters for a Bitbucket webhook type of trigger", - Ref: ref(buildv1.WebHookTrigger{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - }, - Dependencies: []string{ - buildv1.ImageChangeTrigger{}.OpenAPIModelName(), buildv1.WebHookTrigger{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BuildVolume(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildVolume describes a volume that is made available to build pods, such that it can be mounted into buildah's runtime environment. Only a subset of Kubernetes Volume sources are supported.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is a unique identifier for this BuildVolume. It must conform to the Kubernetes DNS label standard and be unique within the pod. Names that collide with those added by the build controller will result in a failed build with an error message detailing which name caused the error. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "source": { - SchemaProps: spec.SchemaProps{ - Description: "source represents the location and type of the mounted volume.", - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildVolumeSource{}.OpenAPIModelName()), - }, - }, - "mounts": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "destinationPath", - }, - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "destinationPath", - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "mounts represents the location of the volume in the image build container", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildVolumeMount{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"name", "source", "mounts"}, - }, - }, - Dependencies: []string{ - buildv1.BuildVolumeMount{}.OpenAPIModelName(), buildv1.BuildVolumeSource{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_BuildVolumeMount(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildVolumeMount describes the mounting of a Volume within buildah's runtime environment.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "destinationPath": { - SchemaProps: spec.SchemaProps{ - Description: "destinationPath is the path within the buildah runtime environment at which the volume should be mounted. The transient mount within the build image and the backing volume will both be mounted read only. Must be an absolute path, must not contain '..' or ':', and must not collide with a destination path generated by the builder process Paths that collide with those added by the build controller will result in a failed build with an error message detailing which path caused the error.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"destinationPath"}, - }, - }, - } -} - -func schema_openshift_api_build_v1_BuildVolumeSource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildVolumeSource represents the source of a volume to mount Only one of its supported types may be specified at any given time.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the BuildVolumeSourceType for the volume source. Type must match the populated volume source. Valid types are: Secret, ConfigMap", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "secret": { - SchemaProps: spec.SchemaProps{ - Description: "secret represents a Secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret", - Ref: ref(corev1.SecretVolumeSource{}.OpenAPIModelName()), - }, - }, - "configMap": { - SchemaProps: spec.SchemaProps{ - Description: "configMap represents a ConfigMap that should populate this volume", - Ref: ref(corev1.ConfigMapVolumeSource{}.OpenAPIModelName()), - }, - }, - "csi": { - SchemaProps: spec.SchemaProps{ - Description: "csi represents ephemeral storage provided by external CSI drivers which support this capability", - Ref: ref(corev1.CSIVolumeSource{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - }, - Dependencies: []string{ - corev1.CSIVolumeSource{}.OpenAPIModelName(), corev1.ConfigMapVolumeSource{}.OpenAPIModelName(), corev1.SecretVolumeSource{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_CommonSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CommonSpec encapsulates all the inputs necessary to represent a build.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "serviceAccount": { - SchemaProps: spec.SchemaProps{ - Description: "serviceAccount is the name of the ServiceAccount to use to run the pod created by this build. The pod will be allowed to use secrets referenced by the ServiceAccount", - Type: []string{"string"}, - Format: "", - }, - }, - "source": { - SchemaProps: spec.SchemaProps{ - Description: "source describes the SCM in use.", - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildSource{}.OpenAPIModelName()), - }, - }, - "revision": { - SchemaProps: spec.SchemaProps{ - Description: "revision is the information from the source for a specific repo snapshot. This is optional.", - Ref: ref(buildv1.SourceRevision{}.OpenAPIModelName()), - }, - }, - "strategy": { - SchemaProps: spec.SchemaProps{ - Description: "strategy defines how to perform a build.", - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildStrategy{}.OpenAPIModelName()), - }, - }, - "output": { - SchemaProps: spec.SchemaProps{ - Description: "output describes the container image the Strategy should produce.", - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildOutput{}.OpenAPIModelName()), - }, - }, - "resources": { - SchemaProps: spec.SchemaProps{ - Description: "resources computes resource requirements to execute the build.", - Default: map[string]interface{}{}, - Ref: ref(corev1.ResourceRequirements{}.OpenAPIModelName()), - }, - }, - "postCommit": { - SchemaProps: spec.SchemaProps{ - Description: "postCommit is a build hook executed after the build output image is committed, before it is pushed to a registry.", - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildPostCommitSpec{}.OpenAPIModelName()), - }, - }, - "completionDeadlineSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "completionDeadlineSeconds is an optional duration in seconds, counted from the time when a build pod gets scheduled in the system, that the build may be active on a node before the system actively tries to terminate the build; value must be positive integer", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector is a selector which must be true for the build pod to fit on a node If nil, it can be overridden by default build nodeselector values for the cluster. If set to an empty map or a map with any values, default build nodeselector values are ignored.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "mountTrustedCA": { - SchemaProps: spec.SchemaProps{ - Description: "mountTrustedCA bind mounts the cluster's trusted certificate authorities, as defined in the cluster's proxy configuration, into the build. This lets processes within a build trust components signed by custom PKI certificate authorities, such as private artifact repositories and HTTPS proxies.\n\nWhen this field is set to true, the contents of `/etc/pki/ca-trust` within the build are managed by the build container, and any changes to this directory or its subdirectories (for example - within a Dockerfile `RUN` instruction) are not persisted in the build's output image.", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"strategy"}, - }, - }, - Dependencies: []string{ - buildv1.BuildOutput{}.OpenAPIModelName(), buildv1.BuildPostCommitSpec{}.OpenAPIModelName(), buildv1.BuildSource{}.OpenAPIModelName(), buildv1.BuildStrategy{}.OpenAPIModelName(), buildv1.SourceRevision{}.OpenAPIModelName(), corev1.ResourceRequirements{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_CommonWebHookCause(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CommonWebHookCause factors out the identical format of these webhook causes into struct so we can share it in the specific causes; it is too late for GitHub and Generic but we can leverage this pattern with GitLab and Bitbucket.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "revision": { - SchemaProps: spec.SchemaProps{ - Description: "revision is the git source revision information of the trigger.", - Ref: ref(buildv1.SourceRevision{}.OpenAPIModelName()), - }, - }, - "secret": { - SchemaProps: spec.SchemaProps{ - Description: "secret is the obfuscated webhook secret that triggered a build.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.SourceRevision{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_ConfigMapBuildSource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConfigMapBuildSource describes a configmap and its destination directory that will be used only at the build time. The content of the configmap referenced here will be copied into the destination directory instead of mounting.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "configMap": { - SchemaProps: spec.SchemaProps{ - Description: "configMap is a reference to an existing configmap that you want to use in your build.", - Default: map[string]interface{}{}, - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "destinationDir": { - SchemaProps: spec.SchemaProps{ - Description: "destinationDir is the directory where the files from the configmap should be available for the build time. For the Source build strategy, these will be injected into a container where the assemble script runs. For the container image build strategy, these will be copied into the build directory, where the Dockerfile is located, so users can ADD or COPY them during container image build.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"configMap"}, - }, - }, - Dependencies: []string{ - corev1.LocalObjectReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_CustomBuildStrategy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CustomBuildStrategy defines input parameters specific to Custom build.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "from": { - SchemaProps: spec.SchemaProps{ - Description: "from is reference to an DockerImage, ImageStreamTag, or ImageStreamImage from which the container image should be pulled", - Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - "pullSecret": { - SchemaProps: spec.SchemaProps{ - Description: "pullSecret is the name of a Secret that would be used for setting up the authentication for pulling the container images from the private Docker registries", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "env": { - SchemaProps: spec.SchemaProps{ - Description: "env contains additional environment variables you want to pass into a builder container.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.EnvVar{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "exposeDockerSocket": { - SchemaProps: spec.SchemaProps{ - Description: "exposeDockerSocket will allow running Docker commands (and build container images) from inside the container.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "forcePull": { - SchemaProps: spec.SchemaProps{ - Description: "forcePull describes if the controller should configure the build pod to always pull the images for the builder or only pull if it is not present locally", - Type: []string{"boolean"}, - Format: "", - }, - }, - "secrets": { - SchemaProps: spec.SchemaProps{ - Description: "secrets is a list of additional secrets that will be included in the build pod", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.SecretSpec{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "buildAPIVersion": { - SchemaProps: spec.SchemaProps{ - Description: "buildAPIVersion is the requested API version for the Build object serialized and passed to the custom builder", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"from"}, - }, - }, - Dependencies: []string{ - buildv1.SecretSpec{}.OpenAPIModelName(), corev1.EnvVar{}.OpenAPIModelName(), corev1.LocalObjectReference{}.OpenAPIModelName(), corev1.ObjectReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_DockerBuildStrategy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DockerBuildStrategy defines input parameters specific to container image build.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "from": { - SchemaProps: spec.SchemaProps{ - Description: "from is a reference to an DockerImage, ImageStreamTag, or ImageStreamImage which overrides the FROM image in the Dockerfile for the build. If the Dockerfile uses multi-stage builds, this will replace the image in the last FROM directive of the file.", - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - "pullSecret": { - SchemaProps: spec.SchemaProps{ - Description: "pullSecret is the name of a Secret that would be used for setting up the authentication for pulling the container images from the private Docker registries", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "noCache": { - SchemaProps: spec.SchemaProps{ - Description: "noCache if set to true indicates that the container image build must be executed with the --no-cache=true flag", - Type: []string{"boolean"}, - Format: "", - }, - }, - "env": { - SchemaProps: spec.SchemaProps{ - Description: "env contains additional environment variables you want to pass into a builder container.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.EnvVar{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "forcePull": { - SchemaProps: spec.SchemaProps{ - Description: "forcePull describes if the builder should pull the images from registry prior to building.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "dockerfilePath": { - SchemaProps: spec.SchemaProps{ - Description: "dockerfilePath is the path of the Dockerfile that will be used to build the container image, relative to the root of the context (contextDir). Defaults to `Dockerfile` if unset.", - Type: []string{"string"}, - Format: "", - }, - }, - "buildArgs": { - SchemaProps: spec.SchemaProps{ - Description: "buildArgs contains build arguments that will be resolved in the Dockerfile. See https://docs.docker.com/engine/reference/builder/#/arg for more details. NOTE: Only the 'name' and 'value' fields are supported. Any settings on the 'valueFrom' field are ignored.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.EnvVar{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "imageOptimizationPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "imageOptimizationPolicy describes what optimizations the system can use when building images to reduce the final size or time spent building the image. The default policy is 'None' which means the final build image will be equivalent to an image created by the container image build API. The experimental policy 'SkipLayers' will avoid commiting new layers in between each image step, and will fail if the Dockerfile cannot provide compatibility with the 'None' policy. An additional experimental policy 'SkipLayersAndWarn' is the same as 'SkipLayers' but simply warns if compatibility cannot be preserved.", - Type: []string{"string"}, - Format: "", - }, - }, - "volumes": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "volumes is a list of input volumes that can be mounted into the builds runtime environment. Only a subset of Kubernetes Volume sources are supported by builds. More info: https://kubernetes.io/docs/concepts/storage/volumes", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildVolume{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.BuildVolume{}.OpenAPIModelName(), corev1.EnvVar{}.OpenAPIModelName(), corev1.LocalObjectReference{}.OpenAPIModelName(), corev1.ObjectReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_DockerStrategyOptions(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DockerStrategyOptions contains extra strategy options for container image builds", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "buildArgs": { - SchemaProps: spec.SchemaProps{ - Description: "Args contains any build arguments that are to be passed to Docker. See https://docs.docker.com/engine/reference/builder/#/arg for more details", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.EnvVar{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "noCache": { - SchemaProps: spec.SchemaProps{ - Description: "noCache overrides the docker-strategy noCache option in the build config", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - corev1.EnvVar{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_GenericWebHookCause(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GenericWebHookCause holds information about a generic WebHook that triggered a build.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "revision": { - SchemaProps: spec.SchemaProps{ - Description: "revision is an optional field that stores the git source revision information of the generic webhook trigger when it is available.", - Ref: ref(buildv1.SourceRevision{}.OpenAPIModelName()), - }, - }, - "secret": { - SchemaProps: spec.SchemaProps{ - Description: "secret is the obfuscated webhook secret that triggered a build.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.SourceRevision{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_GenericWebHookEvent(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GenericWebHookEvent is the payload expected for a generic webhook post", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the type of source repository", - Type: []string{"string"}, - Format: "", - }, - }, - "git": { - SchemaProps: spec.SchemaProps{ - Description: "git is the git information if the Type is BuildSourceGit", - Ref: ref(buildv1.GitInfo{}.OpenAPIModelName()), - }, - }, - "env": { - SchemaProps: spec.SchemaProps{ - Description: "env contains additional environment variables you want to pass into a builder container. ValueFrom is not supported.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.EnvVar{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "dockerStrategyOptions": { - SchemaProps: spec.SchemaProps{ - Description: "dockerStrategyOptions contains additional docker-strategy specific options for the build", - Ref: ref(buildv1.DockerStrategyOptions{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.DockerStrategyOptions{}.OpenAPIModelName(), buildv1.GitInfo{}.OpenAPIModelName(), corev1.EnvVar{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_GitBuildSource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GitBuildSource defines the parameters of a Git SCM", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "uri": { - SchemaProps: spec.SchemaProps{ - Description: "uri points to the source that will be built. The structure of the source will depend on the type of build to run", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ref": { - SchemaProps: spec.SchemaProps{ - Description: "ref is the branch/tag/ref to build.", - Type: []string{"string"}, - Format: "", - }, - }, - "httpProxy": { - SchemaProps: spec.SchemaProps{ - Description: "httpProxy is a proxy used to reach the git repository over http", - Type: []string{"string"}, - Format: "", - }, - }, - "httpsProxy": { - SchemaProps: spec.SchemaProps{ - Description: "httpsProxy is a proxy used to reach the git repository over https", - Type: []string{"string"}, - Format: "", - }, - }, - "noProxy": { - SchemaProps: spec.SchemaProps{ - Description: "noProxy is the list of domains for which the proxy should not be used", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"uri"}, - }, - }, - } -} - -func schema_openshift_api_build_v1_GitHubWebHookCause(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GitHubWebHookCause has information about a GitHub webhook that triggered a build.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "revision": { - SchemaProps: spec.SchemaProps{ - Description: "revision is the git revision information of the trigger.", - Ref: ref(buildv1.SourceRevision{}.OpenAPIModelName()), - }, - }, - "secret": { - SchemaProps: spec.SchemaProps{ - Description: "secret is the obfuscated webhook secret that triggered a build.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.SourceRevision{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_GitInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GitInfo is the aggregated git information for a generic webhook post", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "uri": { - SchemaProps: spec.SchemaProps{ - Description: "uri points to the source that will be built. The structure of the source will depend on the type of build to run", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ref": { - SchemaProps: spec.SchemaProps{ - Description: "ref is the branch/tag/ref to build.", - Type: []string{"string"}, - Format: "", - }, - }, - "httpProxy": { - SchemaProps: spec.SchemaProps{ - Description: "httpProxy is a proxy used to reach the git repository over http", - Type: []string{"string"}, - Format: "", - }, - }, - "httpsProxy": { - SchemaProps: spec.SchemaProps{ - Description: "httpsProxy is a proxy used to reach the git repository over https", - Type: []string{"string"}, - Format: "", - }, - }, - "noProxy": { - SchemaProps: spec.SchemaProps{ - Description: "noProxy is the list of domains for which the proxy should not be used", - Type: []string{"string"}, - Format: "", - }, - }, - "commit": { - SchemaProps: spec.SchemaProps{ - Description: "commit is the commit hash identifying a specific commit", - Type: []string{"string"}, - Format: "", - }, - }, - "author": { - SchemaProps: spec.SchemaProps{ - Description: "author is the author of a specific commit", - Default: map[string]interface{}{}, - Ref: ref(buildv1.SourceControlUser{}.OpenAPIModelName()), - }, - }, - "committer": { - SchemaProps: spec.SchemaProps{ - Description: "committer is the committer of a specific commit", - Default: map[string]interface{}{}, - Ref: ref(buildv1.SourceControlUser{}.OpenAPIModelName()), - }, - }, - "message": { - SchemaProps: spec.SchemaProps{ - Description: "message is the description of a specific commit", - Type: []string{"string"}, - Format: "", - }, - }, - "refs": { - SchemaProps: spec.SchemaProps{ - Description: "refs is a list of GitRefs for the provided repo - generally sent when used from a post-receive hook. This field is optional and is used when sending multiple refs", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.GitRefInfo{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"uri", "refs"}, - }, - }, - Dependencies: []string{ - buildv1.GitRefInfo{}.OpenAPIModelName(), buildv1.SourceControlUser{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_GitLabWebHookCause(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GitLabWebHookCause has information about a GitLab webhook that triggered a build.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "revision": { - SchemaProps: spec.SchemaProps{ - Description: "revision is the git source revision information of the trigger.", - Ref: ref(buildv1.SourceRevision{}.OpenAPIModelName()), - }, - }, - "secret": { - SchemaProps: spec.SchemaProps{ - Description: "secret is the obfuscated webhook secret that triggered a build.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.SourceRevision{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_GitRefInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GitRefInfo is a single ref", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "uri": { - SchemaProps: spec.SchemaProps{ - Description: "uri points to the source that will be built. The structure of the source will depend on the type of build to run", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ref": { - SchemaProps: spec.SchemaProps{ - Description: "ref is the branch/tag/ref to build.", - Type: []string{"string"}, - Format: "", - }, - }, - "httpProxy": { - SchemaProps: spec.SchemaProps{ - Description: "httpProxy is a proxy used to reach the git repository over http", - Type: []string{"string"}, - Format: "", - }, - }, - "httpsProxy": { - SchemaProps: spec.SchemaProps{ - Description: "httpsProxy is a proxy used to reach the git repository over https", - Type: []string{"string"}, - Format: "", - }, - }, - "noProxy": { - SchemaProps: spec.SchemaProps{ - Description: "noProxy is the list of domains for which the proxy should not be used", - Type: []string{"string"}, - Format: "", - }, - }, - "commit": { - SchemaProps: spec.SchemaProps{ - Description: "commit is the commit hash identifying a specific commit", - Type: []string{"string"}, - Format: "", - }, - }, - "author": { - SchemaProps: spec.SchemaProps{ - Description: "author is the author of a specific commit", - Default: map[string]interface{}{}, - Ref: ref(buildv1.SourceControlUser{}.OpenAPIModelName()), - }, - }, - "committer": { - SchemaProps: spec.SchemaProps{ - Description: "committer is the committer of a specific commit", - Default: map[string]interface{}{}, - Ref: ref(buildv1.SourceControlUser{}.OpenAPIModelName()), - }, - }, - "message": { - SchemaProps: spec.SchemaProps{ - Description: "message is the description of a specific commit", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"uri"}, - }, - }, - Dependencies: []string{ - buildv1.SourceControlUser{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_GitSourceRevision(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GitSourceRevision is the commit information from a git source for a build", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "commit": { - SchemaProps: spec.SchemaProps{ - Description: "commit is the commit hash identifying a specific commit", - Type: []string{"string"}, - Format: "", - }, - }, - "author": { - SchemaProps: spec.SchemaProps{ - Description: "author is the author of a specific commit", - Default: map[string]interface{}{}, - Ref: ref(buildv1.SourceControlUser{}.OpenAPIModelName()), - }, - }, - "committer": { - SchemaProps: spec.SchemaProps{ - Description: "committer is the committer of a specific commit", - Default: map[string]interface{}{}, - Ref: ref(buildv1.SourceControlUser{}.OpenAPIModelName()), - }, - }, - "message": { - SchemaProps: spec.SchemaProps{ - Description: "message is the description of a specific commit", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.SourceControlUser{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_ImageChangeCause(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageChangeCause contains information about the image that triggered a build", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "imageID": { - SchemaProps: spec.SchemaProps{ - Description: "imageID is the ID of the image that triggered a new build.", - Type: []string{"string"}, - Format: "", - }, - }, - "fromRef": { - SchemaProps: spec.SchemaProps{ - Description: "fromRef contains detailed information about an image that triggered a build.", - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - corev1.ObjectReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_ImageChangeTrigger(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageChangeTrigger allows builds to be triggered when an ImageStream changes", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "lastTriggeredImageID": { - SchemaProps: spec.SchemaProps{ - Description: "lastTriggeredImageID is used internally by the ImageChangeController to save last used image ID for build This field is deprecated and will be removed in a future release. Deprecated", - Type: []string{"string"}, - Format: "", - }, - }, - "from": { - SchemaProps: spec.SchemaProps{ - Description: "from is a reference to an ImageStreamTag that will trigger a build when updated It is optional. If no From is specified, the From image from the build strategy will be used. Only one ImageChangeTrigger with an empty From reference is allowed in a build configuration.", - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - "paused": { - SchemaProps: spec.SchemaProps{ - Description: "paused is true if this trigger is temporarily disabled. Optional.", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - corev1.ObjectReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_ImageChangeTriggerStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageChangeTriggerStatus tracks the latest resolved status of the associated ImageChangeTrigger policy specified in the BuildConfigSpec.Triggers struct.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "lastTriggeredImageID": { - SchemaProps: spec.SchemaProps{ - Description: "lastTriggeredImageID represents the sha/id of the ImageStreamTag when a Build for this BuildConfig was started. The lastTriggeredImageID is updated each time a Build for this BuildConfig is started, even if this ImageStreamTag is not the reason the Build is started.", - Type: []string{"string"}, - Format: "", - }, - }, - "from": { - SchemaProps: spec.SchemaProps{ - Description: "from is the ImageStreamTag that is the source of the trigger.", - Default: map[string]interface{}{}, - Ref: ref(buildv1.ImageStreamTagReference{}.OpenAPIModelName()), - }, - }, - "lastTriggerTime": { - SchemaProps: spec.SchemaProps{ - Description: "lastTriggerTime is the last time this particular ImageStreamTag triggered a Build to start. This field is only updated when this trigger specifically started a Build.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.ImageStreamTagReference{}.OpenAPIModelName(), metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_ImageLabel(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageLabel represents a label applied to the resulting image.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name defines the name of the label. It must have non-zero length.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value defines the literal value of the label.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_build_v1_ImageSource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageSource is used to describe build source that will be extracted from an image or used during a multi stage build. A reference of type ImageStreamTag, ImageStreamImage or DockerImage may be used. A pull secret can be specified to pull the image from an external registry or override the default service account secret if pulling from the internal registry. Image sources can either be used to extract content from an image and place it into the build context along with the repository source, or used directly during a multi-stage container image build to allow content to be copied without overwriting the contents of the repository source (see the 'paths' and 'as' fields).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "from": { - SchemaProps: spec.SchemaProps{ - Description: "from is a reference to an ImageStreamTag, ImageStreamImage, or DockerImage to copy source from.", - Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - "as": { - SchemaProps: spec.SchemaProps{ - Description: "A list of image names that this source will be used in place of during a multi-stage container image build. For instance, a Dockerfile that uses \"COPY --from=nginx:latest\" will first check for an image source that has \"nginx:latest\" in this field before attempting to pull directly. If the Dockerfile does not reference an image source it is ignored. This field and paths may both be set, in which case the contents will be used twice.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "paths": { - SchemaProps: spec.SchemaProps{ - Description: "paths is a list of source and destination paths to copy from the image. This content will be copied into the build context prior to starting the build. If no paths are set, the build context will not be altered.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.ImageSourcePath{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "pullSecret": { - SchemaProps: spec.SchemaProps{ - Description: "pullSecret is a reference to a secret to be used to pull the image from a registry If the image is pulled from the OpenShift registry, this field does not need to be set.", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"from"}, - }, - }, - Dependencies: []string{ - buildv1.ImageSourcePath{}.OpenAPIModelName(), corev1.LocalObjectReference{}.OpenAPIModelName(), corev1.ObjectReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_ImageSourcePath(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageSourcePath describes a path to be copied from a source image and its destination within the build directory.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "sourcePath": { - SchemaProps: spec.SchemaProps{ - Description: "sourcePath is the absolute path of the file or directory inside the image to copy to the build directory. If the source path ends in /. then the content of the directory will be copied, but the directory itself will not be created at the destination.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "destinationDir": { - SchemaProps: spec.SchemaProps{ - Description: "destinationDir is the relative directory within the build directory where files copied from the image are placed.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"sourcePath", "destinationDir"}, - }, - }, - } -} - -func schema_openshift_api_build_v1_ImageStreamTagReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageStreamTagReference references the ImageStreamTag in an image change trigger by namespace and name.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace is the namespace where the ImageStreamTag for an ImageChangeTrigger is located", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the ImageStreamTag for an ImageChangeTrigger", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_build_v1_JenkinsPipelineBuildStrategy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "JenkinsPipelineBuildStrategy holds parameters specific to a Jenkins Pipeline build. Deprecated: use OpenShift Pipelines", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "jenkinsfilePath": { - SchemaProps: spec.SchemaProps{ - Description: "jenkinsfilePath is the optional path of the Jenkinsfile that will be used to configure the pipeline relative to the root of the context (contextDir). If both JenkinsfilePath & Jenkinsfile are both not specified, this defaults to Jenkinsfile in the root of the specified contextDir.", - Type: []string{"string"}, - Format: "", - }, - }, - "jenkinsfile": { - SchemaProps: spec.SchemaProps{ - Description: "jenkinsfile defines the optional raw contents of a Jenkinsfile which defines a Jenkins pipeline build.", - Type: []string{"string"}, - Format: "", - }, - }, - "env": { - SchemaProps: spec.SchemaProps{ - Description: "env contains additional environment variables you want to pass into a build pipeline.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.EnvVar{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - corev1.EnvVar{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_ProxyConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ProxyConfig defines what proxies to use for an operation", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "httpProxy": { - SchemaProps: spec.SchemaProps{ - Description: "httpProxy is a proxy used to reach the git repository over http", - Type: []string{"string"}, - Format: "", - }, - }, - "httpsProxy": { - SchemaProps: spec.SchemaProps{ - Description: "httpsProxy is a proxy used to reach the git repository over https", - Type: []string{"string"}, - Format: "", - }, - }, - "noProxy": { - SchemaProps: spec.SchemaProps{ - Description: "noProxy is the list of domains for which the proxy should not be used", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_build_v1_SecretBuildSource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SecretBuildSource describes a secret and its destination directory that will be used only at the build time. The content of the secret referenced here will be copied into the destination directory instead of mounting.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "secret": { - SchemaProps: spec.SchemaProps{ - Description: "secret is a reference to an existing secret that you want to use in your build.", - Default: map[string]interface{}{}, - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "destinationDir": { - SchemaProps: spec.SchemaProps{ - Description: "destinationDir is the directory where the files from the secret should be available for the build time. For the Source build strategy, these will be injected into a container where the assemble script runs. Later, when the script finishes, all files injected will be truncated to zero length. For the container image build strategy, these will be copied into the build directory, where the Dockerfile is located, so users can ADD or COPY them during container image build.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"secret"}, - }, - }, - Dependencies: []string{ - corev1.LocalObjectReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_SecretLocalReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SecretLocalReference contains information that points to the local secret being used", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the resource in the same namespace being referenced", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_build_v1_SecretSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SecretSpec specifies a secret to be included in a build pod and its corresponding mount point", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "secretSource": { - SchemaProps: spec.SchemaProps{ - Description: "secretSource is a reference to the secret", - Default: map[string]interface{}{}, - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "mountPath": { - SchemaProps: spec.SchemaProps{ - Description: "mountPath is the path at which to mount the secret", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"secretSource", "mountPath"}, - }, - }, - Dependencies: []string{ - corev1.LocalObjectReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_SourceBuildStrategy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SourceBuildStrategy defines input parameters specific to an Source build.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "from": { - SchemaProps: spec.SchemaProps{ - Description: "from is reference to an DockerImage, ImageStreamTag, or ImageStreamImage from which the container image should be pulled", - Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - "pullSecret": { - SchemaProps: spec.SchemaProps{ - Description: "pullSecret is the name of a Secret that would be used for setting up the authentication for pulling the container images from the private Docker registries", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "env": { - SchemaProps: spec.SchemaProps{ - Description: "env contains additional environment variables you want to pass into a builder container.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.EnvVar{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "scripts": { - SchemaProps: spec.SchemaProps{ - Description: "scripts is the location of Source scripts", - Type: []string{"string"}, - Format: "", - }, - }, - "incremental": { - SchemaProps: spec.SchemaProps{ - Description: "incremental flag forces the Source build to do incremental builds if true.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "forcePull": { - SchemaProps: spec.SchemaProps{ - Description: "forcePull describes if the builder should pull the images from registry prior to building.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "volumes": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "volumes is a list of input volumes that can be mounted into the builds runtime environment. Only a subset of Kubernetes Volume sources are supported by builds. More info: https://kubernetes.io/docs/concepts/storage/volumes", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.BuildVolume{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"from"}, - }, - }, - Dependencies: []string{ - buildv1.BuildVolume{}.OpenAPIModelName(), corev1.EnvVar{}.OpenAPIModelName(), corev1.LocalObjectReference{}.OpenAPIModelName(), corev1.ObjectReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_SourceControlUser(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SourceControlUser defines the identity of a user of source control", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of the source control user", - Type: []string{"string"}, - Format: "", - }, - }, - "email": { - SchemaProps: spec.SchemaProps{ - Description: "email of the source control user", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_build_v1_SourceRevision(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SourceRevision is the revision or commit information from the source for the build", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type of the build source, may be one of 'Source', 'Dockerfile', 'Binary', or 'Images'", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "git": { - SchemaProps: spec.SchemaProps{ - Description: "git contains information about git-based build source", - Ref: ref(buildv1.GitSourceRevision{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - }, - Dependencies: []string{ - buildv1.GitSourceRevision{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_SourceStrategyOptions(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SourceStrategyOptions contains extra strategy options for Source builds", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "incremental": { - SchemaProps: spec.SchemaProps{ - Description: "incremental overrides the source-strategy incremental option in the build config", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_build_v1_StageInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "StageInfo contains details about a build stage.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is a unique identifier for each build stage that occurs.", - Type: []string{"string"}, - Format: "", - }, - }, - "startTime": { - SchemaProps: spec.SchemaProps{ - Description: "startTime is a timestamp representing the server time when this Stage started. It is represented in RFC3339 form and is in UTC.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "durationMilliseconds": { - SchemaProps: spec.SchemaProps{ - Description: "durationMilliseconds identifies how long the stage took to complete in milliseconds. Note: the duration of a stage can exceed the sum of the duration of the steps within the stage as not all actions are accounted for in explicit build steps.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "steps": { - SchemaProps: spec.SchemaProps{ - Description: "steps contains details about each step that occurs during a build stage including start time and duration in milliseconds.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.StepInfo{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.StepInfo{}.OpenAPIModelName(), metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_StepInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "StepInfo contains details about a build step.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is a unique identifier for each build step.", - Type: []string{"string"}, - Format: "", - }, - }, - "startTime": { - SchemaProps: spec.SchemaProps{ - Description: "startTime is a timestamp representing the server time when this Step started. it is represented in RFC3339 form and is in UTC.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "durationMilliseconds": { - SchemaProps: spec.SchemaProps{ - Description: "durationMilliseconds identifies how long the step took to complete in milliseconds.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_build_v1_WebHookTrigger(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "WebHookTrigger is a trigger that gets invoked using a webhook type of post", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "secret": { - SchemaProps: spec.SchemaProps{ - Description: "secret used to validate requests. Deprecated: use SecretReference instead.", - Type: []string{"string"}, - Format: "", - }, - }, - "allowEnv": { - SchemaProps: spec.SchemaProps{ - Description: "allowEnv determines whether the webhook can set environment variables; can only be set to true for GenericWebHook.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "secretReference": { - SchemaProps: spec.SchemaProps{ - Description: "secretReference is a reference to a secret in the same namespace, containing the value to be validated when the webhook is invoked. The secret being referenced must contain a key named \"WebHookSecretKey\", the value of which will be checked against the value supplied in the webhook invocation.", - Ref: ref(buildv1.SecretLocalReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.SecretLocalReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_cloudnetwork_v1_CloudPrivateIPConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CloudPrivateIPConfig performs an assignment of a private IP address to the primary NIC associated with cloud VMs. This is done by specifying the IP and Kubernetes node which the IP should be assigned to. This CRD is intended to be used by the network plugin which manages the cluster network. The spec side represents the desired state requested by the network plugin, and the status side represents the current state that this CRD's controller has executed. No users will have permission to modify it, and if a cluster-admin decides to edit it for some reason, their changes will be overwritten the next time the network plugin reconciles the object. Note: the CR's name must specify the requested private IP address (can be IPv4 or IPv6).\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is the definition of the desired private IP request.", - Default: map[string]interface{}{}, - Ref: ref(cloudnetworkv1.CloudPrivateIPConfigSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status is the observed status of the desired private IP request. Read-only.", - Default: map[string]interface{}{}, - Ref: ref(cloudnetworkv1.CloudPrivateIPConfigStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - cloudnetworkv1.CloudPrivateIPConfigSpec{}.OpenAPIModelName(), cloudnetworkv1.CloudPrivateIPConfigStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_cloudnetwork_v1_CloudPrivateIPConfigSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CloudPrivateIPConfigSpec consists of a node name which the private IP should be assigned to.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "node": { - SchemaProps: spec.SchemaProps{ - Description: "node is the node name, as specified by the Kubernetes field: node.metadata.name", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_cloudnetwork_v1_CloudPrivateIPConfigStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CloudPrivateIPConfigStatus specifies the node assignment together with its assignment condition.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "node": { - SchemaProps: spec.SchemaProps{ - Description: "node is the node name, as specified by the Kubernetes field: node.metadata.name", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "condition is the assignment condition of the private IP and its status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"conditions"}, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_APIServer(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "APIServer holds configuration (like serving certificates, client CA and CORS domains) shared by all API servers in the system, among them especially kube-apiserver and openshift-apiserver. The canonical name of an instance is 'cluster'.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.APIServerSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(configv1.APIServerStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.APIServerSpec{}.OpenAPIModelName(), configv1.APIServerStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_APIServerEncryption(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "APIServerEncryption is used to encrypt sensitive resources on the cluster.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type defines what encryption type should be used to encrypt resources at the datastore layer. When this field is unset (i.e. when it is set to the empty string), identity is implied. The behavior of unset can and will change over time. Even if encryption is enabled by default, the meaning of unset may change to a different encryption type based on changes in best practices.\n\nWhen encryption is enabled, all sensitive resources shipped with the platform are encrypted. This list of sensitive resources can and will change over time. The current authoritative list is:\n\n 1. secrets\n 2. configmaps\n 3. routes.route.openshift.io\n 4. oauthaccesstokens.oauth.openshift.io\n 5. oauthauthorizetokens.oauth.openshift.io", - Type: []string{"string"}, - Format: "", - }, - }, - "kms": { - SchemaProps: spec.SchemaProps{ - Description: "kms defines the configuration for the external KMS instance that manages the encryption keys, when KMS encryption is enabled sensitive resources will be encrypted using keys managed by an externally configured KMS instance.\n\nThe Key Management Service (KMS) instance provides symmetric encryption and is responsible for managing the lifecyle of the encryption keys outside of the control plane. This allows integration with an external provider to manage the data encryption keys securely.", - Default: map[string]interface{}{}, - Ref: ref(configv1.KMSPluginConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "kms": "KMS", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.KMSPluginConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_APIServerList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.APIServer{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.APIServer{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_APIServerNamedServingCert(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "APIServerNamedServingCert maps a server DNS name, as understood by a client, to a certificate.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "names": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "names is a optional list of explicit DNS names (leading wildcards allowed) that should use this certificate to serve secure traffic. If no names are provided, the implicit names will be extracted from the certificates. Exact names trump over wildcard names. Explicit names defined here trump over extracted implicit names.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "servingCertificate": { - SchemaProps: spec.SchemaProps{ - Description: "servingCertificate references a kubernetes.io/tls type secret containing the TLS cert info for serving secure traffic. The secret must exist in the openshift-config namespace and contain the following required fields: - Secret.Data[\"tls.key\"] - TLS private key. - Secret.Data[\"tls.crt\"] - TLS certificate.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"servingCertificate"}, - }, - }, - Dependencies: []string{ - configv1.SecretNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_APIServerServingCerts(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "namedCertificates": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "namedCertificates references secrets containing the TLS cert info for serving secure traffic to specific hostnames. If no named certificates are provided, or no named certificates match the server name as understood by a client, the defaultServingCertificate will be used.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.APIServerNamedServingCert{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.APIServerNamedServingCert{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_APIServerSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "servingCerts": { - SchemaProps: spec.SchemaProps{ - Description: "servingCert is the TLS cert info for serving secure traffic. If not specified, operator managed certificates will be used for serving secure traffic.", - Default: map[string]interface{}{}, - Ref: ref(configv1.APIServerServingCerts{}.OpenAPIModelName()), - }, - }, - "clientCA": { - SchemaProps: spec.SchemaProps{ - Description: "clientCA references a ConfigMap containing a certificate bundle for the signers that will be recognized for incoming client certificates in addition to the operator managed signers. If this is empty, then only operator managed signers are valid. You usually only have to set this if you have your own PKI you wish to honor client certificates from. The ConfigMap must exist in the openshift-config namespace and contain the following required fields: - ConfigMap.Data[\"ca-bundle.crt\"] - CA bundle.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - "additionalCORSAllowedOrigins": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "additionalCORSAllowedOrigins lists additional, user-defined regular expressions describing hosts for which the API server allows access using the CORS headers. This may be needed to access the API and the integrated OAuth server from JavaScript applications. The values are regular expressions that correspond to the Golang regular expression language.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "encryption": { - SchemaProps: spec.SchemaProps{ - Description: "encryption allows the configuration of encryption of resources at the datastore layer.", - Default: map[string]interface{}{}, - Ref: ref(configv1.APIServerEncryption{}.OpenAPIModelName()), - }, - }, - "tlsSecurityProfile": { - SchemaProps: spec.SchemaProps{ - Description: "tlsSecurityProfile specifies settings for TLS connections for externally exposed servers.\n\nWhen omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is the Intermediate profile.", - Ref: ref(configv1.TLSSecurityProfile{}.OpenAPIModelName()), - }, - }, - "tlsAdherence": { - SchemaProps: spec.SchemaProps{ - Description: "tlsAdherence controls if components in the cluster adhere to the TLS security profile configured on this APIServer resource.\n\nValid values are \"LegacyAdheringComponentsOnly\" and \"StrictAllComponents\".\n\nWhen set to \"LegacyAdheringComponentsOnly\", components that already honor the cluster-wide TLS profile continue to do so. Components that do not already honor it continue to use their individual TLS configurations.\n\nWhen set to \"StrictAllComponents\", all components must honor the configured TLS profile unless they have a component-specific TLS configuration that overrides it. This mode is recommended for security-conscious deployments and is required for certain compliance frameworks.\n\nNote: Some components such as Kubelet and IngressController have their own dedicated TLS configuration mechanisms via KubeletConfig and IngressController CRs respectively. When these component-specific TLS configurations are set, they take precedence over the cluster-wide tlsSecurityProfile. When not set, these components fall back to the cluster-wide default.\n\nComponents that encounter an unknown value for tlsAdherence should treat it as \"StrictAllComponents\" and log a warning to ensure forward compatibility while defaulting to the more secure behavior.\n\nThis field is optional. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is LegacyAdheringComponentsOnly.\n\nOnce set, this field may be changed to a different value, but may not be removed.", - Type: []string{"string"}, - Format: "", - }, - }, - "audit": { - SchemaProps: spec.SchemaProps{ - Description: "audit specifies the settings for audit configuration to be applied to all OpenShift-provided API servers in the cluster.", - Default: map[string]interface{}{}, - Ref: ref(configv1.Audit{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.APIServerEncryption{}.OpenAPIModelName(), configv1.APIServerServingCerts{}.OpenAPIModelName(), configv1.Audit{}.OpenAPIModelName(), configv1.ConfigMapNameReference{}.OpenAPIModelName(), configv1.TLSSecurityProfile{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_APIServerStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_AWSDNSSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSDNSSpec contains DNS configuration specific to the Amazon Web Services cloud provider.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "privateZoneIAMRole": { - SchemaProps: spec.SchemaProps{ - Description: "privateZoneIAMRole contains the ARN of an IAM role that should be assumed when performing operations on the cluster's private hosted zone specified in the cluster DNS config. When left empty, no role should be assumed.\n\nThe ARN must follow the format: arn::iam:::role/, where: is the AWS partition (aws, aws-cn, aws-us-gov, or aws-eusc), is a 12-digit numeric identifier for the AWS account, is the IAM role name.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_AWSIngressSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSIngressSpec holds the desired state of the Ingress for Amazon Web Services infrastructure provider. This only includes fields that can be modified in the cluster.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type allows user to set a load balancer type. When this field is set the default ingresscontroller will get created using the specified LBType. If this field is not set then the default ingress controller of LBType Classic will be created. Valid values are:\n\n* \"Classic\": A Classic Load Balancer that makes routing decisions at either\n the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See\n the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb\n\n* \"NLB\": A Network Load Balancer that makes routing decisions at the\n transport layer (TCP/SSL). See the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{}, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_AWSPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSPlatformSpec holds the desired state of the Amazon Web Services infrastructure provider. This only includes fields that can be modified in the cluster.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "serviceEndpoints": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "serviceEndpoints list contains custom endpoints which will override default service endpoint of AWS Services. There must be only one ServiceEndpoint for a service.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.AWSServiceEndpoint{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.AWSServiceEndpoint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_AWSPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSPlatformStatus holds the current status of the Amazon Web Services infrastructure provider.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "region": { - SchemaProps: spec.SchemaProps{ - Description: "region holds the default AWS region for new AWS resources created by the cluster.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "serviceEndpoints": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "serviceEndpoints list contains custom endpoints which will override default service endpoint of AWS Services. There must be only one ServiceEndpoint for a service.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.AWSServiceEndpoint{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "resourceTags": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resourceTags is a list of additional tags to apply to AWS resources created for the cluster. See https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html for information on tagging AWS resources. AWS supports a maximum of 50 tags per resource. OpenShift reserves 25 tags for its use, leaving 25 tags available for the user.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.AWSResourceTag{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "cloudLoadBalancerConfig": { - SchemaProps: spec.SchemaProps{ - Description: "cloudLoadBalancerConfig holds configuration related to DNS and cloud load balancers. It allows configuration of in-cluster DNS as an alternative to the platform default DNS implementation. When using the ClusterHosted DNS type, Load Balancer IP addresses must be provided for the API and internal API load balancers as well as the ingress load balancer.", - Default: map[string]interface{}{"dnsType": "PlatformDefault"}, - Ref: ref(configv1.CloudLoadBalancerConfig{}.OpenAPIModelName()), - }, - }, - "ipFamily": { - SchemaProps: spec.SchemaProps{ - Description: "ipFamily specifies the IP protocol family that should be used for AWS network resources. This controls whether AWS resources are created with IPv4-only, or dual-stack networking with IPv4 or IPv6 as the primary protocol family.\n\nValid values are: * \"IPv4\" (default): Cloud platform resources use IPv4 addressing only. * \"DualStackIPv6Primary\": Cloud platform resources use dual-stack networking with IPv6 as the primary protocol family. * \"DualStackIPv4Primary\": Cloud platform resources use dual-stack networking with IPv4 as the primary protocol family.\n\nWhen omitted, this field defaults to \"IPv4\".\n\nThis field is immutable and cannot be changed once set.", - Default: "IPv4", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"region"}, - }, - }, - Dependencies: []string{ - configv1.AWSResourceTag{}.OpenAPIModelName(), configv1.AWSServiceEndpoint{}.OpenAPIModelName(), configv1.CloudLoadBalancerConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_AWSResourceTag(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSResourceTag is a tag to apply to AWS resources created for the cluster.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "key": { - SchemaProps: spec.SchemaProps{ - Description: "key sets the key of the AWS resource tag key-value pair. Key is required when defining an AWS resource tag. Key should consist of between 1 and 128 characters, and may contain only the set of alphanumeric characters, space (' '), '_', '.', '/', '=', '+', '-', ':', and '@'.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value sets the value of the AWS resource tag key-value pair. Value is required when defining an AWS resource tag. Value should consist of between 1 and 256 characters, and may contain only the set of alphanumeric characters, space (' '), '_', '.', '/', '=', '+', '-', ':', and '@'. Some AWS service do not support empty values. Since tags are added to resources in many services, the length of the tag value must meet the requirements of all services.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"key", "value"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_AWSServiceEndpoint(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSServiceEndpoint store the configuration of a custom url to override existing defaults of AWS Services.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the AWS service. The list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html This must be provided and cannot be empty.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "url"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_AcceptRisk(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AcceptRisk represents a risk that is considered acceptable.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the acceptable risk. It must be a non-empty string and must not exceed 256 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_AdmissionConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "pluginConfig": { - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.AdmissionPluginConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "enabledPlugins": { - SchemaProps: spec.SchemaProps{ - Description: "enabledPlugins is a list of admission plugins that must be on in addition to the default list. Some admission plugins are disabled by default, but certain configurations require them. This is fairly uncommon and can result in performance penalties and unexpected behavior.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "disabledPlugins": { - SchemaProps: spec.SchemaProps{ - Description: "disabledPlugins is a list of admission plugins that must be off. Putting something in this list is almost always a mistake and likely to result in cluster instability.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.AdmissionPluginConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_AdmissionPluginConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AdmissionPluginConfig holds the necessary configuration options for admission plugins", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "location": { - SchemaProps: spec.SchemaProps{ - Description: "location is the path to a configuration file that contains the plugin's configuration", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "configuration": { - SchemaProps: spec.SchemaProps{ - Description: "configuration is an embedded configuration object to be used as the plugin's configuration. If present, it will be used instead of the path to the configuration file.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"location", "configuration"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_AlibabaCloudPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AlibabaCloudPlatformSpec holds the desired state of the Alibaba Cloud infrastructure provider. This only includes fields that can be modified in the cluster.", - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_AlibabaCloudPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AlibabaCloudPlatformStatus holds the current status of the Alibaba Cloud infrastructure provider.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "region": { - SchemaProps: spec.SchemaProps{ - Description: "region specifies the region for Alibaba Cloud resources created for the cluster.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resourceGroupID": { - SchemaProps: spec.SchemaProps{ - Description: "resourceGroupID is the ID of the resource group for the cluster.", - Type: []string{"string"}, - Format: "", - }, - }, - "resourceTags": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "key", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resourceTags is a list of additional tags to apply to Alibaba Cloud resources created for the cluster.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.AlibabaCloudResourceTag{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"region"}, - }, - }, - Dependencies: []string{ - configv1.AlibabaCloudResourceTag{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_AlibabaCloudResourceTag(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AlibabaCloudResourceTag is the set of tags to add to apply to resources.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "key": { - SchemaProps: spec.SchemaProps{ - Description: "key is the key of the tag.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value is the value of the tag.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"key", "value"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_Audit(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "profile": { - SchemaProps: spec.SchemaProps{ - Description: "profile specifies the name of the desired top-level audit profile to be applied to all requests sent to any of the OpenShift-provided API servers in the cluster (kube-apiserver, openshift-apiserver and oauth-apiserver), with the exception of those requests that match one or more of the customRules.\n\nThe following profiles are provided: - Default: default policy which means MetaData level logging with the exception of events\n (not logged at all), oauthaccesstokens and oauthauthorizetokens (both logged at RequestBody\n level).\n- WriteRequestBodies: like 'Default', but logs request and response HTTP payloads for write requests (create, update, patch). - AllRequestBodies: like 'WriteRequestBodies', but also logs request and response HTTP payloads for read requests (get, list). - None: no requests are logged at all, not even oauthaccesstokens and oauthauthorizetokens.\n\nWarning: It is not recommended to disable audit logging by using the `None` profile unless you are fully aware of the risks of not logging data that can be beneficial when troubleshooting issues. If you disable audit logging and a support situation arises, you might need to enable audit logging and reproduce the issue in order to troubleshoot properly.\n\nIf unset, the 'Default' profile is used as the default.", - Type: []string{"string"}, - Format: "", - }, - }, - "customRules": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "customRules specify profiles per group. These profile take precedence over the top-level profile field if they apply. They are evaluation from top to bottom and the first one that matches, applies.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.AuditCustomRule{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.AuditCustomRule{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_AuditConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AuditConfig holds configuration for the audit capabilities", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "enabled": { - SchemaProps: spec.SchemaProps{ - Description: "If this flag is set, audit log will be printed in the logs. The logs contains, method, user and a requested URL.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "auditFilePath": { - SchemaProps: spec.SchemaProps{ - Description: "All requests coming to the apiserver will be logged to this file.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "maximumFileRetentionDays": { - SchemaProps: spec.SchemaProps{ - Description: "Maximum number of days to retain old log files based on the timestamp encoded in their filename.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "maximumRetainedFiles": { - SchemaProps: spec.SchemaProps{ - Description: "Maximum number of old log files to retain.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "maximumFileSizeMegabytes": { - SchemaProps: spec.SchemaProps{ - Description: "Maximum size in megabytes of the log file before it gets rotated. Defaults to 100MB.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "policyFile": { - SchemaProps: spec.SchemaProps{ - Description: "policyFile is a path to the file that defines the audit policy configuration.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "policyConfiguration": { - SchemaProps: spec.SchemaProps{ - Description: "policyConfiguration is an embedded policy configuration object to be used as the audit policy configuration. If present, it will be used instead of the path to the policy file.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "logFormat": { - SchemaProps: spec.SchemaProps{ - Description: "Format of saved audits (legacy or json).", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "webHookKubeConfig": { - SchemaProps: spec.SchemaProps{ - Description: "Path to a .kubeconfig formatted file that defines the audit webhook configuration.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "webHookMode": { - SchemaProps: spec.SchemaProps{ - Description: "Strategy for sending audit events (block or batch).", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"enabled", "auditFilePath", "maximumFileRetentionDays", "maximumRetainedFiles", "maximumFileSizeMegabytes", "policyFile", "policyConfiguration", "logFormat", "webHookKubeConfig", "webHookMode"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_AuditCustomRule(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AuditCustomRule describes a custom rule for an audit profile that takes precedence over the top-level profile.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "group": { - SchemaProps: spec.SchemaProps{ - Description: "group is a name of group a request user must be member of in order to this profile to apply.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "profile": { - SchemaProps: spec.SchemaProps{ - Description: "profile specifies the name of the desired audit policy configuration to be deployed to all OpenShift-provided API servers in the cluster.\n\nThe following profiles are provided: - Default: the existing default policy. - WriteRequestBodies: like 'Default', but logs request and response HTTP payloads for write requests (create, update, patch). - AllRequestBodies: like 'WriteRequestBodies', but also logs request and response HTTP payloads for read requests (get, list). - None: no requests are logged at all, not even oauthaccesstokens and oauthauthorizetokens.\n\nIf unset, the 'Default' profile is used as the default.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"group", "profile"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_Authentication(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Authentication specifies cluster-wide settings for authentication (like OAuth and webhook token authenticators). The canonical name of an instance is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.AuthenticationSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(configv1.AuthenticationStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.AuthenticationSpec{}.OpenAPIModelName(), configv1.AuthenticationStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_AuthenticationList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.Authentication{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.Authentication{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_AuthenticationSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type identifies the cluster managed, user facing authentication mode in use. Specifically, it manages the component that responds to login attempts. The default is IntegratedOAuth.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "oauthMetadata": { - SchemaProps: spec.SchemaProps{ - Description: "oauthMetadata contains the discovery endpoint data for OAuth 2.0 Authorization Server Metadata for an external OAuth server. This discovery document can be viewed from its served location: oc get --raw '/.well-known/oauth-authorization-server' For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 If oauthMetadata.name is non-empty, this value has precedence over any metadata reference stored in status. The key \"oauthMetadata\" is used to locate the data. If specified and the config map or expected key is not found, no metadata is served. If the specified metadata is not valid, no metadata is served. The namespace for this config map is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - "webhookTokenAuthenticators": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "webhookTokenAuthenticators is DEPRECATED, setting it has no effect.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.DeprecatedWebhookTokenAuthenticator{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "webhookTokenAuthenticator": { - SchemaProps: spec.SchemaProps{ - Description: "webhookTokenAuthenticator configures a remote token reviewer. These remote authentication webhooks can be used to verify bearer tokens via the tokenreviews.authentication.k8s.io REST API. This is required to honor bearer tokens that are provisioned by an external authentication service.\n\nCan only be set if \"Type\" is set to \"None\".", - Ref: ref(configv1.WebhookTokenAuthenticator{}.OpenAPIModelName()), - }, - }, - "serviceAccountIssuer": { - SchemaProps: spec.SchemaProps{ - Description: "serviceAccountIssuer is the identifier of the bound service account token issuer. The default is https://kubernetes.default.svc WARNING: Updating this field will not result in immediate invalidation of all bound tokens with the previous issuer value. Instead, the tokens issued by previous service account issuer will continue to be trusted for a time period chosen by the platform (currently set to 24h). This time period is subject to change over time. This allows internal components to transition to use new service account issuer without service distruption.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "oidcProviders": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "oidcProviders are OIDC identity providers that can issue tokens for this cluster Can only be set if \"Type\" is set to \"OIDC\".\n\nAt most one provider can be configured.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.OIDCProvider{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName(), configv1.DeprecatedWebhookTokenAuthenticator{}.OpenAPIModelName(), configv1.OIDCProvider{}.OpenAPIModelName(), configv1.WebhookTokenAuthenticator{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_AuthenticationStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "integratedOAuthMetadata": { - SchemaProps: spec.SchemaProps{ - Description: "integratedOAuthMetadata contains the discovery endpoint data for OAuth 2.0 Authorization Server Metadata for the in-cluster integrated OAuth server. This discovery document can be viewed from its served location: oc get --raw '/.well-known/oauth-authorization-server' For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This contains the observed value based on cluster state. An explicitly set value in spec.oauthMetadata has precedence over this field. This field has no meaning if authentication spec.type is not set to IntegratedOAuth. The key \"oauthMetadata\" is used to locate the data. If the config map or expected key is not found, no metadata is served. If the specified metadata is not valid, no metadata is served. The namespace for this config map is openshift-config-managed.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - "oidcClients": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "componentNamespace", - "componentName", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "oidcClients is where participating operators place the current OIDC client status for OIDC clients that can be customized by the cluster-admin.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.OIDCClientStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName(), configv1.OIDCClientStatus{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_AzurePlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AzurePlatformSpec holds the desired state of the Azure infrastructure provider. This only includes fields that can be modified in the cluster.", - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_AzurePlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AzurePlatformStatus holds the current status of the Azure infrastructure provider.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "resourceGroupName": { - SchemaProps: spec.SchemaProps{ - Description: "resourceGroupName is the Resource Group for new Azure resources created for the cluster.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "networkResourceGroupName": { - SchemaProps: spec.SchemaProps{ - Description: "networkResourceGroupName is the Resource Group for network resources like the Virtual Network and Subnets used by the cluster. If empty, the value is same as ResourceGroupName.", - Type: []string{"string"}, - Format: "", - }, - }, - "cloudName": { - SchemaProps: spec.SchemaProps{ - Description: "cloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK with the appropriate Azure API endpoints. If empty, the value is equal to `AzurePublicCloud`.", - Type: []string{"string"}, - Format: "", - }, - }, - "armEndpoint": { - SchemaProps: spec.SchemaProps{ - Description: "armEndpoint specifies a URL to use for resource management in non-soverign clouds such as Azure Stack.", - Type: []string{"string"}, - Format: "", - }, - }, - "resourceTags": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resourceTags is a list of additional tags to apply to Azure resources created for the cluster. See https://docs.microsoft.com/en-us/rest/api/resources/tags for information on tagging Azure resources. Due to limitations on Automation, Content Delivery Network, DNS Azure resources, a maximum of 15 tags may be applied. OpenShift reserves 5 tags for internal use, allowing 10 tags for user configuration.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.AzureResourceTag{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "cloudLoadBalancerConfig": { - SchemaProps: spec.SchemaProps{ - Description: "cloudLoadBalancerConfig holds configuration related to DNS and cloud load balancers. It allows configuration of in-cluster DNS as an alternative to the platform default DNS implementation. When using the ClusterHosted DNS type, Load Balancer IP addresses must be provided for the API and internal API load balancers as well as the ingress load balancer.", - Default: map[string]interface{}{"dnsType": "PlatformDefault"}, - Ref: ref(configv1.CloudLoadBalancerConfig{}.OpenAPIModelName()), - }, - }, - "ipFamily": { - SchemaProps: spec.SchemaProps{ - Description: "ipFamily specifies the IP protocol family that should be used for Azure network resources. This controls whether Azure resources are created with IPv4-only, or dual-stack networking with IPv4 or IPv6 as the primary protocol family.", - Default: "IPv4", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"resourceGroupName"}, - }, - }, - Dependencies: []string{ - configv1.AzureResourceTag{}.OpenAPIModelName(), configv1.CloudLoadBalancerConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_AzureResourceTag(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AzureResourceTag is a tag to apply to Azure resources created for the cluster.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "key": { - SchemaProps: spec.SchemaProps{ - Description: "key is the key part of the tag. A tag key can have a maximum of 128 characters and cannot be empty. Key must begin with a letter, end with a letter, number or underscore, and must contain only alphanumeric characters and the following special characters `_ . -`.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value is the value part of the tag. A tag value can have a maximum of 256 characters and cannot be empty. Value must contain only alphanumeric characters and the following special characters `_ + , - . / : ; < = > ? @`.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"key", "value"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_BareMetalPlatformLoadBalancer(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BareMetalPlatformLoadBalancer defines the load balancer used by the cluster on BareMetal platform.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type defines the type of load balancer used by the cluster on BareMetal platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", - Default: "OpenShiftManagedDefault", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{}, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_BareMetalPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BareMetalPlatformSpec holds the desired state of the BareMetal infrastructure provider. This only includes fields that can be modified in the cluster.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "apiServerInternalIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "ingressIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "machineNetworks": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_BareMetalPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BareMetalPlatformStatus holds the current status of the BareMetal infrastructure provider. For more information about the network architecture used with the BareMetal platform type, see: https://github.com/openshift/installer/blob/master/docs/design/baremetal/networking-infrastructure.md", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "apiServerInternalIP": { - SchemaProps: spec.SchemaProps{ - Description: "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", - Type: []string{"string"}, - Format: "", - }, - }, - "apiServerInternalIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "ingressIP": { - SchemaProps: spec.SchemaProps{ - Description: "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", - Type: []string{"string"}, - Format: "", - }, - }, - "ingressIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "nodeDNSIP": { - SchemaProps: spec.SchemaProps{ - Description: "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for BareMetal deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.", - Type: []string{"string"}, - Format: "", - }, - }, - "loadBalancer": { - SchemaProps: spec.SchemaProps{ - Description: "loadBalancer defines how the load balancer used by the cluster is configured.", - Default: map[string]interface{}{"type": "OpenShiftManagedDefault"}, - Ref: ref(configv1.BareMetalPlatformLoadBalancer{}.OpenAPIModelName()), - }, - }, - "vipManagement": { - SchemaProps: spec.SchemaProps{ - Description: "vipManagement indicates which VIP management mechanism is active on this cluster. Allowed values are `Keepalived`, `BGP`, and omitted. Once set to a non-empty value, this field is immutable. When set to `BGP`, kube-vip (Routing Table Mode) and frr-k8s are deployed as static pods to advertise VIPs via BGP, replacing the default keepalived/VRRP mechanism. When set to `Keepalived`, the default keepalived-based VIP management is used. When omitted, the default keepalived-based VIP management is used.\n\nPossible enum values:\n - `\"BGP\"` means the VIPs are advertised via BGP by kube-vip (Routing Table Mode) and frr-k8s running as static pods.\n - `\"Keepalived\"` means the VIPs are managed by the default keepalived/VRRP mechanism.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"BGP", "Keepalived"}, - }, - }, - "dnsRecordsType": { - SchemaProps: spec.SchemaProps{ - Description: "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"External", "Internal"}, - }, - }, - "machineNetworks": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"apiServerInternalIPs", "ingressIPs"}, - }, - }, - Dependencies: []string{ - configv1.BareMetalPlatformLoadBalancer{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_BasicAuthIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url is the remote URL to connect to", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - "tlsClientCert": { - SchemaProps: spec.SchemaProps{ - Description: "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - "tlsClientKey": { - SchemaProps: spec.SchemaProps{ - Description: "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"url"}, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName(), configv1.SecretNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_Build(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Build configures the behavior of OpenShift builds for the entire cluster. This includes default settings that can be overridden in BuildConfig objects, and overrides which are applied to all builds.\n\nThe canonical name is \"cluster\"\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user-settable values for the build controller configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.BuildSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.BuildSpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_BuildDefaults(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "defaultProxy": { - SchemaProps: spec.SchemaProps{ - Description: "defaultProxy contains the default proxy settings for all build operations, including image pull/push and source download.\n\nValues can be overrode by setting the `HTTP_PROXY`, `HTTPS_PROXY`, and `NO_PROXY` environment variables in the build config's strategy.", - Ref: ref(configv1.ProxySpec{}.OpenAPIModelName()), - }, - }, - "gitProxy": { - SchemaProps: spec.SchemaProps{ - Description: "gitProxy contains the proxy settings for git operations only. If set, this will override any Proxy settings for all git commands, such as git clone.\n\nValues that are not set here will be inherited from DefaultProxy.", - Ref: ref(configv1.ProxySpec{}.OpenAPIModelName()), - }, - }, - "env": { - SchemaProps: spec.SchemaProps{ - Description: "env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.EnvVar{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "imageLabels": { - SchemaProps: spec.SchemaProps{ - Description: "imageLabels is a list of docker labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ImageLabel{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "resources": { - SchemaProps: spec.SchemaProps{ - Description: "resources defines resource requirements to execute the build.", - Default: map[string]interface{}{}, - Ref: ref(corev1.ResourceRequirements{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.ImageLabel{}.OpenAPIModelName(), configv1.ProxySpec{}.OpenAPIModelName(), corev1.EnvVar{}.OpenAPIModelName(), corev1.ResourceRequirements{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_BuildList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.Build{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.Build{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_BuildOverrides(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "imageLabels": { - SchemaProps: spec.SchemaProps{ - Description: "imageLabels is a list of docker labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ImageLabel{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector is a selector which must be true for the build pod to fit on a node", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "tolerations": { - SchemaProps: spec.SchemaProps{ - Description: "tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.Toleration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "forcePull": { - SchemaProps: spec.SchemaProps{ - Description: "forcePull overrides, if set, the equivalent value in the builds, i.e. false disables force pull for all builds, true enables force pull for all builds, independently of what each build specifies itself", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.ImageLabel{}.OpenAPIModelName(), corev1.Toleration{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_BuildSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "additionalTrustedCA": { - SchemaProps: spec.SchemaProps{ - Description: "additionalTrustedCA is a reference to a ConfigMap containing additional CAs that should be trusted for image pushes and pulls during builds. The namespace for this config map is openshift-config.\n\nDEPRECATED: Additional CAs for image pull and push should be set on image.config.openshift.io/cluster instead.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - "buildDefaults": { - SchemaProps: spec.SchemaProps{ - Description: "buildDefaults controls the default information for Builds", - Default: map[string]interface{}{}, - Ref: ref(configv1.BuildDefaults{}.OpenAPIModelName()), - }, - }, - "buildOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "buildOverrides controls override settings for builds", - Default: map[string]interface{}{}, - Ref: ref(configv1.BuildOverrides{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.BuildDefaults{}.OpenAPIModelName(), configv1.BuildOverrides{}.OpenAPIModelName(), configv1.ConfigMapNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_CRIOCredentialProviderConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CRIOCredentialProviderConfig holds cluster-wide singleton resource configurations for CRI-O credential provider, the name of this instance is \"cluster\". CRI-O credential provider is a binary shipped with CRI-O that provides a way to obtain container image pull credentials from external sources. For example, it can be used to fetch mirror registry credentials from secrets resources in the cluster within the same namespace the pod will be running in. CRIOCredentialProviderConfig configuration specifies the pod image sources registries that should trigger the CRI-O credential provider execution, which will resolve the CRI-O mirror configurations and obtain the necessary credentials for pod creation. Note: Configuration changes will only take effect after the kubelet restarts, which is automatically managed by the cluster during rollout.\n\nThe resource is a singleton named \"cluster\".\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec defines the desired configuration of the CRI-O Credential Provider. This field is required and must be provided when creating the resource.", - Ref: ref(configv1.CRIOCredentialProviderConfigSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status represents the current state of the CRIOCredentialProviderConfig. When omitted or nil, it indicates that the status has not yet been set by the controller. The controller will populate this field with validation conditions and operational state.", - Default: map[string]interface{}{}, - Ref: ref(configv1.CRIOCredentialProviderConfigStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.CRIOCredentialProviderConfigSpec{}.OpenAPIModelName(), configv1.CRIOCredentialProviderConfigStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_CRIOCredentialProviderConfigList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CRIOCredentialProviderConfigList contains a list of CRIOCredentialProviderConfig resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.CRIOCredentialProviderConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.CRIOCredentialProviderConfig{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_CRIOCredentialProviderConfigSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CRIOCredentialProviderConfigSpec defines the desired configuration of the CRI-O Credential Provider.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "matchImages": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "matchImages is a list of string patterns used to determine whether the CRI-O credential provider should be invoked for a given image. This list is passed to the kubelet CredentialProviderConfig, and if any pattern matches the requested image, CRI-O credential provider will be invoked to obtain credentials for pulling that image or its mirrors. Depending on the platform, the CRI-O credential provider may be installed alongside an existing platform specific provider. Conflicts between the existing platform specific provider image match configuration and this list will be handled by the following precedence rule: credentials from built-in kubelet providers (e.g., ECR, GCR, ACR) take precedence over those from the CRIOCredentialProviderConfig when both match the same image. To avoid uncertainty, it is recommended to avoid configuring your private image patterns to overlap with existing platform specific provider config(e.g., the entries from https://github.com/openshift/machine-config-operator/blob/main/templates/common/aws/files/etc-kubernetes-credential-providers-ecr-credential-provider.yaml). You can check the resource's Status conditions to see if any entries were ignored due to exact matches with known built-in provider patterns.\n\nThis field is optional, the items of the list must contain between 1 and 50 entries. The list is treated as a set, so duplicate entries are not allowed.\n\nFor more details, see: https://kubernetes.io/docs/tasks/administer-cluster/kubelet-credential-provider/ https://github.com/cri-o/crio-credential-provider#architecture\n\nEach entry in matchImages is a pattern which can optionally contain a port and a path. Each entry must be no longer than 512 characters. Wildcards ('*') are supported for full subdomain labels, such as '*.k8s.io' or 'k8s.*.io', and for top-level domains, such as 'k8s.*' (which matches 'k8s.io' or 'k8s.net'). A global wildcard '*' (matching any domain) is not allowed. Wildcards may replace an entire hostname label (e.g., *.example.com), but they cannot appear within a label (e.g., f*oo.example.com) and are not allowed in the port or path. For example, 'example.*.com' is valid, but 'exa*mple.*.com' is not. Each wildcard matches only a single domain label, so '*.io' does **not** match '*.k8s.io'.\n\nA match exists between an image and a matchImage when all of the below are true: Both contain the same number of domain parts and each part matches. The URL path of an matchImages must be a prefix of the target image URL path. If the matchImages contains a port, then the port must match in the image as well.\n\nExample values of matchImages: - 123456789.dkr.ecr.us-east-1.amazonaws.com - *.azurecr.io - gcr.io - *.*.registry.io - registry.io:8080/path", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_CRIOCredentialProviderConfigStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CRIOCredentialProviderConfigStatus defines the observed state of CRIOCredentialProviderConfig", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represent the latest available observations of the configuration state. When omitted, it indicates that no conditions have been reported yet. The maximum number of conditions is 16. Conditions are stored as a map keyed by condition type, ensuring uniqueness.\n\nExpected condition types include: \"Validated\": indicates whether the matchImages configuration is valid", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_CertInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CertInfo relates a certificate with a private key", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"certFile", "keyFile"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_ClientConnectionOverrides(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "acceptContentTypes": { - SchemaProps: spec.SchemaProps{ - Description: "acceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the default value of 'application/json'. This field will control all connections to the server used by a particular client.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "contentType": { - SchemaProps: spec.SchemaProps{ - Description: "contentType is the content type used when sending data to the server from this client.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "qps": { - SchemaProps: spec.SchemaProps{ - Description: "qps controls the number of queries per second allowed for this connection.", - Default: 0, - Type: []string{"number"}, - Format: "float", - }, - }, - "burst": { - SchemaProps: spec.SchemaProps{ - Description: "burst allows extra queries to accumulate when a client is exceeding its rate.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"acceptContentTypes", "contentType", "qps", "burst"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_ClientCredentialConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClientCredentialConfig configures the client credentials and token endpoint to use to get an access token via the OAuth2 client credentials grant flow.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "clientID": { - SchemaProps: spec.SchemaProps{ - Description: "clientID is a required client identifier to use during the OAuth2 client credentials flow. clientID must be at least 1 character in length, must not exceed 256 characters in length, and must only contain printable ASCII characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "clientSecret": { - SchemaProps: spec.SchemaProps{ - Description: "clientSecret is a required reference to a Secret in the openshift-config namespace to be used as the client secret during the OAuth2 client credentials flow.\n\nThe key 'client-secret' is used to locate the client secret data in the Secret.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ClientSecretSecretReference{}.OpenAPIModelName()), - }, - }, - "tokenEndpoint": { - SchemaProps: spec.SchemaProps{ - Description: "tokenEndpoint is a required URL to query for an access token using the client credential OAuth2 flow. tokenEndpoint must be at least 1 character in length and must not exceed 2048 characters in length. tokenEndpoint must be a valid HTTPS URL. tokenEndpoint must have a host and a path. tokenEndpoint must not contain query parameters, fragments, or user information (e.g., \"user:password@host\").", - Type: []string{"string"}, - Format: "", - }, - }, - "scopes": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "scopes is an optional list of OAuth2 scopes to request when obtaining an access token.\n\nIf not specified, the token endpoint's default scopes will be used.\n\nWhen specified, there must be at least 1 entry and must not exceed 16 entries. Each entry must be at least 1 character in length and must not exceed 256 characters in length. Each entry must only contain printable ASCII characters, excluding spaces, double quotes and backslashes. Entries must be unique.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "tls": { - SchemaProps: spec.SchemaProps{ - Description: "tls is an optional field that allows configuring the TLS settings used to interact with the identity provider as an OAuth2 client.\n\nWhen omitted, system default TLS settings will be used for the OAuth2 client.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ExternalSourceTLS{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"clientID", "clientSecret", "tokenEndpoint"}, - }, - }, - Dependencies: []string{ - configv1.ClientSecretSecretReference{}.OpenAPIModelName(), configv1.ExternalSourceTLS{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ClientSecretSecretReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClientSecretSecretReference is a reference to a Secret in the openshift-config namespace that should be used for configuring the client secret to be used when sourcing claims from external sources with the client credential authentication flow.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the required name of the Secret that exists in the openshift-config namespace.\n\nIt must be at least 1 character in length, must not exceed 253 characters in length, must start and end with a lowercase alphanumeric character, and must only contain lowercase alphanumeric characters, '-' or '.'.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_CloudControllerManagerStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CloudControllerManagerStatus holds the state of Cloud Controller Manager (a.k.a. CCM or CPI) related settings", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "state": { - SchemaProps: spec.SchemaProps{ - Description: "state determines whether or not an external Cloud Controller Manager is expected to be installed within the cluster. https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/#running-cloud-controller-manager\n\nValid values are \"External\", \"None\" and omitted. When set to \"External\", new nodes will be tainted as uninitialized when created, preventing them from running workloads until they are initialized by the cloud controller manager. When omitted or set to \"None\", new nodes will be not tainted and no extra initialization from the cloud controller manager is expected.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_CloudLoadBalancerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CloudLoadBalancerConfig contains an union discriminator indicating the type of DNS solution in use within the cluster. When the DNSType is `ClusterHosted`, the cloud's Load Balancer configuration needs to be provided so that the DNS solution hosted within the cluster can be configured with those values.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "dnsType": { - SchemaProps: spec.SchemaProps{ - Description: "dnsType indicates the type of DNS solution in use within the cluster. Its default value of `PlatformDefault` indicates that the cluster's DNS is the default provided by the cloud platform. It can be set to `ClusterHosted` to bypass the configuration of the cloud default DNS. In this mode, the cluster needs to provide a self-hosted DNS solution for the cluster's installation to succeed. The cluster's use of the cloud's Load Balancers is unaffected by this setting. The value is immutable after it has been set at install time. Currently, there is no way for the customer to add additional DNS entries into the cluster hosted DNS. Enabling this functionality allows the user to start their own DNS solution outside the cluster after installation is complete. The customer would be responsible for configuring this custom DNS solution, and it can be run in addition to the in-cluster DNS solution.", - Default: "PlatformDefault", - Type: []string{"string"}, - Format: "", - }, - }, - "clusterHosted": { - SchemaProps: spec.SchemaProps{ - Description: "clusterHosted holds the IP addresses of API, API-Int and Ingress Load Balancers on Cloud Platforms. The DNS solution hosted within the cluster use these IP addresses to provide resolution for API, API-Int and Ingress services.", - Ref: ref(configv1.CloudLoadBalancerIPs{}.OpenAPIModelName()), - }, - }, - }, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "dnsType", - "fields-to-discriminateBy": map[string]interface{}{ - "clusterHosted": "ClusterHosted", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.CloudLoadBalancerIPs{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_CloudLoadBalancerIPs(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CloudLoadBalancerIPs contains the Load Balancer IPs for the cloud's API, API-Int and Ingress Load balancers. They will be populated as soon as the respective Load Balancers have been configured. These values are utilized to configure the DNS solution hosted within the cluster.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "apiIntLoadBalancerIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "apiIntLoadBalancerIPs holds Load Balancer IPs for the internal API service. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Entries in the apiIntLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "apiLoadBalancerIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "apiLoadBalancerIPs holds Load Balancer IPs for the API service. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Could be empty for private clusters. Entries in the apiLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "ingressLoadBalancerIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "ingressLoadBalancerIPs holds IPs for Ingress Load Balancers. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Entries in the ingressLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_ClusterCondition(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterCondition is a union of typed cluster conditions. The 'type' property determines which of the type-specific properties are relevant. When evaluated on a cluster, the condition may match, not match, or fail to evaluate.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type represents the cluster-condition type. This defines the members and semantics of any additional properties.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "promql": { - SchemaProps: spec.SchemaProps{ - Description: "promql represents a cluster condition based on PromQL.", - Ref: ref(configv1.PromQLClusterCondition{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - }, - Dependencies: []string{ - configv1.PromQLClusterCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ClusterImagePolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterImagePolicy holds cluster-wide configuration for image signature verification\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec contains the configuration for the cluster image policy.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ClusterImagePolicySpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status contains the observed state of the resource.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ClusterImagePolicyStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.ClusterImagePolicySpec{}.OpenAPIModelName(), configv1.ClusterImagePolicyStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ClusterImagePolicyList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterImagePolicyList is a list of ClusterImagePolicy resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is a list of ClusterImagePolices", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ClusterImagePolicy{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.ClusterImagePolicy{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ClusterImagePolicySpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CLusterImagePolicySpec is the specification of the ClusterImagePolicy custom resource.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "scopes": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "scopes is a required field that defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. This support no more than 256 scopes in one object. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. If a scope is configured in both the ClusterImagePolicy and the ImagePolicy, or if the scope in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy, only the policy from the ClusterImagePolicy will be applied. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "policy": { - SchemaProps: spec.SchemaProps{ - Description: "policy is a required field that contains configuration to allow scopes to be verified, and defines how images not matching the verification policy will be treated.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ImageSigstoreVerificationPolicy{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"scopes", "policy"}, - }, - }, - Dependencies: []string{ - configv1.ImageSigstoreVerificationPolicy{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ClusterImagePolicyStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions provide details on the status of this API Resource.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ClusterNetworkEntry(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterNetworkEntry is a contiguous block of IP addresses from which pod IPs are allocated.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "cidr": { - SchemaProps: spec.SchemaProps{ - Description: "The complete block for pod IPs.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "hostPrefix": { - SchemaProps: spec.SchemaProps{ - Description: "The size (prefix) of block to allocate to each node. If this field is not used by the plugin, it can be left unset.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - Required: []string{"cidr"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_ClusterOperator(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterOperator holds the status of a core or optional OpenShift component managed by the Cluster Version Operator (CVO). This object is used by operators to convey their state to the rest of the cluster. Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds configuration that could apply to any operator.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ClusterOperatorSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds the information about the state of an operator. It is consistent with status information across the Kubernetes ecosystem.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ClusterOperatorStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - configv1.ClusterOperatorSpec{}.OpenAPIModelName(), configv1.ClusterOperatorStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ClusterOperatorList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterOperatorList is a list of OperatorStatus resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ClusterOperator{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.ClusterOperator{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ClusterOperatorSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterOperatorSpec is empty for now, but you could imagine holding information like \"pause\".", - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_ClusterOperatorStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterOperatorStatus provides information about the status of the operator.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions describes the state of the operator's managed and monitored components.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ClusterOperatorStatusCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "versions": { - SchemaProps: spec.SchemaProps{ - Description: "versions is a slice of operator and operand version tuples. Operators which manage multiple operands will have multiple operand entries in the array. Available operators must report the version of the operator itself with the name \"operator\". An operator reports a new \"operator\" version when it has rolled out the new version to all of its operands.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.OperandVersion{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "relatedObjects": { - SchemaProps: spec.SchemaProps{ - Description: "relatedObjects is a list of objects that are \"interesting\" or related to this operator. Common uses are: 1. the detailed resource driving the operator 2. operator namespaces 3. operand namespaces", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ObjectReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "extension": { - SchemaProps: spec.SchemaProps{ - Description: "extension contains any additional status information specific to the operator which owns this status object.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.ClusterOperatorStatusCondition{}.OpenAPIModelName(), configv1.ObjectReference{}.OpenAPIModelName(), configv1.OperandVersion{}.OpenAPIModelName(), runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ClusterOperatorStatusCondition(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterOperatorStatusCondition represents the state of the operator's managed and monitored components.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type specifies the aspect reported by this condition.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status of the condition, one of True, False, Unknown.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "lastTransitionTime": { - SchemaProps: spec.SchemaProps{ - Description: "lastTransitionTime is the time of the last update to the current status property.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "reason": { - SchemaProps: spec.SchemaProps{ - Description: "reason is the CamelCase reason for the condition's current status.", - Type: []string{"string"}, - Format: "", - }, - }, - "message": { - SchemaProps: spec.SchemaProps{ - Description: "message provides additional information about the current condition. This is only to be consumed by humans. It may contain Line Feed characters (U+000A), which should be rendered as new lines.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"type", "status", "lastTransitionTime"}, - }, - }, - Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ClusterVersion(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterVersion is the configuration for the ClusterVersionOperator. This is where parameters related to automatic updates can be set.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is the desired state of the cluster version - the operator will work to ensure that the desired version is applied to the cluster.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ClusterVersionSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status contains information about the available updates and any in-progress updates.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ClusterVersionStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.ClusterVersionSpec{}.OpenAPIModelName(), configv1.ClusterVersionStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ClusterVersionCapabilitiesSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterVersionCapabilitiesSpec selects the managed set of optional, core cluster components.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "baselineCapabilitySet": { - SchemaProps: spec.SchemaProps{ - Description: "baselineCapabilitySet selects an initial set of optional capabilities to enable, which can be extended via additionalEnabledCapabilities. If unset, the cluster will choose a default, and the default may change over time. The current default is vCurrent.", - Type: []string{"string"}, - Format: "", - }, - }, - "additionalEnabledCapabilities": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "additionalEnabledCapabilities extends the set of managed capabilities beyond the baseline defined in baselineCapabilitySet. The default is an empty set.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_ClusterVersionCapabilitiesStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterVersionCapabilitiesStatus describes the state of optional, core cluster components.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "enabledCapabilities": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "enabledCapabilities lists all the capabilities that are currently managed.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "knownCapabilities": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "knownCapabilities lists all the capabilities known to the current cluster.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_ClusterVersionList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterVersionList is a list of ClusterVersion resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ClusterVersion{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.ClusterVersion{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ClusterVersionSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterVersionSpec is the desired version state of the cluster. It includes the version the cluster should be at, how the cluster is identified, and where the cluster should look for version updates.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "clusterID": { - SchemaProps: spec.SchemaProps{ - Description: "clusterID uniquely identifies this cluster. This is expected to be an RFC4122 UUID value (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx in hexadecimal values). This is a required field.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "desiredUpdate": { - SchemaProps: spec.SchemaProps{ - Description: "desiredUpdate is an optional field that indicates the desired value of the cluster version. Setting this value will trigger an upgrade (if the current version does not match the desired version). The set of recommended update values is listed as part of available updates in status, and setting values outside that range may cause the upgrade to fail.\n\nSome of the fields are inter-related with restrictions and meanings described here. 1. image is specified, version is specified, architecture is specified. API validation error. 2. image is specified, version is specified, architecture is not specified. The version extracted from the referenced image must match the specified version. 3. image is specified, version is not specified, architecture is specified. API validation error. 4. image is specified, version is not specified, architecture is not specified. image is used. 5. image is not specified, version is specified, architecture is specified. version and desired architecture are used to select an image. 6. image is not specified, version is specified, architecture is not specified. version and current architecture are used to select an image. 7. image is not specified, version is not specified, architecture is specified. API validation error. 8. image is not specified, version is not specified, architecture is not specified. API validation error.\n\nIf an upgrade fails the operator will halt and report status about the failing component. Setting the desired update value back to the previous version will cause a rollback to be attempted if the previous version is within the current minor version. Not all rollbacks will succeed, and some may unrecoverably break the cluster.", - Ref: ref(configv1.Update{}.OpenAPIModelName()), - }, - }, - "upstream": { - SchemaProps: spec.SchemaProps{ - Description: "upstream may be used to specify the preferred update server. By default it will use the appropriate update server for the cluster and region.", - Type: []string{"string"}, - Format: "", - }, - }, - "channel": { - SchemaProps: spec.SchemaProps{ - Description: "channel is an identifier for explicitly requesting a non-default set of updates to be applied to this cluster. The default channel will contain stable updates that are appropriate for production clusters.", - Type: []string{"string"}, - Format: "", - }, - }, - "capabilities": { - SchemaProps: spec.SchemaProps{ - Description: "capabilities configures the installation of optional, core cluster components. A null value here is identical to an empty object; see the child properties for default semantics.", - Ref: ref(configv1.ClusterVersionCapabilitiesSpec{}.OpenAPIModelName()), - }, - }, - "signatureStores": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "url", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "signatureStores contains the upstream URIs to verify release signatures and optional reference to a config map by name containing the PEM-encoded CA bundle.\n\nBy default, CVO will use existing signature stores if this property is empty. The CVO will check the release signatures in the local ConfigMaps first. It will search for a valid signature in these stores in parallel only when local ConfigMaps did not include a valid signature. Validation will fail if none of the signature stores reply with valid signature before timeout. Setting signatureStores will replace the default signature stores with custom signature stores. Default stores can be used with custom signature stores by adding them manually.\n\nA maximum of 32 signature stores may be configured.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.SignatureStore{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "overrides": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "kind", - "group", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "overrides is list of overides for components that are managed by cluster version operator. Marking a component unmanaged will prevent the operator from creating or updating the object.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ComponentOverride{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"clusterID"}, - }, - }, - Dependencies: []string{ - configv1.ClusterVersionCapabilitiesSpec{}.OpenAPIModelName(), configv1.ComponentOverride{}.OpenAPIModelName(), configv1.SignatureStore{}.OpenAPIModelName(), configv1.Update{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ClusterVersionStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterVersionStatus reports the status of the cluster versioning, including any upgrades that are in progress. The current field will be set to whichever version the cluster is reconciling to, and the conditions array will report whether the update succeeded, is in progress, or is failing.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "desired": { - SchemaProps: spec.SchemaProps{ - Description: "desired is the version that the cluster is reconciling towards. If the cluster is not yet fully initialized desired will be set with the information available, which may be an image or a tag.", - Default: map[string]interface{}{}, - Ref: ref(configv1.Release{}.OpenAPIModelName()), - }, - }, - "history": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "history contains a list of the most recent versions applied to the cluster. This value may be empty during cluster startup, and then will be updated when a new update is being applied. The newest update is first in the list and it is ordered by recency. Updates in the history have state Completed if the rollout completed - if an update was failing or halfway applied the state will be Partial. Only a limited amount of update history is preserved.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.UpdateHistory{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration reports which version of the spec is being synced. If this value is not equal to metadata.generation, then the desired and conditions fields may represent a previous version.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - "versionHash": { - SchemaProps: spec.SchemaProps{ - Description: "versionHash is a fingerprint of the content that the cluster will be updated with. It is used by the operator to avoid unnecessary work and is for internal use only.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "capabilities": { - SchemaProps: spec.SchemaProps{ - Description: "capabilities describes the state of optional, core cluster components.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ClusterVersionCapabilitiesStatus{}.OpenAPIModelName()), - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions provides information about the cluster version. The condition \"Available\" is set to true if the desiredUpdate has been reached. The condition \"Progressing\" is set to true if an update is being applied. The condition \"Degraded\" is set to true if an update is currently blocked by a temporary or permanent error. Conditions are only valid for the current desiredUpdate when metadata.generation is equal to status.generation.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ClusterOperatorStatusCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "availableUpdates": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "availableUpdates contains updates recommended for this cluster. Updates which appear in conditionalUpdates but not in availableUpdates may expose this cluster to known issues. This list may be empty if no updates are recommended, if the update service is unavailable, or if an invalid channel has been specified.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.Release{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "conditionalUpdates": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditionalUpdates contains the list of updates that may be recommended for this cluster if it meets specific required conditions. Consumers interested in the set of updates that are actually recommended for this cluster should use availableUpdates. This list may be empty if no updates are recommended, if the update service is unavailable, or if an empty or invalid channel has been specified.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ConditionalUpdate{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "conditionalUpdateRisks": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditionalUpdateRisks contains the list of risks associated with conditionalUpdates. When performing a conditional update, all its associated risks will be compared with the set of accepted risks in the spec.desiredUpdate.acceptRisks field. If all risks for a conditional update are included in the spec.desiredUpdate.acceptRisks set, the conditional update can proceed, otherwise it is blocked. The risk names in the list must be unique. conditionalUpdateRisks must not contain more than 500 entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ConditionalUpdateRisk{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"desired", "observedGeneration", "versionHash", "availableUpdates"}, - }, - }, - Dependencies: []string{ - configv1.ClusterOperatorStatusCondition{}.OpenAPIModelName(), configv1.ClusterVersionCapabilitiesStatus{}.OpenAPIModelName(), configv1.ConditionalUpdate{}.OpenAPIModelName(), configv1.ConditionalUpdateRisk{}.OpenAPIModelName(), configv1.Release{}.OpenAPIModelName(), configv1.UpdateHistory{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ComponentOverride(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ComponentOverride allows overriding cluster version operator's behavior for a component.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "kind indentifies which object to override.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "group": { - SchemaProps: spec.SchemaProps{ - Description: "group identifies the API group that the kind is in.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace is the component's namespace. If the resource is cluster scoped, the namespace should be empty.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the component's name.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "unmanaged": { - SchemaProps: spec.SchemaProps{ - Description: "unmanaged controls if cluster version operator should stop managing the resources in this cluster. Default: false", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"kind", "group", "namespace", "name", "unmanaged"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_ComponentRouteSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ComponentRouteSpec allows for configuration of a route's hostname and serving certificate.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace is the namespace of the route to customize.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of status.componentRoutes if the route is to be customized.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the logical name of the route to customize.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of status.componentRoutes if the route is to be customized.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "hostname": { - SchemaProps: spec.SchemaProps{ - Description: "hostname is the hostname that should be used by the route.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "servingCertKeyPairSecret": { - SchemaProps: spec.SchemaProps{ - Description: "servingCertKeyPairSecret is a reference to a secret of type `kubernetes.io/tls` in the openshift-config namespace. The serving cert/key pair must match and will be used by the operator to fulfill the intent of serving with this name. If the custom hostname uses the default routing suffix of the cluster, the Secret specification for a serving certificate will not be needed.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - "labels": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-map-type": "granular", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "labels defines additional labels to be applied to the route created for the component. These labels are used by the IngressController to determine which routes it should manage. Changing labels may cause the route to be reassigned to a different IngressController. When omitted, no additional labels are applied to the component route. When specified, labels must contain at least one entry, up to a maximum of 8. Label keys must be valid qualified names, consisting of a name segment and an optional prefix separated by a slash (/). The name segment must be at most 63 characters in length and must consist only of alphanumeric characters, dashes (-), underscores (_), and dots (.), and must start and end with alphanumeric characters. The prefix, if specified, must be a DNS subdomain: at most 253 characters in length, consisting of dot-separated segments where each segment starts and ends with an alphanumeric character. Label values must be either empty or 1-63 characters, consisting of alphanumeric characters, dashes (-), underscores (_), or dots (.), starting and ending with an alphanumeric character. Keys with the \"kubernetes.io/\", \"k8s.io/\", and \"openshift.io/\" prefixes are reserved and may not be used.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"namespace", "name", "hostname"}, - }, - }, - Dependencies: []string{ - configv1.SecretNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ComponentRouteStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ComponentRouteStatus contains information allowing configuration of a route's hostname and serving certificate.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace is the namespace of the route to customize. It must be a real namespace. Using an actual namespace ensures that no two components will conflict and the same component can be installed multiple times.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of spec.componentRoutes if the route is to be customized.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the logical name of the route to customize. It does not have to be the actual name of a route resource but it cannot be renamed.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of spec.componentRoutes if the route is to be customized.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "defaultHostname": { - SchemaProps: spec.SchemaProps{ - Description: "defaultHostname is the hostname of this route prior to customization.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "consumingUsers": { - SchemaProps: spec.SchemaProps{ - Description: "consumingUsers is a slice of ServiceAccounts that need to have read permission on the servingCertKeyPairSecret secret.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "currentHostnames": { - SchemaProps: spec.SchemaProps{ - Description: "currentHostnames is the list of current names used by the route. Typically, this list should consist of a single hostname, but if multiple hostnames are supported by the route the operator may write multiple entries to this list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions are used to communicate the state of the componentRoutes entry.\n\nSupported conditions include Available, Degraded and Progressing.\n\nIf available is true, the content served by the route can be accessed by users. This includes cases where a default may continue to serve content while the customized route specified by the cluster-admin is being configured.\n\nIf Degraded is true, that means something has gone wrong trying to handle the componentRoutes entry. The currentHostnames field may or may not be in effect.\n\nIf Progressing is true, that means the component is taking some action related to the componentRoutes entry.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "relatedObjects": { - SchemaProps: spec.SchemaProps{ - Description: "relatedObjects is a list of resources which are useful when debugging or inspecting how spec.componentRoutes is applied.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ObjectReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"namespace", "name", "defaultHostname", "relatedObjects"}, - }, - }, - Dependencies: []string{ - configv1.ObjectReference{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ConditionalUpdate(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConditionalUpdate represents an update which is recommended to some clusters on the version the current cluster is reconciling, but which may not be recommended for the current cluster.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "release": { - SchemaProps: spec.SchemaProps{ - Description: "release is the target of the update.", - Default: map[string]interface{}{}, - Ref: ref(configv1.Release{}.OpenAPIModelName()), - }, - }, - "riskNames": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "riskNames represents the set of the names of conditionalUpdateRisks that are relevant to this update for some clusters. The Applies condition of each conditionalUpdateRisks entry declares if that risk applies to this cluster. A conditional update is accepted only if each of its risks either does not apply to the cluster or is considered acceptable by the cluster administrator. The latter means that the risk names are included in value of the spec.desiredUpdate.acceptRisks field. Entries must be unique and must not exceed 256 characters. riskNames must not contain more than 500 entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "risks": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "risks represents the range of issues associated with updating to the target release. The cluster-version operator will evaluate all entries, and only recommend the update if there is at least one entry and all entries recommend the update.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ConditionalUpdateRisk{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represents the observations of the conditional update's current status. Known types are: * Recommended, for whether the update is recommended for the current cluster.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"release", "risks"}, - }, - }, - Dependencies: []string{ - configv1.ConditionalUpdateRisk{}.OpenAPIModelName(), configv1.Release{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ConditionalUpdateRisk(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConditionalUpdateRisk represents a reason and cluster-state for not recommending a conditional update.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represents the observations of the conditional update risk's current status. Known types are: * Applies, for whether the risk applies to the current cluster. The condition's types in the list must be unique. conditions must not contain more than one entry.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url contains information about this risk.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the CamelCase reason for not recommending a conditional update, in the event that matchingRules match the cluster state.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "message": { - SchemaProps: spec.SchemaProps{ - Description: "message provides additional information about the risk of updating, in the event that matchingRules match the cluster state. This is only to be consumed by humans. It may contain Line Feed characters (U+000A), which should be rendered as new lines.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "matchingRules": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "matchingRules is a slice of conditions for deciding which clusters match the risk and which do not. The slice is ordered by decreasing precedence. The cluster-version operator will walk the slice in order, and stop after the first it can successfully evaluate. If no condition can be successfully evaluated, the update will not be recommended.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ClusterCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"url", "name", "message", "matchingRules"}, - }, - }, - Dependencies: []string{ - configv1.ClusterCondition{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ConfigMapFileReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConfigMapFileReference references a config map in a specific namespace. The namespace must be specified at the point of use.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "key": { - SchemaProps: spec.SchemaProps{ - Description: "key allows pointing to a specific key/value inside of the configmap. This is useful for logical file references.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_ConfigMapNameReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConfigMapNameReference references a config map in a specific namespace. The namespace must be specified at the point of use.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the metadata.name of the referenced config map", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_Console(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Console holds cluster-wide configuration for the web console, including the logout URL, and reports the public URL of the console. The canonical name is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConsoleSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConsoleStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.ConsoleSpec{}.OpenAPIModelName(), configv1.ConsoleStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ConsoleAuthentication(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleAuthentication defines a list of optional configuration for console authentication.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "logoutRedirect": { - SchemaProps: spec.SchemaProps{ - Description: "An optional, absolute URL to redirect web browsers to after logging out of the console. If not specified, it will redirect to the default login page. This is required when using an identity provider that supports single sign-on (SSO) such as: - OpenID (Keycloak, Azure) - RequestHeader (GSSAPI, SSPI, SAML) - OAuth (GitHub, GitLab, Google) Logging out of the console will destroy the user's token. The logoutRedirect provides the user the option to perform single logout (SLO) through the identity provider to destroy their single sign-on session.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_ConsoleList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.Console{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.Console{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ConsoleSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleSpec is the specification of the desired behavior of the Console.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "authentication": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ConsoleAuthentication{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.ConsoleAuthentication{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ConsoleStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleStatus defines the observed status of the Console.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "consoleURL": { - SchemaProps: spec.SchemaProps{ - Description: "The URL for the console. This will be derived from the host for the route that is created for the console.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_Custom(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Custom provides the custom configuration of gatherers", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "configs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "configs is a required list of gatherers configurations that can be used to enable or disable specific gatherers. It may not exceed 100 items and each gatherer can be present only once. It is possible to disable an entire set of gatherers while allowing a specific function within that set. The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.GathererConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"configs"}, - }, - }, - Dependencies: []string{ - configv1.GathererConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_CustomFeatureGates(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "enabled": { - SchemaProps: spec.SchemaProps{ - Description: "enabled is a list of all feature gates that you want to force on", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "disabled": { - SchemaProps: spec.SchemaProps{ - Description: "disabled is a list of all feature gates that you want to force off", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_CustomTLSProfile(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CustomTLSProfile is a user-defined TLS security profile. Be extremely careful using a custom TLS profile as invalid configurations can be catastrophic.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "ciphers": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "ciphers is used to specify the cipher algorithms that are negotiated during the TLS handshake. Operators may remove entries that their operands do not support. For example, to use only ECDHE-RSA-AES128-GCM-SHA256 (yaml):\n\n ciphers:\n - ECDHE-RSA-AES128-GCM-SHA256\n\nTLS 1.3 cipher suites (e.g. TLS_AES_128_GCM_SHA256) are not configurable and are always enabled when TLS 1.3 is negotiated.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "groups": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "groups is an optional, ordered field used to specify the supported groups (formerly known as elliptic curves) that are used during the TLS handshake. The order of the groups represents a suggested preference, with the most preferred group first. Note that not all platform components honor the ordering: Go-based components use Go's internal preference order and treat this list as a filter of allowed groups rather than an ordered preference. Operators may remove entries their operands do not support.\n\nWhen omitted, this means no opinion and the platform is left to choose reasonable defaults which are subject to change over time and may be different per platform component depending on the underlying TLS libraries they use. If specified, the list must contain at least one and at most 7 groups, and each group must be unique.\n\nFor example, to use X25519 and secp256r1 (yaml):\n\n groups:\n - X25519\n - secp256r1", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "minTLSVersion": { - SchemaProps: spec.SchemaProps{ - Description: "minTLSVersion is used to specify the minimal version of the TLS protocol that is negotiated during the TLS handshake. For example, to use TLS versions 1.1, 1.2 and 1.3 (yaml):\n\n minTLSVersion: VersionTLS11", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"ciphers", "minTLSVersion"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_DNS(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNS holds cluster-wide information about DNS. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.DNSSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(configv1.DNSStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.DNSSpec{}.OpenAPIModelName(), configv1.DNSStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_DNSList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.DNS{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.DNS{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_DNSPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNSPlatformSpec holds cloud-provider-specific configuration for DNS administration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the underlying infrastructure provider for the cluster. Allowed values: \"\", \"AWS\".\n\nIndividual components may not support all platforms, and must handle unrecognized platforms with best-effort defaults.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "aws": { - SchemaProps: spec.SchemaProps{ - Description: "aws contains DNS configuration specific to the Amazon Web Services cloud provider.", - Ref: ref(configv1.AWSDNSSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "aws": "AWS", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.AWSDNSSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_DNSSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "baseDomain": { - SchemaProps: spec.SchemaProps{ - Description: "baseDomain is the base domain of the cluster. All managed DNS records will be sub-domains of this base.\n\nFor example, given the base domain `openshift.example.com`, an API server DNS record may be created for `cluster-api.openshift.example.com`.\n\nOnce set, this field cannot be changed.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "publicZone": { - SchemaProps: spec.SchemaProps{ - Description: "publicZone is the location where all the DNS records that are publicly accessible to the internet exist.\n\nIf this field is nil, no public records should be created.\n\nOnce set, this field cannot be changed.", - Ref: ref(configv1.DNSZone{}.OpenAPIModelName()), - }, - }, - "privateZone": { - SchemaProps: spec.SchemaProps{ - Description: "privateZone is the location where all the DNS records that are only available internally to the cluster exist.\n\nIf this field is nil, no private records should be created.\n\nOnce set, this field cannot be changed.", - Ref: ref(configv1.DNSZone{}.OpenAPIModelName()), - }, - }, - "platform": { - SchemaProps: spec.SchemaProps{ - Description: "platform holds configuration specific to the underlying infrastructure provider for DNS. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.", - Default: map[string]interface{}{}, - Ref: ref(configv1.DNSPlatformSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"baseDomain"}, - }, - }, - Dependencies: []string{ - configv1.DNSPlatformSpec{}.OpenAPIModelName(), configv1.DNSZone{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_DNSStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_DNSZone(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNSZone is used to define a DNS hosted zone. A zone can be identified by an ID or tags.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "id": { - SchemaProps: spec.SchemaProps{ - Description: "id is the identifier that can be used to find the DNS hosted zone.\n\non AWS zone can be fetched using `ID` as id in [1] on Azure zone can be fetched using `ID` as a pre-determined name in [2], on GCP zone can be fetched using `ID` as a pre-determined name in [3].\n\n[1]: https://docs.aws.amazon.com/cli/latest/reference/route53/get-hosted-zone.html#options [2]: https://docs.microsoft.com/en-us/cli/azure/network/dns/zone?view=azure-cli-latest#az-network-dns-zone-show [3]: https://cloud.google.com/dns/docs/reference/v1/managedZones/get", - Type: []string{"string"}, - Format: "", - }, - }, - "tags": { - SchemaProps: spec.SchemaProps{ - Description: "tags can be used to query the DNS hosted zone.\n\non AWS, resourcegroupstaggingapi [1] can be used to fetch a zone using `Tags` as tag-filters,\n\n[1]: https://docs.aws.amazon.com/cli/latest/reference/resourcegroupstaggingapi/get-resources.html#options", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_DelegatedAuthentication(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DelegatedAuthentication allows authentication to be disabled.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "disabled": { - SchemaProps: spec.SchemaProps{ - Description: "disabled indicates that authentication should be disabled. By default it will use delegated authentication.", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_DelegatedAuthorization(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DelegatedAuthorization allows authorization to be disabled.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "disabled": { - SchemaProps: spec.SchemaProps{ - Description: "disabled indicates that authorization should be disabled. By default it will use delegated authorization.", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_DeprecatedWebhookTokenAuthenticator(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "deprecatedWebhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator. It's the same as WebhookTokenAuthenticator but it's missing the 'required' validation on KubeConfig field.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kubeConfig": { - SchemaProps: spec.SchemaProps{ - Description: "kubeConfig contains kube config file data which describes how to access the remote webhook service. For further details, see: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication The key \"kubeConfig\" is used to locate the data. If the secret or expected key is not found, the webhook is not honored. If the specified kube config data is not valid, the webhook is not honored. The namespace for this secret is determined by the point of use.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"kubeConfig"}, - }, - }, - Dependencies: []string{ - configv1.SecretNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_EquinixMetalPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "EquinixMetalPlatformSpec holds the desired state of the Equinix Metal infrastructure provider. This only includes fields that can be modified in the cluster.", - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_EquinixMetalPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "EquinixMetalPlatformStatus holds the current status of the Equinix Metal infrastructure provider.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "apiServerInternalIP": { - SchemaProps: spec.SchemaProps{ - Description: "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.", - Type: []string{"string"}, - Format: "", - }, - }, - "ingressIP": { - SchemaProps: spec.SchemaProps{ - Description: "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_EtcdConnectionInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "EtcdConnectionInfo holds information necessary for connecting to an etcd server", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "urls": { - SchemaProps: spec.SchemaProps{ - Description: "urls are the URLs for etcd", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is a file containing trusted roots for the etcd server certificates", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"ca", "certFile", "keyFile"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_EtcdStorageConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "urls": { - SchemaProps: spec.SchemaProps{ - Description: "urls are the URLs for etcd", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is a file containing trusted roots for the etcd server certificates", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "storagePrefix": { - SchemaProps: spec.SchemaProps{ - Description: "storagePrefix is the path within etcd that the OpenShift resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"ca", "certFile", "keyFile", "storagePrefix"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_ExternalClaimsSource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ExternalClaimsSource provides the configuration for a single external claim source.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "authentication": { - SchemaProps: spec.SchemaProps{ - Description: "authentication is an optional field that configures how the apiserver authenticates with an external claims source. When not specified, anonymous authentication is used which means no 'Authorization' header is sent in the HTTP request to fetch the external claims.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ExternalSourceAuthentication{}.OpenAPIModelName()), - }, - }, - "tls": { - SchemaProps: spec.SchemaProps{ - Description: "tls is an optional field that configures the http client TLS settings when fetching external claims from this source.\n\nWhen omitted, system default TLS settings will be used for fetching claims from the external source.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ExternalSourceTLS{}.OpenAPIModelName()), - }, - }, - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url is a required configuration of the URL for which the external claims are located.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SourceURL{}.OpenAPIModelName()), - }, - }, - "mappings": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "mappings is a required list of the claim and response handling expression pairs that produces the claims from the external source. mappings must have at least 1 entry and must not exceed 16 entries. Entries must have a unique name across all external claim sources.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.SourcedClaimMapping{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "predicates": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "expression", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "predicates is an optional list of constraints in which claims should attempt to be fetched from this external source.\n\nWhen omitted, claims are always fetched from this external source.\n\nWhen specified, all predicates must evaluate to 'true' before claims are attempted to be fetched from this external source. predicates must have at least 1 entry and must not exceed 16 entries. Entries must have unique expressions.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ExternalSourcePredicate{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"url", "mappings"}, - }, - }, - Dependencies: []string{ - configv1.ExternalSourceAuthentication{}.OpenAPIModelName(), configv1.ExternalSourcePredicate{}.OpenAPIModelName(), configv1.ExternalSourceTLS{}.OpenAPIModelName(), configv1.SourceURL{}.OpenAPIModelName(), configv1.SourcedClaimMapping{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ExternalIPConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ExternalIPConfig specifies some IP blocks relevant for the ExternalIP field of a Service resource.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "policy": { - SchemaProps: spec.SchemaProps{ - Description: "policy is a set of restrictions applied to the ExternalIP field. If nil or empty, then ExternalIP is not allowed to be set.", - Ref: ref(configv1.ExternalIPPolicy{}.OpenAPIModelName()), - }, - }, - "autoAssignCIDRs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "autoAssignCIDRs is a list of CIDRs from which to automatically assign Service.ExternalIP. These are assigned when the service is of type LoadBalancer. In general, this is only useful for bare-metal clusters. In Openshift 3.x, this was misleadingly called \"IngressIPs\". Automatically assigned External IPs are not affected by any ExternalIPPolicy rules. Currently, only one entry may be provided.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.ExternalIPPolicy{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ExternalIPPolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ExternalIPPolicy configures exactly which IPs are allowed for the ExternalIP field in a Service. If the zero struct is supplied, then none are permitted. The policy controller always allows automatically assigned external IPs.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "allowedCIDRs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "allowedCIDRs is the list of allowed CIDRs.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "rejectedCIDRs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "rejectedCIDRs is the list of disallowed CIDRs. These take precedence over allowedCIDRs.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_ExternalPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ExternalPlatformSpec holds the desired state for the generic External infrastructure provider.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "platformName": { - SchemaProps: spec.SchemaProps{ - Description: "platformName holds the arbitrary string representing the infrastructure provider name, expected to be set at the installation time. This field is solely for informational and reporting purposes and is not expected to be used for decision-making.", - Default: "Unknown", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_ExternalPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ExternalPlatformStatus holds the current status of the generic External infrastructure provider.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "cloudControllerManager": { - SchemaProps: spec.SchemaProps{ - Description: "cloudControllerManager contains settings specific to the external Cloud Controller Manager (a.k.a. CCM or CPI). When omitted, new nodes will be not tainted and no extra initialization from the cloud controller manager is expected.", - Default: map[string]interface{}{}, - Ref: ref(configv1.CloudControllerManagerStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.CloudControllerManagerStatus{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ExternalSourceAuthentication(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ExternalSourceAuthentication configures how the apiserver should attempt to authenticate with an external claims source.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is a required field that sets the type of authentication method used by the authenticator when fetching external claims.\n\nAllowed values are 'RequestProvidedToken' and 'ClientCredential'.\n\nWhen set to 'RequestProvidedToken', the authenticator will use the token provided to the kube-apiserver as part of the request to authenticate with the external claims source.\n\nWhen set to 'ClientCredential', the authenticator will use the configured client-id, client-secret, and token endpoint to fetch an access token using the OAuth2 client credentials grant flow. The fetched access token will then be used to authenticate with the external claims source.\n\n\nPossible enum values:\n - `\"ClientCredential\"` is an ExternalSourceAuthenticationType that represents that the authenticator should use the OAuth2 client credentials grant flow to obtain an access token for authenticating with the external claims source. This is useful for scenarios such as fetching user information from Microsoft's Graph API where a separate client credential is needed to access the API.\n - `\"RequestProvidedToken\"` is an ExternalSourceAuthenticationType that represents that the token being evaluated for authentication should be used for authenticating with the external claims source. This is useful for scenarios where a token has multiple audiences and scopes so that it can be used to access both the cluster and the UserInfo endpoint that contains additional information about the user not present in the token.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"ClientCredential", "RequestProvidedToken"}, - }, - }, - "clientCredential": { - SchemaProps: spec.SchemaProps{ - Description: "clientCredential configures the client credentials and token endpoint to use to get an access token. clientCredential is required when type is 'ClientCredential', and forbidden otherwise.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ClientCredentialConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - }, - Dependencies: []string{ - configv1.ClientCredentialConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ExternalSourceCertificateAuthorityConfigMapReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ExternalSourceCertificateAuthorityConfigMapReference is a reference to a ConfigMap in the openshift-config namespace that should be used for configuring the certificate authority to be used when sourcing claims from external sources.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the required name of the ConfigMap that exists in the openshift-config namespace. The key \"ca-bundle.crt\" must be present and must contain the CA certificate to be used to verify the external source's TLS certificate.\n\nIt must be at least 1 character in length, must not exceed 253 characters in length, must start and end with a lowercase alphanumeric character, and must only contain lowercase alphanumeric characters, '-' or '.'.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_ExternalSourcePredicate(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ExternalSourcePredicate configures a singular condition that must return true before the external source is queried to retrieve external claims.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "expression": { - SchemaProps: spec.SchemaProps{ - Description: "expression is a required CEL expression that is used to determine whether or not an external source should be used to fetch external claims.\n\nThe expression must return a boolean value, where true means that the source should be consulted and false means that it should not.\n\nClaims from the token used for the request to the kube-apiserver are made available via the `claims` variable.\n\nThe contents of the `claims` variable varies based on the claims that are present in the token being validated. It is the responsibility of those configuring this field to understand what claims the identity provider includes when issuing tokens.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"expression"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_ExternalSourceTLS(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ExternalSourceTLS configures the TLS options that the apiserver uses as a client when making a request to the external claim source.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "certificateAuthority": { - SchemaProps: spec.SchemaProps{ - Description: "certificateAuthority is a required reference to a ConfigMap in the openshift-config namespace that contains the CA certificate to use to validate TLS connections with the external claims source. The key \"ca-bundle.crt\" must be present in the referenced ConfigMap and must contain the CA certificate to be used to verify the external source's TLS certificate.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ExternalSourceCertificateAuthorityConfigMapReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"certificateAuthority"}, - }, - }, - Dependencies: []string{ - configv1.ExternalSourceCertificateAuthorityConfigMapReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ExtraMapping(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ExtraMapping allows specifying a key and CEL expression to evaluate the keys' value. It is used to create additional mappings and attributes added to a cluster identity from a provided authentication token.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "key": { - SchemaProps: spec.SchemaProps{ - Description: "key is a required field that specifies the string to use as the extra attribute key.\n\nkey must be a domain-prefix path (e.g 'example.org/foo'). key must not exceed 510 characters in length. key must contain the '/' character, separating the domain and path characters. key must not be empty.\n\nThe domain portion of the key (string of characters prior to the '/') must be a valid RFC1123 subdomain. It must not exceed 253 characters in length. It must start and end with an alphanumeric character. It must only contain lower case alphanumeric characters and '-' or '.'. It must not use the reserved domains, or be subdomains of, \"kubernetes.io\", \"k8s.io\", and \"openshift.io\".\n\nThe path portion of the key (string of characters after the '/') must not be empty and must consist of at least one alphanumeric character, percent-encoded octets, '-', '.', '_', '~', '!', '$', '&', ''', '(', ')', '*', '+', ',', ';', '=', and ':'. It must not exceed 256 characters in length.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "valueExpression": { - SchemaProps: spec.SchemaProps{ - Description: "valueExpression is a required field to specify the CEL expression to extract the extra attribute value from a JWT token's claims. valueExpression must produce a string or string array value. \"\", [], and null are treated as the extra mapping not being present. Empty string values within an array are filtered out.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'. 'claims' is a map of claim names to claim values. For example, the 'sub' claim value can be accessed as 'claims.sub'. Nested claims can be accessed using dot notation ('claims.foo.bar').\n\nvalueExpression must not exceed 1024 characters in length. valueExpression must not be empty.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"key", "valueExpression"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_FeatureGate(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Feature holds cluster-wide information about feature gates. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.FeatureGateSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(configv1.FeatureGateStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.FeatureGateSpec{}.OpenAPIModelName(), configv1.FeatureGateStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_FeatureGateAttributes(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the FeatureGate.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_FeatureGateDetails(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version matches the version provided by the ClusterVersion and in the ClusterOperator.Status.Versions field.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "enabled": { - SchemaProps: spec.SchemaProps{ - Description: "enabled is a list of all feature gates that are enabled in the cluster for the named version.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.FeatureGateAttributes{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "disabled": { - SchemaProps: spec.SchemaProps{ - Description: "disabled is a list of all feature gates that are disabled in the cluster for the named version.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.FeatureGateAttributes{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"version"}, - }, - }, - Dependencies: []string{ - configv1.FeatureGateAttributes{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_FeatureGateList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.FeatureGate{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.FeatureGate{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_FeatureGateSelection(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "featureSet": { - SchemaProps: spec.SchemaProps{ - Description: "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting. Turning on or off features may cause irreversible changes in your cluster which cannot be undone.", - Type: []string{"string"}, - Format: "", - }, - }, - "customNoUpgrade": { - SchemaProps: spec.SchemaProps{ - Description: "customNoUpgrade allows the enabling or disabling of any feature. Turning this feature set on IS NOT SUPPORTED, CANNOT BE UNDONE, and PREVENTS UPGRADES. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations your cluster may fail in an unrecoverable way. featureSet must equal \"CustomNoUpgrade\" must be set to use this field.", - Ref: ref(configv1.CustomFeatureGates{}.OpenAPIModelName()), - }, - }, - }, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "featureSet", - "fields-to-discriminateBy": map[string]interface{}{ - "customNoUpgrade": "CustomNoUpgrade", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.CustomFeatureGates{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_FeatureGateSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "featureSet": { - SchemaProps: spec.SchemaProps{ - Description: "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting. Turning on or off features may cause irreversible changes in your cluster which cannot be undone.", - Type: []string{"string"}, - Format: "", - }, - }, - "customNoUpgrade": { - SchemaProps: spec.SchemaProps{ - Description: "customNoUpgrade allows the enabling or disabling of any feature. Turning this feature set on IS NOT SUPPORTED, CANNOT BE UNDONE, and PREVENTS UPGRADES. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations your cluster may fail in an unrecoverable way. featureSet must equal \"CustomNoUpgrade\" must be set to use this field.", - Ref: ref(configv1.CustomFeatureGates{}.OpenAPIModelName()), - }, - }, - }, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "featureSet", - "fields-to-discriminateBy": map[string]interface{}{ - "customNoUpgrade": "CustomNoUpgrade", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.CustomFeatureGates{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_FeatureGateStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represent the observations of the current state. Known .status.conditions.type are: \"DeterminationDegraded\"", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "featureGates": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "version", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "featureGates contains a list of enabled and disabled featureGates that are keyed by payloadVersion. Operators other than the CVO and cluster-config-operator, must read the .status.featureGates, locate the version they are managing, find the enabled/disabled featuregates and make the operand and operator match. The enabled/disabled values for a particular version may change during the life of the cluster as various .spec.featureSet values are selected. Operators may choose to restart their processes to pick up these changes, but remembering past enable/disable lists is beyond the scope of this API and is the responsibility of individual operators. Only featureGates with .version in the ClusterVersion.status will be present in this list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.FeatureGateDetails{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.FeatureGateDetails{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_FeatureGateTests(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "featureGate": { - SchemaProps: spec.SchemaProps{ - Description: "featureGate is the name of the FeatureGate as it appears in The FeatureGate CR instance.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "tests": { - SchemaProps: spec.SchemaProps{ - Description: "tests contains an item for every TestName", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.TestDetails{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"featureGate", "tests"}, - }, - }, - Dependencies: []string{ - configv1.TestDetails{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_GCPPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GCPPlatformSpec holds the desired state of the Google Cloud Platform infrastructure provider. This only includes fields that can be modified in the cluster.", - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_GCPPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GCPPlatformStatus holds the current status of the Google Cloud Platform infrastructure provider.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "projectID": { - SchemaProps: spec.SchemaProps{ - Description: "resourceGroupName is the Project ID for new GCP resources created for the cluster.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "region": { - SchemaProps: spec.SchemaProps{ - Description: "region holds the region for new GCP resources created for the cluster.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resourceLabels": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "key", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resourceLabels is a list of additional labels to apply to GCP resources created for the cluster. See https://cloud.google.com/compute/docs/labeling-resources for information on labeling GCP resources. GCP supports a maximum of 64 labels per resource. OpenShift reserves 32 labels for internal use, allowing 32 labels for user configuration.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.GCPResourceLabel{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "resourceTags": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "key", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resourceTags is a list of additional tags to apply to GCP resources created for the cluster. See https://cloud.google.com/resource-manager/docs/tags/tags-overview for information on tagging GCP resources. GCP supports a maximum of 50 tags per resource.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.GCPResourceTag{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "cloudLoadBalancerConfig": { - SchemaProps: spec.SchemaProps{ - Description: "cloudLoadBalancerConfig holds configuration related to DNS and cloud load balancers. It allows configuration of in-cluster DNS as an alternative to the platform default DNS implementation. When using the ClusterHosted DNS type, Load Balancer IP addresses must be provided for the API and internal API load balancers as well as the ingress load balancer.", - Default: map[string]interface{}{"dnsType": "PlatformDefault"}, - Ref: ref(configv1.CloudLoadBalancerConfig{}.OpenAPIModelName()), - }, - }, - "universeDomain": { - SchemaProps: spec.SchemaProps{ - Description: "universeDomain is the GCP universe domain for the cluster, detected from the installer credentials. Components with their own GCP credentials should read the universe domain from those credentials, as they are the authoritative source. This field is provided for components that do not have GCP credentials and for general observability.\n\nWhen omitted, standard public GCP (googleapis.com) is assumed.\n\nuniverseDomain is an optional field that, when specified, must be non-empty and at most 253 characters. It must be a valid DNS subdomain: containing only lowercase alphanumeric characters, '-' or '.', and starting and ending with an alphanumeric character.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"projectID", "region"}, - }, - }, - Dependencies: []string{ - configv1.CloudLoadBalancerConfig{}.OpenAPIModelName(), configv1.GCPResourceLabel{}.OpenAPIModelName(), configv1.GCPResourceTag{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_GCPResourceLabel(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GCPResourceLabel is a label to apply to GCP resources created for the cluster.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "key": { - SchemaProps: spec.SchemaProps{ - Description: "key is the key part of the label. A label key can have a maximum of 63 characters and cannot be empty. Label key must begin with a lowercase letter, and must contain only lowercase letters, numeric characters, and the following special characters `_-`. Label key must not have the reserved prefixes `kubernetes-io` and `openshift-io`.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value is the value part of the label. A label value can have a maximum of 63 characters and cannot be empty. Value must contain only lowercase letters, numeric characters, and the following special characters `_-`.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"key", "value"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_GCPResourceTag(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GCPResourceTag is a tag to apply to GCP resources created for the cluster.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "parentID": { - SchemaProps: spec.SchemaProps{ - Description: "parentID is the ID of the hierarchical resource where the tags are defined, e.g. at the Organization or the Project level. To find the Organization or Project ID refer to the following pages: https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id, https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects. An OrganizationID must consist of decimal numbers, and cannot have leading zeroes. A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters, numbers, and hyphens, and must start with a letter, and cannot end with a hyphen.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "key": { - SchemaProps: spec.SchemaProps{ - Description: "key is the key part of the tag. A tag key can have a maximum of 63 characters and cannot be empty. Tag key must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `._-`.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value is the value part of the tag. A tag value can have a maximum of 63 characters and cannot be empty. Tag value must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `_-.@%=+:,*#&(){}[]` and spaces.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"parentID", "key", "value"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_GatherConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GatherConfig provides data gathering configuration options.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "dataPolicy": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "dataPolicy is an optional list of DataPolicyOptions that allows user to enable additional obfuscation of the Insights archive data. It may not exceed 2 items and must not contain duplicates. Valid values are ObfuscateNetworking and WorkloadNames. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When set to WorkloadNames, the gathered data about cluster resources will not contain the workload names for your deployments. Resources UIDs will be used instead. When omitted no obfuscation is applied.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "gatherers": { - SchemaProps: spec.SchemaProps{ - Description: "gatherers is a required field that specifies the configuration of the gatherers.", - Default: map[string]interface{}{}, - Ref: ref(configv1.Gatherers{}.OpenAPIModelName()), - }, - }, - "storage": { - SchemaProps: spec.SchemaProps{ - Description: "storage is an optional field that allows user to define persistent storage for gathering jobs to store the Insights data archive. If omitted, the gathering job will use ephemeral storage.", - Default: map[string]interface{}{}, - Ref: ref(configv1.Storage{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"gatherers"}, - }, - }, - Dependencies: []string{ - configv1.Gatherers{}.OpenAPIModelName(), configv1.Storage{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_GathererConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GathererConfig allows to configure specific gatherers", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the required name of a specific gatherer. It may not exceed 256 characters. The format for a gatherer name is: {gatherer}/{function} where the function is optional. Gatherer consists of a lowercase letters only that may include underscores (_). Function consists of a lowercase letters only that may include underscores (_) and is separated from the gatherer by a forward slash (/). The particular gatherers can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", - Type: []string{"string"}, - Format: "", - }, - }, - "state": { - SchemaProps: spec.SchemaProps{ - Description: "state is a required field that allows you to configure specific gatherer. Valid values are \"Enabled\" and \"Disabled\". When set to Enabled the gatherer will run. When set to Disabled the gatherer will not run.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "state"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_Gatherers(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Gatherers specifies the configuration of the gatherers", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "mode": { - SchemaProps: spec.SchemaProps{ - Description: "mode is a required field that specifies the mode for gatherers. Allowed values are All, None, and Custom. When set to All, all gatherers will run and gather data. When set to None, all gatherers will be disabled and no data will be gathered. When set to Custom, the custom configuration from the custom field will be applied.", - Type: []string{"string"}, - Format: "", - }, - }, - "custom": { - SchemaProps: spec.SchemaProps{ - Description: "custom provides gathering configuration. It is required when mode is Custom, and forbidden otherwise. Custom configuration allows user to disable only a subset of gatherers. Gatherers that are not explicitly disabled in custom configuration will run.", - Default: map[string]interface{}{}, - Ref: ref(configv1.Custom{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"mode"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "mode", - "fields-to-discriminateBy": map[string]interface{}{ - "custom": "Custom", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.Custom{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_GenericAPIServerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GenericAPIServerConfig is an inline-able struct for aggregated apiservers that need to store data in etcd", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "servingInfo": { - SchemaProps: spec.SchemaProps{ - Description: "servingInfo describes how to start serving", - Default: map[string]interface{}{}, - Ref: ref(configv1.HTTPServingInfo{}.OpenAPIModelName()), - }, - }, - "corsAllowedOrigins": { - SchemaProps: spec.SchemaProps{ - Description: "corsAllowedOrigins", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "auditConfig": { - SchemaProps: spec.SchemaProps{ - Description: "auditConfig describes how to configure audit information", - Default: map[string]interface{}{}, - Ref: ref(configv1.AuditConfig{}.OpenAPIModelName()), - }, - }, - "storageConfig": { - SchemaProps: spec.SchemaProps{ - Description: "storageConfig contains information about how to use", - Default: map[string]interface{}{}, - Ref: ref(configv1.EtcdStorageConfig{}.OpenAPIModelName()), - }, - }, - "admission": { - SchemaProps: spec.SchemaProps{ - Description: "admissionConfig holds information about how to configure admission.", - Default: map[string]interface{}{}, - Ref: ref(configv1.AdmissionConfig{}.OpenAPIModelName()), - }, - }, - "kubeClientConfig": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.KubeClientConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"servingInfo", "corsAllowedOrigins", "auditConfig", "storageConfig", "admission", "kubeClientConfig"}, - }, - }, - Dependencies: []string{ - configv1.AdmissionConfig{}.OpenAPIModelName(), configv1.AuditConfig{}.OpenAPIModelName(), configv1.EtcdStorageConfig{}.OpenAPIModelName(), configv1.HTTPServingInfo{}.OpenAPIModelName(), configv1.KubeClientConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_GenericControllerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GenericControllerConfig provides information to configure a controller\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "servingInfo": { - SchemaProps: spec.SchemaProps{ - Description: "servingInfo is the HTTP serving information for the controller's endpoints", - Default: map[string]interface{}{}, - Ref: ref(configv1.HTTPServingInfo{}.OpenAPIModelName()), - }, - }, - "leaderElection": { - SchemaProps: spec.SchemaProps{ - Description: "leaderElection provides information to elect a leader. Only override this if you have a specific need", - Default: map[string]interface{}{}, - Ref: ref(configv1.LeaderElection{}.OpenAPIModelName()), - }, - }, - "authentication": { - SchemaProps: spec.SchemaProps{ - Description: "authentication allows configuration of authentication for the endpoints", - Default: map[string]interface{}{}, - Ref: ref(configv1.DelegatedAuthentication{}.OpenAPIModelName()), - }, - }, - "authorization": { - SchemaProps: spec.SchemaProps{ - Description: "authorization allows configuration of authentication for the endpoints", - Default: map[string]interface{}{}, - Ref: ref(configv1.DelegatedAuthorization{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"servingInfo", "leaderElection", "authentication", "authorization"}, - }, - }, - Dependencies: []string{ - configv1.DelegatedAuthentication{}.OpenAPIModelName(), configv1.DelegatedAuthorization{}.OpenAPIModelName(), configv1.HTTPServingInfo{}.OpenAPIModelName(), configv1.LeaderElection{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_GitHubIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "clientID": { - SchemaProps: spec.SchemaProps{ - Description: "clientID is the oauth client ID", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientSecret": { - SchemaProps: spec.SchemaProps{ - Description: "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - "organizations": { - SchemaProps: spec.SchemaProps{ - Description: "organizations optionally restricts which organizations are allowed to log in", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "teams": { - SchemaProps: spec.SchemaProps{ - Description: "teams optionally restricts which teams are allowed to log in. Format is /.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "hostname": { - SchemaProps: spec.SchemaProps{ - Description: "hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value configured at /setup/settings#hostname.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value. The namespace for this config map is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"clientID", "clientSecret"}, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName(), configv1.SecretNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_GitLabIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "clientID": { - SchemaProps: spec.SchemaProps{ - Description: "clientID is the oauth client ID", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientSecret": { - SchemaProps: spec.SchemaProps{ - Description: "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url is the oauth server base URL", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"clientID", "clientSecret", "url"}, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName(), configv1.SecretNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_GoogleIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GoogleIdentityProvider provides identities for users authenticating using Google credentials", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "clientID": { - SchemaProps: spec.SchemaProps{ - Description: "clientID is the oauth client ID", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientSecret": { - SchemaProps: spec.SchemaProps{ - Description: "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - "hostedDomain": { - SchemaProps: spec.SchemaProps{ - Description: "hostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"clientID", "clientSecret"}, - }, - }, - Dependencies: []string{ - configv1.SecretNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_HTPasswdIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "fileData": { - SchemaProps: spec.SchemaProps{ - Description: "fileData is a required reference to a secret by name containing the data to use as the htpasswd file. The key \"htpasswd\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. If the specified htpasswd data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"fileData"}, - }, - }, - Dependencies: []string{ - configv1.SecretNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_HTTPServingInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "HTTPServingInfo holds configuration for serving HTTP", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "bindAddress": { - SchemaProps: spec.SchemaProps{ - Description: "bindAddress is the ip:port to serve on", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "bindNetwork": { - SchemaProps: spec.SchemaProps{ - Description: "bindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientCA": { - SchemaProps: spec.SchemaProps{ - Description: "clientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", - Type: []string{"string"}, - Format: "", - }, - }, - "namedCertificates": { - SchemaProps: spec.SchemaProps{ - Description: "namedCertificates is a list of certificates to use to secure requests to specific hostnames", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.NamedCertificate{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "minTLSVersion": { - SchemaProps: spec.SchemaProps{ - Description: "minTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", - Type: []string{"string"}, - Format: "", - }, - }, - "cipherSuites": { - SchemaProps: spec.SchemaProps{ - Description: "cipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "maxRequestsInFlight": { - SchemaProps: spec.SchemaProps{ - Description: "maxRequestsInFlight is the number of concurrent requests allowed to the server. If zero, no limit.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - "requestTimeoutSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "requestTimeoutSeconds is the number of seconds before requests are timed out. The default is 60 minutes, if -1 there is no limit on requests.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - Required: []string{"bindAddress", "bindNetwork", "certFile", "keyFile", "maxRequestsInFlight", "requestTimeoutSeconds"}, - }, - }, - Dependencies: []string{ - configv1.NamedCertificate{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_HubSource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "HubSource is used to specify the hub source and its configuration", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of one of the default hub sources", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "disabled": { - SchemaProps: spec.SchemaProps{ - Description: "disabled is used to disable a default hub source on cluster", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"name", "disabled"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_HubSourceStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "HubSourceStatus is used to reflect the current state of applying the configuration to a default source", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of one of the default hub sources", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "disabled": { - SchemaProps: spec.SchemaProps{ - Description: "disabled is used to disable a default hub source on cluster", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status indicates success or failure in applying the configuration", - Type: []string{"string"}, - Format: "", - }, - }, - "message": { - SchemaProps: spec.SchemaProps{ - Description: "message provides more information regarding failures", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "disabled"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_IBMCloudPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IBMCloudPlatformSpec holds the desired state of the IBMCloud infrastructure provider. This only includes fields that can be modified in the cluster.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "serviceEndpoints": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of an IBM service. These endpoints are used by components within the cluster when trying to reach the IBM Cloud Services that have been overridden. The CCCMO reads in the IBMCloudPlatformSpec and validates each endpoint is resolvable. Once validated, the cloud config and IBMCloudPlatformStatus are updated to reflect the same custom endpoints. A maximum of 13 service endpoints overrides are supported.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.IBMCloudServiceEndpoint{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.IBMCloudServiceEndpoint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_IBMCloudPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IBMCloudPlatformStatus holds the current status of the IBMCloud infrastructure provider.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "location": { - SchemaProps: spec.SchemaProps{ - Description: "location is where the cluster has been deployed", - Type: []string{"string"}, - Format: "", - }, - }, - "resourceGroupName": { - SchemaProps: spec.SchemaProps{ - Description: "resourceGroupName is the Resource Group for new IBMCloud resources created for the cluster.", - Type: []string{"string"}, - Format: "", - }, - }, - "providerType": { - SchemaProps: spec.SchemaProps{ - Description: "providerType indicates the type of cluster that was created", - Type: []string{"string"}, - Format: "", - }, - }, - "cisInstanceCRN": { - SchemaProps: spec.SchemaProps{ - Description: "cisInstanceCRN is the CRN of the Cloud Internet Services instance managing the DNS zone for the cluster's base domain", - Type: []string{"string"}, - Format: "", - }, - }, - "dnsInstanceCRN": { - SchemaProps: spec.SchemaProps{ - Description: "dnsInstanceCRN is the CRN of the DNS Services instance managing the DNS zone for the cluster's base domain", - Type: []string{"string"}, - Format: "", - }, - }, - "serviceEndpoints": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of an IBM service. These endpoints are used by components within the cluster when trying to reach the IBM Cloud Services that have been overridden. The CCCMO reads in the IBMCloudPlatformSpec and validates each endpoint is resolvable. Once validated, the cloud config and IBMCloudPlatformStatus are updated to reflect the same custom endpoints.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.IBMCloudServiceEndpoint{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.IBMCloudServiceEndpoint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_IBMCloudServiceEndpoint(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IBMCloudServiceEndpoint stores the configuration of a custom url to override existing defaults of IBM Cloud Services.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the IBM Cloud service. Possible values are: CIS, COS, COSConfig, DNSServices, GlobalCatalog, GlobalSearch, GlobalTagging, HyperProtect, IAM, KeyProtect, ResourceController, ResourceManager, or VPC. For example, the IBM Cloud Private IAM service could be configured with the service `name` of `IAM` and `url` of `https://private.iam.cloud.ibm.com` Whereas the IBM Cloud Private VPC service for US South (Dallas) could be configured with the service `name` of `VPC` and `url` of `https://us.south.private.iaas.cloud.ibm.com`", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty. The path must follow the pattern /v[0,9]+ or /api/v[0,9]+", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "url"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_IdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IdentityProvider provides identities for users authenticating using credentials", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is used to qualify the identities returned by this provider. - It MUST be unique and not shared by any other identity provider used - It MUST be a valid path segment: name cannot equal \".\" or \"..\" or contain \"/\" or \"%\" or \":\"\n Ref: https://godoc.org/github.com/openshift/origin/pkg/user/apis/user/validation#ValidateIdentityProviderName", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "mappingMethod": { - SchemaProps: spec.SchemaProps{ - Description: "mappingMethod determines how identities from this provider are mapped to users Defaults to \"claim\"", - Type: []string{"string"}, - Format: "", - }, - }, - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type identifies the identity provider type for this entry.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "basicAuth": { - SchemaProps: spec.SchemaProps{ - Description: "basicAuth contains configuration options for the BasicAuth IdP", - Ref: ref(configv1.BasicAuthIdentityProvider{}.OpenAPIModelName()), - }, - }, - "github": { - SchemaProps: spec.SchemaProps{ - Description: "github enables user authentication using GitHub credentials", - Ref: ref(configv1.GitHubIdentityProvider{}.OpenAPIModelName()), - }, - }, - "gitlab": { - SchemaProps: spec.SchemaProps{ - Description: "gitlab enables user authentication using GitLab credentials", - Ref: ref(configv1.GitLabIdentityProvider{}.OpenAPIModelName()), - }, - }, - "google": { - SchemaProps: spec.SchemaProps{ - Description: "google enables user authentication using Google credentials", - Ref: ref(configv1.GoogleIdentityProvider{}.OpenAPIModelName()), - }, - }, - "htpasswd": { - SchemaProps: spec.SchemaProps{ - Description: "htpasswd enables user authentication using an HTPasswd file to validate credentials", - Ref: ref(configv1.HTPasswdIdentityProvider{}.OpenAPIModelName()), - }, - }, - "keystone": { - SchemaProps: spec.SchemaProps{ - Description: "keystone enables user authentication using keystone password credentials", - Ref: ref(configv1.KeystoneIdentityProvider{}.OpenAPIModelName()), - }, - }, - "ldap": { - SchemaProps: spec.SchemaProps{ - Description: "ldap enables user authentication using LDAP credentials", - Ref: ref(configv1.LDAPIdentityProvider{}.OpenAPIModelName()), - }, - }, - "openID": { - SchemaProps: spec.SchemaProps{ - Description: "openID enables user authentication using OpenID credentials", - Ref: ref(configv1.OpenIDIdentityProvider{}.OpenAPIModelName()), - }, - }, - "requestHeader": { - SchemaProps: spec.SchemaProps{ - Description: "requestHeader enables user authentication using request header credentials", - Ref: ref(configv1.RequestHeaderIdentityProvider{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"name", "type"}, - }, - }, - Dependencies: []string{ - configv1.BasicAuthIdentityProvider{}.OpenAPIModelName(), configv1.GitHubIdentityProvider{}.OpenAPIModelName(), configv1.GitLabIdentityProvider{}.OpenAPIModelName(), configv1.GoogleIdentityProvider{}.OpenAPIModelName(), configv1.HTPasswdIdentityProvider{}.OpenAPIModelName(), configv1.KeystoneIdentityProvider{}.OpenAPIModelName(), configv1.LDAPIdentityProvider{}.OpenAPIModelName(), configv1.OpenIDIdentityProvider{}.OpenAPIModelName(), configv1.RequestHeaderIdentityProvider{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_IdentityProviderConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IdentityProviderConfig contains configuration for using a specific identity provider", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type identifies the identity provider type for this entry.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "basicAuth": { - SchemaProps: spec.SchemaProps{ - Description: "basicAuth contains configuration options for the BasicAuth IdP", - Ref: ref(configv1.BasicAuthIdentityProvider{}.OpenAPIModelName()), - }, - }, - "github": { - SchemaProps: spec.SchemaProps{ - Description: "github enables user authentication using GitHub credentials", - Ref: ref(configv1.GitHubIdentityProvider{}.OpenAPIModelName()), - }, - }, - "gitlab": { - SchemaProps: spec.SchemaProps{ - Description: "gitlab enables user authentication using GitLab credentials", - Ref: ref(configv1.GitLabIdentityProvider{}.OpenAPIModelName()), - }, - }, - "google": { - SchemaProps: spec.SchemaProps{ - Description: "google enables user authentication using Google credentials", - Ref: ref(configv1.GoogleIdentityProvider{}.OpenAPIModelName()), - }, - }, - "htpasswd": { - SchemaProps: spec.SchemaProps{ - Description: "htpasswd enables user authentication using an HTPasswd file to validate credentials", - Ref: ref(configv1.HTPasswdIdentityProvider{}.OpenAPIModelName()), - }, - }, - "keystone": { - SchemaProps: spec.SchemaProps{ - Description: "keystone enables user authentication using keystone password credentials", - Ref: ref(configv1.KeystoneIdentityProvider{}.OpenAPIModelName()), - }, - }, - "ldap": { - SchemaProps: spec.SchemaProps{ - Description: "ldap enables user authentication using LDAP credentials", - Ref: ref(configv1.LDAPIdentityProvider{}.OpenAPIModelName()), - }, - }, - "openID": { - SchemaProps: spec.SchemaProps{ - Description: "openID enables user authentication using OpenID credentials", - Ref: ref(configv1.OpenIDIdentityProvider{}.OpenAPIModelName()), - }, - }, - "requestHeader": { - SchemaProps: spec.SchemaProps{ - Description: "requestHeader enables user authentication using request header credentials", - Ref: ref(configv1.RequestHeaderIdentityProvider{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - }, - Dependencies: []string{ - configv1.BasicAuthIdentityProvider{}.OpenAPIModelName(), configv1.GitHubIdentityProvider{}.OpenAPIModelName(), configv1.GitLabIdentityProvider{}.OpenAPIModelName(), configv1.GoogleIdentityProvider{}.OpenAPIModelName(), configv1.HTPasswdIdentityProvider{}.OpenAPIModelName(), configv1.KeystoneIdentityProvider{}.OpenAPIModelName(), configv1.LDAPIdentityProvider{}.OpenAPIModelName(), configv1.OpenIDIdentityProvider{}.OpenAPIModelName(), configv1.RequestHeaderIdentityProvider{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_Image(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Image governs policies related to imagestream imports and runtime configuration for external registries. It allows cluster admins to configure which registries OpenShift is allowed to import images from, extra CA trust bundles for external registries, and policies to block or allow registry hostnames. When exposing OpenShift's image registry to the public, this also lets cluster admins specify the external hostname.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.ImageSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ImageStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.ImageSpec{}.OpenAPIModelName(), configv1.ImageStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImageContentPolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageContentPolicy holds cluster-wide information about how to handle registry mirror rules. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.ImageContentPolicySpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.ImageContentPolicySpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImageContentPolicyList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageContentPolicyList lists the items in the ImageContentPolicy CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ImageContentPolicy{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.ImageContentPolicy{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImageContentPolicySpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageContentPolicySpec is the specification of the ImageContentPolicy CRD.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "repositoryDigestMirrors": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "source", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "repositoryDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in RepositoryDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To pull image from mirrors by tags, should set the \"allowMirrorByTags\".\n\nEach “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.RepositoryDigestMirrors{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.RepositoryDigestMirrors{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImageDigestMirrorSet(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageDigestMirrorSet holds cluster-wide information about how to handle registry mirror rules on using digest pull specification. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.ImageDigestMirrorSetSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status contains the observed state of the resource.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ImageDigestMirrorSetStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.ImageDigestMirrorSetSpec{}.OpenAPIModelName(), configv1.ImageDigestMirrorSetStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImageDigestMirrorSetList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageDigestMirrorSetList lists the items in the ImageDigestMirrorSet CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ImageDigestMirrorSet{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.ImageDigestMirrorSet{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImageDigestMirrorSetSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageDigestMirrorSetSpec is the specification of the ImageDigestMirrorSet CRD.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "imageDigestMirrors": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "imageDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in imageDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To use mirrors to pull images using tag specification, users should configure a list of mirrors using \"ImageTagMirrorSet\" CRD.\n\nIf the image pull specification matches the repository of \"source\" in multiple imagedigestmirrorset objects, only the objects which define the most specific namespace match will be used. For example, if there are objects using quay.io/libpod and quay.io/libpod/busybox as the \"source\", only the objects using quay.io/libpod/busybox are going to apply for pull specification quay.io/libpod/busybox. Each “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified. Users who want to use a specific order of mirrors, should configure them into one list of mirrors using the expected order.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ImageDigestMirrors{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.ImageDigestMirrors{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImageDigestMirrorSetStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_ImageDigestMirrors(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageDigestMirrors holds cluster-wide information about how to handle mirrors in the registries config.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "source": { - SchemaProps: spec.SchemaProps{ - Description: "source matches the repository that users refer to, e.g. in image pull specifications. Setting source to a registry hostname e.g. docker.io. quay.io, or registry.redhat.io, will match the image pull specification of corressponding registry. \"source\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo [*.]host for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "mirrors": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "mirrors is zero or more locations that may also contain the same images. No mirror will be configured if not specified. Images can be pulled from these mirrors only if they are referenced by their digests. The mirrored location is obtained by replacing the part of the input reference that matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo reference, a (source, mirror) pair *.redhat.io, mirror.local/redhat causes a mirror.local/redhat/product/repo repository to be used. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. If no mirror is specified or all image pulls from the mirror list fail, the image will continue to be pulled from the repository in the pull spec unless explicitly prohibited by \"mirrorSourcePolicy\" Other cluster configuration, including (but not limited to) other imageDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering. \"mirrors\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "mirrorSourcePolicy": { - SchemaProps: spec.SchemaProps{ - Description: "mirrorSourcePolicy defines the fallback policy if fails to pull image from the mirrors. If unset, the image will continue to be pulled from the the repository in the pull spec. sourcePolicy is valid configuration only when one or more mirrors are in the mirror list.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"source"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_ImageLabel(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name defines the name of the label. It must have non-zero length.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value defines the literal value of the label.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_ImageList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.Image{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.Image{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImagePolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImagePolicy holds namespace-wide configuration for image signature verification\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.ImagePolicySpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status contains the observed state of the resource.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ImagePolicyStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.ImagePolicySpec{}.OpenAPIModelName(), configv1.ImagePolicyStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImagePolicyFulcioCAWithRekorRootOfTrust(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImagePolicyFulcioCAWithRekorRootOfTrust defines the root of trust based on the Fulcio certificate and the Rekor public key.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "fulcioCAData": { - SchemaProps: spec.SchemaProps{ - Description: "fulcioCAData is a required field contains inline base64-encoded data for the PEM format fulcio CA. fulcioCAData must be at most 8192 characters.", - Type: []string{"string"}, - Format: "byte", - }, - }, - "rekorKeyData": { - SchemaProps: spec.SchemaProps{ - Description: "rekorKeyData is a required field contains inline base64-encoded data for the PEM format from the Rekor public key. rekorKeyData must be at most 8192 characters.", - Type: []string{"string"}, - Format: "byte", - }, - }, - "fulcioSubject": { - SchemaProps: spec.SchemaProps{ - Description: "fulcioSubject is a required field specifies OIDC issuer and the email of the Fulcio authentication configuration.", - Default: map[string]interface{}{}, - Ref: ref(configv1.PolicyFulcioSubject{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"fulcioCAData", "rekorKeyData", "fulcioSubject"}, - }, - }, - Dependencies: []string{ - configv1.PolicyFulcioSubject{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImagePolicyList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImagePolicyList is a list of ImagePolicy resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is a list of ImagePolicies", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ImagePolicy{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.ImagePolicy{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImagePolicyPKIRootOfTrust(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImagePolicyPKIRootOfTrust defines the root of trust based on Root CA(s) and corresponding intermediate certificates.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "caRootsData": { - SchemaProps: spec.SchemaProps{ - Description: "caRootsData contains base64-encoded data of a certificate bundle PEM file, which contains one or more CA roots in the PEM format. The total length of the data must not exceed 8192 characters.", - Type: []string{"string"}, - Format: "byte", - }, - }, - "caIntermediatesData": { - SchemaProps: spec.SchemaProps{ - Description: "caIntermediatesData contains base64-encoded data of a certificate bundle PEM file, which contains one or more intermediate certificates in the PEM format. The total length of the data must not exceed 8192 characters. caIntermediatesData requires caRootsData to be set.", - Type: []string{"string"}, - Format: "byte", - }, - }, - "pkiCertificateSubject": { - SchemaProps: spec.SchemaProps{ - Description: "pkiCertificateSubject defines the requirements imposed on the subject to which the certificate was issued.", - Default: map[string]interface{}{}, - Ref: ref(configv1.PKICertificateSubject{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"caRootsData", "pkiCertificateSubject"}, - }, - }, - Dependencies: []string{ - configv1.PKICertificateSubject{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImagePolicyPublicKeyRootOfTrust(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImagePolicyPublicKeyRootOfTrust defines the root of trust based on a sigstore public key.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "keyData": { - SchemaProps: spec.SchemaProps{ - Description: "keyData is a required field contains inline base64-encoded data for the PEM format public key. keyData must be at most 8192 characters.", - Type: []string{"string"}, - Format: "byte", - }, - }, - "rekorKeyData": { - SchemaProps: spec.SchemaProps{ - Description: "rekorKeyData is an optional field contains inline base64-encoded data for the PEM format from the Rekor public key. rekorKeyData must be at most 8192 characters.", - Type: []string{"string"}, - Format: "byte", - }, - }, - }, - Required: []string{"keyData"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_ImagePolicySpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImagePolicySpec is the specification of the ImagePolicy CRD.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "scopes": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "scopes is a required field that defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. This support no more than 256 scopes in one object. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. If a scope is configured in both the ClusterImagePolicy and the ImagePolicy, or if the scope in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy, only the policy from the ClusterImagePolicy will be applied. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "policy": { - SchemaProps: spec.SchemaProps{ - Description: "policy is a required field that contains configuration to allow scopes to be verified, and defines how images not matching the verification policy will be treated.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ImageSigstoreVerificationPolicy{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"scopes", "policy"}, - }, - }, - Dependencies: []string{ - configv1.ImageSigstoreVerificationPolicy{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImagePolicyStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions provide details on the status of this API Resource. condition type 'Pending' indicates that the customer resource contains a policy that cannot take effect. It is either overwritten by a global policy or the image scope is not valid.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImageSigstoreVerificationPolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageSigstoreVerificationPolicy defines the verification policy for the items in the scopes list.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "rootOfTrust": { - SchemaProps: spec.SchemaProps{ - Description: "rootOfTrust is a required field that defines the root of trust for verifying image signatures during retrieval. This allows image consumers to specify policyType and corresponding configuration of the policy, matching how the policy was generated.", - Default: map[string]interface{}{}, - Ref: ref(configv1.PolicyRootOfTrust{}.OpenAPIModelName()), - }, - }, - "signedIdentity": { - SchemaProps: spec.SchemaProps{ - Description: "signedIdentity is an optional field specifies what image identity the signature claims about the image. This is useful when the image identity in the signature differs from the original image spec, such as when mirror registry is configured for the image scope, the signature from the mirror registry contains the image identity of the mirror instead of the original scope. The required matchPolicy field specifies the approach used in the verification process to verify the identity in the signature and the actual image identity, the default matchPolicy is \"MatchRepoDigestOrExact\".", - Ref: ref(configv1.PolicyIdentity{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"rootOfTrust"}, - }, - }, - Dependencies: []string{ - configv1.PolicyIdentity{}.OpenAPIModelName(), configv1.PolicyRootOfTrust{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImageSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "allowedRegistriesForImport": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "allowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.RegistryLocation{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "externalRegistryHostnames": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "additionalTrustedCA": { - SchemaProps: spec.SchemaProps{ - Description: "additionalTrustedCA is a reference to a ConfigMap containing additional CAs that should be trusted during imagestream import, pod image pull, build image pull, and imageregistry pullthrough. The namespace for this config map is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - "registrySources": { - SchemaProps: spec.SchemaProps{ - Description: "registrySources contains configuration that determines how the container runtime should treat individual registries when accessing images for builds+pods. (e.g. whether or not to allow insecure access). It does not contain configuration for the internal cluster registry.", - Default: map[string]interface{}{}, - Ref: ref(configv1.RegistrySources{}.OpenAPIModelName()), - }, - }, - "imageStreamImportMode": { - SchemaProps: spec.SchemaProps{ - Description: "imageStreamImportMode controls the import mode behaviour of imagestreams. It can be set to `Legacy` or `PreserveOriginal` or the empty string. If this value is specified, this setting is applied to all newly created imagestreams which do not have the value set. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported. When empty, the behaviour will be decided based on the payload type advertised by the ClusterVersion status, i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.", - Default: "", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Legacy", "PreserveOriginal"}, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName(), configv1.RegistryLocation{}.OpenAPIModelName(), configv1.RegistrySources{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImageStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "internalRegistryHostname": { - SchemaProps: spec.SchemaProps{ - Description: "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format. This value is set by the image registry operator which controls the internal registry hostname.", - Type: []string{"string"}, - Format: "", - }, - }, - "externalRegistryHostnames": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "imageStreamImportMode": { - SchemaProps: spec.SchemaProps{ - Description: "imageStreamImportMode controls the import mode behaviour of imagestreams. It can be `Legacy` or `PreserveOriginal`. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported. This value will be reconciled based on either the spec value or if no spec value is specified, the image registry operator would look at the ClusterVersion status to determine the payload type and set the import mode accordingly, i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Legacy", "PreserveOriginal"}, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_ImageTagMirrorSet(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageTagMirrorSet holds cluster-wide information about how to handle registry mirror rules on using tag pull specification. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.ImageTagMirrorSetSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status contains the observed state of the resource.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ImageTagMirrorSetStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.ImageTagMirrorSetSpec{}.OpenAPIModelName(), configv1.ImageTagMirrorSetStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImageTagMirrorSetList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageTagMirrorSetList lists the items in the ImageTagMirrorSet CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ImageTagMirrorSet{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.ImageTagMirrorSet{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImageTagMirrorSetSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageTagMirrorSetSpec is the specification of the ImageTagMirrorSet CRD.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "imageTagMirrors": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "imageTagMirrors allows images referenced by image tags in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in imageTagMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To use mirrors to pull images using digest specification only, users should configure a list of mirrors using \"ImageDigestMirrorSet\" CRD.\n\nIf the image pull specification matches the repository of \"source\" in multiple imagetagmirrorset objects, only the objects which define the most specific namespace match will be used. For example, if there are objects using quay.io/libpod and quay.io/libpod/busybox as the \"source\", only the objects using quay.io/libpod/busybox are going to apply for pull specification quay.io/libpod/busybox. Each “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified. Users who want to use a deterministic order of mirrors, should configure them into one list of mirrors using the expected order.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ImageTagMirrors{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.ImageTagMirrors{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ImageTagMirrorSetStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_ImageTagMirrors(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageTagMirrors holds cluster-wide information about how to handle mirrors in the registries config.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "source": { - SchemaProps: spec.SchemaProps{ - Description: "source matches the repository that users refer to, e.g. in image pull specifications. Setting source to a registry hostname e.g. docker.io. quay.io, or registry.redhat.io, will match the image pull specification of corressponding registry. \"source\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo [*.]host for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "mirrors": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "mirrors is zero or more locations that may also contain the same images. No mirror will be configured if not specified. Images can be pulled from these mirrors only if they are referenced by their tags. The mirrored location is obtained by replacing the part of the input reference that matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo reference, a (source, mirror) pair *.redhat.io, mirror.local/redhat causes a mirror.local/redhat/product/repo repository to be used. Pulling images by tag can potentially yield different images, depending on which endpoint we pull from. Configuring a list of mirrors using \"ImageDigestMirrorSet\" CRD and forcing digest-pulls for mirrors avoids that issue. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. If no mirror is specified or all image pulls from the mirror list fail, the image will continue to be pulled from the repository in the pull spec unless explicitly prohibited by \"mirrorSourcePolicy\". Other cluster configuration, including (but not limited to) other imageTagMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering. \"mirrors\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "mirrorSourcePolicy": { - SchemaProps: spec.SchemaProps{ - Description: "mirrorSourcePolicy defines the fallback policy if fails to pull image from the mirrors. If unset, the image will continue to be pulled from the repository in the pull spec. sourcePolicy is valid configuration only when one or more mirrors are in the mirror list.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"source"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_Infrastructure(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Infrastructure holds cluster-wide information about Infrastructure. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.InfrastructureSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(configv1.InfrastructureStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.InfrastructureSpec{}.OpenAPIModelName(), configv1.InfrastructureStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_InfrastructureList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "InfrastructureList is\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.Infrastructure{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.Infrastructure{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_InfrastructureSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "InfrastructureSpec contains settings that apply to the cluster infrastructure.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "cloudConfig": { - SchemaProps: spec.SchemaProps{ - Description: "cloudConfig is a reference to a ConfigMap containing the cloud provider configuration file. This configuration file is used to configure the Kubernetes cloud provider integration when using the built-in cloud provider integration or the external cloud controller manager. The namespace for this config map is openshift-config.\n\ncloudConfig should only be consumed by the kube_cloud_config controller. The controller is responsible for using the user configuration in the spec for various platforms and combining that with the user provided ConfigMap in this field to create a stitched kube cloud config. The controller generates a ConfigMap `kube-cloud-config` in `openshift-config-managed` namespace with the kube cloud config is stored in `cloud.conf` key. All the clients are expected to use the generated ConfigMap only.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapFileReference{}.OpenAPIModelName()), - }, - }, - "platformSpec": { - SchemaProps: spec.SchemaProps{ - Description: "platformSpec holds desired information specific to the underlying infrastructure provider.", - Default: map[string]interface{}{}, - Ref: ref(configv1.PlatformSpec{}.OpenAPIModelName()), - }, - }, - "controlPlaneTopology": { - SchemaProps: spec.SchemaProps{ - Description: "controlPlaneTopology expresses the desired topology configuration for control nodes.\n\nWhen status.controlPlaneTopology is 'SingleReplica' and spec.controlPlaneTopology is set to 'HighlyAvailable', a transition will be triggered to reconfigure the cluster from SingleReplica to HighlyAvailable.\n\nWhen left blank or status.controlPlaneTopology and spec.controlPlaneTopology are the same value, no changes are required and no transitions will be triggered.\n\nThis value may be set to match status.controlPlaneTopology regardless of the current value.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.ConfigMapFileReference{}.OpenAPIModelName(), configv1.PlatformSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_InfrastructureStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "InfrastructureStatus describes the infrastructure the cluster is leveraging.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "infrastructureName": { - SchemaProps: spec.SchemaProps{ - Description: "infrastructureName uniquely identifies a cluster with a human friendly name. Once set it should not be changed. Must be of max length 27 and must have only alphanumeric or hyphen characters.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "platform": { - SchemaProps: spec.SchemaProps{ - Description: "platform is the underlying infrastructure provider for the cluster.\n\nDeprecated: Use platformStatus.type instead.", - Type: []string{"string"}, - Format: "", - }, - }, - "platformStatus": { - SchemaProps: spec.SchemaProps{ - Description: "platformStatus holds status information specific to the underlying infrastructure provider.", - Ref: ref(configv1.PlatformStatus{}.OpenAPIModelName()), - }, - }, - "etcdDiscoveryDomain": { - SchemaProps: spec.SchemaProps{ - Description: "etcdDiscoveryDomain is the domain used to fetch the SRV records for discovering etcd servers and clients. For more info: https://github.com/etcd-io/etcd/blob/329be66e8b3f9e2e6af83c123ff89297e49ebd15/Documentation/op-guide/clustering.md#dns-discovery deprecated: as of 4.7, this field is no longer set or honored. It will be removed in a future release.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "apiServerURL": { - SchemaProps: spec.SchemaProps{ - Description: "apiServerURL is a valid URI with scheme 'https', address and optionally a port (defaulting to 443). apiServerURL can be used by components like the web console to tell users where to find the Kubernetes API.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "apiServerInternalURI": { - SchemaProps: spec.SchemaProps{ - Description: "apiServerInternalURL is a valid URI with scheme 'https', address and optionally a port (defaulting to 443). apiServerInternalURL can be used by components like kubelets, to contact the Kubernetes API server using the infrastructure provider rather than Kubernetes networking.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "controlPlaneTopology": { - SchemaProps: spec.SchemaProps{ - Description: "controlPlaneTopology expresses the expectations for operands that normally run on control nodes. The default is 'HighlyAvailable', which represents the behavior operators have in a \"normal\" cluster. The 'SingleReplica' mode will be used in single-node deployments and the operators should not configure the operand for highly-available operation The 'External' mode indicates that the control plane is hosted externally to the cluster and that its components are not visible within the cluster. The 'HighlyAvailableArbiter' mode indicates that the control plane will consist of 2 control-plane nodes that run conventional services and 1 smaller sized arbiter node that runs a bare minimum of services to maintain quorum.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "infrastructureTopology": { - SchemaProps: spec.SchemaProps{ - Description: "infrastructureTopology expresses the expectations for infrastructure services that do not run on control plane nodes, usually indicated by a node selector for a `role` value other than `master`. The default is 'HighlyAvailable', which represents the behavior operators have in a \"normal\" cluster. The 'SingleReplica' mode will be used in single-node deployments and the operators should not configure the operand for highly-available operation NOTE: External topology mode is not applicable for this field.", - Type: []string{"string"}, - Format: "", - }, - }, - "cpuPartitioning": { - SchemaProps: spec.SchemaProps{ - Description: "cpuPartitioning expresses if CPU partitioning is a currently enabled feature in the cluster. CPU Partitioning means that this cluster can support partitioning workloads to specific CPU Sets. Valid values are \"None\" and \"AllNodes\". When omitted, the default value is \"None\". The default value of \"None\" indicates that no nodes will be setup with CPU partitioning. The \"AllNodes\" value indicates that all nodes have been setup with CPU partitioning, and can then be further configured via the PerformanceProfile API.", - Default: "None", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.PlatformStatus{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_Ingress(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Ingress holds cluster-wide information about ingress, including the default ingress domain used for routes. The canonical name is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.IngressSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(configv1.IngressStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.IngressSpec{}.OpenAPIModelName(), configv1.IngressStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_IngressList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.Ingress{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.Ingress{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_IngressPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IngressPlatformSpec holds the desired state of Ingress specific to the underlying infrastructure provider of the current cluster. Since these are used at spec-level for the underlying cluster, it is supposed that only one of the spec structs is set.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the underlying infrastructure provider for the cluster. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"KubeVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "aws": { - SchemaProps: spec.SchemaProps{ - Description: "aws contains settings specific to the Amazon Web Services infrastructure provider.", - Ref: ref(configv1.AWSIngressSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "aws": "AWS", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.AWSIngressSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_IngressSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "domain": { - SchemaProps: spec.SchemaProps{ - Description: "domain is used to generate a default host name for a route when the route's host name is empty. The generated host name will follow this pattern: \"..\".\n\nIt is also used as the default wildcard domain suffix for ingress. The default ingresscontroller domain will follow this pattern: \"*.\".\n\nOnce set, changing domain is not currently supported.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "appsDomain": { - SchemaProps: spec.SchemaProps{ - Description: "appsDomain is an optional domain to use instead of the one specified in the domain field when a Route is created without specifying an explicit host. If appsDomain is nonempty, this value is used to generate default host values for Route. Unlike domain, appsDomain may be modified after installation. This assumes a new ingresscontroller has been setup with a wildcard certificate.", - Type: []string{"string"}, - Format: "", - }, - }, - "componentRoutes": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "componentRoutes is an optional list of routes that are managed by OpenShift components that a cluster-admin is able to configure the hostname and serving certificate for. The namespace and name of each route in this list should match an existing entry in the status.componentRoutes list.\n\nTo determine the set of configurable Routes, look at namespace and name of entries in the .status.componentRoutes list, where participating operators write the status of configurable routes. A maximum of 250 component routes may be configured.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ComponentRouteSpec{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "requiredHSTSPolicies": { - SchemaProps: spec.SchemaProps{ - Description: "requiredHSTSPolicies specifies HSTS policies that are required to be set on newly created or updated routes matching the domainPattern/s and namespaceSelector/s that are specified in the policy. Each requiredHSTSPolicy must have at least a domainPattern and a maxAge to validate a route HSTS Policy route annotation, and affect route admission.\n\nA candidate route is checked for HSTS Policies if it has the HSTS Policy route annotation: \"haproxy.router.openshift.io/hsts_header\" E.g. haproxy.router.openshift.io/hsts_header: max-age=31536000;preload;includeSubDomains\n\n- For each candidate route, if it matches a requiredHSTSPolicy domainPattern and optional namespaceSelector, then the maxAge, preloadPolicy, and includeSubdomainsPolicy must be valid to be admitted. Otherwise, the route is rejected. - The first match, by domainPattern and optional namespaceSelector, in the ordering of the RequiredHSTSPolicies determines the route's admission status. - If the candidate route doesn't match any requiredHSTSPolicy domainPattern and optional namespaceSelector, then it may use any HSTS Policy annotation.\n\nThe HSTS policy configuration may be changed after routes have already been created. An update to a previously admitted route may then fail if the updated route does not conform to the updated HSTS policy configuration. However, changing the HSTS policy configuration will not cause a route that is already admitted to stop working.\n\nNote that if there are no RequiredHSTSPolicies, any HSTS Policy annotation on the route is valid.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.RequiredHSTSPolicy{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "loadBalancer": { - SchemaProps: spec.SchemaProps{ - Description: "loadBalancer contains the load balancer details in general which are not only specific to the underlying infrastructure provider of the current cluster and are required for Ingress Controller to work on OpenShift.", - Default: map[string]interface{}{}, - Ref: ref(configv1.LoadBalancer{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"domain"}, - }, - }, - Dependencies: []string{ - configv1.ComponentRouteSpec{}.OpenAPIModelName(), configv1.LoadBalancer{}.OpenAPIModelName(), configv1.RequiredHSTSPolicy{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_IngressStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "componentRoutes": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "componentRoutes is where participating operators place the current route status for routes whose hostnames and serving certificates can be customized by the cluster-admin.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ComponentRouteStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "defaultPlacement": { - SchemaProps: spec.SchemaProps{ - Description: "defaultPlacement is set at installation time to control which nodes will host the ingress router pods by default. The options are control-plane nodes or worker nodes.\n\nThis field works by dictating how the Cluster Ingress Operator will consider unset replicas and nodePlacement fields in IngressController resources when creating the corresponding Deployments.\n\nSee the documentation for the IngressController replicas and nodePlacement fields for more information.\n\nWhen omitted, the default value is Workers", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.ComponentRouteStatus{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_InsightsDataGather(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "InsightsDataGather provides data gather configuration options for the Insights Operator.\n\n\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.InsightsDataGatherSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.InsightsDataGatherSpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_InsightsDataGatherList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "InsightsDataGatherList is a collection of items Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the required standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is the required list of InsightsDataGather objects it may not exceed 100 items", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.InsightsDataGather{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.InsightsDataGather{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_InsightsDataGatherSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "InsightsDataGatherSpec contains the configuration for the data gathering.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "gatherConfig": { - SchemaProps: spec.SchemaProps{ - Description: "gatherConfig is a required spec attribute that includes all the configuration options related to gathering of the Insights data and its uploading to the ingress.", - Default: map[string]interface{}{}, - Ref: ref(configv1.GatherConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"gatherConfig"}, - }, - }, - Dependencies: []string{ - configv1.GatherConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_IntermediateTLSProfile(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IntermediateTLSProfile is a TLS security profile based on the \"intermediate\" configuration of the Mozilla Server Side TLS configuration guidelines.", - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_KMSPluginConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KMSPluginConfig defines the configuration for the KMS instance that will be used with KMS encryption", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type defines the kind of platform for the KMS provider. Allowed values are Vault. When set to Vault, the plugin connects to a HashiCorp Vault server for key management.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "vault": { - SchemaProps: spec.SchemaProps{ - Description: "vault defines the configuration for the Vault KMS plugin. The plugin connects to a Vault Enterprise server that is managed by the user outside the purview of the control plane. This field must be set when type is Vault, and must be unset otherwise.", - Default: map[string]interface{}{}, - Ref: ref(configv1.VaultKMSPluginConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "vault": "Vault", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.VaultKMSPluginConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_KeystoneIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url is the remote URL to connect to", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - "tlsClientCert": { - SchemaProps: spec.SchemaProps{ - Description: "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - "tlsClientKey": { - SchemaProps: spec.SchemaProps{ - Description: "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - "domainName": { - SchemaProps: spec.SchemaProps{ - Description: "domainName is required for keystone v3", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"url", "domainName"}, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName(), configv1.SecretNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_KubeClientConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kubeConfig": { - SchemaProps: spec.SchemaProps{ - Description: "kubeConfig is a .kubeconfig filename for going to the owning kube-apiserver. Empty uses an in-cluster-config", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "connectionOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "connectionOverrides specifies client overrides for system components to loop back to this master.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ClientConnectionOverrides{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"kubeConfig", "connectionOverrides"}, - }, - }, - Dependencies: []string{ - configv1.ClientConnectionOverrides{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_KubevirtPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KubevirtPlatformSpec holds the desired state of the kubevirt infrastructure provider. This only includes fields that can be modified in the cluster.", - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_KubevirtPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KubevirtPlatformStatus holds the current status of the kubevirt infrastructure provider.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "apiServerInternalIP": { - SchemaProps: spec.SchemaProps{ - Description: "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.", - Type: []string{"string"}, - Format: "", - }, - }, - "ingressIP": { - SchemaProps: spec.SchemaProps{ - Description: "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_LDAPAttributeMapping(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "id": { - SchemaProps: spec.SchemaProps{ - Description: "id is the list of attributes whose values should be used as the user ID. Required. First non-empty attribute is used. At least one attribute is required. If none of the listed attribute have a value, authentication fails. LDAP standard identity attribute is \"dn\"", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "preferredUsername": { - SchemaProps: spec.SchemaProps{ - Description: "preferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "email": { - SchemaProps: spec.SchemaProps{ - Description: "email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"id"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_LDAPIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is: ldap://host:port/basedn?attribute?scope?filter", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "bindDN": { - SchemaProps: spec.SchemaProps{ - Description: "bindDN is an optional DN to bind with during the search phase.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "bindPassword": { - SchemaProps: spec.SchemaProps{ - Description: "bindPassword is an optional reference to a secret by name containing a password to bind with during the search phase. The key \"bindPassword\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - "insecure": { - SchemaProps: spec.SchemaProps{ - Description: "insecure, if true, indicates the connection should not use TLS WARNING: Should not be set to `true` with the URL scheme \"ldaps://\" as \"ldaps://\" URLs always\n attempt to connect using TLS, even when `insecure` is set to `true`\nWhen `true`, \"ldap://\" URLS connect insecurely. When `false`, \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - "attributes": { - SchemaProps: spec.SchemaProps{ - Description: "attributes maps LDAP attributes to identities", - Default: map[string]interface{}{}, - Ref: ref(configv1.LDAPAttributeMapping{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"url", "insecure", "attributes"}, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName(), configv1.LDAPAttributeMapping{}.OpenAPIModelName(), configv1.SecretNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_LeaderElection(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LeaderElection provides information to elect a leader", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "disable": { - SchemaProps: spec.SchemaProps{ - Description: "disable allows leader election to be suspended while allowing a fully defaulted \"normal\" startup case.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace indicates which namespace the resource is in", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name indicates what name to use for the resource", - Type: []string{"string"}, - Format: "", - }, - }, - "leaseDuration": { - SchemaProps: spec.SchemaProps{ - Description: "leaseDuration is the duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled.", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - "renewDeadline": { - SchemaProps: spec.SchemaProps{ - Description: "renewDeadline is the interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled.", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - "retryPeriod": { - SchemaProps: spec.SchemaProps{ - Description: "retryPeriod is the duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled.", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"leaseDuration", "renewDeadline", "retryPeriod"}, - }, - }, - Dependencies: []string{ - metav1.Duration{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_LoadBalancer(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "platform": { - SchemaProps: spec.SchemaProps{ - Description: "platform holds configuration specific to the underlying infrastructure provider for the ingress load balancers. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.", - Default: map[string]interface{}{}, - Ref: ref(configv1.IngressPlatformSpec{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.IngressPlatformSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_MTUMigration(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MTUMigration contains infomation about MTU migration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "network": { - SchemaProps: spec.SchemaProps{ - Description: "network contains MTU migration configuration for the default network.", - Ref: ref(configv1.MTUMigrationValues{}.OpenAPIModelName()), - }, - }, - "machine": { - SchemaProps: spec.SchemaProps{ - Description: "machine contains MTU migration configuration for the machine's uplink.", - Ref: ref(configv1.MTUMigrationValues{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.MTUMigrationValues{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_MTUMigrationValues(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MTUMigrationValues contains the values for a MTU migration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "to": { - SchemaProps: spec.SchemaProps{ - Description: "to is the MTU to migrate to.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "from": { - SchemaProps: spec.SchemaProps{ - Description: "from is the MTU to migrate from.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - Required: []string{"to"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_MaxAgePolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MaxAgePolicy contains a numeric range for specifying a compliant HSTS max-age for the enclosing RequiredHSTSPolicy", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "largestMaxAge": { - SchemaProps: spec.SchemaProps{ - Description: "The largest allowed value (in seconds) of the RequiredHSTSPolicy max-age This value can be left unspecified, in which case no upper limit is enforced.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "smallestMaxAge": { - SchemaProps: spec.SchemaProps{ - Description: "The smallest allowed value (in seconds) of the RequiredHSTSPolicy max-age Setting max-age=0 allows the deletion of an existing HSTS header from a host. This is a necessary tool for administrators to quickly correct mistakes. This value can be left unspecified, in which case no lower limit is enforced.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_ModernTLSProfile(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ModernTLSProfile is a TLS security profile based on the \"modern\" configuration of the Mozilla Server Side TLS configuration guidelines.", - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_NamedCertificate(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NamedCertificate specifies a certificate/key, and the names it should be served for", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "names": { - SchemaProps: spec.SchemaProps{ - Description: "names is a list of DNS names this certificate should be used to secure A name can be a normal DNS name, or can contain leading wildcard segments.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"certFile", "keyFile"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_Network(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Network holds cluster-wide information about Network. The canonical name is `cluster`. It is used to configure the desired network configuration, such as: IP address pools for services/pod IPs, network plugin, etc. Please view network.spec for an explanation on what applies when configuring this resource.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration. As a general rule, this SHOULD NOT be read directly. Instead, you should consume the NetworkStatus, as it indicates the currently deployed configuration. Currently, most spec fields are immutable after installation. Please view the individual ones for further details on each.", - Default: map[string]interface{}{}, - Ref: ref(configv1.NetworkSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(configv1.NetworkStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.NetworkSpec{}.OpenAPIModelName(), configv1.NetworkStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_NetworkDiagnostics(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "mode": { - SchemaProps: spec.SchemaProps{ - Description: "mode controls the network diagnostics mode\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is All.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "sourcePlacement": { - SchemaProps: spec.SchemaProps{ - Description: "sourcePlacement controls the scheduling of network diagnostics source deployment\n\nSee NetworkDiagnosticsSourcePlacement for more details about default values.", - Default: map[string]interface{}{}, - Ref: ref(configv1.NetworkDiagnosticsSourcePlacement{}.OpenAPIModelName()), - }, - }, - "targetPlacement": { - SchemaProps: spec.SchemaProps{ - Description: "targetPlacement controls the scheduling of network diagnostics target daemonset\n\nSee NetworkDiagnosticsTargetPlacement for more details about default values.", - Default: map[string]interface{}{}, - Ref: ref(configv1.NetworkDiagnosticsTargetPlacement{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.NetworkDiagnosticsSourcePlacement{}.OpenAPIModelName(), configv1.NetworkDiagnosticsTargetPlacement{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_NetworkDiagnosticsSourcePlacement(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NetworkDiagnosticsSourcePlacement defines node scheduling configuration network diagnostics source components", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector is the node selector applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `kubernetes.io/os: linux`.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "tolerations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "tolerations is a list of tolerations applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is an empty list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.Toleration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - corev1.Toleration{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_NetworkDiagnosticsTargetPlacement(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NetworkDiagnosticsTargetPlacement defines node scheduling configuration network diagnostics target components", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector is the node selector applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `kubernetes.io/os: linux`.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "tolerations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "tolerations is a list of tolerations applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `- operator: \"Exists\"` which means that all taints are tolerated.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.Toleration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - corev1.Toleration{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_NetworkList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.Network{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.Network{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_NetworkMigration(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NetworkMigration represents the network migration status.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "networkType": { - SchemaProps: spec.SchemaProps{ - Description: "networkType is the target plugin that is being deployed. DEPRECATED: network type migration is no longer supported, so this should always be unset.", - Type: []string{"string"}, - Format: "", - }, - }, - "mtu": { - SchemaProps: spec.SchemaProps{ - Description: "mtu is the MTU configuration that is being deployed.", - Ref: ref(configv1.MTUMigration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.MTUMigration{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_NetworkObservabilitySpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NetworkObservabilitySpec defines the configuration for network observability installation", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "installationPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "installationPolicy controls whether network observability is installed during cluster deployment. Valid values are \"InstallAndEnable\" and \"NoAction\". When set to \"InstallAndEnable\", ensure that network observability will be installed and enabled on the cluster. If already installed, no action taken, but if it gets uninstalled, it will install it again. When set to \"NoAction\", nothing will be done regarding Network observability. During the installation of NetworkObservability, the platform checks for any existing manual installations. If a successful installation using the OLMv0 or OLMv1 API is detected, it will be used. If the platform cannot determine how the current version was installed, or if the existing installation is incomplete, the installation process will stop.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"installationPolicy"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_NetworkSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NetworkSpec is the desired network configuration. As a general rule, this SHOULD NOT be read directly. Instead, you should consume the NetworkStatus, as it indicates the currently deployed configuration. Currently, most spec fields are immutable after installation. Please view the individual ones for further details on each.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "clusterNetwork": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "IP address pool to use for pod IPs. This field is immutable after installation.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ClusterNetworkEntry{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "serviceNetwork": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "IP address pool for services. Currently, we only support a single entry here. This field is immutable after installation.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "networkType": { - SchemaProps: spec.SchemaProps{ - Description: "networkType is the plugin that is to be deployed (e.g. OVNKubernetes). This should match a value that the cluster-network-operator understands, or else no networking will be installed. Currently supported values are: - OVNKubernetes This field is immutable after installation.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "externalIP": { - SchemaProps: spec.SchemaProps{ - Description: "externalIP defines configuration for controllers that affect Service.ExternalIP. If nil, then ExternalIP is not allowed to be set.", - Ref: ref(configv1.ExternalIPConfig{}.OpenAPIModelName()), - }, - }, - "serviceNodePortRange": { - SchemaProps: spec.SchemaProps{ - Description: "The port range allowed for Services of type NodePort. If not specified, the default of 30000-32767 will be used. Such Services without a NodePort specified will have one automatically allocated from this range. This parameter can be updated after the cluster is installed.", - Type: []string{"string"}, - Format: "", - }, - }, - "networkDiagnostics": { - SchemaProps: spec.SchemaProps{ - Description: "networkDiagnostics defines network diagnostics configuration.\n\nTakes precedence over spec.disableNetworkDiagnostics in network.operator.openshift.io. If networkDiagnostics is not specified or is empty, and the spec.disableNetworkDiagnostics flag in network.operator.openshift.io is set to true, the network diagnostics feature will be disabled.", - Default: map[string]interface{}{}, - Ref: ref(configv1.NetworkDiagnostics{}.OpenAPIModelName()), - }, - }, - "networkObservability": { - SchemaProps: spec.SchemaProps{ - Description: "networkObservability is an optional field that configures network observability installation during cluster deployment (day-0). When omitted, unless this is a SNO cluster, network observability will be installed if not already present, after that, no action taken.", - Default: map[string]interface{}{}, - Ref: ref(configv1.NetworkObservabilitySpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"clusterNetwork", "serviceNetwork", "networkType"}, - }, - }, - Dependencies: []string{ - configv1.ClusterNetworkEntry{}.OpenAPIModelName(), configv1.ExternalIPConfig{}.OpenAPIModelName(), configv1.NetworkDiagnostics{}.OpenAPIModelName(), configv1.NetworkObservabilitySpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_NetworkStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NetworkStatus is the current network configuration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "clusterNetwork": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "IP address pool to use for pod IPs.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ClusterNetworkEntry{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "serviceNetwork": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "IP address pool for services. Currently, we only support a single entry here.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "networkType": { - SchemaProps: spec.SchemaProps{ - Description: "networkType is the plugin that is deployed (e.g. OVNKubernetes).", - Type: []string{"string"}, - Format: "", - }, - }, - "clusterNetworkMTU": { - SchemaProps: spec.SchemaProps{ - Description: "clusterNetworkMTU is the MTU for inter-pod networking.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "migration": { - SchemaProps: spec.SchemaProps{ - Description: "migration contains the cluster network migration configuration.", - Ref: ref(configv1.NetworkMigration{}.OpenAPIModelName()), - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represents the observations of a network.config current state. Known .status.conditions.type are: \"NetworkDiagnosticsAvailable\"", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.ClusterNetworkEntry{}.OpenAPIModelName(), configv1.NetworkMigration{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_Node(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Node holds cluster-wide information about node specific features.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.NodeSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values.", - Default: map[string]interface{}{}, - Ref: ref(configv1.NodeStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.NodeSpec{}.OpenAPIModelName(), configv1.NodeStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_NodeList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.Node{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.Node{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_NodeSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "cgroupMode": { - SchemaProps: spec.SchemaProps{ - Description: "cgroupMode determines the cgroups version on the node", - Type: []string{"string"}, - Format: "", - }, - }, - "workerLatencyProfile": { - SchemaProps: spec.SchemaProps{ - Description: "workerLatencyProfile determins the how fast the kubelet is updating the status and corresponding reaction of the cluster", - Type: []string{"string"}, - Format: "", - }, - }, - "minimumKubeletVersion": { - SchemaProps: spec.SchemaProps{ - Description: "minimumKubeletVersion is the lowest version of a kubelet that can join the cluster. Specifically, the apiserver will deny most authorization requests of kubelets that are older than the specified version, only allowing the kubelet to get and update its node object, and perform subjectaccessreviews. This means any kubelet that attempts to join the cluster will not be able to run any assigned workloads, and will eventually be marked as not ready. Its max length is 8, so maximum version allowed is either \"9.999.99\" or \"99.99.99\". Since the kubelet reports the version of the kubernetes release, not Openshift, this field references the underlying kubernetes version this version of Openshift is based off of. In other words: if an admin wishes to ensure no nodes run an older version than Openshift 4.17, then they should set the minimumKubeletVersion to 1.30.0. When comparing versions, the kubelet's version is stripped of any contents outside of major.minor.patch version. Thus, a kubelet with version \"1.0.0-ec.0\" will be compatible with minimumKubeletVersion \"1.0.0\" or earlier.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_NodeStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions contain the details and the current state of the nodes.config object", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_NutanixFailureDomain(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NutanixFailureDomain configures failure domain information for the Nutanix platform.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name defines the unique name of a failure domain. Name is required and must be at most 64 characters in length. It must consist of only lower case alphanumeric characters and hyphens (-). It must start and end with an alphanumeric character. This value is arbitrary and is used to identify the failure domain within the platform.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "cluster": { - SchemaProps: spec.SchemaProps{ - Description: "cluster is to identify the cluster (the Prism Element under management of the Prism Central), in which the Machine's VM will be created. The cluster identifier (uuid or name) can be obtained from the Prism Central console or using the prism_central API.", - Default: map[string]interface{}{}, - Ref: ref(configv1.NutanixResourceIdentifier{}.OpenAPIModelName()), - }, - }, - "subnets": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "subnets holds a list of identifiers (one or more) of the cluster's network subnets If the feature gate NutanixMultiSubnets is enabled, up to 32 subnets may be configured. for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be obtained from the Prism Central console or using the prism_central API.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.NutanixResourceIdentifier{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"name", "cluster", "subnets"}, - }, - }, - Dependencies: []string{ - configv1.NutanixResourceIdentifier{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_NutanixPlatformLoadBalancer(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NutanixPlatformLoadBalancer defines the load balancer used by the cluster on Nutanix platform.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type defines the type of load balancer used by the cluster on Nutanix platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", - Default: "OpenShiftManagedDefault", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{}, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_NutanixPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NutanixPlatformSpec holds the desired state of the Nutanix infrastructure provider. This only includes fields that can be modified in the cluster.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "prismCentral": { - SchemaProps: spec.SchemaProps{ - Description: "prismCentral holds the endpoint address and port to access the Nutanix Prism Central. When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy. Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the proxy spec.noProxy list.", - Default: map[string]interface{}{}, - Ref: ref(configv1.NutanixPrismEndpoint{}.OpenAPIModelName()), - }, - }, - "prismElements": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "prismElements holds one or more endpoint address and port data to access the Nutanix Prism Elements (clusters) of the Nutanix Prism Central. Currently we only support one Prism Element (cluster) for an OpenShift cluster, where all the Nutanix resources (VMs, subnets, volumes, etc.) used in the OpenShift cluster are located. In the future, we may support Nutanix resources (VMs, etc.) spread over multiple Prism Elements (clusters) of the Prism Central.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.NutanixPrismElementEndpoint{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "failureDomains": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "failureDomains configures failure domains information for the Nutanix platform. When set, the failure domains defined here may be used to spread Machines across prism element clusters to improve fault tolerance of the cluster.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.NutanixFailureDomain{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"prismCentral", "prismElements"}, - }, - }, - Dependencies: []string{ - configv1.NutanixFailureDomain{}.OpenAPIModelName(), configv1.NutanixPrismElementEndpoint{}.OpenAPIModelName(), configv1.NutanixPrismEndpoint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_NutanixPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NutanixPlatformStatus holds the current status of the Nutanix infrastructure provider.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "apiServerInternalIP": { - SchemaProps: spec.SchemaProps{ - Description: "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", - Type: []string{"string"}, - Format: "", - }, - }, - "apiServerInternalIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "ingressIP": { - SchemaProps: spec.SchemaProps{ - Description: "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", - Type: []string{"string"}, - Format: "", - }, - }, - "ingressIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "loadBalancer": { - SchemaProps: spec.SchemaProps{ - Description: "loadBalancer defines how the load balancer used by the cluster is configured.", - Default: map[string]interface{}{"type": "OpenShiftManagedDefault"}, - Ref: ref(configv1.NutanixPlatformLoadBalancer{}.OpenAPIModelName()), - }, - }, - "dnsRecordsType": { - SchemaProps: spec.SchemaProps{ - Description: "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"External", "Internal"}, - }, - }, - }, - Required: []string{"apiServerInternalIPs", "ingressIPs"}, - }, - }, - Dependencies: []string{ - configv1.NutanixPlatformLoadBalancer{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_NutanixPrismElementEndpoint(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NutanixPrismElementEndpoint holds the name and endpoint data for a Prism Element (cluster)", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the Prism Element (cluster). This value will correspond with the cluster field configured on other resources (eg Machines, PVCs, etc).", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "endpoint": { - SchemaProps: spec.SchemaProps{ - Description: "endpoint holds the endpoint address and port data of the Prism Element (cluster). When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy. Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the proxy spec.noProxy list.", - Default: map[string]interface{}{}, - Ref: ref(configv1.NutanixPrismEndpoint{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"name", "endpoint"}, - }, - }, - Dependencies: []string{ - configv1.NutanixPrismEndpoint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_NutanixPrismEndpoint(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NutanixPrismEndpoint holds the endpoint address and port to access the Nutanix Prism Central or Element (cluster)", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "address": { - SchemaProps: spec.SchemaProps{ - Description: "address is the endpoint address (DNS name or IP address) of the Nutanix Prism Central or Element (cluster)", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "port": { - SchemaProps: spec.SchemaProps{ - Description: "port is the port number to access the Nutanix Prism Central or Element (cluster)", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"address", "port"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_NutanixResourceIdentifier(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NutanixResourceIdentifier holds the identity of a Nutanix PC resource (cluster, image, subnet, etc.)", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the identifier type to use for this resource.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "uuid": { - SchemaProps: spec.SchemaProps{ - Description: "uuid is the UUID of the resource in the PC. It cannot be empty if the type is UUID.", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the resource name in the PC. It cannot be empty if the type is Name.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "name": "Name", - "uuid": "UUID", - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_OAuth(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OAuth holds cluster-wide information about OAuth. The canonical name is `cluster`. It is used to configure the integrated OAuth server. This configuration is only honored when the top level Authentication config has type set to IntegratedOAuth.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.OAuthSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(configv1.OAuthStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - configv1.OAuthSpec{}.OpenAPIModelName(), configv1.OAuthStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_OAuthList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.OAuth{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.OAuth{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_OAuthRemoteConnectionInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OAuthRemoteConnectionInfo holds information necessary for establishing a remote connection", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url is the remote URL to connect to", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - "tlsClientCert": { - SchemaProps: spec.SchemaProps{ - Description: "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - "tlsClientKey": { - SchemaProps: spec.SchemaProps{ - Description: "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"url"}, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName(), configv1.SecretNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_OAuthSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OAuthSpec contains desired cluster auth configuration", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "identityProviders": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "identityProviders is an ordered list of ways for a user to identify themselves. When this list is empty, no identities are provisioned for users.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.IdentityProvider{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "tokenConfig": { - SchemaProps: spec.SchemaProps{ - Description: "tokenConfig contains options for authorization and access tokens", - Default: map[string]interface{}{}, - Ref: ref(configv1.TokenConfig{}.OpenAPIModelName()), - }, - }, - "templates": { - SchemaProps: spec.SchemaProps{ - Description: "templates allow you to customize pages like the login page.", - Default: map[string]interface{}{}, - Ref: ref(configv1.OAuthTemplates{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"tokenConfig"}, - }, - }, - Dependencies: []string{ - configv1.IdentityProvider{}.OpenAPIModelName(), configv1.OAuthTemplates{}.OpenAPIModelName(), configv1.TokenConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_OAuthStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OAuthStatus shows current known state of OAuth server in the cluster", - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_OAuthTemplates(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OAuthTemplates allow for customization of pages like the login page", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "login": { - SchemaProps: spec.SchemaProps{ - Description: "login is the name of a secret that specifies a go template to use to render the login page. The key \"login.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default login page is used. If the specified template is not valid, the default login page is used. If unspecified, the default login page is used. The namespace for this secret is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - "providerSelection": { - SchemaProps: spec.SchemaProps{ - Description: "providerSelection is the name of a secret that specifies a go template to use to render the provider selection page. The key \"providers.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default provider selection page is used. If the specified template is not valid, the default provider selection page is used. If unspecified, the default provider selection page is used. The namespace for this secret is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - "error": { - SchemaProps: spec.SchemaProps{ - Description: "error is the name of a secret that specifies a go template to use to render error pages during the authentication or grant flow. The key \"errors.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default error page is used. If the specified template is not valid, the default error page is used. If unspecified, the default error page is used. The namespace for this secret is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.SecretNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_OIDCClientConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OIDCClientConfig configures how platform clients interact with identity providers as an authentication method.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "componentName": { - SchemaProps: spec.SchemaProps{ - Description: "componentName is a required field that specifies the name of the platform component being configured to use the identity provider as an authentication mode.\n\nIt is used in combination with componentNamespace as a unique identifier.\n\ncomponentName must not be an empty string (\"\") and must not exceed 256 characters in length.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "componentNamespace": { - SchemaProps: spec.SchemaProps{ - Description: "componentNamespace is a required field that specifies the namespace in which the platform component being configured to use the identity provider as an authentication mode is running.\n\nIt is used in combination with componentName as a unique identifier.\n\ncomponentNamespace must not be an empty string (\"\") and must not exceed 63 characters in length.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientID": { - SchemaProps: spec.SchemaProps{ - Description: "clientID is a required field that configures the client identifier, from the identity provider, that the platform component uses for authentication requests made to the identity provider. The identity provider must accept this identifier for platform components to be able to use the identity provider as an authentication mode.\n\nclientID must not be an empty string (\"\").", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientSecret": { - SchemaProps: spec.SchemaProps{ - Description: "clientSecret is an optional field that configures the client secret used by the platform component when making authentication requests to the identity provider.\n\nWhen not specified, no client secret will be used when making authentication requests to the identity provider.\n\nWhen specified, clientSecret references a Secret in the 'openshift-config' namespace that contains the client secret in the 'clientSecret' key of the '.data' field.\n\nThe client secret will be used when making authentication requests to the identity provider.\n\nPublic clients do not require a client secret but private clients do require a client secret to work with the identity provider.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - "extraScopes": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "extraScopes is an optional field that configures the extra scopes that should be requested by the platform component when making authentication requests to the identity provider. This is useful if you have configured claim mappings that requires specific scopes to be requested beyond the standard OIDC scopes.\n\nWhen omitted, no additional scopes are requested.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"componentName", "componentNamespace", "clientID"}, - }, - }, - Dependencies: []string{ - configv1.SecretNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_OIDCClientReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OIDCClientReference is a reference to a platform component client configuration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "oidcProviderName": { - SchemaProps: spec.SchemaProps{ - Description: "oidcProviderName is a required reference to the 'name' of the identity provider configured in 'oidcProviders' that this client is associated with.\n\noidcProviderName must not be an empty string (\"\").", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "issuerURL": { - SchemaProps: spec.SchemaProps{ - Description: "issuerURL is a required field that specifies the URL of the identity provider that this client is configured to make requests against.\n\nissuerURL must use the 'https' scheme.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientID": { - SchemaProps: spec.SchemaProps{ - Description: "clientID is a required field that specifies the client identifier, from the identity provider, that the platform component is using for authentication requests made to the identity provider.\n\nclientID must not be empty.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"oidcProviderName", "issuerURL", "clientID"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_OIDCClientStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OIDCClientStatus represents the current state of platform components and how they interact with the configured identity providers.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "componentName": { - SchemaProps: spec.SchemaProps{ - Description: "componentName is a required field that specifies the name of the platform component using the identity provider as an authentication mode. It is used in combination with componentNamespace as a unique identifier.\n\ncomponentName must not be an empty string (\"\") and must not exceed 256 characters in length.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "componentNamespace": { - SchemaProps: spec.SchemaProps{ - Description: "componentNamespace is a required field that specifies the namespace in which the platform component using the identity provider as an authentication mode is running.\n\nIt is used in combination with componentName as a unique identifier.\n\ncomponentNamespace must not be an empty string (\"\") and must not exceed 63 characters in length.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "currentOIDCClients": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "issuerURL", - "clientID", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "currentOIDCClients is an optional list of clients that the component is currently using.\n\nEntries must have unique issuerURL/clientID pairs.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.OIDCClientReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "consumingUsers": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "consumingUsers is an optional list of ServiceAccounts requiring read permissions on the `clientSecret` secret.\n\nconsumingUsers must not exceed 5 entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions are used to communicate the state of the `oidcClients` entry.\n\nSupported conditions include Available, Degraded and Progressing.\n\nIf Available is true, the component is successfully using the configured client. If Degraded is true, that means something has gone wrong trying to handle the client configuration. If Progressing is true, that means the component is taking some action related to the `oidcClients` entry.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"componentName", "componentNamespace"}, - }, - }, - Dependencies: []string{ - configv1.OIDCClientReference{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_OIDCProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is a required field that configures the unique human-readable identifier associated with the identity provider. It is used to distinguish between multiple identity providers and has no impact on token validation or authentication mechanics.\n\nname must not be an empty string (\"\").", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "issuer": { - SchemaProps: spec.SchemaProps{ - Description: "issuer is a required field that configures how the platform interacts with the identity provider and how tokens issued from the identity provider are evaluated by the Kubernetes API server.", - Default: map[string]interface{}{}, - Ref: ref(configv1.TokenIssuer{}.OpenAPIModelName()), - }, - }, - "oidcClients": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "componentNamespace", - "componentName", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "oidcClients is an optional field that configures how on-cluster, platform clients should request tokens from the identity provider. oidcClients must not exceed 20 entries and entries must have unique namespace/name pairs.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.OIDCClientConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "claimMappings": { - SchemaProps: spec.SchemaProps{ - Description: "claimMappings is a required field that configures the rules to be used by the Kubernetes API server for translating claims in a JWT token, issued by the identity provider, to a cluster identity.", - Default: map[string]interface{}{}, - Ref: ref(configv1.TokenClaimMappings{}.OpenAPIModelName()), - }, - }, - "claimValidationRules": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "claimValidationRules is an optional field that configures the rules to be used by the Kubernetes API server for validating the claims in a JWT token issued by the identity provider.\n\nValidation rules are joined via an AND operation.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.TokenClaimValidationRule{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "userValidationRules": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "expression", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "userValidationRules is an optional field that configures the set of rules used to validate the cluster user identity that was constructed via mapping token claims to user identity attributes. Rules are CEL expressions that must evaluate to 'true' for authentication to succeed. If any rule in the chain of rules evaluates to 'false', authentication will fail. When specified, at least one rule must be specified and no more than 64 rules may be specified.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.TokenUserValidationRule{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "externalClaimsSources": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "externalClaimsSources is an optional field that can be used to configure sources, external to the token provided in a request, in which claims should be fetched from and made available to the claim mapping process that is used to build the identity of a token holder.\n\nFor example, fetching additional user metadata from an OIDC provider's UserInfo endpoint.\n\nWhen not specified, only claims present in the token itself will be available in the claim mapping process.\n\nWhen specified, at least one external claim source must be specified and no more than 5 sources may be specified. All external claim sources must have unique claim mappings. When an external source responds and resolves additional claims successfully, they will be made available as claims during the claim mapping process. Externally sourced claims with the same name as a claim existing within the token will overwrite the claim data from the token with the externally sourced information. If an external source does not respond, responds with an error, or the additional claim data cannot be resolved from the response successfully it will not be included in the claim data passed to the claim mapping process.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ExternalClaimsSource{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"name", "issuer", "claimMappings"}, - }, - }, - Dependencies: []string{ - configv1.ExternalClaimsSource{}.OpenAPIModelName(), configv1.OIDCClientConfig{}.OpenAPIModelName(), configv1.TokenClaimMappings{}.OpenAPIModelName(), configv1.TokenClaimValidationRule{}.OpenAPIModelName(), configv1.TokenIssuer{}.OpenAPIModelName(), configv1.TokenUserValidationRule{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ObjectReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ObjectReference contains enough information to let you inspect or modify the referred object.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "group": { - SchemaProps: spec.SchemaProps{ - Description: "group of the referent.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resource": { - SchemaProps: spec.SchemaProps{ - Description: "resource of the referent.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace of the referent.", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of the referent.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"group", "resource", "name"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_OldTLSProfile(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OldTLSProfile is a TLS security profile based on the \"old\" configuration of the Mozilla Server Side TLS configuration guidelines.", - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_OpenIDClaims(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "preferredUsername": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "preferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the sub claim", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "name": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "email": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "groups": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "groups is the list of claims value of which should be used to synchronize groups from the OIDC provider to OpenShift for the user. If multiple claims are specified, the first one with a non-empty value is used.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_OpenIDIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "clientID": { - SchemaProps: spec.SchemaProps{ - Description: "clientID is the oauth client ID", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientSecret": { - SchemaProps: spec.SchemaProps{ - Description: "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - "extraScopes": { - SchemaProps: spec.SchemaProps{ - Description: "extraScopes are any scopes to request in addition to the standard \"openid\" scope.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "extraAuthorizeParameters": { - SchemaProps: spec.SchemaProps{ - Description: "extraAuthorizeParameters are any custom parameters to add to the authorize request.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "issuer": { - SchemaProps: spec.SchemaProps{ - Description: "issuer is the URL that the OpenID Provider asserts as its Issuer Identifier. It must use the https scheme with no query or fragment component.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "claims": { - SchemaProps: spec.SchemaProps{ - Description: "claims mappings", - Default: map[string]interface{}{}, - Ref: ref(configv1.OpenIDClaims{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"clientID", "clientSecret", "issuer", "claims"}, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName(), configv1.OpenIDClaims{}.OpenAPIModelName(), configv1.SecretNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_OpenStackPlatformLoadBalancer(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OpenStackPlatformLoadBalancer defines the load balancer used by the cluster on OpenStack platform.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type defines the type of load balancer used by the cluster on OpenStack platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", - Default: "OpenShiftManagedDefault", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{}, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_OpenStackPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OpenStackPlatformSpec holds the desired state of the OpenStack infrastructure provider. This only includes fields that can be modified in the cluster.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "apiServerInternalIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "ingressIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "machineNetworks": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_OpenStackPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OpenStackPlatformStatus holds the current status of the OpenStack infrastructure provider.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "apiServerInternalIP": { - SchemaProps: spec.SchemaProps{ - Description: "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", - Type: []string{"string"}, - Format: "", - }, - }, - "apiServerInternalIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "cloudName": { - SchemaProps: spec.SchemaProps{ - Description: "cloudName is the name of the desired OpenStack cloud in the client configuration file (`clouds.yaml`).", - Type: []string{"string"}, - Format: "", - }, - }, - "ingressIP": { - SchemaProps: spec.SchemaProps{ - Description: "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", - Type: []string{"string"}, - Format: "", - }, - }, - "ingressIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "nodeDNSIP": { - SchemaProps: spec.SchemaProps{ - Description: "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for OpenStack deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.", - Type: []string{"string"}, - Format: "", - }, - }, - "loadBalancer": { - SchemaProps: spec.SchemaProps{ - Description: "loadBalancer defines how the load balancer used by the cluster is configured.", - Default: map[string]interface{}{"type": "OpenShiftManagedDefault"}, - Ref: ref(configv1.OpenStackPlatformLoadBalancer{}.OpenAPIModelName()), - }, - }, - "dnsRecordsType": { - SchemaProps: spec.SchemaProps{ - Description: "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"External", "Internal"}, - }, - }, - "machineNetworks": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"apiServerInternalIPs", "ingressIPs"}, - }, - }, - Dependencies: []string{ - configv1.OpenStackPlatformLoadBalancer{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_OperandVersion(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the particular operand this version is for. It usually matches container images, not operators.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version indicates which version of a particular operand is currently being managed. It must always match the Available operand. If 1.0.0 is Available, then this must indicate 1.0.0 even if the operator is trying to rollout 1.1.0", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "version"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_OperatorHub(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OperatorHub is the Schema for the operatorhubs API. It can be used to change the state of the default hub sources for OperatorHub on the cluster from enabled to disabled and vice versa.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.OperatorHubSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.OperatorHubStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec", "status"}, - }, - }, - Dependencies: []string{ - configv1.OperatorHubSpec{}.OpenAPIModelName(), configv1.OperatorHubStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_OperatorHubList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OperatorHubList contains a list of OperatorHub\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.OperatorHub{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.OperatorHub{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_OperatorHubSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OperatorHubSpec defines the desired state of OperatorHub", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "disableAllDefaultSources": { - SchemaProps: spec.SchemaProps{ - Description: "disableAllDefaultSources allows you to disable all the default hub sources. If this is true, a specific entry in sources can be used to enable a default source. If this is false, a specific entry in sources can be used to disable or enable a default source.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "sources": { - SchemaProps: spec.SchemaProps{ - Description: "sources is the list of default hub sources and their configuration. If the list is empty, it implies that the default hub sources are enabled on the cluster unless disableAllDefaultSources is true. If disableAllDefaultSources is true and sources is not empty, the configuration present in sources will take precedence. The list of default hub sources and their current state will always be reflected in the status block.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.HubSource{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.HubSource{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_OperatorHubStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OperatorHubStatus defines the observed state of OperatorHub. The current state of the default hub sources will always be reflected here.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "sources": { - SchemaProps: spec.SchemaProps{ - Description: "sources encapsulates the result of applying the configuration for each hub source", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.HubSourceStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.HubSourceStatus{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_OvirtPlatformLoadBalancer(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OvirtPlatformLoadBalancer defines the load balancer used by the cluster on Ovirt platform.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type defines the type of load balancer used by the cluster on Ovirt platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", - Default: "OpenShiftManagedDefault", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{}, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_OvirtPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OvirtPlatformSpec holds the desired state of the oVirt infrastructure provider. This only includes fields that can be modified in the cluster.", - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_OvirtPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OvirtPlatformStatus holds the current status of the oVirt infrastructure provider.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "apiServerInternalIP": { - SchemaProps: spec.SchemaProps{ - Description: "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", - Type: []string{"string"}, - Format: "", - }, - }, - "apiServerInternalIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "ingressIP": { - SchemaProps: spec.SchemaProps{ - Description: "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", - Type: []string{"string"}, - Format: "", - }, - }, - "ingressIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "nodeDNSIP": { - SchemaProps: spec.SchemaProps{ - Description: "deprecated: as of 4.6, this field is no longer set or honored. It will be removed in a future release.", - Type: []string{"string"}, - Format: "", - }, - }, - "loadBalancer": { - SchemaProps: spec.SchemaProps{ - Description: "loadBalancer defines how the load balancer used by the cluster is configured.", - Default: map[string]interface{}{"type": "OpenShiftManagedDefault"}, - Ref: ref(configv1.OvirtPlatformLoadBalancer{}.OpenAPIModelName()), - }, - }, - "dnsRecordsType": { - SchemaProps: spec.SchemaProps{ - Description: "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"External", "Internal"}, - }, - }, - }, - Required: []string{"apiServerInternalIPs", "ingressIPs"}, - }, - }, - Dependencies: []string{ - configv1.OvirtPlatformLoadBalancer{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_PKICertificateSubject(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PKICertificateSubject defines the requirements imposed on the subject to which the certificate was issued.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "email": { - SchemaProps: spec.SchemaProps{ - Description: "email specifies the expected email address imposed on the subject to which the certificate was issued, and must match the email address listed in the Subject Alternative Name (SAN) field of the certificate. The email must be a valid email address and at most 320 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - "hostname": { - SchemaProps: spec.SchemaProps{ - Description: "hostname specifies the expected hostname imposed on the subject to which the certificate was issued, and it must match the hostname listed in the Subject Alternative Name (SAN) DNS field of the certificate. The hostname must be a valid dns 1123 subdomain name, optionally prefixed by '*.', and at most 253 characters in length. It must consist only of lowercase alphanumeric characters, hyphens, periods and the optional preceding asterisk.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_PersistentVolumeClaimReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PersistentVolumeClaimReference is a reference to a PersistentVolumeClaim.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the PersistentVolumeClaim that will be used to store the Insights data archive. It is a string that follows the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start and end with an alphanumeric character.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_PersistentVolumeConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PersistentVolumeConfig provides configuration options for PersistentVolume storage.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "claim": { - SchemaProps: spec.SchemaProps{ - Description: "claim is a required field that specifies the configuration of the PersistentVolumeClaim that will be used to store the Insights data archive. The PersistentVolumeClaim must be created in the openshift-insights namespace.", - Default: map[string]interface{}{}, - Ref: ref(configv1.PersistentVolumeClaimReference{}.OpenAPIModelName()), - }, - }, - "mountPath": { - SchemaProps: spec.SchemaProps{ - Description: "mountPath is an optional field specifying the directory where the PVC will be mounted inside the Insights data gathering Pod. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default mount path is /var/lib/insights-operator The path may not exceed 1024 characters and must not contain a colon.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"claim"}, - }, - }, - Dependencies: []string{ - configv1.PersistentVolumeClaimReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_PlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PlatformSpec holds the desired state specific to the underlying infrastructure provider of the current cluster. Since these are used at spec-level for the underlying cluster, it is supposed that only one of the spec structs is set.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the underlying infrastructure provider for the cluster. This value controls whether infrastructure automation such as service load balancers, dynamic volume provisioning, machine creation and deletion, and other integrations are enabled. If None, no infrastructure automation is enabled. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"IBMCloud\", \"KubeVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\", \"External\", and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "aws": { - SchemaProps: spec.SchemaProps{ - Description: "aws contains settings specific to the Amazon Web Services infrastructure provider.", - Ref: ref(configv1.AWSPlatformSpec{}.OpenAPIModelName()), - }, - }, - "azure": { - SchemaProps: spec.SchemaProps{ - Description: "azure contains settings specific to the Azure infrastructure provider.", - Ref: ref(configv1.AzurePlatformSpec{}.OpenAPIModelName()), - }, - }, - "gcp": { - SchemaProps: spec.SchemaProps{ - Description: "gcp contains settings specific to the Google Cloud Platform infrastructure provider.", - Ref: ref(configv1.GCPPlatformSpec{}.OpenAPIModelName()), - }, - }, - "baremetal": { - SchemaProps: spec.SchemaProps{ - Description: "baremetal contains settings specific to the BareMetal platform.", - Ref: ref(configv1.BareMetalPlatformSpec{}.OpenAPIModelName()), - }, - }, - "openstack": { - SchemaProps: spec.SchemaProps{ - Description: "openstack contains settings specific to the OpenStack infrastructure provider.", - Ref: ref(configv1.OpenStackPlatformSpec{}.OpenAPIModelName()), - }, - }, - "ovirt": { - SchemaProps: spec.SchemaProps{ - Description: "ovirt contains settings specific to the oVirt infrastructure provider.", - Ref: ref(configv1.OvirtPlatformSpec{}.OpenAPIModelName()), - }, - }, - "vsphere": { - SchemaProps: spec.SchemaProps{ - Description: "vsphere contains settings specific to the VSphere infrastructure provider.", - Ref: ref(configv1.VSpherePlatformSpec{}.OpenAPIModelName()), - }, - }, - "ibmcloud": { - SchemaProps: spec.SchemaProps{ - Description: "ibmcloud contains settings specific to the IBMCloud infrastructure provider.", - Ref: ref(configv1.IBMCloudPlatformSpec{}.OpenAPIModelName()), - }, - }, - "kubevirt": { - SchemaProps: spec.SchemaProps{ - Description: "kubevirt contains settings specific to the kubevirt infrastructure provider.", - Ref: ref(configv1.KubevirtPlatformSpec{}.OpenAPIModelName()), - }, - }, - "equinixMetal": { - SchemaProps: spec.SchemaProps{ - Description: "equinixMetal contains settings specific to the Equinix Metal infrastructure provider.", - Ref: ref(configv1.EquinixMetalPlatformSpec{}.OpenAPIModelName()), - }, - }, - "powervs": { - SchemaProps: spec.SchemaProps{ - Description: "powervs contains settings specific to the IBM Power Systems Virtual Servers infrastructure provider.", - Ref: ref(configv1.PowerVSPlatformSpec{}.OpenAPIModelName()), - }, - }, - "alibabaCloud": { - SchemaProps: spec.SchemaProps{ - Description: "alibabaCloud contains settings specific to the Alibaba Cloud infrastructure provider.", - Ref: ref(configv1.AlibabaCloudPlatformSpec{}.OpenAPIModelName()), - }, - }, - "nutanix": { - SchemaProps: spec.SchemaProps{ - Description: "nutanix contains settings specific to the Nutanix infrastructure provider.", - Ref: ref(configv1.NutanixPlatformSpec{}.OpenAPIModelName()), - }, - }, - "external": { - SchemaProps: spec.SchemaProps{ - Description: "ExternalPlatformType represents generic infrastructure provider. Platform-specific components should be supplemented separately.", - Ref: ref(configv1.ExternalPlatformSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - }, - Dependencies: []string{ - configv1.AWSPlatformSpec{}.OpenAPIModelName(), configv1.AlibabaCloudPlatformSpec{}.OpenAPIModelName(), configv1.AzurePlatformSpec{}.OpenAPIModelName(), configv1.BareMetalPlatformSpec{}.OpenAPIModelName(), configv1.EquinixMetalPlatformSpec{}.OpenAPIModelName(), configv1.ExternalPlatformSpec{}.OpenAPIModelName(), configv1.GCPPlatformSpec{}.OpenAPIModelName(), configv1.IBMCloudPlatformSpec{}.OpenAPIModelName(), configv1.KubevirtPlatformSpec{}.OpenAPIModelName(), configv1.NutanixPlatformSpec{}.OpenAPIModelName(), configv1.OpenStackPlatformSpec{}.OpenAPIModelName(), configv1.OvirtPlatformSpec{}.OpenAPIModelName(), configv1.PowerVSPlatformSpec{}.OpenAPIModelName(), configv1.VSpherePlatformSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_PlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PlatformStatus holds the current status specific to the underlying infrastructure provider of the current cluster. Since these are used at status-level for the underlying cluster, it is supposed that only one of the status structs is set.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the underlying infrastructure provider for the cluster. This value controls whether infrastructure automation such as service load balancers, dynamic volume provisioning, machine creation and deletion, and other integrations are enabled. If None, no infrastructure automation is enabled. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.\n\nThis value will be synced with to the `status.platform` and `status.platformStatus.type`. Currently this value cannot be changed once set.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "aws": { - SchemaProps: spec.SchemaProps{ - Description: "aws contains settings specific to the Amazon Web Services infrastructure provider.", - Ref: ref(configv1.AWSPlatformStatus{}.OpenAPIModelName()), - }, - }, - "azure": { - SchemaProps: spec.SchemaProps{ - Description: "azure contains settings specific to the Azure infrastructure provider.", - Ref: ref(configv1.AzurePlatformStatus{}.OpenAPIModelName()), - }, - }, - "gcp": { - SchemaProps: spec.SchemaProps{ - Description: "gcp contains settings specific to the Google Cloud Platform infrastructure provider.", - Ref: ref(configv1.GCPPlatformStatus{}.OpenAPIModelName()), - }, - }, - "baremetal": { - SchemaProps: spec.SchemaProps{ - Description: "baremetal contains settings specific to the BareMetal platform.", - Ref: ref(configv1.BareMetalPlatformStatus{}.OpenAPIModelName()), - }, - }, - "openstack": { - SchemaProps: spec.SchemaProps{ - Description: "openstack contains settings specific to the OpenStack infrastructure provider.", - Ref: ref(configv1.OpenStackPlatformStatus{}.OpenAPIModelName()), - }, - }, - "ovirt": { - SchemaProps: spec.SchemaProps{ - Description: "ovirt contains settings specific to the oVirt infrastructure provider.", - Ref: ref(configv1.OvirtPlatformStatus{}.OpenAPIModelName()), - }, - }, - "vsphere": { - SchemaProps: spec.SchemaProps{ - Description: "vsphere contains settings specific to the VSphere infrastructure provider.", - Ref: ref(configv1.VSpherePlatformStatus{}.OpenAPIModelName()), - }, - }, - "ibmcloud": { - SchemaProps: spec.SchemaProps{ - Description: "ibmcloud contains settings specific to the IBMCloud infrastructure provider.", - Ref: ref(configv1.IBMCloudPlatformStatus{}.OpenAPIModelName()), - }, - }, - "kubevirt": { - SchemaProps: spec.SchemaProps{ - Description: "kubevirt contains settings specific to the kubevirt infrastructure provider.", - Ref: ref(configv1.KubevirtPlatformStatus{}.OpenAPIModelName()), - }, - }, - "equinixMetal": { - SchemaProps: spec.SchemaProps{ - Description: "equinixMetal contains settings specific to the Equinix Metal infrastructure provider.", - Ref: ref(configv1.EquinixMetalPlatformStatus{}.OpenAPIModelName()), - }, - }, - "powervs": { - SchemaProps: spec.SchemaProps{ - Description: "powervs contains settings specific to the Power Systems Virtual Servers infrastructure provider.", - Ref: ref(configv1.PowerVSPlatformStatus{}.OpenAPIModelName()), - }, - }, - "alibabaCloud": { - SchemaProps: spec.SchemaProps{ - Description: "alibabaCloud contains settings specific to the Alibaba Cloud infrastructure provider.", - Ref: ref(configv1.AlibabaCloudPlatformStatus{}.OpenAPIModelName()), - }, - }, - "nutanix": { - SchemaProps: spec.SchemaProps{ - Description: "nutanix contains settings specific to the Nutanix infrastructure provider.", - Ref: ref(configv1.NutanixPlatformStatus{}.OpenAPIModelName()), - }, - }, - "external": { - SchemaProps: spec.SchemaProps{ - Description: "external contains settings specific to the generic External infrastructure provider.", - Ref: ref(configv1.ExternalPlatformStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - }, - Dependencies: []string{ - configv1.AWSPlatformStatus{}.OpenAPIModelName(), configv1.AlibabaCloudPlatformStatus{}.OpenAPIModelName(), configv1.AzurePlatformStatus{}.OpenAPIModelName(), configv1.BareMetalPlatformStatus{}.OpenAPIModelName(), configv1.EquinixMetalPlatformStatus{}.OpenAPIModelName(), configv1.ExternalPlatformStatus{}.OpenAPIModelName(), configv1.GCPPlatformStatus{}.OpenAPIModelName(), configv1.IBMCloudPlatformStatus{}.OpenAPIModelName(), configv1.KubevirtPlatformStatus{}.OpenAPIModelName(), configv1.NutanixPlatformStatus{}.OpenAPIModelName(), configv1.OpenStackPlatformStatus{}.OpenAPIModelName(), configv1.OvirtPlatformStatus{}.OpenAPIModelName(), configv1.PowerVSPlatformStatus{}.OpenAPIModelName(), configv1.VSpherePlatformStatus{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_PolicyFulcioSubject(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PolicyFulcioSubject defines the OIDC issuer and the email of the Fulcio authentication configuration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "oidcIssuer": { - SchemaProps: spec.SchemaProps{ - Description: "oidcIssuer is a required filed contains the expected OIDC issuer. The oidcIssuer must be a valid URL and at most 2048 characters in length. It will be verified that the Fulcio-issued certificate contains a (Fulcio-defined) certificate extension pointing at this OIDC issuer URL. When Fulcio issues certificates, it includes a value based on an URL inside the client-provided ID token. Example: \"https://expected.OIDC.issuer/\"", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "signedEmail": { - SchemaProps: spec.SchemaProps{ - Description: "signedEmail is a required field holds the email address that the Fulcio certificate is issued for. The signedEmail must be a valid email address and at most 320 characters in length. Example: \"expected-signing-user@example.com\"", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"oidcIssuer", "signedEmail"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_PolicyIdentity(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PolicyIdentity defines image identity the signature claims about the image. When omitted, the default matchPolicy is \"MatchRepoDigestOrExact\".", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "matchPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "matchPolicy is a required filed specifies matching strategy to verify the image identity in the signature against the image scope. Allowed values are \"MatchRepoDigestOrExact\", \"MatchRepository\", \"ExactRepository\", \"RemapIdentity\". When omitted, the default value is \"MatchRepoDigestOrExact\". When set to \"MatchRepoDigestOrExact\", the identity in the signature must be in the same repository as the image identity if the image identity is referenced by a digest. Otherwise, the identity in the signature must be the same as the image identity. When set to \"MatchRepository\", the identity in the signature must be in the same repository as the image identity. When set to \"ExactRepository\", the exactRepository must be specified. The identity in the signature must be in the same repository as a specific identity specified by \"repository\". When set to \"RemapIdentity\", the remapIdentity must be specified. The signature must be in the same as the remapped image identity. Remapped image identity is obtained by replacing the \"prefix\" with the specified “signedPrefix” if the the image identity matches the specified remapPrefix.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "exactRepository": { - SchemaProps: spec.SchemaProps{ - Description: "exactRepository specifies the repository that must be exactly matched by the identity in the signature. exactRepository is required if matchPolicy is set to \"ExactRepository\". It is used to verify that the signature claims an identity matching this exact repository, rather than the original image identity.", - Ref: ref(configv1.PolicyMatchExactRepository{}.OpenAPIModelName()), - }, - }, - "remapIdentity": { - SchemaProps: spec.SchemaProps{ - Description: "remapIdentity specifies the prefix remapping rule for verifying image identity. remapIdentity is required if matchPolicy is set to \"RemapIdentity\". It is used to verify that the signature claims a different registry/repository prefix than the original image.", - Ref: ref(configv1.PolicyMatchRemapIdentity{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"matchPolicy"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "matchPolicy", - "fields-to-discriminateBy": map[string]interface{}{ - "exactRepository": "PolicyMatchExactRepository", - "remapIdentity": "PolicyMatchRemapIdentity", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.PolicyMatchExactRepository{}.OpenAPIModelName(), configv1.PolicyMatchRemapIdentity{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_PolicyMatchExactRepository(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "repository": { - SchemaProps: spec.SchemaProps{ - Description: "repository is the reference of the image identity to be matched. repository is required if matchPolicy is set to \"ExactRepository\". The value should be a repository name (by omitting the tag or digest) in a registry implementing the \"Docker Registry HTTP API V2\". For example, docker.io/library/busybox", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"repository"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_PolicyMatchRemapIdentity(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "prefix": { - SchemaProps: spec.SchemaProps{ - Description: "prefix is required if matchPolicy is set to \"RemapIdentity\". prefix is the prefix of the image identity to be matched. If the image identity matches the specified prefix, that prefix is replaced by the specified “signedPrefix” (otherwise it is used as unchanged and no remapping takes place). This is useful when verifying signatures for a mirror of some other repository namespace that preserves the vendor’s repository structure. The prefix and signedPrefix values can be either host[:port] values (matching exactly the same host[:port], string), repository namespaces, or repositories (i.e. they must not contain tags/digests), and match as prefixes of the fully expanded form. For example, docker.io/library/busybox (not busybox) to specify that single repository, or docker.io/library (not an empty string) to specify the parent namespace of docker.io/library/busybox.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "signedPrefix": { - SchemaProps: spec.SchemaProps{ - Description: "signedPrefix is required if matchPolicy is set to \"RemapIdentity\". signedPrefix is the prefix of the image identity to be matched in the signature. The format is the same as \"prefix\". The values can be either host[:port] values (matching exactly the same host[:port], string), repository namespaces, or repositories (i.e. they must not contain tags/digests), and match as prefixes of the fully expanded form. For example, docker.io/library/busybox (not busybox) to specify that single repository, or docker.io/library (not an empty string) to specify the parent namespace of docker.io/library/busybox.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"prefix", "signedPrefix"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_PolicyRootOfTrust(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PolicyRootOfTrust defines the root of trust based on the selected policyType.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "policyType": { - SchemaProps: spec.SchemaProps{ - Description: "policyType is a required field specifies the type of the policy for verification. This field must correspond to how the policy was generated. Allowed values are \"PublicKey\", \"FulcioCAWithRekor\", and \"PKI\". When set to \"PublicKey\", the policy relies on a sigstore publicKey and may optionally use a Rekor verification. When set to \"FulcioCAWithRekor\", the policy is based on the Fulcio certification and incorporates a Rekor verification. When set to \"PKI\", the policy is based on the certificates from Bring Your Own Public Key Infrastructure (BYOPKI).", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "publicKey": { - SchemaProps: spec.SchemaProps{ - Description: "publicKey defines the root of trust configuration based on a sigstore public key. Optionally include a Rekor public key for Rekor verification. publicKey is required when policyType is PublicKey, and forbidden otherwise.", - Ref: ref(configv1.ImagePolicyPublicKeyRootOfTrust{}.OpenAPIModelName()), - }, - }, - "fulcioCAWithRekor": { - SchemaProps: spec.SchemaProps{ - Description: "fulcioCAWithRekor defines the root of trust configuration based on the Fulcio certificate and the Rekor public key. fulcioCAWithRekor is required when policyType is FulcioCAWithRekor, and forbidden otherwise For more information about Fulcio and Rekor, please refer to the document at: https://github.com/sigstore/fulcio and https://github.com/sigstore/rekor", - Ref: ref(configv1.ImagePolicyFulcioCAWithRekorRootOfTrust{}.OpenAPIModelName()), - }, - }, - "pki": { - SchemaProps: spec.SchemaProps{ - Description: "pki defines the root of trust configuration based on Bring Your Own Public Key Infrastructure (BYOPKI) Root CA(s) and corresponding intermediate certificates. pki is required when policyType is PKI, and forbidden otherwise.", - Ref: ref(configv1.ImagePolicyPKIRootOfTrust{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"policyType"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "policyType", - "fields-to-discriminateBy": map[string]interface{}{ - "fulcioCAWithRekor": "FulcioCAWithRekor", - "pki": "PKI", - "publicKey": "PublicKey", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.ImagePolicyFulcioCAWithRekorRootOfTrust{}.OpenAPIModelName(), configv1.ImagePolicyPKIRootOfTrust{}.OpenAPIModelName(), configv1.ImagePolicyPublicKeyRootOfTrust{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_PowerVSPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PowerVSPlatformSpec holds the desired state of the IBM Power Systems Virtual Servers infrastructure provider. This only includes fields that can be modified in the cluster.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "serviceEndpoints": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of a Power VS service.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.PowerVSServiceEndpoint{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.PowerVSServiceEndpoint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_PowerVSPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PowerVSPlatformStatus holds the current status of the IBM Power Systems Virtual Servers infrastrucutre provider.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "region": { - SchemaProps: spec.SchemaProps{ - Description: "region holds the default Power VS region for new Power VS resources created by the cluster.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "zone": { - SchemaProps: spec.SchemaProps{ - Description: "zone holds the default zone for the new Power VS resources created by the cluster. Note: Currently only single-zone OCP clusters are supported", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resourceGroup": { - SchemaProps: spec.SchemaProps{ - Description: "resourceGroup is the resource group name for new IBMCloud resources created for a cluster. The resource group specified here will be used by cluster-image-registry-operator to set up a COS Instance in IBMCloud for the cluster registry. More about resource groups can be found here: https://cloud.ibm.com/docs/account?topic=account-rgs. When omitted, the image registry operator won't be able to configure storage, which results in the image registry cluster operator not being in an available state.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "serviceEndpoints": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of a Power VS service.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.PowerVSServiceEndpoint{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "cisInstanceCRN": { - SchemaProps: spec.SchemaProps{ - Description: "cisInstanceCRN is the CRN of the Cloud Internet Services instance managing the DNS zone for the cluster's base domain", - Type: []string{"string"}, - Format: "", - }, - }, - "dnsInstanceCRN": { - SchemaProps: spec.SchemaProps{ - Description: "dnsInstanceCRN is the CRN of the DNS Services instance managing the DNS zone for the cluster's base domain", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"region", "zone"}, - }, - }, - Dependencies: []string{ - configv1.PowerVSServiceEndpoint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_PowerVSServiceEndpoint(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PowervsServiceEndpoint stores the configuration of a custom url to override existing defaults of PowerVS Services.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the Power VS service. Few of the services are IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api ResourceController - https://cloud.ibm.com/apidocs/resource-controller/resource-controller Power Cloud - https://cloud.ibm.com/apidocs/power-cloud", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "url"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_PrefixedClaimMapping(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PrefixedClaimMapping configures a claim mapping that allows for an optional prefix.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "claim": { - SchemaProps: spec.SchemaProps{ - Description: "claim is an optional field for specifying the JWT token claim that is used in the mapping. The value of this claim will be assigned to the field in which this mapping is associated. claim must not exceed 256 characters in length. When set to the empty string `\"\"`, this means that no named claim should be used for the group mapping. claim is required when the ExternalOIDCWithUpstreamParity feature gate is not enabled.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "expression": { - SchemaProps: spec.SchemaProps{ - Description: "expression is an optional CEL expression used to derive group values from JWT claims.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length .\n\nWhen specified, claim must not be set or be explicitly set to the empty string (`\"\"`).", - Type: []string{"string"}, - Format: "", - }, - }, - "prefix": { - SchemaProps: spec.SchemaProps{ - Description: "prefix is an optional field that configures the prefix that will be applied to the cluster identity attribute during the process of mapping JWT claims to cluster identity attributes.\n\nWhen omitted or set to an empty string (\"\"), no prefix is applied to the cluster identity attribute. Must not be set to a non-empty value when expression is set.\n\nExample: if `prefix` is set to \"myoidc:\" and the `claim` in JWT contains an array of strings \"a\", \"b\" and \"c\", the mapping will result in an array of string \"myoidc:a\", \"myoidc:b\" and \"myoidc:c\".", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_ProfileCustomizations(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ProfileCustomizations contains various parameters for modifying the default behavior of certain profiles", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "dynamicResourceAllocation": { - SchemaProps: spec.SchemaProps{ - Description: "dynamicResourceAllocation allows to enable or disable dynamic resource allocation within the scheduler. Dynamic resource allocation is an API for requesting and sharing resources between pods and containers inside a pod. Third-party resource drivers are responsible for tracking and allocating resources. Different kinds of resources support arbitrary parameters for defining requirements and initialization. Valid values are Enabled, Disabled and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is Disabled.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_Project(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Project holds cluster-wide information about Project. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.ProjectSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ProjectStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.ProjectSpec{}.OpenAPIModelName(), configv1.ProjectStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ProjectList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.Project{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.Project{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ProjectSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ProjectSpec holds the project creation configuration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "projectRequestMessage": { - SchemaProps: spec.SchemaProps{ - Description: "projectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "projectRequestTemplate": { - SchemaProps: spec.SchemaProps{ - Description: "projectRequestTemplate is the template to use for creating projects in response to projectrequest. This must point to a template in 'openshift-config' namespace. It is optional. If it is not specified, a default template is used.", - Default: map[string]interface{}{}, - Ref: ref(configv1.TemplateReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.TemplateReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ProjectStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_PromQLClusterCondition(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PromQLClusterCondition represents a cluster condition based on PromQL.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "promql": { - SchemaProps: spec.SchemaProps{ - Description: "promql is a PromQL query classifying clusters. This query query should return a 1 in the match case and a 0 in the does-not-match case. Queries which return no time series, or which return values besides 0 or 1, are evaluation failures.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"promql"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_Proxy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Proxy holds cluster-wide information on how to configure default proxies for the cluster. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user-settable values for the proxy configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.ProxySpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ProxyStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.ProxySpec{}.OpenAPIModelName(), configv1.ProxyStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ProxyList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.Proxy{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.Proxy{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ProxySpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ProxySpec contains cluster proxy creation configuration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "httpProxy": { - SchemaProps: spec.SchemaProps{ - Description: "httpProxy is the URL of the proxy for HTTP requests. Empty means unset and will not result in an env var.", - Type: []string{"string"}, - Format: "", - }, - }, - "httpsProxy": { - SchemaProps: spec.SchemaProps{ - Description: "httpsProxy is the URL of the proxy for HTTPS requests. Empty means unset and will not result in an env var.", - Type: []string{"string"}, - Format: "", - }, - }, - "noProxy": { - SchemaProps: spec.SchemaProps{ - Description: "noProxy is a comma-separated list of hostnames and/or CIDRs and/or IPs for which the proxy should not be used. Empty means unset and will not result in an env var.", - Type: []string{"string"}, - Format: "", - }, - }, - "readinessEndpoints": { - SchemaProps: spec.SchemaProps{ - Description: "readinessEndpoints is a list of endpoints used to verify readiness of the proxy.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "trustedCA": { - SchemaProps: spec.SchemaProps{ - Description: "trustedCA is a reference to a ConfigMap containing a CA certificate bundle. The trustedCA field should only be consumed by a proxy validator. The validator is responsible for reading the certificate bundle from the required key \"ca-bundle.crt\", merging it with the system default trust bundle, and writing the merged trust bundle to a ConfigMap named \"trusted-ca-bundle\" in the \"openshift-config-managed\" namespace. Clients that expect to make proxy connections must use the trusted-ca-bundle for all HTTPS requests to the proxy, and may use the trusted-ca-bundle for non-proxy HTTPS requests as well.\n\nThe namespace for the ConfigMap referenced by trustedCA is \"openshift-config\". Here is an example ConfigMap (in yaml):\n\napiVersion: v1 kind: ConfigMap metadata:\n name: user-ca-bundle\n namespace: openshift-config\n data:\n ca-bundle.crt: |\n -----BEGIN CERTIFICATE-----\n Custom CA certificate bundle.\n -----END CERTIFICATE-----", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_ProxyStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ProxyStatus shows current known state of the cluster proxy.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "httpProxy": { - SchemaProps: spec.SchemaProps{ - Description: "httpProxy is the URL of the proxy for HTTP requests.", - Type: []string{"string"}, - Format: "", - }, - }, - "httpsProxy": { - SchemaProps: spec.SchemaProps{ - Description: "httpsProxy is the URL of the proxy for HTTPS requests.", - Type: []string{"string"}, - Format: "", - }, - }, - "noProxy": { - SchemaProps: spec.SchemaProps{ - Description: "noProxy is a comma-separated list of hostnames and/or CIDRs for which the proxy should not be used.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_RegistryLocation(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "domainName": { - SchemaProps: spec.SchemaProps{ - Description: "domainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "insecure": { - SchemaProps: spec.SchemaProps{ - Description: "insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"domainName"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_RegistrySources(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RegistrySources holds cluster-wide information about how to handle the registries config.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "insecureRegistries": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "insecureRegistries are registries which do not have a valid TLS certificates or only support HTTP connections. Each entry must be a valid registry scope in the format hostname[:port][/path], optionally prefixed with \"*.\" for wildcard subdomains (e.g., \"*.example.com\"). The hostname must consist of valid DNS labels separated by dots, where each label contains only alphanumeric characters and hyphens and does not start or end with a hyphen. Entries must not be empty, must not include tags (e.g., \":latest\") or digests (e.g., \"@sha256:...\"), and must be at most 256 characters in length. The list may contain at most 1024 entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "blockedRegistries": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "blockedRegistries cannot be used for image pull and push actions. All other registries are permitted. Each entry must be a valid registry scope in the format hostname[:port][/path], optionally prefixed with \"*.\" for wildcard subdomains (e.g., \"*.example.com\"). The hostname must consist of valid DNS labels separated by dots, where each label contains only alphanumeric characters and hyphens and does not start or end with a hyphen. Entries must not be empty, must not include tags (e.g., \":latest\") or digests (e.g., \"@sha256:...\"), and must be at most 256 characters in length. The list may contain at most 1024 entries.\n\nOnly one of BlockedRegistries or AllowedRegistries may be set.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "allowedRegistries": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "allowedRegistries are the only registries permitted for image pull and push actions. All other registries are denied. Each entry must be a valid registry scope in the format hostname[:port][/path], optionally prefixed with \"*.\" for wildcard subdomains (e.g., \"*.example.com\"). The hostname must consist of valid DNS labels separated by dots, where each label contains only alphanumeric characters and hyphens and does not start or end with a hyphen. Entries must not be empty, must not include tags (e.g., \":latest\") or digests (e.g., \"@sha256:...\"), and must be at most 256 characters in length. The list may contain at most 1024 entries.\n\nOnly one of BlockedRegistries or AllowedRegistries may be set.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "containerRuntimeSearchRegistries": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "containerRuntimeSearchRegistries are registries that will be searched when pulling images that do not have fully qualified domains in their pull specs. Registries will be searched in the order provided in the list. Note: this search list only works with the container runtime, i.e CRI-O. Will NOT work with builds or imagestream imports.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_Release(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Release represents an OpenShift release image and associated metadata.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "architecture": { - SchemaProps: spec.SchemaProps{ - Description: "architecture is an optional field that indicates the value of the cluster architecture. In this context cluster architecture means either a single architecture or a multi architecture. Valid values are 'Multi' and empty.", - Type: []string{"string"}, - Format: "", - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is a semantic version identifying the update version. When this field is part of spec, version is optional if image is specified.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "image": { - SchemaProps: spec.SchemaProps{ - Description: "image is a container image location that contains the update. When this field is part of spec, image is optional if version is specified and the availableUpdates field contains a matching version.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url contains information about this release. This URL is set by the 'url' metadata property on a release or the metadata returned by the update API and should be displayed as a link in user interfaces. The URL field may not be set for test or nightly releases.", - Type: []string{"string"}, - Format: "", - }, - }, - "channels": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "channels is the set of Cincinnati channels to which the release currently belongs.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"version", "image"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_RemoteConnectionInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RemoteConnectionInfo holds information necessary for establishing a remote connection", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url is the remote URL to connect to", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is the CA for verifying TLS connections", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"url", "ca", "certFile", "keyFile"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_RepositoryDigestMirrors(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RepositoryDigestMirrors holds cluster-wide information about how to handle mirrors in the registries config.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "source": { - SchemaProps: spec.SchemaProps{ - Description: "source is the repository that users refer to, e.g. in image pull specifications.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "allowMirrorByTags": { - SchemaProps: spec.SchemaProps{ - Description: "allowMirrorByTags if true, the mirrors can be used to pull the images that are referenced by their tags. Default is false, the mirrors only work when pulling the images that are referenced by their digests. Pulling images by tag can potentially yield different images, depending on which endpoint we pull from. Forcing digest-pulls for mirrors avoids that issue.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "mirrors": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "mirrors is zero or more repositories that may also contain the same images. If the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec. No mirror will be configured. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. Other cluster configuration, including (but not limited to) other repositoryDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"source"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_RequestHeaderIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "loginURL": { - SchemaProps: spec.SchemaProps{ - Description: "loginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}\nRequired when login is set to true.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "challengeURL": { - SchemaProps: spec.SchemaProps{ - Description: "challengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here. ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}\nRequired when challenge is set to true.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is a required reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. Specifically, it allows verification of incoming requests to prevent header spoofing. The key \"ca.crt\" is used to locate the data. If the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. The namespace for this config map is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - "clientCommonNames": { - SchemaProps: spec.SchemaProps{ - Description: "clientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "headers": { - SchemaProps: spec.SchemaProps{ - Description: "headers is the set of headers to check for identity information", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "preferredUsernameHeaders": { - SchemaProps: spec.SchemaProps{ - Description: "preferredUsernameHeaders is the set of headers to check for the preferred username", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "nameHeaders": { - SchemaProps: spec.SchemaProps{ - Description: "nameHeaders is the set of headers to check for the display name", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "emailHeaders": { - SchemaProps: spec.SchemaProps{ - Description: "emailHeaders is the set of headers to check for the email address", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"loginURL", "challengeURL", "ca", "headers", "preferredUsernameHeaders", "nameHeaders", "emailHeaders"}, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_RequiredHSTSPolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "namespaceSelector": { - SchemaProps: spec.SchemaProps{ - Description: "namespaceSelector specifies a label selector such that the policy applies only to those routes that are in namespaces with labels that match the selector, and are in one of the DomainPatterns. Defaults to the empty LabelSelector, which matches everything.", - Ref: ref(metav1.LabelSelector{}.OpenAPIModelName()), - }, - }, - "domainPatterns": { - SchemaProps: spec.SchemaProps{ - Description: "domainPatterns is a list of domains for which the desired HSTS annotations are required. If domainPatterns is specified and a route is created with a spec.host matching one of the domains, the route must specify the HSTS Policy components described in the matching RequiredHSTSPolicy.\n\nThe use of wildcards is allowed like this: *.foo.com matches everything under foo.com. foo.com only matches foo.com, so to cover foo.com and everything under it, you must specify *both*.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "maxAge": { - SchemaProps: spec.SchemaProps{ - Description: "maxAge is the delta time range in seconds during which hosts are regarded as HSTS hosts. If set to 0, it negates the effect, and hosts are removed as HSTS hosts. If set to 0 and includeSubdomains is specified, all subdomains of the host are also removed as HSTS hosts. maxAge is a time-to-live value, and if this policy is not refreshed on a client, the HSTS policy will eventually expire on that client.", - Default: map[string]interface{}{}, - Ref: ref(configv1.MaxAgePolicy{}.OpenAPIModelName()), - }, - }, - "preloadPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "preloadPolicy directs the client to include hosts in its host preload list so that it never needs to do an initial load to get the HSTS header (note that this is not defined in RFC 6797 and is therefore client implementation-dependent).", - Type: []string{"string"}, - Format: "", - }, - }, - "includeSubDomainsPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "includeSubDomainsPolicy means the HSTS Policy should apply to any subdomains of the host's domain name. Thus, for the host bar.foo.com, if includeSubDomainsPolicy was set to RequireIncludeSubDomains: - the host app.bar.foo.com would inherit the HSTS Policy of bar.foo.com - the host bar.foo.com would inherit the HSTS Policy of bar.foo.com - the host foo.com would NOT inherit the HSTS Policy of bar.foo.com - the host def.foo.com would NOT inherit the HSTS Policy of bar.foo.com", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"domainPatterns", "maxAge"}, - }, - }, - Dependencies: []string{ - configv1.MaxAgePolicy{}.OpenAPIModelName(), metav1.LabelSelector{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_Scheduler(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Scheduler holds cluster-wide config information to run the Kubernetes Scheduler and influence its placement decisions. The canonical name for this config is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1.SchedulerSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SchedulerStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.SchedulerSpec{}.OpenAPIModelName(), configv1.SchedulerStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_SchedulerList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.Scheduler{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1.Scheduler{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_SchedulerSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "policy": { - SchemaProps: spec.SchemaProps{ - Description: "DEPRECATED: the scheduler Policy API has been deprecated and will be removed in a future release. policy is a reference to a ConfigMap containing scheduler policy which has user specified predicates and priorities. If this ConfigMap is not available scheduler will default to use DefaultAlgorithmProvider. The namespace for this configmap is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - "profile": { - SchemaProps: spec.SchemaProps{ - Description: "profile sets which scheduling profile should be set in order to configure scheduling decisions for new pods.\n\nValid values are \"LowNodeUtilization\", \"HighNodeUtilization\", \"NoScoring\" Defaults to \"LowNodeUtilization\"", - Type: []string{"string"}, - Format: "", - }, - }, - "profileCustomizations": { - SchemaProps: spec.SchemaProps{ - Description: "profileCustomizations contains configuration for modifying the default behavior of existing scheduler profiles. Deprecated: no longer needed, since DRA is GA starting with 4.21, and is enabled by' default in the cluster, this field will be removed in 4.24.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ProfileCustomizations{}.OpenAPIModelName()), - }, - }, - "defaultNodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "defaultNodeSelector helps set the cluster-wide default node selector to restrict pod placement to specific nodes. This is applied to the pods created in all namespaces and creates an intersection with any existing nodeSelectors already set on a pod, additionally constraining that pod's selector. For example, defaultNodeSelector: \"type=user-node,region=east\" would set nodeSelector field in pod spec to \"type=user-node,region=east\" to all pods created in all namespaces. Namespaces having project-wide node selectors won't be impacted even if this field is set. This adds an annotation section to the namespace. For example, if a new namespace is created with node-selector='type=user-node,region=east', the annotation openshift.io/node-selector: type=user-node,region=east gets added to the project. When the openshift.io/node-selector annotation is set on the project the value is used in preference to the value we are setting for defaultNodeSelector field. For instance, openshift.io/node-selector: \"type=user-node,region=west\" means that the default of \"type=user-node,region=east\" set in defaultNodeSelector would not be applied.", - Type: []string{"string"}, - Format: "", - }, - }, - "mastersSchedulable": { - SchemaProps: spec.SchemaProps{ - Description: "mastersSchedulable allows masters nodes to be schedulable. When this flag is turned on, all the master nodes in the cluster will be made schedulable, so that workload pods can run on them. The default value for this field is false, meaning none of the master nodes are schedulable. Important Note: Once the workload pods start running on the master nodes, extreme care must be taken to ensure that cluster-critical control plane components are not impacted. Please turn on this field after doing due diligence.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName(), configv1.ProfileCustomizations{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_SchedulerStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_SecretNameReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SecretNameReference references a secret in a specific namespace. The namespace must be specified at the point of use.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the metadata.name of the referenced secret", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_ServingInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ServingInfo holds information about serving web pages", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "bindAddress": { - SchemaProps: spec.SchemaProps{ - Description: "bindAddress is the ip:port to serve on", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "bindNetwork": { - SchemaProps: spec.SchemaProps{ - Description: "bindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientCA": { - SchemaProps: spec.SchemaProps{ - Description: "clientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", - Type: []string{"string"}, - Format: "", - }, - }, - "namedCertificates": { - SchemaProps: spec.SchemaProps{ - Description: "namedCertificates is a list of certificates to use to secure requests to specific hostnames", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.NamedCertificate{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "minTLSVersion": { - SchemaProps: spec.SchemaProps{ - Description: "minTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", - Type: []string{"string"}, - Format: "", - }, - }, - "cipherSuites": { - SchemaProps: spec.SchemaProps{ - Description: "cipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"bindAddress", "bindNetwork", "certFile", "keyFile"}, - }, - }, - Dependencies: []string{ - configv1.NamedCertificate{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_SignatureStore(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SignatureStore represents the URL of custom Signature Store", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url contains the upstream custom signature store URL. url should be a valid absolute http/https URI of an upstream signature store as per rfc1738. This must be provided and cannot be empty.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the signature store is not honored. If the specified ca data is not valid, the signature store is not honored. If empty, we fall back to the CA configured via Proxy, which is appended to the default system roots. The namespace for this config map is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"url"}, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_SourceURL(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SourceURL configures the options used to build the URL that is queried for external claims.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "hostname": { - SchemaProps: spec.SchemaProps{ - Description: "hostname is a required hostname for which the external claims are located.\n\nIt must be a valid DNS subdomain name as per RFC1123.\n\nThis means that it must start and end with a lowercase alphanumeric character, must only consist of lowercase alphanumeric characters, '-', and '.'. hostname may optionally specify a port in the format ':{port}'. If a port is specified it must not exceed 65535.\n\nhostname must be at least 1 character in length. When specifying a port, hostname must not exceed 259 characters in length. When not specifying a port, hostname must not exceed 253 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - "pathExpression": { - SchemaProps: spec.SchemaProps{ - Description: "pathExpression is a required CEL expression that returns a list of string values used to construct the URL path. Claims from the token used for the request to the kube-apiserver are made available via the `claims` variable. expression must be at least 1 character in length and must not exceed 1024 characters in length.\n\nValues in the returned list will be joined with the hostname using a forward slash (`/`) as a separator. Values in the returned list do not need to include the forward slash. If a forward slash is included in a returned value, it will be encoded as `%2F`.\n\nExample of a static path configuration:\n\n pathExpression: ['realms', 'k8s', 'protocol', 'openid-connect', 'userinfo']\n\nThe above example would resolve to the path: '/realms/k8s/protocol/openid-connect/userinfo'\n\nExample of a dynamic path configuration:\n\n pathExpression: \"['admin', 'realms', 'k8s', 'users'] + [claims.sub] + ['groups']\"\n\nAssuming 'claims.sub' is set to '12345', the above example would resolve to the path: '/admin/realms/k8s/users/12345/groups'", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"hostname", "pathExpression"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_SourcedClaimMapping(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SourcedClaimMapping configures the mapping behavior for a single external claim from the response the apiserver received from the external claim source.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is a required name of the claim that will be produced and made available during the claim-to-identity mapping process. name must consist of only lowercase alpha characters and underscores ('_'). name must be at least 1 character and must not exceed 256 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - "expression": { - SchemaProps: spec.SchemaProps{ - Description: "expression is a required CEL expression that will produce a value to be assigned to the claim. The full response body from the request to the external claim source is provided via the `response.body` variable.\n\nThe contents of the `response.body` variable varies based on the response received from the external source. It is the responsibility of those configuring this expression to understand what is returned from the external source.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "expression"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_Storage(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Storage provides persistent storage configuration options for gathering jobs. If the type is set to PersistentVolume, then the PersistentVolume must be defined. If the type is set to Ephemeral, then the PersistentVolume must not be defined.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is a required field that specifies the type of storage that will be used to store the Insights data archive. Valid values are \"PersistentVolume\" and \"Ephemeral\". When set to Ephemeral, the Insights data archive is stored in the ephemeral storage of the gathering job. When set to PersistentVolume, the Insights data archive is stored in the PersistentVolume that is defined by the persistentVolume field.", - Type: []string{"string"}, - Format: "", - }, - }, - "persistentVolume": { - SchemaProps: spec.SchemaProps{ - Description: "persistentVolume is an optional field that specifies the PersistentVolume that will be used to store the Insights data archive. The PersistentVolume must be created in the openshift-insights namespace.", - Default: map[string]interface{}{}, - Ref: ref(configv1.PersistentVolumeConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "persistentVolume": "PersistentVolume", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.PersistentVolumeConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_StringSource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "StringSource allows specifying a string inline, or externally via env var or file. When it contains only a string value, it marshals to a simple JSON string.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value specifies the cleartext value, or an encrypted value if keyFile is specified.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "env": { - SchemaProps: spec.SchemaProps{ - Description: "env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "file": { - SchemaProps: spec.SchemaProps{ - Description: "file references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile references a file containing the key to use to decrypt the value.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"value", "env", "file", "keyFile"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_StringSourceSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "StringSourceSpec specifies a string value, or external location", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value specifies the cleartext value, or an encrypted value if keyFile is specified.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "env": { - SchemaProps: spec.SchemaProps{ - Description: "env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "file": { - SchemaProps: spec.SchemaProps{ - Description: "file references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile references a file containing the key to use to decrypt the value.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"value", "env", "file", "keyFile"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_TLSProfileSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TLSProfileSpec is the desired behavior of a TLSSecurityProfile.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "ciphers": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "ciphers is used to specify the cipher algorithms that are negotiated during the TLS handshake. Operators may remove entries that their operands do not support. For example, to use only ECDHE-RSA-AES128-GCM-SHA256 (yaml):\n\n ciphers:\n - ECDHE-RSA-AES128-GCM-SHA256\n\nTLS 1.3 cipher suites (e.g. TLS_AES_128_GCM_SHA256) are not configurable and are always enabled when TLS 1.3 is negotiated.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "groups": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "groups is an optional, ordered field used to specify the supported groups (formerly known as elliptic curves) that are used during the TLS handshake. The order of the groups represents a suggested preference, with the most preferred group first. Note that not all platform components honor the ordering: Go-based components use Go's internal preference order and treat this list as a filter of allowed groups rather than an ordered preference. Operators may remove entries their operands do not support.\n\nWhen omitted, this means no opinion and the platform is left to choose reasonable defaults which are subject to change over time and may be different per platform component depending on the underlying TLS libraries they use. If specified, the list must contain at least one and at most 7 groups, and each group must be unique.\n\nFor example, to use X25519 and secp256r1 (yaml):\n\n groups:\n - X25519\n - secp256r1", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "minTLSVersion": { - SchemaProps: spec.SchemaProps{ - Description: "minTLSVersion is used to specify the minimal version of the TLS protocol that is negotiated during the TLS handshake. For example, to use TLS versions 1.1, 1.2 and 1.3 (yaml):\n\n minTLSVersion: VersionTLS11", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"ciphers", "minTLSVersion"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_TLSSecurityProfile(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TLSSecurityProfile defines the schema for a TLS security profile. This object is used by operators to apply TLS security settings to operands.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is one of Old, Intermediate, Modern or Custom. Custom provides the ability to specify individual TLS security profile parameters.\n\nThe cipher and groups lists in these profiles are based on version 5.8 of the Mozilla Server Side TLS configuration guidelines. See: https://ssl-config.mozilla.org/guidelines/5.8.json\n\nThe groups are listed in suggested preference order, with the most preferred group first. Note that not all platform components honor the ordering: Go-based components use Go's internal preference order and treat this list as a filter of allowed groups rather than an ordered preference. Note that X25519MLKEM768 is a post-quantum hybrid group that is not FIPS-approved and should be ignored by components running in FIPS mode.\n\nThe profiles are intent based, so they may change over time as new ciphers are developed and existing ciphers are found to be insecure. Depending on precisely which ciphers are available to a process, the list may be reduced.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "old": { - SchemaProps: spec.SchemaProps{ - Description: "old is a TLS profile for use when services need to be accessed by very old clients or libraries and should be used only as a last resort.\n\nThe supported groups list includes by default the following groups in suggested preference order (ordering may not be honored by all implementations): X25519MLKEM768, X25519, secp256r1, secp384r1.\n\nThis profile is equivalent to a Custom profile specified as:\n minTLSVersion: VersionTLS10\n ciphers:\n - TLS_AES_128_GCM_SHA256\n - TLS_AES_256_GCM_SHA384\n - TLS_CHACHA20_POLY1305_SHA256\n - ECDHE-ECDSA-AES128-GCM-SHA256\n - ECDHE-RSA-AES128-GCM-SHA256\n - ECDHE-ECDSA-AES256-GCM-SHA384\n - ECDHE-RSA-AES256-GCM-SHA384\n - ECDHE-ECDSA-CHACHA20-POLY1305\n - ECDHE-RSA-CHACHA20-POLY1305\n - ECDHE-ECDSA-AES128-SHA256\n - ECDHE-RSA-AES128-SHA256\n - ECDHE-ECDSA-AES128-SHA\n - ECDHE-RSA-AES128-SHA\n - ECDHE-ECDSA-AES256-SHA384\n - ECDHE-RSA-AES256-SHA384\n - ECDHE-ECDSA-AES256-SHA\n - ECDHE-RSA-AES256-SHA\n - AES128-GCM-SHA256\n - AES256-GCM-SHA384\n - AES128-SHA256\n - AES256-SHA256\n - AES128-SHA\n - AES256-SHA\n - DES-CBC3-SHA", - Ref: ref(configv1.OldTLSProfile{}.OpenAPIModelName()), - }, - }, - "intermediate": { - SchemaProps: spec.SchemaProps{ - Description: "intermediate is a TLS profile for use when you do not need compatibility with legacy clients and want to remain highly secure while being compatible with most clients currently in use.\n\nThe supported groups list includes by default the following groups in suggested preference order (ordering may not be honored by all implementations): X25519MLKEM768, X25519, secp256r1, secp384r1.\n\nThis profile is equivalent to a Custom profile specified as:\n minTLSVersion: VersionTLS12\n ciphers:\n - TLS_AES_128_GCM_SHA256\n - TLS_AES_256_GCM_SHA384\n - TLS_CHACHA20_POLY1305_SHA256\n - ECDHE-ECDSA-AES128-GCM-SHA256\n - ECDHE-RSA-AES128-GCM-SHA256\n - ECDHE-ECDSA-AES256-GCM-SHA384\n - ECDHE-RSA-AES256-GCM-SHA384\n - ECDHE-ECDSA-CHACHA20-POLY1305\n - ECDHE-RSA-CHACHA20-POLY1305", - Ref: ref(configv1.IntermediateTLSProfile{}.OpenAPIModelName()), - }, - }, - "modern": { - SchemaProps: spec.SchemaProps{ - Description: "modern is a TLS security profile for use with clients that support TLS 1.3 and do not need backward compatibility for older clients. The supported groups list includes by default the following groups in suggested preference order (ordering may not be honored by all implementations): X25519MLKEM768, X25519, secp256r1, secp384r1. This profile is equivalent to a Custom profile specified as:\n minTLSVersion: VersionTLS13\n ciphers:\n - TLS_AES_128_GCM_SHA256\n - TLS_AES_256_GCM_SHA384\n - TLS_CHACHA20_POLY1305_SHA256", - Ref: ref(configv1.ModernTLSProfile{}.OpenAPIModelName()), - }, - }, - "custom": { - SchemaProps: spec.SchemaProps{ - Description: "custom is a user-defined TLS security profile. Be extremely careful using a custom profile as invalid configurations can be catastrophic.\n\nThe supported groups list for this profile is empty by default.\n\nAn example custom profile looks like this:\n\n minTLSVersion: VersionTLS11\n ciphers:\n - ECDHE-ECDSA-CHACHA20-POLY1305\n - ECDHE-RSA-CHACHA20-POLY1305\n - ECDHE-RSA-AES128-GCM-SHA256\n - ECDHE-ECDSA-AES128-GCM-SHA256", - Ref: ref(configv1.CustomTLSProfile{}.OpenAPIModelName()), - }, - }, - }, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "custom": "Custom", - "intermediate": "Intermediate", - "modern": "Modern", - "old": "Old", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.CustomTLSProfile{}.OpenAPIModelName(), configv1.IntermediateTLSProfile{}.OpenAPIModelName(), configv1.ModernTLSProfile{}.OpenAPIModelName(), configv1.OldTLSProfile{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_TemplateReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TemplateReference references a template in a specific namespace. The namespace must be specified at the point of use.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the metadata.name of the referenced project request template", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_TestDetails(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "testName": { - SchemaProps: spec.SchemaProps{ - Description: "testName is the name of the test as it appears in junit XMLs. It does not include the suite name since the same test can be executed in many suites.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"testName"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_TestReporting(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TestReporting is used for origin (and potentially others) to report the test names for a given FeatureGate into the payload for later analysis on a per-payload basis. This doesn't need any CRD because it's never stored in the cluster.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.TestReportingSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(configv1.TestReportingStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1.TestReportingSpec{}.OpenAPIModelName(), configv1.TestReportingStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_TestReportingSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "testsForFeatureGates": { - SchemaProps: spec.SchemaProps{ - Description: "testsForFeatureGates is a list, indexed by FeatureGate and includes information about testing.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.FeatureGateTests{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"testsForFeatureGates"}, - }, - }, - Dependencies: []string{ - configv1.FeatureGateTests{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_TestReportingStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_TokenClaimMapping(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TokenClaimMapping allows specifying a JWT token claim to be used when mapping claims from an authentication token to cluster identities.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "claim": { - SchemaProps: spec.SchemaProps{ - Description: "claim is an optional field for specifying the JWT token claim that is used in the mapping. The value of this claim will be assigned to the field in which this mapping is associated. claim must not exceed 256 characters in length. When set to the empty string `\"\"`, this means that no named claim should be used for the group mapping. claim is required when the ExternalOIDCWithUpstreamParity feature gate is not enabled.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "expression": { - SchemaProps: spec.SchemaProps{ - Description: "expression is an optional CEL expression used to derive group values from JWT claims.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length .\n\nWhen specified, claim must not be set or be explicitly set to the empty string (`\"\"`).", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_TokenClaimMappings(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "username": { - SchemaProps: spec.SchemaProps{ - Description: "username is a required field that configures how the username of a cluster identity should be constructed from the claims in a JWT token issued by the identity provider.", - Default: map[string]interface{}{}, - Ref: ref(configv1.UsernameClaimMapping{}.OpenAPIModelName()), - }, - }, - "groups": { - SchemaProps: spec.SchemaProps{ - Description: "groups is an optional field that configures how the groups of a cluster identity should be constructed from the claims in a JWT token issued by the identity provider.\n\nWhen referencing a claim, if the claim is present in the JWT token, its value must be a list of groups separated by a comma (',').\n\nFor example - '\"example\"' and '\"exampleOne\", \"exampleTwo\", \"exampleThree\"' are valid claim values.", - Default: map[string]interface{}{}, - Ref: ref(configv1.PrefixedClaimMapping{}.OpenAPIModelName()), - }, - }, - "uid": { - SchemaProps: spec.SchemaProps{ - Description: "uid is an optional field for configuring the claim mapping used to construct the uid for the cluster identity.\n\nWhen using uid.claim to specify the claim it must be a single string value. When using uid.expression the expression must result in a single string value.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose a default, which is subject to change over time.\n\nThe current default is to use the 'sub' claim.", - Ref: ref(configv1.TokenClaimOrExpressionMapping{}.OpenAPIModelName()), - }, - }, - "extra": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "key", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "extra is an optional field for configuring the mappings used to construct the extra attribute for the cluster identity. When omitted, no extra attributes will be present on the cluster identity.\n\nkey values for extra mappings must be unique. A maximum of 32 extra attribute mappings may be provided.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.ExtraMapping{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"username"}, - }, - }, - Dependencies: []string{ - configv1.ExtraMapping{}.OpenAPIModelName(), configv1.PrefixedClaimMapping{}.OpenAPIModelName(), configv1.TokenClaimOrExpressionMapping{}.OpenAPIModelName(), configv1.UsernameClaimMapping{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_TokenClaimOrExpressionMapping(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TokenClaimOrExpressionMapping allows specifying either a JWT token claim or CEL expression to be used when mapping claims from an authentication token to cluster identities.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "claim": { - SchemaProps: spec.SchemaProps{ - Description: "claim is an optional field for specifying the JWT token claim that is used in the mapping. The value of this claim will be assigned to the field in which this mapping is associated.\n\nPrecisely one of claim or expression must be set. claim must not be specified when expression is set. When specified, claim must be at least 1 character in length and must not exceed 256 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - "expression": { - SchemaProps: spec.SchemaProps{ - Description: "expression is an optional field for specifying a CEL expression that produces a string value from JWT token claims.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'. 'claims' is a map of claim names to claim values. For example, the 'sub' claim value can be accessed as 'claims.sub'. Nested claims can be accessed using dot notation ('claims.foo.bar').\n\nPrecisely one of claim or expression must be set. expression must not be specified when claim is set. When specified, expression must be at least 1 character in length and must not exceed 1024 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_TokenClaimValidationCELRule(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "expression": { - SchemaProps: spec.SchemaProps{ - Description: "expression is a CEL expression evaluated against token claims. expression is required, must be at least 1 character in length and must not exceed 1024 characters. The expression must return a boolean value where 'true' signals a valid token and 'false' an invalid one.", - Type: []string{"string"}, - Format: "", - }, - }, - "message": { - SchemaProps: spec.SchemaProps{ - Description: "message is a required human-readable message to be logged by the Kubernetes API server if the CEL expression defined in 'expression' fails. message must be at least 1 character in length and must not exceed 256 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"expression", "message"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_TokenClaimValidationRule(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TokenClaimValidationRule represents a validation rule based on token claims. If type is RequiredClaim, requiredClaim must be set. If Type is CEL, CEL must be set and RequiredClaim must be omitted.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is an optional field that configures the type of the validation rule.\n\nAllowed values are \"RequiredClaim\" and \"CEL\".\n\nWhen set to 'RequiredClaim', the Kubernetes API server will be configured to validate that the incoming JWT contains the required claim and that its value matches the required value.\n\nWhen set to 'CEL', the Kubernetes API server will be configured to validate the incoming JWT against the configured CEL expression.\n\nPossible enum values:\n - `\"CEL\"` indicates that the token validation is defined via a CEL expression. Used as a value for TokenValidationRuleType.\n - `\"RequiredClaim\"` indicates that the token must contain a specific claim. Used as a value for TokenValidationRuleType.", - Default: "", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"CEL", "RequiredClaim"}, - }, - }, - "requiredClaim": { - SchemaProps: spec.SchemaProps{ - Description: "requiredClaim allows configuring a required claim name and its expected value. This field is required when `type` is set to RequiredClaim, and must be omitted when `type` is set to any other value. The Kubernetes API server uses this field to validate if an incoming JWT is valid for this identity provider.", - Ref: ref(configv1.TokenRequiredClaim{}.OpenAPIModelName()), - }, - }, - "cel": { - SchemaProps: spec.SchemaProps{ - Description: "cel holds the CEL expression and message for validation. Must be set when Type is \"CEL\", and forbidden otherwise.", - Default: map[string]interface{}{}, - Ref: ref(configv1.TokenClaimValidationCELRule{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - }, - Dependencies: []string{ - configv1.TokenClaimValidationCELRule{}.OpenAPIModelName(), configv1.TokenRequiredClaim{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_TokenConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TokenConfig holds the necessary configuration options for authorization and access tokens", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "accessTokenMaxAgeSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "accessTokenMaxAgeSeconds defines the maximum age of access tokens", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "accessTokenInactivityTimeoutSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "accessTokenInactivityTimeoutSeconds - DEPRECATED: setting this field has no effect.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "accessTokenInactivityTimeout": { - SchemaProps: spec.SchemaProps{ - Description: "accessTokenInactivityTimeout defines the token inactivity timeout for tokens granted by any client. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Takes valid time duration string such as \"5m\", \"1.5h\" or \"2h45m\". The minimum allowed value for duration is 300s (5 minutes). If the timeout is configured per client, then that value takes precedence. If the timeout value is not specified and the client does not override the value, then tokens are valid until their lifetime.\n\nWARNING: existing tokens' timeout will not be affected (lowered) by changing this value", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Duration{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_TokenIssuer(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "issuerURL": { - SchemaProps: spec.SchemaProps{ - Description: "issuerURL is a required field that configures the URL used to issue tokens by the identity provider. The Kubernetes API server determines how authentication tokens should be handled by matching the 'iss' claim in the JWT to the issuerURL of configured identity providers.\n\nMust be at least 1 character and must not exceed 512 characters in length. Must be a valid URL that uses the 'https' scheme and does not contain a query, fragment or user.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "audiences": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "audiences is a required field that configures the acceptable audiences the JWT token, issued by the identity provider, must be issued to. At least one of the entries must match the 'aud' claim in the JWT token.\n\naudiences must contain at least one entry and must not exceed ten entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "issuerCertificateAuthority": { - SchemaProps: spec.SchemaProps{ - Description: "issuerCertificateAuthority is an optional field that configures the certificate authority, used by the Kubernetes API server, to validate the connection to the identity provider when fetching discovery information.\n\nWhen not specified, the system trust is used.\n\nWhen specified, it must reference a ConfigMap in the openshift-config namespace containing the PEM-encoded CA certificates under the 'ca-bundle.crt' key in the data field of the ConfigMap.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - "discoveryURL": { - SchemaProps: spec.SchemaProps{ - Description: "discoveryURL is an optional field that, if specified, overrides the default discovery endpoint used to retrieve OIDC configuration metadata. By default, the discovery URL is derived from `issuerURL` as \"{issuerURL}/.well-known/openid-configuration\".\n\nThe discoveryURL must be a valid absolute HTTPS URL. It must not contain query parameters, user information, or fragments. Additionally, it must differ from the value of `issuerURL` (ignoring trailing slashes). The discoveryURL value must be at least 1 character long and no longer than 2048 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"issuerURL", "audiences"}, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_TokenRequiredClaim(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "claim": { - SchemaProps: spec.SchemaProps{ - Description: "claim is a required field that configures the name of the required claim. When taken from the JWT claims, claim must be a string value.\n\nclaim must not be an empty string (\"\").", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "requiredValue": { - SchemaProps: spec.SchemaProps{ - Description: "requiredValue is a required field that configures the value that 'claim' must have when taken from the incoming JWT claims. If the value in the JWT claims does not match, the token will be rejected for authentication.\n\nrequiredValue must not be an empty string (\"\").", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"claim", "requiredValue"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_TokenUserValidationRule(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TokenUserValidationRule provides a CEL-based rule used to validate a token subject. Each rule contains a CEL expression that is evaluated against the token’s claims.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "expression": { - SchemaProps: spec.SchemaProps{ - Description: "expression is a required CEL expression that performs a validation on cluster user identity attributes like username, groups, etc.\n\nThe expression must evaluate to a boolean value. When the expression evaluates to 'true', the cluster user identity is considered valid. When the expression evaluates to 'false', the cluster user identity is not considered valid. expression must be at least 1 character in length and must not exceed 1024 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "message": { - SchemaProps: spec.SchemaProps{ - Description: "message is a required human-readable message to be logged by the Kubernetes API server if the CEL expression defined in 'expression' fails. message must be at least 1 character in length and must not exceed 256 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"expression", "message"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_Update(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Update represents an administrator update request.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "architecture": { - SchemaProps: spec.SchemaProps{ - Description: "architecture is an optional field that indicates the desired value of the cluster architecture. In this context cluster architecture means either a single architecture or a multi architecture. architecture can only be set to Multi thereby only allowing updates from single to multi architecture. If architecture is set, image cannot be set and version must be set. Valid values are 'Multi' and empty.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is a semantic version identifying the update version. version is required if architecture is specified. If both version and image are set, the version extracted from the referenced image must match the specified version.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "image": { - SchemaProps: spec.SchemaProps{ - Description: "image is a container image location that contains the update. image should be used when the desired version does not exist in availableUpdates or history. When image is set, architecture cannot be specified. If both version and image are set, the version extracted from the referenced image must match the specified version.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "force": { - SchemaProps: spec.SchemaProps{ - Description: "force allows an administrator to update to an image that has failed verification or upgradeable checks that are designed to keep your cluster safe. Only use this if: * you are testing unsigned release images in short-lived test clusters or * you are working around a known bug in the cluster-version\n operator and you have verified the authenticity of the provided\n image yourself.\nThe provided image will run with full administrative access to the cluster. Do not use this flag with images that come from unknown or potentially malicious sources.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "acceptRisks": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "acceptRisks is an optional set of names of conditional update risks that are considered acceptable. A conditional update is performed only if all of its risks are acceptable. This list may contain entries that apply to current, previous or future updates. The entries therefore may not map directly to a risk in .status.conditionalUpdateRisks. acceptRisks must not contain more than 1000 entries. Entries in this list must be unique.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.AcceptRisk{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "mode": { - SchemaProps: spec.SchemaProps{ - Description: "mode determines how an update should be processed. The only valid value is \"Preflight\". When omitted, the cluster performs a normal update by applying the specified version or image to the cluster. This is the standard update behavior. When set to \"Preflight\", the cluster runs compatibility checks against the target release without performing an actual update. Compatibility results, including any detected risks, are reported in status.conditionalUpdates and status.conditionalUpdateRisks alongside risks from the update recommendation service. This allows administrators to assess update readiness and address issues before committing to the update. Preflight mode is particularly useful for skip-level updates where upgrade compatibility needs to be verified across multiple minor versions. When mode is set to \"Preflight\", the same rules for version, image, and architecture apply as for normal updates.\n\nPossible enum values:\n - `\"Preflight\"` allows an update to be checked for compatibility without committing to updating the cluster.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Preflight"}, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.AcceptRisk{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_UpdateHistory(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "UpdateHistory is a single attempted update to the cluster.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "state": { - SchemaProps: spec.SchemaProps{ - Description: "state reflects whether the update was fully applied. The Partial state indicates the update is not fully applied, while the Completed state indicates the update was successfully rolled out at least once (all parts of the update successfully applied).", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "startedTime": { - SchemaProps: spec.SchemaProps{ - Description: "startedTime is the time at which the update was started.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "completionTime": { - SchemaProps: spec.SchemaProps{ - Description: "completionTime, if set, is when the update was fully applied. The update that is currently being applied will have a null completion time. Completion time will always be set for entries that are not the current update (usually to the started time of the next update).", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is a semantic version identifying the update version. If the requested image does not define a version, or if a failure occurs retrieving the image, this value may be empty.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "image": { - SchemaProps: spec.SchemaProps{ - Description: "image is a container image location that contains the update. This value is always populated.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "verified": { - SchemaProps: spec.SchemaProps{ - Description: "verified indicates whether the provided update was properly verified before it was installed. If this is false the cluster may not be trusted. Verified does not cover upgradeable checks that depend on the cluster state at the time when the update target was accepted.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "acceptedRisks": { - SchemaProps: spec.SchemaProps{ - Description: "acceptedRisks records risks which were accepted to initiate the update. For example, it may mention an Upgradeable=False or missing signature that was overridden via desiredUpdate.force, or an update that was initiated despite not being in the availableUpdates set of recommended update targets.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"state", "startedTime", "completionTime", "image", "verified"}, - }, - }, - Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_UsernameClaimMapping(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "claim": { - SchemaProps: spec.SchemaProps{ - Description: "claim is an optional field that configures the JWT token claim whose value is assigned to the cluster identity field associated with this mapping. claim is required when the ExternalOIDCWithUpstreamParity feature gate is not enabled. When the ExternalOIDCWithUpstreamParity feature gate is enabled, claim must not be set when expression is set.\n\nclaim must not be an empty string (\"\") and must not exceed 256 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "expression": { - SchemaProps: spec.SchemaProps{ - Description: "expression is an optional CEL expression used to derive the username from JWT claims.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length. expression must not be set when claim is set.", - Type: []string{"string"}, - Format: "", - }, - }, - "prefixPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "prefixPolicy is an optional field that configures how a prefix should be applied to the value of the JWT claim specified in the 'claim' field.\n\nAllowed values are 'Prefix', 'NoPrefix', and omitted (not provided or an empty string).\n\nWhen set to 'Prefix', the value specified in the prefix field will be prepended to the value of the JWT claim. The prefix field must be set when prefixPolicy is 'Prefix'. Must not be set to 'Prefix' when expression is set. When set to 'NoPrefix', no prefix will be prepended to the value of the JWT claim. When omitted, this means no opinion and the platform is left to choose any prefixes that are applied which is subject to change over time. Currently, the platform prepends `{issuerURL}#` to the value of the JWT claim when the claim is not 'email'.\n\nAs an example, consider the following scenario:\n\n `prefix` is unset, `issuerURL` is set to `https://myoidc.tld`,\n the JWT claims include \"username\":\"userA\" and \"email\":\"userA@myoidc.tld\",\n and `claim` is set to:\n - \"username\": the mapped value will be \"https://myoidc.tld#userA\"\n - \"email\": the mapped value will be \"userA@myoidc.tld\"\n\n\nPossible enum values:\n - `\"\"` let's the cluster assign prefixes. If the username claim is email, there is no prefix If the username claim is anything else, it is prefixed by the issuerURL\n - `\"NoPrefix\"` means the username claim value will not have any prefix\n - `\"Prefix\"` means the prefix value must be specified. It cannot be empty", - Default: "", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"", "NoPrefix", "Prefix"}, - }, - }, - "prefix": { - SchemaProps: spec.SchemaProps{ - Description: "prefix configures the prefix that should be prepended to the value of the JWT claim.\n\nprefix must be set when prefixPolicy is set to 'Prefix' and must be unset otherwise.", - Ref: ref(configv1.UsernamePrefix{}.OpenAPIModelName()), - }, - }, - }, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "prefixPolicy", - "fields-to-discriminateBy": map[string]interface{}{ - "claim": "Claim", - "expression": "Expression", - "prefix": "Prefix", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.UsernamePrefix{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_UsernamePrefix(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "UsernamePrefix configures the string that should be used as a prefix for username claim mappings.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "prefixString": { - SchemaProps: spec.SchemaProps{ - Description: "prefixString is a required field that configures the prefix that will be applied to cluster identity username attribute during the process of mapping JWT claims to cluster identity attributes.\n\nprefixString must not be an empty string (\"\").", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"prefixString"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_VSphereFailureDomainHostGroup(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VSphereFailureDomainHostGroup holds the vmGroup and the hostGroup names in vCenter corresponds to a vm-host group of type Virtual Machine and Host respectively. Is also contains the vmHostRule which is an affinity vm-host rule in vCenter.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "vmGroup": { - SchemaProps: spec.SchemaProps{ - Description: "vmGroup is the name of the vm-host group of type virtual machine within vCenter for this failure domain. vmGroup is limited to 80 characters. This field is required when the VSphereFailureDomain ZoneType is HostGroup", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "hostGroup": { - SchemaProps: spec.SchemaProps{ - Description: "hostGroup is the name of the vm-host group of type host within vCenter for this failure domain. hostGroup is limited to 80 characters. This field is required when the VSphereFailureDomain ZoneType is HostGroup", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "vmHostRule": { - SchemaProps: spec.SchemaProps{ - Description: "vmHostRule is the name of the affinity vm-host rule within vCenter for this failure domain. vmHostRule is limited to 80 characters. This field is required when the VSphereFailureDomain ZoneType is HostGroup", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"vmGroup", "hostGroup", "vmHostRule"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_VSphereFailureDomainRegionAffinity(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VSphereFailureDomainRegionAffinity contains the region type which is the string representation of the VSphereFailureDomainRegionType with available options of Datacenter and ComputeCluster.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type determines the vSphere object type for a region within this failure domain. Available types are Datacenter and ComputeCluster. When set to Datacenter, this means the vCenter Datacenter defined is the region. When set to ComputeCluster, this means the vCenter cluster defined is the region.\n\nPossible enum values:\n - `\"ComputeCluster\"` is a failure domain region for a vCenter compute cluster.\n - `\"Datacenter\"` is a failure domain region for a vCenter datacenter.", - Default: "", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"ComputeCluster", "Datacenter"}, - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{}, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_VSphereFailureDomainZoneAffinity(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VSphereFailureDomainZoneAffinity contains the vCenter cluster vm-host group (virtual machine and host types) and the vm-host affinity rule that together creates an affinity configuration for vm-host based zonal. This configuration within vCenter creates the required association between a failure domain, virtual machines and ESXi hosts to create a vm-host based zone.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type determines the vSphere object type for a zone within this failure domain. Available types are ComputeCluster and HostGroup. When set to ComputeCluster, this means the vCenter cluster defined is the zone. When set to HostGroup, hostGroup must be configured with hostGroup, vmGroup and vmHostRule and this means the zone is defined by the grouping of those fields.\n\nPossible enum values:\n - `\"ComputeCluster\"` is a failure domain zone for a vCenter compute cluster.\n - `\"HostGroup\"` is a failure domain zone for a vCenter vm-host group.", - Default: "", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"ComputeCluster", "HostGroup"}, - }, - }, - "hostGroup": { - SchemaProps: spec.SchemaProps{ - Description: "hostGroup holds the vmGroup and the hostGroup names in vCenter corresponds to a vm-host group of type Virtual Machine and Host respectively. Is also contains the vmHostRule which is an affinity vm-host rule in vCenter.", - Ref: ref(configv1.VSphereFailureDomainHostGroup{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "hostGroup": "HostGroup", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.VSphereFailureDomainHostGroup{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_VSpherePlatformFailureDomainSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VSpherePlatformFailureDomainSpec holds the region and zone failure domain and the vCenter topology of that failure domain.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name defines the arbitrary but unique name of a failure domain.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "region": { - SchemaProps: spec.SchemaProps{ - Description: "region defines the name of a region tag that will be attached to a vCenter datacenter. The tag category in vCenter must be named openshift-region.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "zone": { - SchemaProps: spec.SchemaProps{ - Description: "zone defines the name of a zone tag that will be attached to a vCenter cluster. The tag category in vCenter must be named openshift-zone.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "regionAffinity": { - SchemaProps: spec.SchemaProps{ - Description: "regionAffinity holds the type of region, Datacenter or ComputeCluster. When set to Datacenter, this means the region is a vCenter Datacenter as defined in topology. When set to ComputeCluster, this means the region is a vCenter Cluster as defined in topology.", - Ref: ref(configv1.VSphereFailureDomainRegionAffinity{}.OpenAPIModelName()), - }, - }, - "zoneAffinity": { - SchemaProps: spec.SchemaProps{ - Description: "zoneAffinity holds the type of the zone and the hostGroup which vmGroup and the hostGroup names in vCenter corresponds to a vm-host group of type Virtual Machine and Host respectively. Is also contains the vmHostRule which is an affinity vm-host rule in vCenter.", - Ref: ref(configv1.VSphereFailureDomainZoneAffinity{}.OpenAPIModelName()), - }, - }, - "server": { - SchemaProps: spec.SchemaProps{ - Description: "server is the fully-qualified domain name or the IP address of the vCenter server. This must match the server field of an entry in the vcenters list. The match is case-sensitive; the value must be specified exactly as it appears in the vcenters entry. The value must be between 1 and 255 characters long.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "topology": { - SchemaProps: spec.SchemaProps{ - Description: "topology describes a given failure domain using vSphere constructs", - Default: map[string]interface{}{}, - Ref: ref(configv1.VSpherePlatformTopology{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"name", "region", "zone", "server", "topology"}, - }, - }, - Dependencies: []string{ - configv1.VSphereFailureDomainRegionAffinity{}.OpenAPIModelName(), configv1.VSphereFailureDomainZoneAffinity{}.OpenAPIModelName(), configv1.VSpherePlatformTopology{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_VSpherePlatformLoadBalancer(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VSpherePlatformLoadBalancer defines the load balancer used by the cluster on VSphere platform.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type defines the type of load balancer used by the cluster on VSphere platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", - Default: "OpenShiftManagedDefault", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{}, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_VSpherePlatformNodeNetworking(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VSpherePlatformNodeNetworking holds the external and internal node networking spec.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "external": { - SchemaProps: spec.SchemaProps{ - Description: "external represents the network configuration of the node that is externally routable.", - Default: map[string]interface{}{}, - Ref: ref(configv1.VSpherePlatformNodeNetworkingSpec{}.OpenAPIModelName()), - }, - }, - "internal": { - SchemaProps: spec.SchemaProps{ - Description: "internal represents the network configuration of the node that is routable only within the cluster.", - Default: map[string]interface{}{}, - Ref: ref(configv1.VSpherePlatformNodeNetworkingSpec{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.VSpherePlatformNodeNetworkingSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_VSpherePlatformNodeNetworkingSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VSpherePlatformNodeNetworkingSpec holds the network CIDR(s) and port group name for including and excluding IP ranges in the cloud provider. This would be used for example when multiple network adapters are attached to a guest to help determine which IP address the cloud config manager should use for the external and internal node networking.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "networkSubnetCidr": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "networkSubnetCidr IP address on VirtualMachine's network interfaces included in the fields' CIDRs that will be used in respective status.addresses fields.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "network": { - SchemaProps: spec.SchemaProps{ - Description: "network VirtualMachine's VM Network names that will be used to when searching for status.addresses fields. Note that if internal.networkSubnetCIDR and external.networkSubnetCIDR are not set, then the vNIC associated to this network must only have a single IP address assigned to it. The available networks (port groups) can be listed using `govc ls 'network/*'`", - Type: []string{"string"}, - Format: "", - }, - }, - "excludeNetworkSubnetCidr": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "excludeNetworkSubnetCidr IP addresses in subnet ranges will be excluded when selecting the IP address from the VirtualMachine's VM for use in the status.addresses fields.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1_VSpherePlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VSpherePlatformSpec holds the desired state of the vSphere infrastructure provider. In the future the cloud provider operator, storage operator and machine operator will use these fields for configuration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "vcenters": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "vcenters holds the connection details for services to communicate with vCenter. Up to 3 vCenters are supported. Once the cluster has been installed, you are unable to change the current number of defined vCenters except when 1.) the cluster has been upgraded from a version of OpenShift where the vsphere platform spec was not present or 2.) in TechPreview you are able to add and remove vCenters but may not remove all vCenters. You may make modifications to the existing vCenters that are defined in the vcenters list in order to match with any added or modified failure domains.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.VSpherePlatformVCenterSpec{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "failureDomains": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "failureDomains contains the definition of region, zone and the vCenter topology. If this is omitted failure domains (regions and zones) will not be used. Each failure domain's server must match the server field of an entry in the vcenters list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.VSpherePlatformFailureDomainSpec{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "nodeNetworking": { - SchemaProps: spec.SchemaProps{ - Description: "nodeNetworking contains the definition of internal and external network constraints for assigning the node's networking. If this field is omitted, networking defaults to the legacy address selection behavior which is to only support a single address and return the first one found.", - Default: map[string]interface{}{}, - Ref: ref(configv1.VSpherePlatformNodeNetworking{}.OpenAPIModelName()), - }, - }, - "apiServerInternalIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "ingressIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "machineNetworks": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.VSpherePlatformFailureDomainSpec{}.OpenAPIModelName(), configv1.VSpherePlatformNodeNetworking{}.OpenAPIModelName(), configv1.VSpherePlatformVCenterSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_VSpherePlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VSpherePlatformStatus holds the current status of the vSphere infrastructure provider.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "apiServerInternalIP": { - SchemaProps: spec.SchemaProps{ - Description: "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", - Type: []string{"string"}, - Format: "", - }, - }, - "apiServerInternalIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "ingressIP": { - SchemaProps: spec.SchemaProps{ - Description: "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", - Type: []string{"string"}, - Format: "", - }, - }, - "ingressIPs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "nodeDNSIP": { - SchemaProps: spec.SchemaProps{ - Description: "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for vSphere deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.", - Type: []string{"string"}, - Format: "", - }, - }, - "loadBalancer": { - SchemaProps: spec.SchemaProps{ - Description: "loadBalancer defines how the load balancer used by the cluster is configured.", - Default: map[string]interface{}{"type": "OpenShiftManagedDefault"}, - Ref: ref(configv1.VSpherePlatformLoadBalancer{}.OpenAPIModelName()), - }, - }, - "dnsRecordsType": { - SchemaProps: spec.SchemaProps{ - Description: "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"External", "Internal"}, - }, - }, - "machineNetworks": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"apiServerInternalIPs", "ingressIPs"}, - }, - }, - Dependencies: []string{ - configv1.VSpherePlatformLoadBalancer{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_VSpherePlatformTopology(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VSpherePlatformTopology holds the required and optional vCenter objects - datacenter, computeCluster, networks, datastore and resourcePool - to provision virtual machines.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "datacenter": { - SchemaProps: spec.SchemaProps{ - Description: "datacenter is the name of vCenter datacenter in which virtual machines will be located. The maximum length of the datacenter name is 80 characters.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "computeCluster": { - SchemaProps: spec.SchemaProps{ - Description: "computeCluster the absolute path of the vCenter cluster in which virtual machine will be located. The absolute path is of the form //host/. The maximum length of the path is 2048 characters.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "networks": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "networks is the list of port group network names within this failure domain. If feature gate VSphereMultiNetworks is enabled, up to 10 network adapters may be defined. 10 is the maximum number of virtual network devices which may be attached to a VM as defined by: https://configmax.esp.vmware.com/guest?vmwareproduct=vSphere&release=vSphere%208.0&categories=1-0 The available networks (port groups) can be listed using `govc ls 'network/*'` Networks should be in the form of an absolute path: //network/.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "datastore": { - SchemaProps: spec.SchemaProps{ - Description: "datastore is the absolute path of the datastore in which the virtual machine is located. The absolute path is of the form //datastore/ The maximum length of the path is 2048 characters.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resourcePool": { - SchemaProps: spec.SchemaProps{ - Description: "resourcePool is the absolute path of the resource pool where virtual machines will be created. The absolute path is of the form //host//Resources/. The maximum length of the path is 2048 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "folder": { - SchemaProps: spec.SchemaProps{ - Description: "folder is the absolute path of the folder where virtual machines are located. The absolute path is of the form //vm/. The maximum length of the path is 2048 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "template": { - SchemaProps: spec.SchemaProps{ - Description: "template is the full inventory path of the virtual machine or template that will be cloned when creating new machines in this failure domain. The maximum length of the path is 2048 characters.\n\nWhen omitted, the template will be calculated by the control plane machineset operator based on the region and zone defined in VSpherePlatformFailureDomainSpec. For example, for zone=zonea, region=region1, and infrastructure name=test, the template path would be calculated as //vm/test-rhcos-region1-zonea.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"datacenter", "computeCluster", "networks", "datastore"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_VSpherePlatformVCenterSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VSpherePlatformVCenterSpec stores the vCenter connection fields. This is used by the vSphere CCM.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "server": { - SchemaProps: spec.SchemaProps{ - Description: "server is the fully-qualified domain name or the IP address of the vCenter server.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "port": { - SchemaProps: spec.SchemaProps{ - Description: "port is the TCP port that will be used to communicate to the vCenter endpoint. When omitted, this means the user has no opinion and it is up to the platform to choose a sensible default, which is subject to change over time.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "datacenters": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "The vCenter Datacenters in which the RHCOS vm guests are located. This field will be used by the Cloud Controller Manager. Each datacenter listed here should be used within a topology.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"server", "datacenters"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_VaultAppRoleAuthentication(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VaultAppRoleAuthentication defines the configuration for AppRole authentication with Vault.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "secret": { - SchemaProps: spec.SchemaProps{ - Description: "secret references a secret in the openshift-config namespace containing the AppRole credentials used to authenticate with Vault. The referenced Secret must contain two keys: \"role-id\" for the AppRole Role ID and \"secret-id\" for the AppRole Secret ID.", - Default: map[string]interface{}{}, - Ref: ref(configv1.VaultSecretReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"secret"}, - }, - }, - Dependencies: []string{ - configv1.VaultSecretReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_VaultAuthentication(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VaultAuthentication defines the authentication method used to authenticate with Vault.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type defines the authentication method used to authenticate with Vault. Allowed values are AppRole. When set to AppRole, the plugin uses AppRole credentials to authenticate with Vault.", - Type: []string{"string"}, - Format: "", - }, - }, - "appRole": { - SchemaProps: spec.SchemaProps{ - Description: "appRole defines the configuration for AppRole authentication. This field must be set when type is AppRole, and must be unset otherwise.", - Default: map[string]interface{}{}, - Ref: ref(configv1.VaultAppRoleAuthentication{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "appRole": "AppRole", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.VaultAppRoleAuthentication{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_VaultConfigMapReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VaultConfigMapReference references a ConfigMap in the openshift-config namespace.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the metadata.name of the referenced ConfigMap in the openshift-config namespace. The name must be a valid DNS subdomain name: it must contain no more than 253 characters, contain only lowercase alphanumeric characters, '-' or '.', and start and end with an alphanumeric character.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_VaultKMSPluginConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VaultKMSPluginConfig defines the KMS plugin configuration specific to Vault KMS", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kmsPluginImage": { - SchemaProps: spec.SchemaProps{ - Description: "kmsPluginImage specifies the container image for the HashiCorp Vault KMS plugin.\n\nThe image must be a fully qualified OCI image pull spec with a SHA256 digest. The format is: host[:port][/namespace]/name@sha256: where the digest must be 64 characters long and consist only of lowercase hexadecimal characters, a-f and 0-9. The total length must be between 75 and 447 characters.\n\nShort names (e.g., \"vault-plugin\" or \"hashicorp/vault-plugin\") are not allowed. The registry hostname must be included and must contain at least one dot. Image tags (e.g., \":latest\", \":v1.0.0\") are not allowed.\n\nConsult the OpenShift documentation for compatible plugin versions with your cluster version, then obtain the image digest for that version from HashiCorp's container registry.\n\nFor disconnected environments, mirror the plugin image to an accessible registry and reference the mirrored location with its digest.", - Type: []string{"string"}, - Format: "", - }, - }, - "vaultAddress": { - SchemaProps: spec.SchemaProps{ - Description: "vaultAddress specifies the address of the HashiCorp Vault instance. The value must be a valid HTTPS URL containing only scheme, host, and optional port. Paths, user info, query parameters, and fragments are not allowed.\n\nFormat: https://hostname[:port] Example: https://vault.example.com:8200\n\nThe value must be between 1 and 512 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "vaultNamespace": { - SchemaProps: spec.SchemaProps{ - Description: "vaultNamespace specifies the Vault namespace where the Transit secrets engine is mounted. This is only applicable for Vault Enterprise installations. When this field is not set, no namespace is used.\n\nThe value must be between 1 and 4096 characters. The namespace cannot end with a forward slash, cannot contain spaces, and cannot be one of the reserved strings: root, sys, audit, auth, cubbyhole, or identity.", - Type: []string{"string"}, - Format: "", - }, - }, - "vaultAuthNamespace": { - SchemaProps: spec.SchemaProps{ - Description: "vaultAuthNamespace specifies the Vault namespace to use for authentication. This is only applicable for Vault Enterprise installations where authentication and Transit operations may be in different namespaces. When this field is not set, the value of vaultNamespace is used for both authentication and Transit key operations.\n\nThe value must be between 1 and 4096 characters. The namespace cannot end with a forward slash, cannot contain spaces, and cannot be one of the reserved strings: root, sys, audit, auth, cubbyhole, or identity.", - Type: []string{"string"}, - Format: "", - }, - }, - "tls": { - SchemaProps: spec.SchemaProps{ - Description: "tls contains the TLS configuration for connecting to the Vault server. When this field is not set, system default TLS settings are used.", - Default: map[string]interface{}{}, - Ref: ref(configv1.VaultTLSConfig{}.OpenAPIModelName()), - }, - }, - "authentication": { - SchemaProps: spec.SchemaProps{ - Description: "authentication defines the authentication method used to authenticate with Vault.", - Default: map[string]interface{}{}, - Ref: ref(configv1.VaultAuthentication{}.OpenAPIModelName()), - }, - }, - "vaultKeyPath": { - SchemaProps: spec.SchemaProps{ - Description: "vaultKeyPath specifies the full path to the encryption key in Vault's Transit secrets engine, combining the Transit engine mount path and the key name separated by \"/keys/\". Format: /keys/ (e.g., transit/keys/my-key, myteam/transit/keys/production-key).\n\nThe total path length must be between 8 and 1542 characters. The path cannot start or end with a forward slash, cannot contain consecutive forward slashes, must only contain RFC 3986 unreserved characters (alphanumeric, hyphen, period, underscore, tilde) and forward slashes as path separators, and must not contain \".\" or \"..\" path segments. The key name must start and end with an alphanumeric character or underscore, and may contain alphanumeric characters, underscores, hyphens, and periods in the middle.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"kmsPluginImage", "vaultAddress", "authentication", "vaultKeyPath"}, - }, - }, - Dependencies: []string{ - configv1.VaultAuthentication{}.OpenAPIModelName(), configv1.VaultTLSConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_VaultSecretReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VaultSecretReference references a secret in the openshift-config namespace.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the metadata.name of the referenced secret in the openshift-config namespace. The name must be a valid DNS subdomain name: it must contain no more than 253 characters, contain only lowercase alphanumeric characters, '-' or '.', and start and end with an alphanumeric character.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_config_v1_VaultTLSConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VaultTLSConfig contains TLS configuration for connecting to Vault.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "caBundle": { - SchemaProps: spec.SchemaProps{ - Description: "caBundle references a ConfigMap in the openshift-config namespace containing the CA certificate bundle used to verify the TLS connection to the Vault server. The referenced ConfigMap must contain the CA bundle in the key \"ca-bundle.crt\". When this field is not set, the system's trusted CA certificates are used.\n\nThe namespace for the ConfigMap is openshift-config.\n\nExample ConfigMap:\n apiVersion: v1\n kind: ConfigMap\n metadata:\n name: vault-ca-bundle\n namespace: openshift-config\n data:\n ca-bundle.crt: |\n -----BEGIN CERTIFICATE-----\n ...\n -----END CERTIFICATE-----", - Default: map[string]interface{}{}, - Ref: ref(configv1.VaultConfigMapReference{}.OpenAPIModelName()), - }, - }, - "serverName": { - SchemaProps: spec.SchemaProps{ - Description: "serverName specifies the Server Name Indication (SNI) to use when connecting to Vault via TLS. This is useful when the Vault server's hostname doesn't match its TLS certificate. When this field is not set, the hostname from vaultAddress is used for SNI.\n\nThe value must be a valid DNS hostname: it must contain no more than 253 characters, contain only lowercase alphanumeric characters, '-' or '.', and start and end with an alphanumeric character.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.VaultConfigMapReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1_WebhookTokenAuthenticator(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "webhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kubeConfig": { - SchemaProps: spec.SchemaProps{ - Description: "kubeConfig references a secret that contains kube config file data which describes how to access the remote webhook service. The namespace for the referenced secret is openshift-config.\n\nFor further details, see:\n\nhttps://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication\n\nThe key \"kubeConfig\" is used to locate the data. If the secret or expected key is not found, the webhook is not honored. If the specified kube config data is not valid, the webhook is not honored.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"kubeConfig"}, - }, - }, - Dependencies: []string{ - configv1.SecretNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_AdditionalAlertmanagerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AdditionalAlertmanagerConfig represents configuration for additional Alertmanager instances. The `AdditionalAlertmanagerConfig` resource defines settings for how a component communicates with additional Alertmanager instances.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is a unique identifier for this Alertmanager configuration entry. The name must be a valid DNS subdomain (RFC 1123): lowercase alphanumeric characters, hyphens, or periods, and must start and end with an alphanumeric character. Minimum length is 1 character (empty string is invalid). Maximum length is 253 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "authorization": { - SchemaProps: spec.SchemaProps{ - Description: "authorization configures the authentication method for Alertmanager connections. Supports bearer token authentication. When omitted, no authentication is used.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.AuthorizationConfig{}.OpenAPIModelName()), - }, - }, - "pathPrefix": { - SchemaProps: spec.SchemaProps{ - Description: "pathPrefix defines an optional URL path prefix to prepend to the Alertmanager API endpoints. For example, if your Alertmanager is behind a reverse proxy at \"/alertmanager/\", set this to \"/alertmanager\" so requests go to \"/alertmanager/api/v1/alerts\" instead of \"/api/v1/alerts\". This is commonly needed when Alertmanager is deployed behind ingress controllers or load balancers. When no prefix is needed, omit this field; do not set it to \"/\" as that would produce paths with double slashes (e.g. \"//api/v1/alerts\"). Must start with \"/\", must not end with \"/\", and must not be exactly \"/\". Must not contain query strings (\"?\") or fragments (\"#\").", - Type: []string{"string"}, - Format: "", - }, - }, - "scheme": { - SchemaProps: spec.SchemaProps{ - Description: "scheme defines the URL scheme to use when communicating with Alertmanager instances. Possible values are `HTTP` or `HTTPS`. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default value is `HTTP`.", - Type: []string{"string"}, - Format: "", - }, - }, - "staticConfigs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "staticConfigs is a list of statically configured Alertmanager endpoints in the form of `:`. Each entry must be a valid hostname, IPv4 address, or IPv6 address (in brackets) followed by a colon and a valid port number (1-65535). Examples: \"alertmanager.example.com:9093\", \"192.168.1.100:9093\", \"[::1]:9093\" At least one endpoint must be specified (minimum 1, maximum 10 endpoints). Each entry must be unique and non-empty (empty string is invalid).", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "timeoutSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "timeoutSeconds defines the timeout in seconds for requests to Alertmanager. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. Currently the default is 10 seconds. Minimum value is 1 second. Maximum value is 600 seconds (10 minutes).", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "tlsConfig": { - SchemaProps: spec.SchemaProps{ - Description: "tlsConfig defines the TLS settings to use for Alertmanager connections. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.TLSConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"name", "staticConfigs"}, - }, - }, - Dependencies: []string{ - configv1alpha1.AuthorizationConfig{}.OpenAPIModelName(), configv1alpha1.TLSConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_AlertmanagerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "alertmanagerConfig provides configuration options for the default Alertmanager instance that runs in the `openshift-monitoring` namespace. Use this configuration to control whether the default Alertmanager is deployed, how it logs, and how its pods are scheduled.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "deploymentMode": { - SchemaProps: spec.SchemaProps{ - Description: "deploymentMode determines whether the default Alertmanager instance should be deployed as part of the monitoring stack. Allowed values are Disabled, DefaultConfig, and CustomConfig. When set to Disabled, the Alertmanager instance will not be deployed. When set to DefaultConfig, the platform will deploy Alertmanager with default settings. When set to CustomConfig, the Alertmanager will be deployed with custom configuration.", - Type: []string{"string"}, - Format: "", - }, - }, - "customConfig": { - SchemaProps: spec.SchemaProps{ - Description: "customConfig must be set when deploymentMode is CustomConfig, and must be unset otherwise. When set to CustomConfig, the Alertmanager will be deployed with custom configuration.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.AlertmanagerCustomConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"deploymentMode"}, - }, - }, - Dependencies: []string{ - configv1alpha1.AlertmanagerCustomConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_AlertmanagerCustomConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AlertmanagerCustomConfig represents the configuration for a custom Alertmanager deployment. alertmanagerCustomConfig provides configuration options for the default Alertmanager instance that runs in the `openshift-monitoring` namespace. Use this configuration to control whether user-defined namespaces are selected for AlertmanagerConfig lookups, how it logs, and how its pods are scheduled.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "userAlertmanagerConfigSelection": { - SchemaProps: spec.SchemaProps{ - Description: "userAlertmanagerConfigSelection is an optional field that controls whether user-defined namespaces can be selected for AlertmanagerConfig lookups on the platform Alertmanager instance in the `openshift-monitoring` namespace. Valid values are Selectable and None. When set to Selectable, the platform Alertmanager discovers AlertmanagerConfig resources in user-defined namespaces. This is equivalent to `enableUserAlertmanagerConfig: true` in the cluster-monitoring-config ConfigMap. When set to None, user-defined namespaces are not selected for AlertmanagerConfig lookups on the platform Alertmanager. This is equivalent to `enableUserAlertmanagerConfig: false` in the cluster-monitoring-config ConfigMap. This setting only applies when the user-workload monitoring Alertmanager is not enabled. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default value is `None`.\n\nPossible enum values:\n - `\"None\"` disables user-defined namespaces from being selected for AlertmanagerConfig lookups on the platform Alertmanager.\n - `\"Selectable\"` enables user-defined namespaces to be selected for AlertmanagerConfig lookups on the platform Alertmanager.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"None", "Selectable"}, - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel defines the verbosity of logs emitted by Alertmanager. This field allows users to control the amount and severity of logs generated, which can be useful for debugging issues or reducing noise in production environments. Allowed values are Error, Warn, Info, and Debug. When set to Error, only errors will be logged. When set to Warn, both warnings and errors will be logged. When set to Info, general information, warnings, and errors will all be logged. When set to Debug, detailed debugging information will be logged. When omitted, this means no opinion and the platform is left to choose a reasonable default, that is subject to change over time. The current default value is `Info`.", - Type: []string{"string"}, - Format: "", - }, - }, - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector defines the nodes on which the Pods are scheduled nodeSelector is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default value is `kubernetes.io/os: linux`.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "resources": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resources defines the compute resource requests and limits for the Alertmanager container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 4m\n limit: null\n - name: memory\n request: 40Mi\n limit: null\nMaximum length for this list is 5. Minimum length for this list is 1. Each resource name must be unique within this list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.ContainerResource{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "secrets": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "secrets defines a list of secrets that need to be mounted into the Alertmanager. The secrets must reside within the same namespace as the Alertmanager object. They will be added as volumes named secret- and mounted at /etc/alertmanager/secrets/ within the 'alertmanager' container of the Alertmanager Pods.\n\nThese secrets can be used to authenticate Alertmanager with endpoint receivers. For example, you can use secrets to: - Provide certificates for TLS authentication with receivers that require private CA certificates - Store credentials for Basic HTTP authentication with receivers that require password-based auth - Store any other authentication credentials needed by your alert receivers\n\nThis field is optional. Maximum length for this list is 10. Minimum length for this list is 1. Entries in this list must be unique.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "tolerations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "tolerations defines tolerations for the pods. tolerations is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. Defaults are empty/unset. Maximum length for this list is 10. Minimum length for this list is 1.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.Toleration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "topologySpreadConstraints": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "topologyKey", - "whenUnsatisfiable", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "topologySpreadConstraints defines rules for how Alertmanager Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nWhen omitted, this means no opinion and the platform is left to choose a default, which is subject to change over time. This field maps directly to the `topologySpreadConstraints` field in the Pod spec. Default is empty list. Maximum length for this list is 10. Minimum length for this list is 1. Entries must have unique topologyKey and whenUnsatisfiable pairs.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.TopologySpreadConstraint{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "volumeClaimTemplate": { - SchemaProps: spec.SchemaProps{ - Description: "volumeClaimTemplate defines persistent storage for Alertmanager. Use this setting to configure the persistent volume claim, including storage class and volume size. If omitted, the Pod uses ephemeral storage and alert data will not persist across restarts.", - Ref: ref(corev1.PersistentVolumeClaim{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.ContainerResource{}.OpenAPIModelName(), corev1.PersistentVolumeClaim{}.OpenAPIModelName(), corev1.Toleration{}.OpenAPIModelName(), corev1.TopologySpreadConstraint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_Audit(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Audit profile configurations", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "profile": { - SchemaProps: spec.SchemaProps{ - Description: "profile is a required field for configuring the audit log level of the Kubernetes Metrics Server. Allowed values are None, Metadata, Request, or RequestResponse. When set to None, audit logging is disabled and no audit events are recorded. When set to Metadata, only request metadata (such as requesting user, timestamp, resource, verb, etc.) is logged, but not the request or response body. When set to Request, event metadata and the request body are logged, but not the response body. When set to RequestResponse, event metadata, request body, and response body are all logged, providing the most detailed audit information.\n\nSee: https://kubernetes.io/docs/tasks/debug-application-cluster/audit/#audit-policy for more information about auditing and log levels.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"profile"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_AuthorizationConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AuthorizationConfig defines the authentication method for Alertmanager connections.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type specifies the authentication type to use. Valid value is \"BearerToken\" (bearer token authentication). When set to BearerToken, the bearerToken field must be specified.", - Type: []string{"string"}, - Format: "", - }, - }, - "bearerToken": { - SchemaProps: spec.SchemaProps{ - Description: "bearerToken defines the secret reference containing the bearer token. Required when type is \"BearerToken\", and forbidden otherwise. The secret must exist in the openshift-monitoring namespace.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.SecretKeySelector{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "bearerToken": "BearerToken", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.SecretKeySelector{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_Backup(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Backup provides configuration for performing backups of the openshift cluster.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.BackupSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.BackupStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1alpha1.BackupSpec{}.OpenAPIModelName(), configv1alpha1.BackupStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_BackupList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BackupList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.Backup{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1alpha1.Backup{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_BackupSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "etcd": { - SchemaProps: spec.SchemaProps{ - Description: "etcd specifies the configuration for periodic backups of the etcd cluster", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.EtcdBackupSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"etcd"}, - }, - }, - Dependencies: []string{ - configv1alpha1.EtcdBackupSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_BackupStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_BasicAuth(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BasicAuth defines basic authentication settings for the remote write endpoint URL.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "username": { - SchemaProps: spec.SchemaProps{ - Description: "username defines the secret reference containing the username for basic authentication. The secret must exist in the openshift-monitoring namespace.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.SecretKeySelector{}.OpenAPIModelName()), - }, - }, - "password": { - SchemaProps: spec.SchemaProps{ - Description: "password defines the secret reference containing the password for basic authentication. The secret must exist in the openshift-monitoring namespace.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.SecretKeySelector{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"username", "password"}, - }, - }, - Dependencies: []string{ - configv1alpha1.SecretKeySelector{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_CRIOCredentialProviderConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CRIOCredentialProviderConfig holds cluster-wide singleton resource configurations for CRI-O credential provider, the name of this instance is \"cluster\". CRI-O credential provider is a binary shipped with CRI-O that provides a way to obtain container image pull credentials from external sources. For example, it can be used to fetch mirror registry credentials from secrets resources in the cluster within the same namespace the pod will be running in. CRIOCredentialProviderConfig configuration specifies the pod image sources registries that should trigger the CRI-O credential provider execution, which will resolve the CRI-O mirror configurations and obtain the necessary credentials for pod creation. Note: Configuration changes will only take effect after the kubelet restarts, which is automatically managed by the cluster during rollout.\n\nThe resource is a singleton named \"cluster\".\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec defines the desired configuration of the CRI-O Credential Provider. This field is required and must be provided when creating the resource.", - Ref: ref(configv1alpha1.CRIOCredentialProviderConfigSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status represents the current state of the CRIOCredentialProviderConfig. When omitted or nil, it indicates that the status has not yet been set by the controller. The controller will populate this field with validation conditions and operational state.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.CRIOCredentialProviderConfigStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1alpha1.CRIOCredentialProviderConfigSpec{}.OpenAPIModelName(), configv1alpha1.CRIOCredentialProviderConfigStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_CRIOCredentialProviderConfigList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CRIOCredentialProviderConfigList contains a list of CRIOCredentialProviderConfig resources\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.CRIOCredentialProviderConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1alpha1.CRIOCredentialProviderConfig{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_CRIOCredentialProviderConfigSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CRIOCredentialProviderConfigSpec defines the desired configuration of the CRI-O Credential Provider.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "matchImages": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "matchImages is a list of string patterns used to determine whether the CRI-O credential provider should be invoked for a given image. This list is passed to the kubelet CredentialProviderConfig, and if any pattern matches the requested image, CRI-O credential provider will be invoked to obtain credentials for pulling that image or its mirrors. Depending on the platform, the CRI-O credential provider may be installed alongside an existing platform specific provider. Conflicts between the existing platform specific provider image match configuration and this list will be handled by the following precedence rule: credentials from built-in kubelet providers (e.g., ECR, GCR, ACR) take precedence over those from the CRIOCredentialProviderConfig when both match the same image. To avoid uncertainty, it is recommended to avoid configuring your private image patterns to overlap with existing platform specific provider config(e.g., the entries from https://github.com/openshift/machine-config-operator/blob/main/templates/common/aws/files/etc-kubernetes-credential-providers-ecr-credential-provider.yaml). You can check the resource's Status conditions to see if any entries were ignored due to exact matches with known built-in provider patterns.\n\nThis field is optional, the items of the list must contain between 1 and 50 entries. The list is treated as a set, so duplicate entries are not allowed.\n\nFor more details, see: https://kubernetes.io/docs/tasks/administer-cluster/kubelet-credential-provider/ https://github.com/cri-o/crio-credential-provider#architecture\n\nEach entry in matchImages is a pattern which can optionally contain a port and a path. Each entry must be no longer than 512 characters. Wildcards ('*') are supported for full subdomain labels, such as '*.k8s.io' or 'k8s.*.io', and for top-level domains, such as 'k8s.*' (which matches 'k8s.io' or 'k8s.net'). A global wildcard '*' (matching any domain) is not allowed. Wildcards may replace an entire hostname label (e.g., *.example.com), but they cannot appear within a label (e.g., f*oo.example.com) and are not allowed in the port or path. For example, 'example.*.com' is valid, but 'exa*mple.*.com' is not. Each wildcard matches only a single domain label, so '*.io' does **not** match '*.k8s.io'.\n\nA match exists between an image and a matchImage when all of the below are true: Both contain the same number of domain parts and each part matches. The URL path of an matchImages must be a prefix of the target image URL path. If the matchImages contains a port, then the port must match in the image as well.\n\nExample values of matchImages: - 123456789.dkr.ecr.us-east-1.amazonaws.com - *.azurecr.io - gcr.io - *.*.registry.io - registry.io:8080/path", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_CRIOCredentialProviderConfigStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CRIOCredentialProviderConfigStatus defines the observed state of CRIOCredentialProviderConfig", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represent the latest available observations of the configuration state. When omitted, it indicates that no conditions have been reported yet. The maximum number of conditions is 16. Conditions are stored as a map keyed by condition type, ensuring uniqueness.\n\nExpected condition types include: \"Validated\": indicates whether the matchImages configuration is valid", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_CertificateConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CertificateConfig specifies configuration parameters for certificates. At least one property must be specified.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "key": { - SchemaProps: spec.SchemaProps{ - Description: "key specifies the cryptographic parameters for the certificate's key pair. Currently this is the only configurable parameter. When omitted in an overrides entry, the key configuration from defaults is used.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.KeyConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.KeyConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_ClusterMonitoring(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterMonitoring is the Custom Resource object which holds the current status of Cluster Monitoring Operator. CMO is a central component of the monitoring stack.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. ClusterMonitoring is the Schema for the Cluster Monitoring Operators API", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object metadata.", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user configuration for the Cluster Monitoring Operator", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.ClusterMonitoringSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.ClusterMonitoringStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1alpha1.ClusterMonitoringSpec{}.OpenAPIModelName(), configv1alpha1.ClusterMonitoringStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_ClusterMonitoringList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list metadata.", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is a list of ClusterMonitoring", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.ClusterMonitoring{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.ClusterMonitoring{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_ClusterMonitoringSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterMonitoringSpec defines the desired state of Cluster Monitoring Operator", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "userDefined": { - SchemaProps: spec.SchemaProps{ - Description: "userDefined set the deployment mode for user-defined monitoring in addition to the default platform monitoring. userDefined is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default value is `Disabled`.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.UserDefinedMonitoring{}.OpenAPIModelName()), - }, - }, - "alertmanagerConfig": { - SchemaProps: spec.SchemaProps{ - Description: "alertmanagerConfig allows users to configure how the default Alertmanager instance should be deployed in the `openshift-monitoring` namespace. alertmanagerConfig is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, that is subject to change over time. The current default value is `DefaultConfig`.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.AlertmanagerConfig{}.OpenAPIModelName()), - }, - }, - "prometheusConfig": { - SchemaProps: spec.SchemaProps{ - Description: "prometheusConfig provides configuration options for the default platform Prometheus instance that runs in the `openshift-monitoring` namespace. This configuration applies only to the platform Prometheus instance; user-workload Prometheus instances are configured separately.\n\nThis field allows you to customize how the platform Prometheus is deployed and operated, including:\n - Pod scheduling (node selectors, tolerations, topology spread constraints)\n - Resource allocation (CPU, memory requests/limits)\n - Retention policies (how long metrics are stored)\n - External integrations (remote write, additional alertmanagers)\n\nThis field is optional. When omitted, the platform chooses reasonable defaults, which may change over time.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.PrometheusConfig{}.OpenAPIModelName()), - }, - }, - "metricsServerConfig": { - SchemaProps: spec.SchemaProps{ - Description: "metricsServerConfig is an optional field that can be used to configure the Kubernetes Metrics Server that runs in the openshift-monitoring namespace. Specifically, it can configure how the Metrics Server instance is deployed, pod scheduling, its audit policy and log verbosity. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.MetricsServerConfig{}.OpenAPIModelName()), - }, - }, - "prometheusOperatorConfig": { - SchemaProps: spec.SchemaProps{ - Description: "prometheusOperatorConfig is an optional field that can be used to configure the Prometheus Operator component. Specifically, it can configure how the Prometheus Operator instance is deployed, pod scheduling, and resource allocation. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.PrometheusOperatorConfig{}.OpenAPIModelName()), - }, - }, - "prometheusOperatorAdmissionWebhookConfig": { - SchemaProps: spec.SchemaProps{ - Description: "prometheusOperatorAdmissionWebhookConfig is an optional field that can be used to configure the admission webhook component of Prometheus Operator that runs in the openshift-monitoring namespace. The admission webhook validates PrometheusRule and AlertmanagerConfig objects to ensure they are semantically valid, mutates PrometheusRule annotations, and converts AlertmanagerConfig objects between API versions. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.PrometheusOperatorAdmissionWebhookConfig{}.OpenAPIModelName()), - }, - }, - "openShiftStateMetricsConfig": { - SchemaProps: spec.SchemaProps{ - Description: "openShiftStateMetricsConfig is an optional field that can be used to configure the openshift-state-metrics agent that runs in the openshift-monitoring namespace. The openshift-state-metrics agent generates metrics about the state of OpenShift-specific Kubernetes objects, such as routes, builds, and deployments. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.OpenShiftStateMetricsConfig{}.OpenAPIModelName()), - }, - }, - "telemeterClientConfig": { - SchemaProps: spec.SchemaProps{ - Description: "telemeterClientConfig is an optional field that can be used to configure the Telemeter Client component that runs in the openshift-monitoring namespace. The Telemeter Client collects selected monitoring metrics and forwards them to Red Hat for telemetry purposes. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. When set, at least one field must be specified within telemeterClientConfig.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.TelemeterClientConfig{}.OpenAPIModelName()), - }, - }, - "thanosQuerierConfig": { - SchemaProps: spec.SchemaProps{ - Description: "thanosQuerierConfig is an optional field that can be used to configure the Thanos Querier component that runs in the openshift-monitoring namespace. The Thanos Querier provides a global query view by aggregating and deduplicating metrics from multiple Prometheus instances. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default deploys the Thanos Querier on linux nodes with 5m CPU and 12Mi memory requests, and no custom tolerations or topology spread constraints. When set, at least one field must be specified within thanosQuerierConfig.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.ThanosQuerierConfig{}.OpenAPIModelName()), - }, - }, - "nodeExporterConfig": { - SchemaProps: spec.SchemaProps{ - Description: "nodeExporterConfig is an optional field that can be used to configure the node-exporter agent that runs as a DaemonSet in the openshift-monitoring namespace. The node-exporter agent collects hardware and OS-level metrics from every node in the cluster. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.NodeExporterConfig{}.OpenAPIModelName()), - }, - }, - "monitoringPluginConfig": { - SchemaProps: spec.SchemaProps{ - Description: "monitoringPluginConfig is an optional field that can be used to configure the monitoring plugin that runs as a dynamic plugin of the OpenShift web console. The monitoring plugin provides the monitoring UI in the OpenShift web console for visualizing metrics, alerts, and dashboards. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default deploys the monitoring-plugin as a single-replica Deployment on linux nodes with 10m CPU and 50Mi memory requests, and no custom tolerations or topology spread constraints. When set, at least one field must be specified within monitoringPluginConfig.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.MonitoringPluginConfig{}.OpenAPIModelName()), - }, - }, - "kubeStateMetricsConfig": { - SchemaProps: spec.SchemaProps{ - Description: "kubeStateMetricsConfig is an optional field that can be used to configure the kube-state-metrics agent that runs in the openshift-monitoring namespace. kube-state-metrics generates metrics about the state of Kubernetes objects such as Deployments, Nodes, and Pods. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.KubeStateMetricsConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.AlertmanagerConfig{}.OpenAPIModelName(), configv1alpha1.KubeStateMetricsConfig{}.OpenAPIModelName(), configv1alpha1.MetricsServerConfig{}.OpenAPIModelName(), configv1alpha1.MonitoringPluginConfig{}.OpenAPIModelName(), configv1alpha1.NodeExporterConfig{}.OpenAPIModelName(), configv1alpha1.OpenShiftStateMetricsConfig{}.OpenAPIModelName(), configv1alpha1.PrometheusConfig{}.OpenAPIModelName(), configv1alpha1.PrometheusOperatorAdmissionWebhookConfig{}.OpenAPIModelName(), configv1alpha1.PrometheusOperatorConfig{}.OpenAPIModelName(), configv1alpha1.TelemeterClientConfig{}.OpenAPIModelName(), configv1alpha1.ThanosQuerierConfig{}.OpenAPIModelName(), configv1alpha1.UserDefinedMonitoring{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_ClusterMonitoringStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterMonitoringStatus defines the observed state of ClusterMonitoring", - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_ContainerResource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ContainerResource defines a single resource requirement for a container.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of the resource (e.g. \"cpu\", \"memory\", \"hugepages-2Mi\"). This field is required. name must consist only of alphanumeric characters, `-`, `_` and `.` and must start and end with an alphanumeric character.", - Type: []string{"string"}, - Format: "", - }, - }, - "request": { - SchemaProps: spec.SchemaProps{ - Description: "request is the minimum amount of the resource required (e.g. \"2Mi\", \"1Gi\"). This field is optional. When limit is specified, request cannot be greater than limit. The value must be greater than 0 when specified.", - Ref: ref(resource.Quantity{}.OpenAPIModelName()), - }, - }, - "limit": { - SchemaProps: spec.SchemaProps{ - Description: "limit is the maximum amount of the resource allowed (e.g. \"2Mi\", \"1Gi\"). This field is optional. When request is specified, limit cannot be less than request. The value must be greater than 0 when specified.", - Ref: ref(resource.Quantity{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"name"}, - }, - }, - Dependencies: []string{ - resource.Quantity{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_CustomPKIPolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CustomPKIPolicy contains administrator-specified cryptographic configuration. Administrators must specify defaults for all certificates and may optionally override specific categories of certificates.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "defaults": { - SchemaProps: spec.SchemaProps{ - Description: "defaults specifies the default certificate configuration that applies to all certificates unless overridden by a category override.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.DefaultCertificateConfig{}.OpenAPIModelName()), - }, - }, - "signerCertificates": { - SchemaProps: spec.SchemaProps{ - Description: "signerCertificates optionally overrides certificate parameters for certificate authority (CA) certificates that sign other certificates. When set, these parameters take precedence over defaults for all signer certificates. When omitted, the defaults are used for signer certificates.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.CertificateConfig{}.OpenAPIModelName()), - }, - }, - "servingCertificates": { - SchemaProps: spec.SchemaProps{ - Description: "servingCertificates optionally overrides certificate parameters for TLS server certificates used to serve HTTPS endpoints. When set, these parameters take precedence over defaults for all serving certificates. When omitted, the defaults are used for serving certificates.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.CertificateConfig{}.OpenAPIModelName()), - }, - }, - "clientCertificates": { - SchemaProps: spec.SchemaProps{ - Description: "clientCertificates optionally overrides certificate parameters for client authentication certificates used to authenticate to servers. When set, these parameters take precedence over defaults for all client certificates. When omitted, the defaults are used for client certificates.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.CertificateConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"defaults"}, - }, - }, - Dependencies: []string{ - configv1alpha1.CertificateConfig{}.OpenAPIModelName(), configv1alpha1.DefaultCertificateConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_DefaultCertificateConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DefaultCertificateConfig specifies the default certificate configuration parameters. All fields are required to ensure that defaults are fully specified for all certificates.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "key": { - SchemaProps: spec.SchemaProps{ - Description: "key specifies the cryptographic parameters for the certificate's key pair. This field is required in defaults to ensure all certificates have a well-defined key configuration.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.KeyConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"key"}, - }, - }, - Dependencies: []string{ - configv1alpha1.KeyConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_DropEqualActionConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DropEqualActionConfig configures the DropEqual action. Drops targets for which the concatenated source_labels do match the value of target_label. Requires Prometheus >= v2.41.0.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "targetLabel": { - SchemaProps: spec.SchemaProps{ - Description: "targetLabel is the label name whose value is compared to the concatenated source_labels; targets that match are dropped. Must be between 1 and 128 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"targetLabel"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_ECDSAKeyConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ECDSAKeyConfig specifies parameters for ECDSA key generation.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "curve": { - SchemaProps: spec.SchemaProps{ - Description: "curve specifies the NIST elliptic curve for ECDSA keys. Valid values are \"P256\", \"P384\", and \"P521\".\n\nWhen set to P256, the NIST P-256 curve (also known as secp256r1) is used, providing 128-bit security.\n\nWhen set to P384, the NIST P-384 curve (also known as secp384r1) is used, providing 192-bit security.\n\nWhen set to P521, the NIST P-521 curve (also known as secp521r1) is used, providing 256-bit security.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"curve"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_EtcdBackupSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "EtcdBackupSpec provides configuration for automated etcd backups to the cluster-etcd-operator", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "schedule": { - SchemaProps: spec.SchemaProps{ - Description: "schedule defines the recurring backup schedule in Cron format every 2 hours: 0 */2 * * * every day at 3am: 0 3 * * * Empty string means no opinion and the platform is left to choose a reasonable default which is subject to change without notice. The current default is \"no backups\", but will change in the future.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "timeZone": { - SchemaProps: spec.SchemaProps{ - Description: "The time zone name for the given schedule, see https://en.wikipedia.org/wiki/List_of_tz_database_time_zones. If not specified, this will default to the time zone of the kube-controller-manager process. See https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#time-zones", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "retentionPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "retentionPolicy defines the retention policy for retaining and deleting existing backups.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.RetentionPolicy{}.OpenAPIModelName()), - }, - }, - "pvcName": { - SchemaProps: spec.SchemaProps{ - Description: "pvcName specifies the name of the PersistentVolumeClaim (PVC) which binds a PersistentVolume where the etcd backup files would be saved The PVC itself must always be created in the \"openshift-etcd\" namespace If the PVC is left unspecified \"\" then the platform will choose a reasonable default location to save the backup. In the future this would be backups saved across the control-plane master nodes.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.RetentionPolicy{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_GatherConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "gatherConfig provides data gathering configuration options.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "dataPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "dataPolicy allows user to enable additional global obfuscation of the IP addresses and base domain in the Insights archive data. Valid values are \"None\" and \"ObfuscateNetworking\". When set to None the data is not obfuscated. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - Type: []string{"string"}, - Format: "", - }, - }, - "disabledGatherers": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "disabledGatherers is a list of gatherers to be excluded from the gathering. All the gatherers can be disabled by providing \"all\" value. If all the gatherers are disabled, the Insights operator does not gather any data. The format for the disabledGatherer should be: {gatherer}/{function} where the function is optional. Gatherer consists of a lowercase letters only that may include underscores (_). Function consists of a lowercase letters only that may include underscores (_) and is separated from the gatherer by a forward slash (/). The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\" An example of disabling gatherers looks like this: `disabledGatherers: [\"clusterconfig/machine_configs\", \"workloads/workload_info\"]`", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "storage": { - SchemaProps: spec.SchemaProps{ - Description: "storage is an optional field that allows user to define persistent storage for gathering jobs to store the Insights data archive. If omitted, the gathering job will use ephemeral storage.", - Ref: ref(configv1alpha1.Storage{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.Storage{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_HashModActionConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "HashModActionConfig configures the HashMod action. target_label is set to the modulus of a hash of the concatenated source_labels (target = hash % modulus).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "targetLabel": { - SchemaProps: spec.SchemaProps{ - Description: "targetLabel is the label name where the hash modulus result is written. Must be between 1 and 128 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - "modulus": { - SchemaProps: spec.SchemaProps{ - Description: "modulus is the divisor applied to the hash of the concatenated source label values (target = hash % modulus). Required when using the HashMod action so the intended behavior is explicit. Must be between 1 and 1000000.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - Required: []string{"targetLabel", "modulus"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_InsightsDataGather(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "InsightsDataGather provides data gather configuration options for the the Insights Operator.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.InsightsDataGatherSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.InsightsDataGatherStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1alpha1.InsightsDataGatherSpec{}.OpenAPIModelName(), configv1alpha1.InsightsDataGatherStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_InsightsDataGatherList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "InsightsDataGatherList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.InsightsDataGather{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - configv1alpha1.InsightsDataGather{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_InsightsDataGatherSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "gatherConfig": { - SchemaProps: spec.SchemaProps{ - Description: "gatherConfig spec attribute includes all the configuration options related to gathering of the Insights data and its uploading to the ingress.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.GatherConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.GatherConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_InsightsDataGatherStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_KeepEqualActionConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KeepEqualActionConfig configures the KeepEqual action. Drops targets for which the concatenated source_labels do not match the value of target_label. Requires Prometheus >= v2.41.0.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "targetLabel": { - SchemaProps: spec.SchemaProps{ - Description: "targetLabel is the label name whose value is compared to the concatenated source_labels; targets that do not match are dropped. Must be between 1 and 128 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"targetLabel"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_KeyConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KeyConfig specifies cryptographic parameters for key generation.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "algorithm": { - SchemaProps: spec.SchemaProps{ - Description: "algorithm specifies the key generation algorithm. Valid values are \"RSA\" and \"ECDSA\".\n\nWhen set to RSA, the rsa field must be specified and the generated key will be an RSA key with the configured key size.\n\nWhen set to ECDSA, the ecdsa field must be specified and the generated key will be an ECDSA key using the configured elliptic curve.", - Type: []string{"string"}, - Format: "", - }, - }, - "rsa": { - SchemaProps: spec.SchemaProps{ - Description: "rsa specifies RSA key parameters. Required when algorithm is RSA, and forbidden otherwise.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.RSAKeyConfig{}.OpenAPIModelName()), - }, - }, - "ecdsa": { - SchemaProps: spec.SchemaProps{ - Description: "ecdsa specifies ECDSA key parameters. Required when algorithm is ECDSA, and forbidden otherwise.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.ECDSAKeyConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"algorithm"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "algorithm", - "fields-to-discriminateBy": map[string]interface{}{ - "ecdsa": "ECDSA", - "rsa": "RSA", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.ECDSAKeyConfig{}.OpenAPIModelName(), configv1alpha1.RSAKeyConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_KubeStateMetricsConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KubeStateMetricsConfig provides configuration options for the kube-state-metrics agent that runs in the `openshift-monitoring` namespace. kube-state-metrics generates metrics about the state of Kubernetes objects such as Deployments, Nodes, and Pods.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector defines the nodes on which the Pods are scheduled. nodeSelector is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default value is `kubernetes.io/os: linux`. When specified, nodeSelector must contain at least 1 entry and must not contain more than 10 entries.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "resources": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resources defines the compute resource requests and limits for the kube-state-metrics container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 4m\n limit: null\n - name: memory\n request: 40Mi\n limit: null\nMaximum length for this list is 5. Minimum length for this list is 1. Each resource name must be unique within this list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.ContainerResource{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "tolerations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "tolerations defines tolerations for the pods. tolerations is optional.\n\nWhen omitted, no tolerations are applied. This default is subject to change over time. When specified, tolerations must contain at least 1 entry and must not contain more than 10 entries. Each toleration's operator, when specified, must be either \"Exists\" or \"Equal\". Each toleration's effect, when specified, must be one of \"NoSchedule\", \"PreferNoSchedule\", or \"NoExecute\". An empty or unset effect means match all effects.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.Toleration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "topologySpreadConstraints": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "topologyKey", - "whenUnsatisfiable", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "topologySpreadConstraints defines rules for how kube-state-metrics Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nThis field maps directly to the `topologySpreadConstraints` field in the Pod spec. When omitted, no topology spread constraints are applied. This default is subject to change over time. When specified, topologySpreadConstraints must contain at least 1 entry and must not contain more than 10 entries. Entries must have unique topologyKey and whenUnsatisfiable pairs. Each entry's whenUnsatisfiable must be either \"DoNotSchedule\" or \"ScheduleAnyway\". Each entry's maxSkew must be at least 1. When minDomains is specified, it must be at least 1 and whenUnsatisfiable must be \"DoNotSchedule\".", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.TopologySpreadConstraint{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "additionalResourceLabels": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "resource", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "additionalResourceLabels defines additional Kubernetes resource labels to expose as metrics in kube-state-metrics. Currently, only \"Job\" and \"CronJob\" resources are supported due to cardinality concerns. Each entry specifies a resource name and a list of Kubernetes label names to expose. Use \"*\" in the labels list to expose all labels for a given resource. additionalResourceLabels is optional. When omitted, no additional Kubernetes object labels are exposed as metrics by kube-state-metrics beyond its built-in metric labels (e.g. namespace, job_name). Use this field to opt in to exposing specific Kubernetes labels as metric labels for the supported resource types. Minimum length for this list is 1. Maximum length for this list is 2. Each resource name must be unique within this list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.KubeStateMetricsResourceLabels{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.ContainerResource{}.OpenAPIModelName(), configv1alpha1.KubeStateMetricsResourceLabels{}.OpenAPIModelName(), corev1.Toleration{}.OpenAPIModelName(), corev1.TopologySpreadConstraint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_KubeStateMetricsResourceLabels(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KubeStateMetricsResourceLabels defines which Kubernetes labels to expose as metrics for a given resource type in kube-state-metrics.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "resource": { - SchemaProps: spec.SchemaProps{ - Description: "resource is the Kubernetes resource name whose labels should be exposed as metrics. Currently, only \"Job\" and \"CronJob\" are supported due to cardinality concerns. Valid values are \"Job\" and \"CronJob\". This field is required.", - Type: []string{"string"}, - Format: "", - }, - }, - "labels": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "labels is the list of Kubernetes label names to expose as metrics for this resource. Use \"*\" to expose all labels for the specified resource. When \"*\" is specified, it must be the only entry in the list; mixing \"*\" with specific label names is not allowed. This field is required. Each label name must be unique within this list. Minimum length for this list is 1. Maximum length for this list is 50.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"resource", "labels"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_Label(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Label represents a key/value pair for external labels.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "key": { - SchemaProps: spec.SchemaProps{ - Description: "key is the name of the label. Prometheus supports UTF-8 label names, so any valid UTF-8 string is allowed. Must be between 1 and 128 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value is the value of the label. Must be between 1 and 128 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"key", "value"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_LabelMapActionConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LabelMapActionConfig configures the LabelMap action. Regex is matched against all source label names (not just source_labels). Matching label values are copied to new label names given by replacement, with match group references (${1}, ${2}, ...) substituted.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "replacement": { - SchemaProps: spec.SchemaProps{ - Description: "replacement is the template for new label names; match group references (${1}, ${2}, ...) are substituted from the matched label name. Required when using the LabelMap action so the intended behavior is explicit and the platform does not need to apply defaults. Use \"$1\" for the first capture group, \"$2\" for the second, etc. Must be between 1 and 255 characters in length. Empty string is invalid as it would produce invalid label names.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"replacement"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_LowercaseActionConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LowercaseActionConfig configures the Lowercase action. Maps the concatenated source_labels to their lower case and writes to target_label. Requires Prometheus >= v2.36.0.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "targetLabel": { - SchemaProps: spec.SchemaProps{ - Description: "targetLabel is the label name where the lower-cased value is written. Must be between 1 and 128 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"targetLabel"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_MetadataConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MetadataConfig defines whether and how to send series metadata to remote write storage.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "sendPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "sendPolicy specifies whether to send metadata and how it is configured. Default: send metadata using platform-chosen defaults (e.g. send interval 30 seconds). Custom: send metadata using the settings in the custom field.", - Type: []string{"string"}, - Format: "", - }, - }, - "custom": { - SchemaProps: spec.SchemaProps{ - Description: "custom defines custom metadata send settings. Required when sendPolicy is Custom (must have at least one property), and forbidden when sendPolicy is Default.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.MetadataConfigCustom{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"sendPolicy"}, - }, - }, - Dependencies: []string{ - configv1alpha1.MetadataConfigCustom{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_MetadataConfigCustom(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MetadataConfigCustom defines custom settings for sending series metadata when sendPolicy is Custom. At least one property must be set when sendPolicy is Custom (e.g. sendIntervalSeconds).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "sendIntervalSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "sendIntervalSeconds is the interval in seconds at which metadata is sent. When omitted, the platform chooses a reasonable default (e.g. 30 seconds). Minimum value is 1 second. Maximum value is 86400 seconds (24 hours).", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_MetricsServerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MetricsServerConfig provides configuration options for the Metrics Server instance that runs in the `openshift-monitoring` namespace. Use this configuration to control how the Metrics Server instance is deployed, how it logs, and how its pods are scheduled.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "audit": { - SchemaProps: spec.SchemaProps{ - Description: "audit defines the audit configuration used by the Metrics Server instance. audit is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, that is subject to change over time. The current default sets audit.profile to Metadata", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.Audit{}.OpenAPIModelName()), - }, - }, - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector defines the nodes on which the Pods are scheduled nodeSelector is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default value is `kubernetes.io/os: linux`.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "tolerations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "tolerations defines tolerations for the pods. tolerations is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. Defaults are empty/unset. Maximum length for this list is 10. Minimum length for this list is 1.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.Toleration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "verbosity": { - SchemaProps: spec.SchemaProps{ - Description: "verbosity defines the verbosity of log messages for Metrics Server. Valid values are Errors, Info, Trace, TraceAll and omitted. When set to Errors, only critical messages and errors are logged. When set to Info, only basic information messages are logged. When set to Trace, information useful for general debugging is logged. When set to TraceAll, detailed information about metric scraping is logged. When omitted, this means no opinion and the platform is left to choose a reasonable default, that is subject to change over time. The current default value is `Errors`", - Type: []string{"string"}, - Format: "", - }, - }, - "resources": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resources defines the compute resource requests and limits for the Metrics Server container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 4m\n limit: null\n - name: memory\n request: 40Mi\n limit: null\nMaximum length for this list is 5. Minimum length for this list is 1. Each resource name must be unique within this list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.ContainerResource{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "topologySpreadConstraints": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "topologyKey", - "whenUnsatisfiable", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "topologySpreadConstraints defines rules for how Metrics Server Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nWhen omitted, this means no opinion and the platform is left to choose a default, which is subject to change over time. This field maps directly to the `topologySpreadConstraints` field in the Pod spec. Default is empty list. Maximum length for this list is 10. Minimum length for this list is 1. Entries must have unique topologyKey and whenUnsatisfiable pairs.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.TopologySpreadConstraint{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.Audit{}.OpenAPIModelName(), configv1alpha1.ContainerResource{}.OpenAPIModelName(), corev1.Toleration{}.OpenAPIModelName(), corev1.TopologySpreadConstraint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_MonitoringPluginConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MonitoringPluginConfig provides configuration options for the monitoring plugin that runs as a dynamic plugin of the OpenShift web console. The monitoring plugin provides the monitoring UI in the OpenShift web console for visualizing metrics, alerts, and dashboards. At least one field must be specified; an empty monitoringPluginConfig object is not allowed.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector defines the nodes on which the Pods are scheduled. nodeSelector is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default value is `kubernetes.io/os: linux`. When specified, nodeSelector must contain at least 1 entry and must not contain more than 10 entries.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "resources": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resources defines the compute resource requests and limits for the monitoring-plugin container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 10m\n - name: memory\n request: 50Mi\n\nWhen specified, resources must contain at least 1 entry and must not exceed 5 entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.ContainerResource{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "tolerations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "tolerations defines the tolerations required for the monitoring-plugin Pods. This field is optional.\n\nWhen omitted, the monitoring-plugin Pods will not have any tolerations, which means they will only be scheduled on nodes with no taints. When specified, tolerations must contain at least 1 entry and must not contain more than 10 entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.Toleration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "topologySpreadConstraints": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "topologyKey", - "whenUnsatisfiable", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "topologySpreadConstraints defines rules for how monitoring-plugin Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nWhen omitted, this means no opinion and the platform is left to choose a default, which is subject to change over time. This field maps directly to the `topologySpreadConstraints` field in the Pod spec. Default is empty list. When specified, this list must contain at least 1 entry and must not exceed 10 entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.TopologySpreadConstraint{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.ContainerResource{}.OpenAPIModelName(), corev1.Toleration{}.OpenAPIModelName(), corev1.TopologySpreadConstraint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_NodeExporterCollectorBuddyInfoConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeExporterCollectorBuddyInfoConfig provides configuration for the buddyinfo collector of the node-exporter agent. The buddyinfo collector collects statistics about memory fragmentation from the node_buddyinfo_blocks metric using data from /proc/buddyinfo. It is disabled by default.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "collectionPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "collectionPolicy declares whether the buddyinfo collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the buddyinfo collector is active and memory fragmentation statistics are collected. When set to \"DoNotCollect\", the buddyinfo collector is inactive.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Collect", "DoNotCollect"}, - }, - }, - }, - Required: []string{"collectionPolicy"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_NodeExporterCollectorConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeExporterCollectorConfig defines settings for individual collectors of the node-exporter agent. Each collector can be individually set to collect or not collect metrics. At least one collector must be specified.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "cpuFreq": { - SchemaProps: spec.SchemaProps{ - Description: "cpuFreq configures the cpufreq collector, which collects CPU frequency statistics. cpuFreq is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is disabled. Consider enabling when you need to observe CPU frequency scaling; expect higher CPU usage on many-core nodes when collectionPolicy is Collect.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.NodeExporterCollectorCpufreqConfig{}.OpenAPIModelName()), - }, - }, - "tcpStat": { - SchemaProps: spec.SchemaProps{ - Description: "tcpStat configures the tcpstat collector, which collects TCP connection statistics. tcpStat is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is disabled. Enable when debugging TCP connection behavior or capacity at the node level.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.NodeExporterCollectorTcpStatConfig{}.OpenAPIModelName()), - }, - }, - "ethtool": { - SchemaProps: spec.SchemaProps{ - Description: "ethtool configures the ethtool collector, which collects ethernet device statistics. ethtool is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is disabled. Enable when you need NIC driver-level ethtool metrics beyond generic netdev counters.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.NodeExporterCollectorEthtoolConfig{}.OpenAPIModelName()), - }, - }, - "netDev": { - SchemaProps: spec.SchemaProps{ - Description: "netDev configures the netdev collector, which collects network device statistics. netDev is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is enabled. Turn off if you must reduce per-interface metric cardinality on hosts with many virtual interfaces.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.NodeExporterCollectorNetDevConfig{}.OpenAPIModelName()), - }, - }, - "netClass": { - SchemaProps: spec.SchemaProps{ - Description: "netClass configures the netclass collector, which collects information about network devices. netClass is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is enabled with netlink mode active. Use statsGatherer when sysfs vs netlink implementation matters or when matching node_exporter tuning.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.NodeExporterCollectorNetClassConfig{}.OpenAPIModelName()), - }, - }, - "buddyInfo": { - SchemaProps: spec.SchemaProps{ - Description: "buddyInfo configures the buddyinfo collector, which collects statistics about memory fragmentation from the node_buddyinfo_blocks metric. This metric collects data from /proc/buddyinfo. buddyInfo is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is disabled. Enable when investigating kernel memory fragmentation; typically for advanced troubleshooting only.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.NodeExporterCollectorBuddyInfoConfig{}.OpenAPIModelName()), - }, - }, - "mountStats": { - SchemaProps: spec.SchemaProps{ - Description: "mountStats configures the mountstats collector, which collects statistics about NFS volume I/O activities. mountStats is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is disabled. Enabling this collector may produce metrics with high cardinality. If you enable this collector, closely monitor the prometheus-k8s deployment for excessive memory usage. Enable when you care about per-mount NFS client statistics.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.NodeExporterCollectorMountStatsConfig{}.OpenAPIModelName()), - }, - }, - "ksmd": { - SchemaProps: spec.SchemaProps{ - Description: "ksmd configures the ksmd collector, which collects statistics from the kernel same-page merger daemon. ksmd is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is disabled. Enable on nodes where KSM is in use and you want visibility into merging activity.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.NodeExporterCollectorKSMDConfig{}.OpenAPIModelName()), - }, - }, - "processes": { - SchemaProps: spec.SchemaProps{ - Description: "processes configures the processes collector, which collects statistics from processes and threads running in the system. processes is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is disabled. Enable for process/thread-level insight; can be expensive on busy nodes.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.NodeExporterCollectorProcessesConfig{}.OpenAPIModelName()), - }, - }, - "systemd": { - SchemaProps: spec.SchemaProps{ - Description: "systemd configures the systemd collector, which collects statistics on the systemd daemon and its managed services. systemd is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is disabled. Enabling this collector with a long list of selected units may produce metrics with high cardinality. If you enable this collector, closely monitor the prometheus-k8s deployment for excessive memory usage. Enable when you need metrics for specific units; scope units carefully.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.NodeExporterCollectorSystemdConfig{}.OpenAPIModelName()), - }, - }, - "softirqs": { - SchemaProps: spec.SchemaProps{ - Description: "softirqs configures the softirqs collector, which exposes detailed softirq statistics from /proc/softirqs. softirqs is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is disabled. Enable when you need visibility into kernel softirq processing across CPUs.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.NodeExporterCollectorSoftirqsConfig{}.OpenAPIModelName()), - }, - }, - "deviceMapperMultipath": { - SchemaProps: spec.SchemaProps{ - Description: "deviceMapperMultipath configures the dmmultipath collector, which collects statistics about DM-Multipath devices. deviceMapperMultipath is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is enabled.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.NodeExporterCollectorDeviceMapperMultipathConfig{}.OpenAPIModelName()), - }, - }, - "zoneinfo": { - SchemaProps: spec.SchemaProps{ - Description: "zoneinfo configures the zoneinfo collector, which exposes per-zone memory page counts, watermarks, and protection thresholds from /proc/zoneinfo. zoneinfo is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is to not collect zoneinfo metrics. Enable when you need visibility into kernel memory zone allocation and pressure.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.NodeExporterCollectorZoneinfoConfig{}.OpenAPIModelName()), - }, - }, - "nvmExpressSubsystem": { - SchemaProps: spec.SchemaProps{ - Description: "nvmExpressSubsystem configures the nvmesubsystem collector, which collects statistics about NVM Express (NVMe) subsystem devices. nvmExpressSubsystem is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is enabled.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.NodeExporterCollectorNVMExpressSubsystemConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.NodeExporterCollectorBuddyInfoConfig{}.OpenAPIModelName(), configv1alpha1.NodeExporterCollectorCpufreqConfig{}.OpenAPIModelName(), configv1alpha1.NodeExporterCollectorDeviceMapperMultipathConfig{}.OpenAPIModelName(), configv1alpha1.NodeExporterCollectorEthtoolConfig{}.OpenAPIModelName(), configv1alpha1.NodeExporterCollectorKSMDConfig{}.OpenAPIModelName(), configv1alpha1.NodeExporterCollectorMountStatsConfig{}.OpenAPIModelName(), configv1alpha1.NodeExporterCollectorNVMExpressSubsystemConfig{}.OpenAPIModelName(), configv1alpha1.NodeExporterCollectorNetClassConfig{}.OpenAPIModelName(), configv1alpha1.NodeExporterCollectorNetDevConfig{}.OpenAPIModelName(), configv1alpha1.NodeExporterCollectorProcessesConfig{}.OpenAPIModelName(), configv1alpha1.NodeExporterCollectorSoftirqsConfig{}.OpenAPIModelName(), configv1alpha1.NodeExporterCollectorSystemdConfig{}.OpenAPIModelName(), configv1alpha1.NodeExporterCollectorTcpStatConfig{}.OpenAPIModelName(), configv1alpha1.NodeExporterCollectorZoneinfoConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_NodeExporterCollectorCpufreqConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeExporterCollectorCpufreqConfig provides configuration for the cpufreq collector of the node-exporter agent. The cpufreq collector collects CPU frequency statistics. It is disabled by default.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "collectionPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "collectionPolicy declares whether the cpufreq collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the cpufreq collector is active and CPU frequency statistics are collected. When set to \"DoNotCollect\", the cpufreq collector is inactive.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Collect", "DoNotCollect"}, - }, - }, - }, - Required: []string{"collectionPolicy"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_NodeExporterCollectorDeviceMapperMultipathConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeExporterCollectorDeviceMapperMultipathConfig provides configuration for the dmmultipath collector of the node-exporter agent. The dmmultipath collector collects statistics about DM-Multipath devices. It is enabled by default.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "collectionPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "collectionPolicy declares whether the dmmultipath collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the dmmultipath collector is active and DM-Multipath device statistics are collected. When set to \"DoNotCollect\", the dmmultipath collector is inactive and the corresponding metrics become unavailable.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Collect", "DoNotCollect"}, - }, - }, - }, - Required: []string{"collectionPolicy"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_NodeExporterCollectorEthtoolConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeExporterCollectorEthtoolConfig provides configuration for the ethtool collector of the node-exporter agent. The ethtool collector collects ethernet device statistics. It is disabled by default.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "collectionPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "collectionPolicy declares whether the ethtool collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the ethtool collector is active and ethernet device statistics are collected. When set to \"DoNotCollect\", the ethtool collector is inactive.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Collect", "DoNotCollect"}, - }, - }, - }, - Required: []string{"collectionPolicy"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_NodeExporterCollectorKSMDConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeExporterCollectorKSMDConfig provides configuration for the ksmd collector of the node-exporter agent. The ksmd collector collects statistics from the kernel same-page merger daemon. It is disabled by default.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "collectionPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "collectionPolicy declares whether the ksmd collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the ksmd collector is active and kernel same-page merger statistics are collected. When set to \"DoNotCollect\", the ksmd collector is inactive.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Collect", "DoNotCollect"}, - }, - }, - }, - Required: []string{"collectionPolicy"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_NodeExporterCollectorMountStatsConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeExporterCollectorMountStatsConfig provides configuration for the mountstats collector of the node-exporter agent. The mountstats collector collects statistics about NFS volume I/O activities. It is disabled by default. Enabling this collector may produce metrics with high cardinality. If you enable this collector, closely monitor the prometheus-k8s deployment for excessive memory usage.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "collectionPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "collectionPolicy declares whether the mountstats collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the mountstats collector is active and NFS volume I/O statistics are collected. When set to \"DoNotCollect\", the mountstats collector is inactive.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Collect", "DoNotCollect"}, - }, - }, - }, - Required: []string{"collectionPolicy"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_NodeExporterCollectorNVMExpressSubsystemConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeExporterCollectorNVMExpressSubsystemConfig provides configuration for the nvmesubsystem collector of the node-exporter agent. The nvmesubsystem collector collects statistics about NVM Express (NVMe) subsystem devices. It is enabled by default.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "collectionPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "collectionPolicy declares whether the nvmesubsystem collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the nvmesubsystem collector is active and NVMe subsystem statistics are collected. When set to \"DoNotCollect\", the nvmesubsystem collector is inactive and the corresponding metrics become unavailable.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Collect", "DoNotCollect"}, - }, - }, - }, - Required: []string{"collectionPolicy"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_NodeExporterCollectorNetClassCollectConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeExporterCollectorNetClassCollectConfig holds configuration options for the netclass collector when it is actively collecting metrics. At least one field must be specified.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "statsGatherer": { - SchemaProps: spec.SchemaProps{ - Description: "statsGatherer selects which implementation the netclass collector uses to gather statistics (sysfs or netlink). statsGatherer is optional. Valid values are \"Sysfs\" and \"Netlink\". When set to \"Netlink\", the netlink implementation is used; when set to \"Sysfs\", the sysfs implementation is used. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is Netlink.\n\nPossible enum values:\n - `\"Netlink\"` uses the netlink-based implementation.\n - `\"Sysfs\"` uses the sysfs-based implementation.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Netlink", "Sysfs"}, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_NodeExporterCollectorNetClassConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeExporterCollectorNetClassConfig provides configuration for the netclass collector of the node-exporter agent. The netclass collector collects information about network devices such as network speed, MTU, and carrier status. It is enabled by default. When collectionPolicy is DoNotCollect, the collect field must not be set.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "collectionPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "collectionPolicy declares whether the netclass collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the netclass collector is active and network class information is collected. When set to \"DoNotCollect\", the netclass collector is inactive and the corresponding metrics become unavailable. When set to \"DoNotCollect\", the collect field must not be set.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Collect", "DoNotCollect"}, - }, - }, - "collect": { - SchemaProps: spec.SchemaProps{ - Description: "collect contains configuration options that apply only when the netclass collector is actively collecting metrics (i.e. when collectionPolicy is Collect). collect is optional and may be omitted even when collectionPolicy is Collect. collect may only be set when collectionPolicy is Collect. When set, at least one field must be specified within collect.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.NodeExporterCollectorNetClassCollectConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"collectionPolicy"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "collectionPolicy", - "fields-to-discriminateBy": map[string]interface{}{ - "collect": "Collect", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.NodeExporterCollectorNetClassCollectConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_NodeExporterCollectorNetDevConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeExporterCollectorNetDevConfig provides configuration for the netdev collector of the node-exporter agent. The netdev collector collects network device statistics such as bytes, packets, errors, and drops per device. It is enabled by default.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "collectionPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "collectionPolicy declares whether the netdev collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the netdev collector is active and network device statistics are collected. When set to \"DoNotCollect\", the netdev collector is inactive and the corresponding metrics become unavailable.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Collect", "DoNotCollect"}, - }, - }, - }, - Required: []string{"collectionPolicy"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_NodeExporterCollectorProcessesConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeExporterCollectorProcessesConfig provides configuration for the processes collector of the node-exporter agent. The processes collector collects statistics from processes and threads running in the system. It is disabled by default.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "collectionPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "collectionPolicy declares whether the processes collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the processes collector is active and process/thread statistics are collected. When set to \"DoNotCollect\", the processes collector is inactive.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Collect", "DoNotCollect"}, - }, - }, - }, - Required: []string{"collectionPolicy"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_NodeExporterCollectorSoftirqsConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeExporterCollectorSoftirqsConfig provides configuration for the softirqs collector of the node-exporter agent. The softirqs collector exposes detailed softirq statistics from /proc/softirqs. It is disabled by default.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "collectionPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "collectionPolicy declares whether the softirqs collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the softirqs collector is active and softirq statistics are collected. When set to \"DoNotCollect\", the softirqs collector is inactive.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Collect", "DoNotCollect"}, - }, - }, - }, - Required: []string{"collectionPolicy"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_NodeExporterCollectorSystemdCollectConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeExporterCollectorSystemdCollectConfig holds configuration options for the systemd collector when it is actively collecting metrics. At least one field must be specified.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "units": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "units is a list of regular expression patterns that match systemd units to be included by the systemd collector. units is optional. By default, the list is empty, so the collector exposes no metrics for systemd units. Each entry is a regular expression pattern and must be at least 1 character and at most 1024 characters. Maximum length for this list is 50. Minimum length for this list is 1. Entries in this list must be unique.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_NodeExporterCollectorSystemdConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeExporterCollectorSystemdConfig provides configuration for the systemd collector of the node-exporter agent. The systemd collector collects statistics on the systemd daemon and its managed services. It is disabled by default. Enabling this collector with a long list of selected units may produce metrics with high cardinality. If you enable this collector, closely monitor the prometheus-k8s deployment for excessive memory usage. When collectionPolicy is DoNotCollect, the collect field must not be set.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "collectionPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "collectionPolicy declares whether the systemd collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the systemd collector is active and systemd unit statistics are collected. When set to \"DoNotCollect\", the systemd collector is inactive and the collect field must not be set.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Collect", "DoNotCollect"}, - }, - }, - "collect": { - SchemaProps: spec.SchemaProps{ - Description: "collect contains configuration options that apply only when the systemd collector is actively collecting metrics (i.e. when collectionPolicy is Collect). collect is optional and may be omitted even when collectionPolicy is Collect. collect may only be set when collectionPolicy is Collect. When set, at least one field must be specified within collect.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.NodeExporterCollectorSystemdCollectConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"collectionPolicy"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "collectionPolicy", - "fields-to-discriminateBy": map[string]interface{}{ - "collect": "Collect", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.NodeExporterCollectorSystemdCollectConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_NodeExporterCollectorTcpStatConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeExporterCollectorTcpStatConfig provides configuration for the tcpstat collector of the node-exporter agent. The tcpstat collector collects TCP connection statistics. It is disabled by default.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "collectionPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "collectionPolicy declares whether the tcpstat collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the tcpstat collector is active and TCP connection statistics are collected. When set to \"DoNotCollect\", the tcpstat collector is inactive.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Collect", "DoNotCollect"}, - }, - }, - }, - Required: []string{"collectionPolicy"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_NodeExporterCollectorZoneinfoConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeExporterCollectorZoneinfoConfig provides configuration for the zoneinfo collector of the node-exporter agent. The zoneinfo collector exposes per-zone memory page counts, watermarks, and protection thresholds from /proc/zoneinfo. By default, the zoneinfo collector does not collect metrics.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "collectionPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "collectionPolicy declares whether the zoneinfo collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the zoneinfo collector is active and zone memory statistics are collected. When set to \"DoNotCollect\", the zoneinfo collector is inactive.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Collect", "DoNotCollect"}, - }, - }, - }, - Required: []string{"collectionPolicy"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_NodeExporterConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeExporterConfig provides configuration options for the node-exporter agent that runs as a DaemonSet in the `openshift-monitoring` namespace. The node-exporter agent collects hardware and OS-level metrics from every node in the cluster, including CPU, memory, disk, and network statistics. At least one field must be specified.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "resources": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resources defines the compute resource requests and limits for the node-exporter container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 8m\n limit: null\n - name: memory\n request: 32Mi\n limit: null", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.ContainerResource{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "collectors": { - SchemaProps: spec.SchemaProps{ - Description: "collectors configures which node-exporter metric collectors are enabled. collectors is optional. Each collector can be individually enabled or disabled. Some collectors may have additional configuration options.\n\nWhen omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.NodeExporterCollectorConfig{}.OpenAPIModelName()), - }, - }, - "maxProcs": { - SchemaProps: spec.SchemaProps{ - Description: "maxProcs sets the target number of CPUs on which the node-exporter process will run. maxProcs is optional. Use this setting to override the default value, which is set either to 4 or to the number of CPUs on the host, whichever is smaller. The default value is computed at runtime and set via the GOMAXPROCS environment variable before node-exporter is launched. If a kernel deadlock occurs or if performance degrades when reading from sysfs concurrently, you can change this value to 1, which limits node-exporter to running on one CPU. For nodes with a high CPU count, setting the limit to a low number saves resources by preventing Go routines from being scheduled to run on all CPUs. However, I/O performance degrades if the maxProcs value is set too low and there are many metrics to collect. The minimum value is 1 and the maximum value is 1024. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is min(4, number of host CPUs).", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "ignoredNetworkDevices": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "ignoredNetworkDevices is a list of regular expression patterns that match network devices to be excluded from the relevant collector configuration such as netdev, netclass, and ethtool. ignoredNetworkDevices is optional.\n\nWhen omitted, the Cluster Monitoring Operator uses a predefined list of devices to be excluded to minimize the impact on memory usage. When set as an empty list, no devices are excluded. If you modify this setting, monitor the prometheus-k8s deployment closely for excessive memory usage. Maximum length for this list is 50. Each entry must be at least 1 character and at most 1024 characters long.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.ContainerResource{}.OpenAPIModelName(), configv1alpha1.NodeExporterCollectorConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_OAuth2(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OAuth2 defines OAuth2 authentication settings for the remote write endpoint.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "clientId": { - SchemaProps: spec.SchemaProps{ - Description: "clientId defines the secret reference containing the OAuth2 client ID. The secret must exist in the openshift-monitoring namespace.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.SecretKeySelector{}.OpenAPIModelName()), - }, - }, - "clientSecret": { - SchemaProps: spec.SchemaProps{ - Description: "clientSecret defines the secret reference containing the OAuth2 client secret. The secret must exist in the openshift-monitoring namespace.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.SecretKeySelector{}.OpenAPIModelName()), - }, - }, - "tokenUrl": { - SchemaProps: spec.SchemaProps{ - Description: "tokenUrl is the URL to fetch the token from. Must be a valid URL with http or https scheme. Must be between 1 and 2048 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - "scopes": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "scopes is a list of OAuth2 scopes to request. When omitted, no scopes are requested. Maximum of 20 scopes can be specified. Each scope must be between 1 and 256 characters.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "endpointParams": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "endpointParams defines additional parameters to append to the token URL. When omitted, no additional parameters are sent. Maximum of 20 parameters can be specified. Entries must have unique names (name is the list key).", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.OAuth2EndpointParam{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"clientId", "clientSecret", "tokenUrl"}, - }, - }, - Dependencies: []string{ - configv1alpha1.OAuth2EndpointParam{}.OpenAPIModelName(), configv1alpha1.SecretKeySelector{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_OAuth2EndpointParam(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OAuth2EndpointParam defines a name/value parameter for the OAuth2 token URL.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the parameter name. Must be between 1 and 256 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value is the optional parameter value. When omitted, the query parameter is applied as ?name (no value). When set (including to the empty string), it is applied as ?name=value. Empty string may be used when the external system expects a parameter with an empty value (e.g. ?parameter=\"\"). Must be between 0 and 2048 characters when present (aligned with common URL length recommendations).", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_OpenShiftStateMetricsConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OpenShiftStateMetricsConfig provides configuration options for the openshift-state-metrics agent that runs in the `openshift-monitoring` namespace. The openshift-state-metrics agent generates metrics about the state of OpenShift-specific Kubernetes objects, such as routes, builds, and deployments.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector defines the nodes on which the Pods are scheduled. nodeSelector is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default value is `kubernetes.io/os: linux`. When specified, nodeSelector must contain at least 1 entry and must not contain more than 10 entries.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "resources": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resources defines the compute resource requests and limits for the openshift-state-metrics container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 1m\n limit: null\n - name: memory\n request: 32Mi\n limit: null\nMaximum length for this list is 5. Minimum length for this list is 1. Each resource name must be unique within this list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.ContainerResource{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "tolerations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "tolerations defines tolerations for the pods. tolerations is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. Defaults are empty/unset. Maximum length for this list is 10. Minimum length for this list is 1.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.Toleration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "topologySpreadConstraints": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "topologyKey", - "whenUnsatisfiable", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "topologySpreadConstraints defines rules for how openshift-state-metrics Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nWhen omitted, this means no opinion and the platform is left to choose a default, which is subject to change over time. This field maps directly to the `topologySpreadConstraints` field in the Pod spec. Default is empty list. Maximum length for this list is 10. Minimum length for this list is 1. Entries must have unique topologyKey and whenUnsatisfiable pairs.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.TopologySpreadConstraint{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.ContainerResource{}.OpenAPIModelName(), corev1.Toleration{}.OpenAPIModelName(), corev1.TopologySpreadConstraint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_PKI(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PKI configures cryptographic parameters for certificates generated internally by OpenShift components.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.PKISpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - configv1alpha1.PKISpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_PKICertificateManagement(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PKICertificateManagement determines whether components use hardcoded defaults (Unmanaged), follow OpenShift best practices (Default), or use administrator-specified cryptographic parameters (Custom). This provides flexibility for organizations with specific compliance requirements or security policies while maintaining backwards compatibility for existing clusters.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "mode": { - SchemaProps: spec.SchemaProps{ - Description: "mode determines how PKI configuration is managed. Valid values are \"Unmanaged\", \"Default\", and \"Custom\".\n\nWhen set to Unmanaged, components use their existing hardcoded certificate generation behavior, exactly as if this feature did not exist. Each component generates certificates using whatever parameters it was using before this feature. While most components use RSA 2048, some may use different parameters. Use of this mode might prevent upgrading to the next major OpenShift release.\n\nWhen set to Default, OpenShift-recommended best practices for certificate generation are applied. The specific parameters may evolve across OpenShift releases to adopt improved cryptographic standards. In the initial release, this matches Unmanaged behavior for each component. In future releases, this may adopt ECDSA or larger RSA keys based on industry best practices. Recommended for most customers who want to benefit from security improvements automatically.\n\nWhen set to Custom, the certificate management parameters can be set explicitly. Use the custom field to specify certificate generation parameters.", - Type: []string{"string"}, - Format: "", - }, - }, - "custom": { - SchemaProps: spec.SchemaProps{ - Description: "custom contains administrator-specified cryptographic configuration. Use the defaults and category override fields to specify certificate generation parameters. Required when mode is Custom, and forbidden otherwise.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.CustomPKIPolicy{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"mode"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "mode", - "fields-to-discriminateBy": map[string]interface{}{ - "custom": "Custom", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.CustomPKIPolicy{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_PKIList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PKIList is a collection of PKI resources.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is a list of PKI resources", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.PKI{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - configv1alpha1.PKI{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_PKIProfile(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PKIProfile defines the certificate generation parameters that OpenShift components use to create certificates. Category overrides take precedence over defaults.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "defaults": { - SchemaProps: spec.SchemaProps{ - Description: "defaults specifies the default certificate configuration that applies to all certificates unless overridden by a category override.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.DefaultCertificateConfig{}.OpenAPIModelName()), - }, - }, - "signerCertificates": { - SchemaProps: spec.SchemaProps{ - Description: "signerCertificates optionally overrides certificate parameters for certificate authority (CA) certificates that sign other certificates. When set, these parameters take precedence over defaults for all signer certificates. When omitted, the defaults are used for signer certificates.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.CertificateConfig{}.OpenAPIModelName()), - }, - }, - "servingCertificates": { - SchemaProps: spec.SchemaProps{ - Description: "servingCertificates optionally overrides certificate parameters for TLS server certificates used to serve HTTPS endpoints. When set, these parameters take precedence over defaults for all serving certificates. When omitted, the defaults are used for serving certificates.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.CertificateConfig{}.OpenAPIModelName()), - }, - }, - "clientCertificates": { - SchemaProps: spec.SchemaProps{ - Description: "clientCertificates optionally overrides certificate parameters for client authentication certificates used to authenticate to servers. When set, these parameters take precedence over defaults for all client certificates. When omitted, the defaults are used for client certificates.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.CertificateConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"defaults"}, - }, - }, - Dependencies: []string{ - configv1alpha1.CertificateConfig{}.OpenAPIModelName(), configv1alpha1.DefaultCertificateConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_PKISpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PKISpec holds the specification for PKI configuration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "certificateManagement": { - SchemaProps: spec.SchemaProps{ - Description: "certificateManagement specifies how PKI configuration is managed for internally-generated certificates. This controls the certificate generation approach for all OpenShift components that create certificates internally, including certificate authorities, serving certificates, and client certificates.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.PKICertificateManagement{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"certificateManagement"}, - }, - }, - Dependencies: []string{ - configv1alpha1.PKICertificateManagement{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_PersistentVolumeClaimReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "persistentVolumeClaimReference is a reference to a PersistentVolumeClaim.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is a string that follows the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start and end with an alphanumeric character.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_PersistentVolumeConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "persistentVolumeConfig provides configuration options for PersistentVolume storage.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "claim": { - SchemaProps: spec.SchemaProps{ - Description: "claim is a required field that specifies the configuration of the PersistentVolumeClaim that will be used to store the Insights data archive. The PersistentVolumeClaim must be created in the openshift-insights namespace.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.PersistentVolumeClaimReference{}.OpenAPIModelName()), - }, - }, - "mountPath": { - SchemaProps: spec.SchemaProps{ - Description: "mountPath is an optional field specifying the directory where the PVC will be mounted inside the Insights data gathering Pod. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default mount path is /var/lib/insights-operator The path may not exceed 1024 characters and must not contain a colon.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"claim"}, - }, - }, - Dependencies: []string{ - configv1alpha1.PersistentVolumeClaimReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_PrometheusConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PrometheusConfig provides configuration options for the Prometheus instance. Use this configuration to control Prometheus deployment, pod scheduling, resource allocation, retention policies, and external integrations.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "additionalAlertmanagerConfigs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "additionalAlertmanagerConfigs configures additional Alertmanager instances that receive alerts from the Prometheus component. This is useful for organizations that need to:\n - Send alerts to external monitoring systems (like PagerDuty, Slack, or custom webhooks)\n - Route different types of alerts to different teams or systems\n - Integrate with existing enterprise alerting infrastructure\n - Maintain separate alert routing for compliance or organizational requirements\nWhen omitted, no additional Alertmanager instances are configured (default behavior). When provided, at least one configuration must be specified (minimum 1, maximum 10 items). Entries must have unique names (name is the list key).", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.AdditionalAlertmanagerConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "enforcedBodySizeLimitBytes": { - SchemaProps: spec.SchemaProps{ - Description: "enforcedBodySizeLimitBytes enforces a body size limit (in bytes) for Prometheus scraped metrics. If a scraped target's body response is larger than the limit, the scrape will fail. This helps protect Prometheus from targets that return excessively large responses. The value is specified in bytes (e.g., 4194304 for 4MB, 1073741824 for 1GB). When omitted, the Cluster Monitoring Operator automatically calculates an appropriate limit based on cluster capacity. Set an explicit value to override the automatic calculation. Minimum value is 10240 (10kB). Maximum value is 1073741824 (1GB).", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "externalLabels": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "key", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "externalLabels defines labels to be attached to time series and alerts when communicating with external systems such as federation, remote storage, and Alertmanager. These labels are not stored with metrics on disk; they are only added when data leaves Prometheus (e.g., during federation queries, remote write, or alert notifications). At least 1 label must be specified when set, with a maximum of 50 labels allowed. Each label key must be unique within this list. When omitted, no external labels are applied.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.Label{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel defines the verbosity of logs emitted by Prometheus. This field allows users to control the amount and severity of logs generated, which can be useful for debugging issues or reducing noise in production environments. Allowed values are Error, Warn, Info, and Debug. When set to Error, only errors will be logged. When set to Warn, both warnings and errors will be logged. When set to Info, general information, warnings, and errors will all be logged. When set to Debug, detailed debugging information will be logged. When omitted, this means no opinion and the platform is left to choose a reasonable default, that is subject to change over time. The current default value is `Info`.", - Type: []string{"string"}, - Format: "", - }, - }, - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector defines the nodes on which the Pods are scheduled. nodeSelector is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default value is `kubernetes.io/os: linux`. When specified, nodeSelector must contain at least one key-value pair (minimum of 1) and must not contain more than 10 entries.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "queryLogFile": { - SchemaProps: spec.SchemaProps{ - Description: "queryLogFile specifies the file to which PromQL queries are logged. This setting can be either a filename, in which case the queries are saved to an `emptyDir` volume at `/var/log/prometheus`, or a full path to a location where an `emptyDir` volume will be mounted and the queries saved. Writing to `/dev/stderr`, `/dev/stdout` or `/dev/null` is supported, but writing to any other `/dev/` path is not supported. Relative paths are also not supported. By default, PromQL queries are not logged. Must be an absolute path starting with `/` or a simple filename without path separators. Must not contain consecutive slashes, end with a slash, or include '..' path traversal. Must contain only alphanumeric characters, '.', '_', '-', or '/'. Must be between 1 and 255 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - "remoteWrite": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "remoteWrite defines the remote write configuration, including URL, authentication, and relabeling settings. Remote write allows Prometheus to send metrics it collects to external long-term storage systems. When omitted, no remote write endpoints are configured. When provided, at least one configuration must be specified (minimum 1, maximum 10 items). Entries must have unique names (name is the list key).", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.RemoteWriteSpec{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "resources": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resources defines the compute resource requests and limits for the Prometheus container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 4m\n limit: null\n - name: memory\n request: 40Mi\n limit: null\nMaximum length for this list is 5. Minimum length for this list is 1. Each resource name must be unique within this list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.ContainerResource{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "retention": { - SchemaProps: spec.SchemaProps{ - Description: "retention configures how long Prometheus retains metrics data and how much storage it can use. When omitted, the platform chooses reasonable defaults (currently 15d retention, no size limit).", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.Retention{}.OpenAPIModelName()), - }, - }, - "tolerations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "tolerations defines tolerations for the pods. tolerations is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. Defaults are empty/unset. Maximum length for this list is 10 Minimum length for this list is 1", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.Toleration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "topologySpreadConstraints": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "topologyKey", - "whenUnsatisfiable", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "topologySpreadConstraints defines rules for how Prometheus Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nWhen omitted, this means no opinion and the platform is left to choose a default, which is subject to change over time. This field maps directly to the `topologySpreadConstraints` field in the Pod spec. Default is empty list. Maximum length for this list is 10. Minimum length for this list is 1 Entries must have unique topologyKey and whenUnsatisfiable pairs.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.TopologySpreadConstraint{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "collectionProfile": { - SchemaProps: spec.SchemaProps{ - Description: "collectionProfile defines the metrics collection profile that Prometheus uses to collect metrics from the platform components. Supported values are `Full` or `Minimal`. In the `Full` profile (default), Prometheus collects all metrics that are exposed by the platform components. In the `Minimal` profile, Prometheus only collects metrics necessary for the default platform alerts, recording rules, telemetry and console dashboards. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default value is `Full`.", - Type: []string{"string"}, - Format: "", - }, - }, - "volumeClaimTemplate": { - SchemaProps: spec.SchemaProps{ - Description: "volumeClaimTemplate defines persistent storage for Prometheus. Use this setting to configure the persistent volume claim, including storage class and volume size. If omitted, the Pod uses ephemeral storage and Prometheus data will not persist across restarts.", - Ref: ref(corev1.PersistentVolumeClaim{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.AdditionalAlertmanagerConfig{}.OpenAPIModelName(), configv1alpha1.ContainerResource{}.OpenAPIModelName(), configv1alpha1.Label{}.OpenAPIModelName(), configv1alpha1.RemoteWriteSpec{}.OpenAPIModelName(), configv1alpha1.Retention{}.OpenAPIModelName(), corev1.PersistentVolumeClaim{}.OpenAPIModelName(), corev1.Toleration{}.OpenAPIModelName(), corev1.TopologySpreadConstraint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_PrometheusOperatorAdmissionWebhookConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PrometheusOperatorAdmissionWebhookConfig provides configuration options for the admission webhook component of Prometheus Operator that runs in the `openshift-monitoring` namespace. The admission webhook validates PrometheusRule and AlertmanagerConfig objects, mutates PrometheusRule annotations, and converts AlertmanagerConfig objects between API versions.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "resources": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resources defines the compute resource requests and limits for the prometheus-operator-admission-webhook container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 5m\n limit: null\n - name: memory\n request: 30Mi\n limit: null\nMaximum length for this list is 5. Minimum length for this list is 1. Each resource name must be unique within this list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.ContainerResource{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "topologySpreadConstraints": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "topologyKey", - "whenUnsatisfiable", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "topologySpreadConstraints defines rules for how admission webhook Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nWhen omitted, this means no opinion and the platform is left to choose a default, which is subject to change over time. This field maps directly to the `topologySpreadConstraints` field in the Pod spec. Default is empty list. Maximum length for this list is 10. Minimum length for this list is 1. Entries must have unique topologyKey and whenUnsatisfiable pairs.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.TopologySpreadConstraint{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.ContainerResource{}.OpenAPIModelName(), corev1.TopologySpreadConstraint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_PrometheusOperatorConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PrometheusOperatorConfig provides configuration options for the Prometheus Operator instance Use this configuration to control how the Prometheus Operator instance is deployed, how it logs, and how its pods are scheduled.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel defines the verbosity of logs emitted by Prometheus Operator. This field allows users to control the amount and severity of logs generated, which can be useful for debugging issues or reducing noise in production environments. Allowed values are Error, Warn, Info, and Debug. When set to Error, only errors will be logged. When set to Warn, both warnings and errors will be logged. When set to Info, general information, warnings, and errors will all be logged. When set to Debug, detailed debugging information will be logged. When omitted, this means no opinion and the platform is left to choose a reasonable default, that is subject to change over time. The current default value is `Info`.", - Type: []string{"string"}, - Format: "", - }, - }, - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector defines the nodes on which the Pods are scheduled nodeSelector is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default value is `kubernetes.io/os: linux`. When specified, nodeSelector must contain at least 1 entry and must not contain more than 10 entries.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "resources": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resources defines the compute resource requests and limits for the Prometheus Operator container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 4m\n limit: null\n - name: memory\n request: 40Mi\n limit: null\nMaximum length for this list is 5. Minimum length for this list is 1. Each resource name must be unique within this list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.ContainerResource{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "tolerations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "tolerations defines tolerations for the pods. tolerations is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. Defaults are empty/unset. Maximum length for this list is 10. Minimum length for this list is 1.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.Toleration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "topologySpreadConstraints": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "topologyKey", - "whenUnsatisfiable", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "topologySpreadConstraints defines rules for how Prometheus Operator Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nWhen omitted, this means no opinion and the platform is left to choose a default, which is subject to change over time. This field maps directly to the `topologySpreadConstraints` field in the Pod spec. Default is empty list. Maximum length for this list is 10. Minimum length for this list is 1. Entries must have unique topologyKey and whenUnsatisfiable pairs.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.TopologySpreadConstraint{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.ContainerResource{}.OpenAPIModelName(), corev1.Toleration{}.OpenAPIModelName(), corev1.TopologySpreadConstraint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_PrometheusRemoteWriteHeader(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PrometheusRemoteWriteHeader defines a custom HTTP header for remote write requests. The header name must not be one of the reserved headers set by Prometheus (Host, Authorization, Content-Encoding, Content-Type, X-Prometheus-Remote-Write-Version, User-Agent, Connection, Keep-Alive, Proxy-Authenticate, Proxy-Authorization, WWW-Authenticate). Header names must contain only case-insensitive alphanumeric characters, hyphens (-), and underscores (_); other characters (e.g. emoji) are rejected by validation. Validation is enforced on the Headers field in RemoteWriteSpec.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the HTTP header name. Must not be a reserved header (see type documentation). Must contain only alphanumeric characters, hyphens, and underscores; invalid characters are rejected. Must be between 1 and 256 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value is the HTTP header value. Must be at most 4096 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "value"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_QueueConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "QueueConfig allows tuning configuration for remote write queue parameters. Configure this when you need to control throughput, backpressure, or retry behavior—for example to avoid overloading the remote endpoint, to reduce memory usage, or to tune for high-cardinality workloads. Consider capacity, maxShards, and batchSendDeadlineSeconds for throughput; minBackoffMilliseconds and maxBackoffMilliseconds for retries; and rateLimitedAction when the remote returns HTTP 429.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "capacity": { - SchemaProps: spec.SchemaProps{ - Description: "capacity is the number of samples to buffer per shard before we start dropping them. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default value is 10000. Minimum value is 1. Maximum value is 1000000.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "maxShards": { - SchemaProps: spec.SchemaProps{ - Description: "maxShards is the maximum number of shards, i.e. amount of concurrency. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default value is 200. Minimum value is 1. Maximum value is 10000.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "minShards": { - SchemaProps: spec.SchemaProps{ - Description: "minShards is the minimum number of shards, i.e. amount of concurrency. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default value is 1. Minimum value is 1. Maximum value is 10000.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "maxSamplesPerSend": { - SchemaProps: spec.SchemaProps{ - Description: "maxSamplesPerSend is the maximum number of samples per send. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default value is 1000. Minimum value is 1. Maximum value is 100000.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "batchSendDeadlineSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "batchSendDeadlineSeconds is the maximum time in seconds a sample will wait in buffer before being sent. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. Minimum value is 1 second. Maximum value is 3600 seconds (1 hour).", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "minBackoffMilliseconds": { - SchemaProps: spec.SchemaProps{ - Description: "minBackoffMilliseconds is the minimum retry delay in milliseconds. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. Minimum value is 1 millisecond. Maximum value is 3600000 milliseconds (1 hour).", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "maxBackoffMilliseconds": { - SchemaProps: spec.SchemaProps{ - Description: "maxBackoffMilliseconds is the maximum retry delay in milliseconds. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. Minimum value is 1 millisecond. Maximum value is 3600000 milliseconds (1 hour).", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "rateLimitedAction": { - SchemaProps: spec.SchemaProps{ - Description: "rateLimitedAction controls what to do when the remote write endpoint returns HTTP 429 (Too Many Requests). When omitted, no retries are performed on rate limit responses. When set to \"Retry\", Prometheus will retry such requests using the backoff settings above. Valid value when set is \"Retry\".", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_RSAKeyConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RSAKeyConfig specifies parameters for RSA key generation.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "keySize": { - SchemaProps: spec.SchemaProps{ - Description: "keySize specifies the size of RSA keys in bits. Valid values are multiples of 1024 from 2048 to 8192.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"keySize"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_RelabelActionConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RelabelActionConfig represents the action to perform and its configuration. Exactly one action-specific configuration must be specified based on the action type.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type specifies the action to perform on the matched labels. Allowed values are Replace, Lowercase, Uppercase, Keep, Drop, KeepEqual, DropEqual, HashMod, LabelMap, LabelDrop, LabelKeep.\n\nWhen set to Replace, regex is matched against the concatenated source_labels; target_label is set to replacement with match group references (${1}, ${2}, ...) substituted. If regex does not match, no replacement takes place.\n\nWhen set to Lowercase, the concatenated source_labels are mapped to their lower case. Requires Prometheus >= v2.36.0.\n\nWhen set to Uppercase, the concatenated source_labels are mapped to their upper case. Requires Prometheus >= v2.36.0.\n\nWhen set to Keep, targets for which regex does not match the concatenated source_labels are dropped.\n\nWhen set to Drop, targets for which regex matches the concatenated source_labels are dropped.\n\nWhen set to KeepEqual, targets for which the concatenated source_labels do not match target_label are dropped. Requires Prometheus >= v2.41.0.\n\nWhen set to DropEqual, targets for which the concatenated source_labels do match target_label are dropped. Requires Prometheus >= v2.41.0.\n\nWhen set to HashMod, target_label is set to the modulus of a hash of the concatenated source_labels.\n\nWhen set to LabelMap, regex is matched against all source label names (not just source_labels); matching label values are copied to new names given by replacement with ${1}, ${2}, ... substituted.\n\nWhen set to LabelDrop, regex is matched against all label names; any label that matches is removed.\n\nWhen set to LabelKeep, regex is matched against all label names; any label that does not match is removed.", - Type: []string{"string"}, - Format: "", - }, - }, - "replace": { - SchemaProps: spec.SchemaProps{ - Description: "replace configures the Replace action. Required when type is Replace, and forbidden otherwise.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.ReplaceActionConfig{}.OpenAPIModelName()), - }, - }, - "hashMod": { - SchemaProps: spec.SchemaProps{ - Description: "hashMod configures the HashMod action. Required when type is HashMod, and forbidden otherwise.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.HashModActionConfig{}.OpenAPIModelName()), - }, - }, - "labelMap": { - SchemaProps: spec.SchemaProps{ - Description: "labelMap configures the LabelMap action. Required when type is LabelMap, and forbidden otherwise.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.LabelMapActionConfig{}.OpenAPIModelName()), - }, - }, - "lowercase": { - SchemaProps: spec.SchemaProps{ - Description: "lowercase configures the Lowercase action. Required when type is Lowercase, and forbidden otherwise. Requires Prometheus >= v2.36.0.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.LowercaseActionConfig{}.OpenAPIModelName()), - }, - }, - "uppercase": { - SchemaProps: spec.SchemaProps{ - Description: "uppercase configures the Uppercase action. Required when type is Uppercase, and forbidden otherwise. Requires Prometheus >= v2.36.0.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.UppercaseActionConfig{}.OpenAPIModelName()), - }, - }, - "keepEqual": { - SchemaProps: spec.SchemaProps{ - Description: "keepEqual configures the KeepEqual action. Required when type is KeepEqual, and forbidden otherwise. Requires Prometheus >= v2.41.0.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.KeepEqualActionConfig{}.OpenAPIModelName()), - }, - }, - "dropEqual": { - SchemaProps: spec.SchemaProps{ - Description: "dropEqual configures the DropEqual action. Required when type is DropEqual, and forbidden otherwise. Requires Prometheus >= v2.41.0.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.DropEqualActionConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "dropEqual": "DropEqual", - "hashMod": "HashMod", - "keepEqual": "KeepEqual", - "labelMap": "LabelMap", - "lowercase": "Lowercase", - "replace": "Replace", - "uppercase": "Uppercase", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.DropEqualActionConfig{}.OpenAPIModelName(), configv1alpha1.HashModActionConfig{}.OpenAPIModelName(), configv1alpha1.KeepEqualActionConfig{}.OpenAPIModelName(), configv1alpha1.LabelMapActionConfig{}.OpenAPIModelName(), configv1alpha1.LowercaseActionConfig{}.OpenAPIModelName(), configv1alpha1.ReplaceActionConfig{}.OpenAPIModelName(), configv1alpha1.UppercaseActionConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_RelabelConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RelabelConfig represents a relabeling rule.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is a unique identifier for this relabel configuration. Must contain only alphanumeric characters, hyphens, and underscores. Must be between 1 and 63 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - "sourceLabels": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "sourceLabels specifies which label names to extract from each series for this relabeling rule. The values of these labels are joined together using the configured separator, and the resulting string is then matched against the regular expression. If a referenced label does not exist on a series, Prometheus substitutes an empty string. When omitted, the rule operates without extracting source labels (useful for actions like labelmap). Minimum of 1 and maximum of 10 source labels can be specified, each between 1 and 128 characters. Each entry must be unique. Label names beginning with \"__\" (two underscores) are reserved for internal Prometheus use and are not allowed. Label names SHOULD start with a letter (a-z, A-Z) or underscore (_), followed by zero or more letters, digits (0-9), or underscores for best compatibility. While Prometheus supports UTF-8 characters in label names (since v3.0.0), using the recommended character set ensures better compatibility with the wider ecosystem (tooling, third-party instrumentation, etc.).", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "separator": { - SchemaProps: spec.SchemaProps{ - Description: "separator is the character sequence used to join source label values. Common examples: \";\", \",\", \"::\", \"|||\". When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default value is \";\". Must be between 1 and 5 characters in length when specified.", - Type: []string{"string"}, - Format: "", - }, - }, - "regex": { - SchemaProps: spec.SchemaProps{ - Description: "regex is the regular expression to match against the concatenated source label values. Must be a valid RE2 regular expression (https://github.com/google/re2/wiki/Syntax). When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default value is \"(.*)\" to match everything. Must be between 1 and 1000 characters in length when specified.", - Type: []string{"string"}, - Format: "", - }, - }, - "action": { - SchemaProps: spec.SchemaProps{ - Description: "action defines the action to perform on the matched labels and its configuration. Exactly one action-specific configuration must be specified based on the action type.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.RelabelActionConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"name", "action"}, - }, - }, - Dependencies: []string{ - configv1alpha1.RelabelActionConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_RemoteWriteAuthorization(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RemoteWriteAuthorization defines the authorization method for a remote write endpoint. Nested config requirements depend on the type discriminator: Authorization requires authorization, BasicAuth requires basicAuth, OAuth2 requires oauth2, SigV4 requires sigv4, and ServiceAccount forbids all nested configs.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type specifies the authorization method to use. Allowed values are Authorization, BasicAuth, OAuth2, SigV4, and ServiceAccount.\n\nWhen set to Authorization, credentials are read from a single Secret key. The secret key typically contains a Bearer token. Use the authorization field.\n\nWhen set to BasicAuth, HTTP basic authentication is used; the basicAuth field (username and password from Secrets) must be set.\n\nWhen set to OAuth2, OAuth2 client credentials flow is used; the oauth2 field (clientId, clientSecret, tokenUrl) must be set.\n\nWhen set to SigV4, AWS Signature Version 4 is used for authentication; the sigv4 field must be set.\n\nWhen set to ServiceAccount, the pod's service account token is used for machine identity. No additional field is required; the operator configures the token path.", - Type: []string{"string"}, - Format: "", - }, - }, - "authorization": { - SchemaProps: spec.SchemaProps{ - Description: "authorization defines the secret reference containing the authorization credentials (e.g. Bearer token). Required when type is \"Authorization\", and forbidden otherwise. The secret must exist in the openshift-monitoring namespace.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.SecretKeySelector{}.OpenAPIModelName()), - }, - }, - "basicAuth": { - SchemaProps: spec.SchemaProps{ - Description: "basicAuth defines HTTP basic authentication credentials. Required when type is \"BasicAuth\", and forbidden otherwise.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.BasicAuth{}.OpenAPIModelName()), - }, - }, - "oauth2": { - SchemaProps: spec.SchemaProps{ - Description: "oauth2 defines OAuth2 client credentials authentication. Required when type is \"OAuth2\", and forbidden otherwise.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.OAuth2{}.OpenAPIModelName()), - }, - }, - "sigv4": { - SchemaProps: spec.SchemaProps{ - Description: "sigv4 defines AWS Signature Version 4 authentication. Required when type is \"SigV4\", and forbidden otherwise.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.Sigv4{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "authorization": "Authorization", - "basicAuth": "BasicAuth", - "oauth2": "OAuth2", - "sigv4": "Sigv4", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.BasicAuth{}.OpenAPIModelName(), configv1alpha1.OAuth2{}.OpenAPIModelName(), configv1alpha1.SecretKeySelector{}.OpenAPIModelName(), configv1alpha1.Sigv4{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_RemoteWriteSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RemoteWriteSpec represents configuration for remote write endpoints.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url is the URL of the remote write endpoint. Must be a valid URL with http or https scheme and a non-empty hostname. Query parameters, fragments, and user information (e.g. user:password@host) are not allowed. Empty string is invalid. Must be between 1 and 2048 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is a required identifier for this remote write configuration (name is the list key for the remoteWrite list). This name is used in metrics and logging to differentiate remote write queues. Must contain only alphanumeric characters, hyphens, and underscores. Must be between 1 and 63 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - "messageVersion": { - SchemaProps: spec.SchemaProps{ - Description: "messageVersion defines the Remote Write message's version to use when writing to the endpoint. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default value is \"V1.0\". When set to \"V1.0\", Prometheus uses the `prometheus.WriteRequest` protobuf message introduced in Remote Write 1.0. When set to \"V2.0\", Prometheus uses the `io.prometheus.write.v2.Request` protobuf message introduced in Remote Write 2.0.", - Type: []string{"string"}, - Format: "", - }, - }, - "authorization": { - SchemaProps: spec.SchemaProps{ - Description: "authorization defines the authorization method for the remote write endpoint. When omitted, no authorization is performed. When set, type must be one of Authorization, BasicAuth, OAuth2, SigV4, or ServiceAccount; the corresponding nested config must be set (ServiceAccount has no config).", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.RemoteWriteAuthorization{}.OpenAPIModelName()), - }, - }, - "headers": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "headers specifies the custom HTTP headers to be sent along with each remote write request. Sending custom headers makes the configuration of a proxy in between optional and helps the receiver recognize the given source better. Clients MAY allow users to send custom HTTP headers; they MUST NOT allow users to configure them in such a way as to send reserved headers. Headers set by Prometheus cannot be overwritten. When omitted, no custom headers are sent. Maximum of 50 headers can be specified. Each header name must be unique. Each header name must contain only alphanumeric characters, hyphens, and underscores, and must not be a reserved Prometheus header (Host, Authorization, Content-Encoding, Content-Type, X-Prometheus-Remote-Write-Version, User-Agent, Connection, Keep-Alive, Proxy-Authenticate, Proxy-Authorization, WWW-Authenticate).", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.PrometheusRemoteWriteHeader{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "metadataConfig": { - SchemaProps: spec.SchemaProps{ - Description: "metadataConfig configures the sending of series metadata to remote storage. When omitted, no metadata is sent. When set to sendPolicy: Default, metadata is sent using platform-chosen defaults (e.g. send interval 30 seconds). When set to sendPolicy: Custom, metadata is sent using the settings in the custom field (e.g. custom.sendIntervalSeconds).", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.MetadataConfig{}.OpenAPIModelName()), - }, - }, - "proxyUrl": { - SchemaProps: spec.SchemaProps{ - Description: "proxyUrl defines an optional proxy URL. If the cluster-wide proxy is enabled, it replaces the proxyUrl setting. The cluster-wide proxy supports both HTTP and HTTPS proxies, with HTTPS taking precedence. When omitted, no proxy is used. Must be a valid URL with http or https scheme. Must be between 1 and 2048 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - "queueConfig": { - SchemaProps: spec.SchemaProps{ - Description: "queueConfig allows tuning configuration for remote write queue parameters. When omitted, default queue configuration is used.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.QueueConfig{}.OpenAPIModelName()), - }, - }, - "remoteTimeoutSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "remoteTimeoutSeconds defines the timeout in seconds for requests to the remote write endpoint. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. Minimum value is 1 second. Maximum value is 600 seconds (10 minutes).", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "exemplarsMode": { - SchemaProps: spec.SchemaProps{ - Description: "exemplarsMode controls whether exemplars are sent via remote write. Valid values are \"Send\", \"DoNotSend\" and omitted. When set to \"Send\", Prometheus is configured to store a maximum of 100,000 exemplars in memory and send them with remote write. Note that this setting only applies to user-defined monitoring. It is not applicable to default in-cluster monitoring. When omitted or set to \"DoNotSend\", exemplars are not sent.", - Type: []string{"string"}, - Format: "", - }, - }, - "tlsConfig": { - SchemaProps: spec.SchemaProps{ - Description: "tlsConfig defines TLS authentication settings for the remote write endpoint. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.TLSConfig{}.OpenAPIModelName()), - }, - }, - "writeRelabelConfigs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "writeRelabelConfigs is a list of relabeling rules to apply before sending data to the remote endpoint. When omitted, no relabeling is performed and all metrics are sent as-is. Minimum of 1 and maximum of 10 relabeling rules can be specified. Each rule must have a unique name.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.RelabelConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"url", "name"}, - }, - }, - Dependencies: []string{ - configv1alpha1.MetadataConfig{}.OpenAPIModelName(), configv1alpha1.PrometheusRemoteWriteHeader{}.OpenAPIModelName(), configv1alpha1.QueueConfig{}.OpenAPIModelName(), configv1alpha1.RelabelConfig{}.OpenAPIModelName(), configv1alpha1.RemoteWriteAuthorization{}.OpenAPIModelName(), configv1alpha1.TLSConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_ReplaceActionConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ReplaceActionConfig configures the Replace action. Regex is matched against the concatenated source_labels; target_label is set to replacement with match group references (${1}, ${2}, ...) substituted. No replacement if regex does not match.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "targetLabel": { - SchemaProps: spec.SchemaProps{ - Description: "targetLabel is the label name where the replacement result is written. Must be between 1 and 128 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - "replacement": { - SchemaProps: spec.SchemaProps{ - Description: "replacement is the value written to target_label when regex matches; match group references (${1}, ${2}, ...) are substituted. Required when using the Replace action so the intended behavior is explicit and the platform does not need to apply defaults. Use \"$1\" for the first capture group, \"$2\" for the second, etc. Use an empty string (\"\") to explicitly clear the target label value. Must be between 0 and 255 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"targetLabel", "replacement"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_Retention(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Retention configures how long Prometheus retains metrics data and how much storage it can use.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "duration": { - SchemaProps: spec.SchemaProps{ - Description: "duration is an optional field that specifies how long Prometheus retains metrics data. Valid values are Prometheus-style duration strings with unit suffixes y, w, d, h, m, s, or ms (for example, \"15d\", \"24h\", or \"5d1h30m\"). Each unit value must be a positive integer. Composite durations must follow the fixed unit order y, w, d, h, m, s, ms. Must be at least 1 character and at most 64 characters. When set to \"0\", time-based retention is disabled. This is the only supported form for disabling time-based retention; other zero-duration representations such as \"0d\", \"0h\", or \"0y\" are rejected. Prometheus automatically deletes data older than this duration. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default value is `15d`.", - Type: []string{"string"}, - Format: "", - }, - }, - "size": { - SchemaProps: spec.SchemaProps{ - Description: "size is an optional field that specifies the maximum storage size that Prometheus can use for data blocks and the write-ahead log (WAL). Valid values are byte-size strings with an optional decimal prefix and a unit suffix B, KB, MB, GB, TB, EB, PB, or their binary equivalents KiB, MiB, GiB, TiB, EiB, PiB (for example, \"500MiB\", \"10GiB\"). The numeric value must be greater than zero. Must be at least 1 character and at most 32 characters. When set to \"0\", no size limit is enforced. This is the only supported form for disabling size-based retention; other zero-size representations such as \"0B\" or \"0MiB\" are rejected. When the limit is reached, Prometheus deletes oldest data first. When omitted, no size limit is enforced and Prometheus uses available PersistentVolume capacity.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_RetentionNumberConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RetentionNumberConfig specifies the configuration of the retention policy on the number of backups", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "maxNumberOfBackups": { - SchemaProps: spec.SchemaProps{ - Description: "maxNumberOfBackups defines the maximum number of backups to retain. If the existing number of backups saved is equal to MaxNumberOfBackups then the oldest backup will be removed before a new backup is initiated.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"maxNumberOfBackups"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_RetentionPolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RetentionPolicy defines the retention policy for retaining and deleting existing backups. This struct is a discriminated union that allows users to select the type of retention policy from the supported types.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "retentionType": { - SchemaProps: spec.SchemaProps{ - Description: "retentionType sets the type of retention policy. Currently, the only valid policies are retention by number of backups (RetentionNumber), by the size of backups (RetentionSize). More policies or types may be added in the future. Empty string means no opinion and the platform is left to choose a reasonable default which is subject to change without notice. The current default is RetentionNumber with 15 backups kept.\n\nPossible enum values:\n - `\"RetentionNumber\"` sets the retention policy based on the number of backup files saved\n - `\"RetentionSize\"` sets the retention policy based on the total size of the backup files saved", - Default: "", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"RetentionNumber", "RetentionSize"}, - }, - }, - "retentionNumber": { - SchemaProps: spec.SchemaProps{ - Description: "retentionNumber configures the retention policy based on the number of backups", - Ref: ref(configv1alpha1.RetentionNumberConfig{}.OpenAPIModelName()), - }, - }, - "retentionSize": { - SchemaProps: spec.SchemaProps{ - Description: "retentionSize configures the retention policy based on the size of backups", - Ref: ref(configv1alpha1.RetentionSizeConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"retentionType"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "retentionType", - "fields-to-discriminateBy": map[string]interface{}{ - "retentionNumber": "RetentionNumber", - "retentionSize": "RetentionSize", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.RetentionNumberConfig{}.OpenAPIModelName(), configv1alpha1.RetentionSizeConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_RetentionSizeConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RetentionSizeConfig specifies the configuration of the retention policy on the total size of backups", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "maxSizeOfBackupsGb": { - SchemaProps: spec.SchemaProps{ - Description: "maxSizeOfBackupsGb defines the total size in GB of backups to retain. If the current total size backups exceeds MaxSizeOfBackupsGb then the oldest backup will be removed before a new backup is initiated.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"maxSizeOfBackupsGb"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_SecretKeySelector(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SecretKeySelector selects a key of a Secret in the `openshift-monitoring` namespace.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the secret in the `openshift-monitoring` namespace to select from. Must be a valid Kubernetes secret name (lowercase alphanumeric, '-' or '.', start/end with alphanumeric). Must be between 1 and 253 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - "key": { - SchemaProps: spec.SchemaProps{ - Description: "key is the key of the secret to select from. Must consist of alphanumeric characters, '-', '_', or '.'. Must be between 1 and 253 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "key"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-map-type": "atomic", - }, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_Sigv4(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Sigv4 defines AWS Signature Version 4 authentication settings. At least one of region, accessKey/secretKey, profile, or roleArn must be set so the platform can perform authentication.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "region": { - SchemaProps: spec.SchemaProps{ - Description: "region is the AWS region. When omitted, the region is derived from the environment or instance metadata. Must be between 1 and 128 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "accessKey": { - SchemaProps: spec.SchemaProps{ - Description: "accessKey defines the secret reference containing the AWS access key ID. The secret must exist in the openshift-monitoring namespace. When omitted, the access key is derived from the environment or instance metadata.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.SecretKeySelector{}.OpenAPIModelName()), - }, - }, - "secretKey": { - SchemaProps: spec.SchemaProps{ - Description: "secretKey defines the secret reference containing the AWS secret access key. The secret must exist in the openshift-monitoring namespace. When omitted, the secret key is derived from the environment or instance metadata.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.SecretKeySelector{}.OpenAPIModelName()), - }, - }, - "profile": { - SchemaProps: spec.SchemaProps{ - Description: "profile is the named AWS profile used to authenticate. When omitted, the default profile is used. Must be between 1 and 128 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "roleArn": { - SchemaProps: spec.SchemaProps{ - Description: "roleArn is the AWS Role ARN, an alternative to using AWS API keys. When omitted, API keys are used for authentication. Must be a valid AWS ARN format (e.g., \"arn:aws:iam::123456789012:role/MyRole\"). Must be between 1 and 512 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.SecretKeySelector{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_Storage(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "storage provides persistent storage configuration options for gathering jobs. If the type is set to PersistentVolume, then the PersistentVolume must be defined. If the type is set to Ephemeral, then the PersistentVolume must not be defined.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is a required field that specifies the type of storage that will be used to store the Insights data archive. Valid values are \"PersistentVolume\" and \"Ephemeral\". When set to Ephemeral, the Insights data archive is stored in the ephemeral storage of the gathering job. When set to PersistentVolume, the Insights data archive is stored in the PersistentVolume that is defined by the persistentVolume field.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "persistentVolume": { - SchemaProps: spec.SchemaProps{ - Description: "persistentVolume is an optional field that specifies the PersistentVolume that will be used to store the Insights data archive. The PersistentVolume must be created in the openshift-insights namespace.", - Ref: ref(configv1alpha1.PersistentVolumeConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - }, - Dependencies: []string{ - configv1alpha1.PersistentVolumeConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_TLSConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TLSConfig represents TLS configuration for Alertmanager connections. At least one TLS configuration option must be specified. For mutual TLS (mTLS), both cert and key must be specified together, or both omitted.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is an optional CA certificate to use for TLS connections. When omitted, the system's default CA bundle is used.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.SecretKeySelector{}.OpenAPIModelName()), - }, - }, - "cert": { - SchemaProps: spec.SchemaProps{ - Description: "cert is an optional client certificate to use for mutual TLS connections. When omitted, no client certificate is presented.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.SecretKeySelector{}.OpenAPIModelName()), - }, - }, - "key": { - SchemaProps: spec.SchemaProps{ - Description: "key is an optional client key to use for mutual TLS connections. When omitted, no client key is used.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.SecretKeySelector{}.OpenAPIModelName()), - }, - }, - "serverName": { - SchemaProps: spec.SchemaProps{ - Description: "serverName is an optional server name to use for TLS connections. When specified, must be a valid DNS subdomain as per RFC 1123. When omitted, the server name is derived from the URL. Must be between 1 and 253 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - "certificateVerification": { - SchemaProps: spec.SchemaProps{ - Description: "certificateVerification determines the policy for TLS certificate verification. Allowed values are \"Verify\" (performs certificate verification, secure) and \"SkipVerify\" (skips verification, insecure). When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default value is \"Verify\".", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.SecretKeySelector{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_TelemeterClientConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TelemeterClientConfig provides configuration options for the Telemeter Client component that runs in the `openshift-monitoring` namespace. The Telemeter Client collects selected monitoring metrics and forwards them to Red Hat for telemetry purposes. At least one field must be specified.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector defines the nodes on which the Pods are scheduled. nodeSelector is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default value is `kubernetes.io/os: linux`. When specified, nodeSelector must contain at least 1 entry and must not contain more than 10 entries.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "resources": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resources defines the compute resource requests and limits for the Telemeter Client container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 1m\n limit: null\n - name: memory\n request: 40Mi\n limit: null\nMaximum length for this list is 5. Minimum length for this list is 1. Each resource name must be unique within this list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.ContainerResource{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "tolerations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "tolerations defines tolerations for the pods. tolerations is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. Defaults are empty/unset. Maximum length for this list is 10. Minimum length for this list is 1.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.Toleration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "topologySpreadConstraints": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "topologyKey", - "whenUnsatisfiable", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "topologySpreadConstraints defines rules for how Telemeter Client Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nWhen omitted, this means no opinion and the platform is left to choose a default, which is subject to change over time. This field maps directly to the `topologySpreadConstraints` field in the Pod spec. Default is empty list. Maximum length for this list is 10. Minimum length for this list is 1. Entries must have unique topologyKey and whenUnsatisfiable pairs.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.TopologySpreadConstraint{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.ContainerResource{}.OpenAPIModelName(), corev1.Toleration{}.OpenAPIModelName(), corev1.TopologySpreadConstraint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_ThanosQuerierConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ThanosQuerierConfig provides configuration options for the Thanos Querier component that runs in the `openshift-monitoring` namespace. At least one field must be specified; an empty thanosQuerierConfig object is not allowed.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel defines the verbosity of logs emitted by Thanos Querier. logLevel is optional. Allowed values are Error, Warn, Info, and Debug. When set to Error, only errors will be logged. When set to Warn, both warnings and errors will be logged. When set to Info, general information, warnings, and errors will all be logged. When set to Debug, detailed debugging information will be logged. When omitted, this means no opinion and the platform is left to choose a reasonable default, that is subject to change over time. The current default value is `Info`.", - Type: []string{"string"}, - Format: "", - }, - }, - "requestLogging": { - SchemaProps: spec.SchemaProps{ - Description: "requestLogging configures request logging for Thanos Querier. requestLogging is optional. When provided, the policy field within is required. When omitted, this means no opinion and the platform is left to choose a reasonable default, that is subject to change over time. The current default behavior is to not log any requests.", - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.ThanosQuerierRequestLoggingConfig{}.OpenAPIModelName()), - }, - }, - "crossOriginRequestPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "crossOriginRequestPolicy configures the CORS (Cross-Origin Resource Sharing) policy for Thanos Querier's HTTP endpoints. crossOriginRequestPolicy is optional. Valid values are \"AllowAll\" and \"DenyAll\". When set to \"AllowAll\", CORS headers are added to responses, allowing cross-origin requests from any domain. When set to \"DenyAll\", no CORS headers are added and cross-origin requests are rejected by the browser. When omitted, this means no opinion and the platform is left to choose a reasonable default, that is subject to change over time. The current default value is \"DenyAll\".", - Type: []string{"string"}, - Format: "", - }, - }, - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector defines the nodes on which the Pods are scheduled. nodeSelector is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default value is `kubernetes.io/os: linux`. When specified, nodeSelector must contain at least 1 entry and must not contain more than 10 entries.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "resources": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resources defines the compute resource requests and limits for the Thanos Querier container. resources is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. Requests cannot exceed limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 5m\n - name: memory\n request: 12Mi\nMaximum length for this list is 5. Minimum length for this list is 1. Each resource name must be unique within this list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1alpha1.ContainerResource{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "tolerations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "tolerations defines tolerations for the pods. tolerations is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. Defaults are empty/unset. Maximum length for this list is 10. Minimum length for this list is 1.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.Toleration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "topologySpreadConstraints": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "topologyKey", - "whenUnsatisfiable", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "topologySpreadConstraints defines rules for how Thanos Querier Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nWhen omitted, this means no opinion and the platform is left to choose a default, which is subject to change over time. This field maps directly to the `topologySpreadConstraints` field in the Pod spec. Defaults are empty/unset. Maximum length for this list is 10. Minimum length for this list is 1. Entries must have unique topologyKey and whenUnsatisfiable pairs.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.TopologySpreadConstraint{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1alpha1.ContainerResource{}.OpenAPIModelName(), configv1alpha1.ThanosQuerierRequestLoggingConfig{}.OpenAPIModelName(), corev1.Toleration{}.OpenAPIModelName(), corev1.TopologySpreadConstraint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha1_ThanosQuerierRequestLoggingConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ThanosQuerierRequestLoggingConfig configures request logging for Thanos Querier.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "policy": { - SchemaProps: spec.SchemaProps{ - Description: "policy determines which HTTP and gRPC requests are logged by Thanos Querier. Valid values are \"AllRequests\" and \"NoRequests\". When set to \"AllRequests\", every request received by Thanos Querier is logged with method, path, and response status. The log level for request logs is derived from the logLevel field. When set to \"NoRequests\", request logging is turned off.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"policy"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_UppercaseActionConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "UppercaseActionConfig configures the Uppercase action. Maps the concatenated source_labels to their upper case and writes to target_label. Requires Prometheus >= v2.36.0.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "targetLabel": { - SchemaProps: spec.SchemaProps{ - Description: "targetLabel is the label name where the upper-cased value is written. Must be between 1 and 128 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"targetLabel"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha1_UserDefinedMonitoring(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "UserDefinedMonitoring config for user-defined projects.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "mode": { - SchemaProps: spec.SchemaProps{ - Description: "mode defines the different configurations of UserDefinedMonitoring Valid values are Disabled and NamespaceIsolated Disabled disables monitoring for user-defined projects. This restricts the default monitoring stack, installed in the openshift-monitoring project, to monitor only platform namespaces, which prevents any custom monitoring configurations or resources from being applied to user-defined namespaces. NamespaceIsolated enables monitoring for user-defined projects with namespace-scoped tenancy. This ensures that metrics, alerts, and monitoring data are isolated at the namespace level. The current default value is `Disabled`.\n\nPossible enum values:\n - `\"Disabled\"` disables monitoring for user-defined projects. This restricts the default monitoring stack, installed in the openshift-monitoring project, to monitor only platform namespaces, which prevents any custom monitoring configurations or resources from being applied to user-defined namespaces.\n - `\"NamespaceIsolated\"` enables monitoring for user-defined projects with namespace-scoped tenancy. This ensures that metrics, alerts, and monitoring data are isolated at the namespace level.", - Default: "", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Disabled", "NamespaceIsolated"}, - }, - }, - }, - Required: []string{"mode"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha2_Custom(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "custom provides the custom configuration of gatherers", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "configs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "configs is a required list of gatherers configurations that can be used to enable or disable specific gatherers. It may not exceed 100 items and each gatherer can be present only once. It is possible to disable an entire set of gatherers while allowing a specific function within that set. The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(v1alpha2.GathererConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"configs"}, - }, - }, - Dependencies: []string{ - v1alpha2.GathererConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha2_GatherConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "gatherConfig provides data gathering configuration options.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "dataPolicy": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "dataPolicy is an optional list of DataPolicyOptions that allows user to enable additional obfuscation of the Insights archive data. It may not exceed 2 items and must not contain duplicates. Valid values are ObfuscateNetworking and WorkloadNames. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When set to WorkloadNames, the gathered data about cluster resources will not contain the workload names for your deployments. Resources UIDs will be used instead. When omitted no obfuscation is applied.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "gatherers": { - SchemaProps: spec.SchemaProps{ - Description: "gatherers is a required field that specifies the configuration of the gatherers.", - Default: map[string]interface{}{}, - Ref: ref(v1alpha2.Gatherers{}.OpenAPIModelName()), - }, - }, - "storage": { - SchemaProps: spec.SchemaProps{ - Description: "storage is an optional field that allows user to define persistent storage for gathering jobs to store the Insights data archive. If omitted, the gathering job will use ephemeral storage.", - Ref: ref(v1alpha2.Storage{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"gatherers"}, - }, - }, - Dependencies: []string{ - v1alpha2.Gatherers{}.OpenAPIModelName(), v1alpha2.Storage{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha2_GathererConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "gathererConfig allows to configure specific gatherers", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the required name of a specific gatherer It may not exceed 256 characters. The format for a gatherer name is: {gatherer}/{function} where the function is optional. Gatherer consists of a lowercase letters only that may include underscores (_). Function consists of a lowercase letters only that may include underscores (_) and is separated from the gatherer by a forward slash (/). The particular gatherers can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "state": { - SchemaProps: spec.SchemaProps{ - Description: "state is a required field that allows you to configure specific gatherer. Valid values are \"Enabled\" and \"Disabled\". When set to Enabled the gatherer will run. When set to Disabled the gatherer will not run.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "state"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha2_Gatherers(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "mode": { - SchemaProps: spec.SchemaProps{ - Description: "mode is a required field that specifies the mode for gatherers. Allowed values are All, None, and Custom. When set to All, all gatherers wil run and gather data. When set to None, all gatherers will be disabled and no data will be gathered. When set to Custom, the custom configuration from the custom field will be applied.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "custom": { - SchemaProps: spec.SchemaProps{ - Description: "custom provides gathering configuration. It is required when mode is Custom, and forbidden otherwise. Custom configuration allows user to disable only a subset of gatherers. Gatherers that are not explicitly disabled in custom configuration will run.", - Ref: ref(v1alpha2.Custom{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"mode"}, - }, - }, - Dependencies: []string{ - v1alpha2.Custom{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha2_InsightsDataGather(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "InsightsDataGather provides data gather configuration options for the the Insights Operator.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(v1alpha2.InsightsDataGatherSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(v1alpha2.InsightsDataGatherStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - v1alpha2.InsightsDataGatherSpec{}.OpenAPIModelName(), v1alpha2.InsightsDataGatherStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha2_InsightsDataGatherList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "InsightsDataGatherList is a collection of items Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the required standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is the required list of InsightsDataGather objects it may not exceed 100 items", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(v1alpha2.InsightsDataGather{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - v1alpha2.InsightsDataGather{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha2_InsightsDataGatherSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "gatherConfig": { - SchemaProps: spec.SchemaProps{ - Description: "gatherConfig is an optional spec attribute that includes all the configuration options related to gathering of the Insights data and its uploading to the ingress.", - Default: map[string]interface{}{}, - Ref: ref(v1alpha2.GatherConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - v1alpha2.GatherConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha2_InsightsDataGatherStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha2_PersistentVolumeClaimReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "persistentVolumeClaimReference is a reference to a PersistentVolumeClaim.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is a string that follows the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start and end with an alphanumeric character.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_config_v1alpha2_PersistentVolumeConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "persistentVolumeConfig provides configuration options for PersistentVolume storage.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "claim": { - SchemaProps: spec.SchemaProps{ - Description: "claim is a required field that specifies the configuration of the PersistentVolumeClaim that will be used to store the Insights data archive. The PersistentVolumeClaim must be created in the openshift-insights namespace.", - Default: map[string]interface{}{}, - Ref: ref(v1alpha2.PersistentVolumeClaimReference{}.OpenAPIModelName()), - }, - }, - "mountPath": { - SchemaProps: spec.SchemaProps{ - Description: "mountPath is an optional field specifying the directory where the PVC will be mounted inside the Insights data gathering Pod. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default mount path is /var/lib/insights-operator The path may not exceed 1024 characters and must not contain a colon.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"claim"}, - }, - }, - Dependencies: []string{ - v1alpha2.PersistentVolumeClaimReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_config_v1alpha2_Storage(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "storage provides persistent storage configuration options for gathering jobs. If the type is set to PersistentVolume, then the PersistentVolume must be defined. If the type is set to Ephemeral, then the PersistentVolume must not be defined.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is a required field that specifies the type of storage that will be used to store the Insights data archive. Valid values are \"PersistentVolume\" and \"Ephemeral\". When set to Ephemeral, the Insights data archive is stored in the ephemeral storage of the gathering job. When set to PersistentVolume, the Insights data archive is stored in the PersistentVolume that is defined by the persistentVolume field.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "persistentVolume": { - SchemaProps: spec.SchemaProps{ - Description: "persistentVolume is an optional field that specifies the PersistentVolume that will be used to store the Insights data archive. The PersistentVolume must be created in the openshift-insights namespace.", - Ref: ref(v1alpha2.PersistentVolumeConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - }, - Dependencies: []string{ - v1alpha2.PersistentVolumeConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ApplicationMenuSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ApplicationMenuSpec is the specification of the desired section and icon used for the link in the application menu.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "section": { - SchemaProps: spec.SchemaProps{ - Description: "section is the section of the application menu in which the link should appear. This can be any text that will appear as a subheading in the application menu dropdown. A new section will be created if the text does not match text of an existing section.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "imageURL": { - SchemaProps: spec.SchemaProps{ - Description: "imageURL is the URL for the icon used in front of the link in the application menu. The URL must be an HTTPS URL or a Data URI. The image should be square and will be shown at 24x24 pixels.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"section"}, - }, - }, - } -} - -func schema_openshift_api_console_v1_CLIDownloadLink(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "text": { - SchemaProps: spec.SchemaProps{ - Description: "text is the display text for the link", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "href": { - SchemaProps: spec.SchemaProps{ - Description: "href is the absolute secure URL for the link (must use https)", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"href"}, - }, - }, - } -} - -func schema_openshift_api_console_v1_ConsoleCLIDownload(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleCLIDownload is an extension for configuring openshift web console command line interface (CLI) downloads.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleCLIDownloadSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleCLIDownloadSpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleCLIDownloadList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleCLIDownload{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleCLIDownload{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleCLIDownloadSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleCLIDownloadSpec is the desired cli download configuration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "displayName": { - SchemaProps: spec.SchemaProps{ - Description: "displayName is the display name of the CLI download.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "description": { - SchemaProps: spec.SchemaProps{ - Description: "description is the description of the CLI download (can include markdown).", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "links": { - SchemaProps: spec.SchemaProps{ - Description: "links is a list of objects that provide CLI download link details.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(consolev1.CLIDownloadLink{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"displayName", "description", "links"}, - }, - }, - Dependencies: []string{ - consolev1.CLIDownloadLink{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleExternalLogLink(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleExternalLogLink is an extension for customizing OpenShift web console log links.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleExternalLogLinkSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleExternalLogLinkSpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleExternalLogLinkList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleExternalLogLink{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleExternalLogLink{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleExternalLogLinkSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleExternalLogLinkSpec is the desired log link configuration. The log link will appear on the logs tab of the pod details page.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "text": { - SchemaProps: spec.SchemaProps{ - Description: "text is the display text for the link", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "hrefTemplate": { - SchemaProps: spec.SchemaProps{ - Description: "hrefTemplate is an absolute secure URL (must use https) for the log link including variables to be replaced. Variables are specified in the URL with the format ${variableName}, for instance, ${containerName} and will be replaced with the corresponding values from the resource. Resource is a pod. Supported variables are: - ${resourceName} - name of the resource which containes the logs - ${resourceUID} - UID of the resource which contains the logs\n - e.g. `11111111-2222-3333-4444-555555555555`\n- ${containerName} - name of the resource's container that contains the logs - ${resourceNamespace} - namespace of the resource that contains the logs - ${resourceNamespaceUID} - namespace UID of the resource that contains the logs - ${podLabels} - JSON representation of labels matching the pod with the logs\n - e.g. `{\"key1\":\"value1\",\"key2\":\"value2\"}`\n\ne.g., https://example.com/logs?resourceName=${resourceName}&containerName=${containerName}&resourceNamespace=${resourceNamespace}&podLabels=${podLabels}", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "namespaceFilter": { - SchemaProps: spec.SchemaProps{ - Description: "namespaceFilter is a regular expression used to restrict a log link to a matching set of namespaces (e.g., `^openshift-`). The string is converted into a regular expression using the JavaScript RegExp constructor. If not specified, links will be displayed for all the namespaces.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"text", "hrefTemplate"}, - }, - }, - } -} - -func schema_openshift_api_console_v1_ConsoleLink(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleLink is an extension for customizing OpenShift web console links.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleLinkSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleLinkSpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleLinkList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleLink{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleLink{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleLinkSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleLinkSpec is the desired console link configuration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "text": { - SchemaProps: spec.SchemaProps{ - Description: "text is the display text for the link", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "href": { - SchemaProps: spec.SchemaProps{ - Description: "href is the absolute URL for the link. Must use https:// for web URLs or mailto: for email links.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "location": { - SchemaProps: spec.SchemaProps{ - Description: "location determines which location in the console the link will be appended to (ApplicationMenu, HelpMenu, UserMenu, NamespaceDashboard).", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "applicationMenu": { - SchemaProps: spec.SchemaProps{ - Description: "applicationMenu holds information about section and icon used for the link in the application menu, and it is applicable only when location is set to ApplicationMenu.", - Ref: ref(consolev1.ApplicationMenuSpec{}.OpenAPIModelName()), - }, - }, - "namespaceDashboard": { - SchemaProps: spec.SchemaProps{ - Description: "namespaceDashboard holds information about namespaces in which the dashboard link should appear, and it is applicable only when location is set to NamespaceDashboard. If not specified, the link will appear in all namespaces.", - Ref: ref(consolev1.NamespaceDashboardSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"text", "href", "location"}, - }, - }, - Dependencies: []string{ - consolev1.ApplicationMenuSpec{}.OpenAPIModelName(), consolev1.NamespaceDashboardSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleNotification(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleNotification is the extension for configuring openshift web console notifications.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleNotificationSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleNotificationSpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleNotificationList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleNotification{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleNotification{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleNotificationSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleNotificationSpec is the desired console notification configuration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "text": { - SchemaProps: spec.SchemaProps{ - Description: "text is the visible text of the notification.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "location": { - SchemaProps: spec.SchemaProps{ - Description: "location is the location of the notification in the console. Valid values are: \"BannerTop\", \"BannerBottom\", \"BannerTopBottom\".", - Type: []string{"string"}, - Format: "", - }, - }, - "link": { - SchemaProps: spec.SchemaProps{ - Description: "link is an object that holds notification link details.", - Ref: ref(consolev1.Link{}.OpenAPIModelName()), - }, - }, - "color": { - SchemaProps: spec.SchemaProps{ - Description: "color is the color of the text for the notification as CSS data type color.", - Type: []string{"string"}, - Format: "", - }, - }, - "backgroundColor": { - SchemaProps: spec.SchemaProps{ - Description: "backgroundColor is the color of the background for the notification as CSS data type color.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"text"}, - }, - }, - Dependencies: []string{ - consolev1.Link{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsolePlugin(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsolePlugin is an extension for customizing OpenShift web console by dynamically loading code from another service running on the cluster.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec contains the desired configuration for the console plugin.", - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsolePluginSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - consolev1.ConsolePluginSpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsolePluginBackend(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsolePluginBackend holds information about the endpoint which serves the console's plugin", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the backend type which servers the console's plugin. Currently only \"Service\" is supported.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "service": { - SchemaProps: spec.SchemaProps{ - Description: "service is a Kubernetes Service that exposes the plugin using a deployment with an HTTP server. The Service must use HTTPS and Service serving certificate. The console backend will proxy the plugins assets from the Service using the service CA bundle.", - Ref: ref(consolev1.ConsolePluginService{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "service": "Service", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - consolev1.ConsolePluginService{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsolePluginCSP(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsolePluginCSP holds configuration for a specific CSP directive", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "directive": { - SchemaProps: spec.SchemaProps{ - Description: "directive specifies which Content-Security-Policy directive to configure. Available directive types are DefaultSrc, ScriptSrc, StyleSrc, ImgSrc, FontSrc and ConnectSrc. DefaultSrc directive serves as a fallback for the other CSP fetch directives. For more information about the DefaultSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/default-src ScriptSrc directive specifies valid sources for JavaScript. For more information about the ScriptSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src StyleSrc directive specifies valid sources for stylesheets. For more information about the StyleSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/style-src ImgSrc directive specifies a valid sources of images and favicons. For more information about the ImgSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/img-src FontSrc directive specifies valid sources for fonts loaded using @font-face. For more information about the FontSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/font-src ConnectSrc directive restricts the URLs which can be loaded using script interfaces. For more information about the ConnectSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/connect-src\n\nPossible enum values:\n - `\"ConnectSrc\"` directive restricts the URLs which can be loaded using script interfaces. For more information about the ConnectSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/connect-src\n - `\"DefaultSrc\"` directive serves as a fallback for the other CSP fetch directives. For more information about the DefaultSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/default-src\n - `\"FontSrc\"` directive specifies valid sources for fonts loaded using @font-face. For more information about the FontSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/font-src\n - `\"ImgSrc\"` directive specifies a valid sources of images and favicons. For more information about the ImgSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/img-src\n - `\"ScriptSrc\"` directive specifies valid sources for JavaScript. For more information about the ScriptSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src\n - `\"StyleSrc\"` directive specifies valid sources for stylesheets. For more information about the StyleSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/style-src", - Default: "", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"ConnectSrc", "DefaultSrc", "FontSrc", "ImgSrc", "ScriptSrc", "StyleSrc"}, - }, - }, - "values": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "values defines an array of values to append to the console defaults for this directive. Each ConsolePlugin may define their own directives with their values. These will be set by the OpenShift web console's backend, as part of its Content-Security-Policy header. The array can contain at most 16 values. Each directive value must have a maximum length of 1024 characters and must not contain whitespace, commas (,), semicolons (;) or single quotes ('). The value '*' is not permitted. Each value in the array must be unique.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"directive", "values"}, - }, - }, - } -} - -func schema_openshift_api_console_v1_ConsolePluginI18n(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsolePluginI18n holds information on localization resources that are served by the dynamic plugin.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "loadType": { - SchemaProps: spec.SchemaProps{ - Description: "loadType indicates how the plugin's localization resource should be loaded. Valid values are Preload, Lazy and the empty string. When set to Preload, all localization resources are fetched when the plugin is loaded. When set to Lazy, localization resources are lazily loaded as and when they are required by the console. When omitted or set to the empty string, the behaviour is equivalent to Lazy type.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"loadType"}, - }, - }, - } -} - -func schema_openshift_api_console_v1_ConsolePluginList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsolePlugin{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - consolev1.ConsolePlugin{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsolePluginProxy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsolePluginProxy holds information on various service types to which console's backend will proxy the plugin's requests.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "endpoint": { - SchemaProps: spec.SchemaProps{ - Description: "endpoint provides information about endpoint to which the request is proxied to.", - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsolePluginProxyEndpoint{}.OpenAPIModelName()), - }, - }, - "alias": { - SchemaProps: spec.SchemaProps{ - Description: "alias is a proxy name that identifies the plugin's proxy. An alias name should be unique per plugin. The console backend exposes following proxy endpoint:\n\n/api/proxy/plugin///?\n\nRequest example path:\n\n/api/proxy/plugin/acm/search/pods?namespace=openshift-apiserver", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "caCertificate": { - SchemaProps: spec.SchemaProps{ - Description: "caCertificate provides the cert authority certificate contents, in case the proxied Service is using custom service CA. By default, the service CA bundle provided by the service-ca operator is used.", - Type: []string{"string"}, - Format: "", - }, - }, - "authorization": { - SchemaProps: spec.SchemaProps{ - Description: "authorization provides information about authorization type, which the proxied request should contain", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"endpoint", "alias"}, - }, - }, - Dependencies: []string{ - consolev1.ConsolePluginProxyEndpoint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsolePluginProxyEndpoint(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsolePluginProxyEndpoint holds information about the endpoint to which request will be proxied to.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the type of the console plugin's proxy. Currently only \"Service\" is supported.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "service": { - SchemaProps: spec.SchemaProps{ - Description: "service is an in-cluster Service that the plugin will connect to. The Service must use HTTPS. The console backend exposes an endpoint in order to proxy communication between the plugin and the Service. Note: service field is required for now, since currently only \"Service\" type is supported.", - Ref: ref(consolev1.ConsolePluginProxyServiceConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "service": "Service", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - consolev1.ConsolePluginProxyServiceConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsolePluginProxyServiceConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ProxyTypeServiceConfig holds information on Service to which console's backend will proxy the plugin's requests.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of Service that the plugin needs to connect to.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace of Service that the plugin needs to connect to", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "port": { - SchemaProps: spec.SchemaProps{ - Description: "port on which the Service that the plugin needs to connect to is listening on.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"name", "namespace", "port"}, - }, - }, - } -} - -func schema_openshift_api_console_v1_ConsolePluginService(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsolePluginService holds information on Service that is serving console dynamic plugin assets.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of Service that is serving the plugin assets.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace of Service that is serving the plugin assets.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "port": { - SchemaProps: spec.SchemaProps{ - Description: "port on which the Service that is serving the plugin is listening to.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "basePath": { - SchemaProps: spec.SchemaProps{ - Description: "basePath is the path to the plugin's assets. The primary asset it the manifest file called `plugin-manifest.json`, which is a JSON document that contains metadata about the plugin and the extensions.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "namespace", "port"}, - }, - }, - } -} - -func schema_openshift_api_console_v1_ConsolePluginSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsolePluginSpec is the desired plugin configuration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "displayName": { - SchemaProps: spec.SchemaProps{ - Description: "displayName is the display name of the plugin. The dispalyName should be between 1 and 128 characters.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "backend": { - SchemaProps: spec.SchemaProps{ - Description: "backend holds the configuration of backend which is serving console's plugin .", - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsolePluginBackend{}.OpenAPIModelName()), - }, - }, - "proxy": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "proxy is a list of proxies that describe various service type to which the plugin needs to connect to.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsolePluginProxy{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "i18n": { - SchemaProps: spec.SchemaProps{ - Description: "i18n is the configuration of plugin's localization resources.", - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsolePluginI18n{}.OpenAPIModelName()), - }, - }, - "contentSecurityPolicy": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "directive", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "contentSecurityPolicy is a list of Content-Security-Policy (CSP) directives for the plugin. Each directive specifies a list of values, appropriate for the given directive type, for example a list of remote endpoints for fetch directives such as ScriptSrc. Console web application uses CSP to detect and mitigate certain types of attacks, such as cross-site scripting (XSS) and data injection attacks. Dynamic plugins should specify this field if need to load assets from outside the cluster or if violation reports are observed. Dynamic plugins should always prefer loading their assets from within the cluster, either by vendoring them, or fetching from a cluster service. CSP violation reports can be viewed in the browser's console logs during development and testing of the plugin in the OpenShift web console. Available directive types are DefaultSrc, ScriptSrc, StyleSrc, ImgSrc, FontSrc and ConnectSrc. Each of the available directives may be defined only once in the list. The value 'self' is automatically included in all fetch directives by the OpenShift web console's backend. For more information about the CSP directives, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy\n\nThe OpenShift web console server aggregates the CSP directives and values across its own default values and all enabled ConsolePlugin CRs, merging them into a single policy string that is sent to the browser via `Content-Security-Policy` HTTP response header.\n\nExample:\n ConsolePlugin A directives:\n script-src: https://script1.com/, https://script2.com/\n font-src: https://font1.com/\n\n ConsolePlugin B directives:\n script-src: https://script2.com/, https://script3.com/\n font-src: https://font2.com/\n img-src: https://img1.com/\n\n Unified set of CSP directives, passed to the OpenShift web console server:\n script-src: https://script1.com/, https://script2.com/, https://script3.com/\n font-src: https://font1.com/, https://font2.com/\n img-src: https://img1.com/\n\n OpenShift web console server CSP response header:\n Content-Security-Policy: default-src 'self'; base-uri 'self'; script-src 'self' https://script1.com/ https://script2.com/ https://script3.com/; font-src 'self' https://font1.com/ https://font2.com/; img-src 'self' https://img1.com/; style-src 'self'; frame-src 'none'; object-src 'none'", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsolePluginCSP{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"displayName", "backend"}, - }, - }, - Dependencies: []string{ - consolev1.ConsolePluginBackend{}.OpenAPIModelName(), consolev1.ConsolePluginCSP{}.OpenAPIModelName(), consolev1.ConsolePluginI18n{}.OpenAPIModelName(), consolev1.ConsolePluginProxy{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleQuickStart(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleQuickStart is an extension for guiding user through various workflows in the OpenShift web console.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleQuickStartSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleQuickStartSpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleQuickStartList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleQuickStart{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleQuickStart{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleQuickStartSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleQuickStartSpec is the desired quick start configuration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "displayName": { - SchemaProps: spec.SchemaProps{ - Description: "displayName is the display name of the Quick Start.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "icon": { - SchemaProps: spec.SchemaProps{ - Description: "icon is a base64 encoded image that will be displayed beside the Quick Start display name. The icon should be an vector image for easy scaling. The size of the icon should be 40x40.", - Type: []string{"string"}, - Format: "", - }, - }, - "tags": { - SchemaProps: spec.SchemaProps{ - Description: "tags is a list of strings that describe the Quick Start.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "durationMinutes": { - SchemaProps: spec.SchemaProps{ - Description: "durationMinutes describes approximately how many minutes it will take to complete the Quick Start.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "description": { - SchemaProps: spec.SchemaProps{ - Description: "description is the description of the Quick Start. (includes markdown)", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "prerequisites": { - SchemaProps: spec.SchemaProps{ - Description: "prerequisites contains all prerequisites that need to be met before taking a Quick Start. (includes markdown)", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "introduction": { - SchemaProps: spec.SchemaProps{ - Description: "introduction describes the purpose of the Quick Start. (includes markdown)", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "tasks": { - SchemaProps: spec.SchemaProps{ - Description: "tasks is the list of steps the user has to perform to complete the Quick Start.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleQuickStartTask{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "conclusion": { - SchemaProps: spec.SchemaProps{ - Description: "conclusion sums up the Quick Start and suggests the possible next steps. (includes markdown)", - Type: []string{"string"}, - Format: "", - }, - }, - "nextQuickStart": { - SchemaProps: spec.SchemaProps{ - Description: "nextQuickStart is a list of the following Quick Starts, suggested for the user to try.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "accessReviewResources": { - SchemaProps: spec.SchemaProps{ - Description: "accessReviewResources contains a list of resources that the user's access will be reviewed against in order for the user to complete the Quick Start. The Quick Start will be hidden if any of the access reviews fail.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(apiauthorizationv1.ResourceAttributes{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"displayName", "durationMinutes", "description", "introduction", "tasks"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleQuickStartTask{}.OpenAPIModelName(), apiauthorizationv1.ResourceAttributes{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleQuickStartTask(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleQuickStartTask is a single step in a Quick Start.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "title": { - SchemaProps: spec.SchemaProps{ - Description: "title describes the task and is displayed as a step heading.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "description": { - SchemaProps: spec.SchemaProps{ - Description: "description describes the steps needed to complete the task. (includes markdown)", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "review": { - SchemaProps: spec.SchemaProps{ - Description: "review contains instructions to validate the task is complete. The user will select 'Yes' or 'No'. using a radio button, which indicates whether the step was completed successfully.", - Ref: ref(consolev1.ConsoleQuickStartTaskReview{}.OpenAPIModelName()), - }, - }, - "summary": { - SchemaProps: spec.SchemaProps{ - Description: "summary contains information about the passed step.", - Ref: ref(consolev1.ConsoleQuickStartTaskSummary{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"title", "description"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleQuickStartTaskReview{}.OpenAPIModelName(), consolev1.ConsoleQuickStartTaskSummary{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleQuickStartTaskReview(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleQuickStartTaskReview contains instructions that validate a task was completed successfully.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "instructions": { - SchemaProps: spec.SchemaProps{ - Description: "instructions contains steps that user needs to take in order to validate his work after going through a task. (includes markdown)", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "failedTaskHelp": { - SchemaProps: spec.SchemaProps{ - Description: "failedTaskHelp contains suggestions for a failed task review and is shown at the end of task. (includes markdown)", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"instructions", "failedTaskHelp"}, - }, - }, - } -} - -func schema_openshift_api_console_v1_ConsoleQuickStartTaskSummary(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleQuickStartTaskSummary contains information about a passed step.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "success": { - SchemaProps: spec.SchemaProps{ - Description: "success describes the succesfully passed task.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "failed": { - SchemaProps: spec.SchemaProps{ - Description: "failed briefly describes the unsuccessfully passed task. (includes markdown)", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"success", "failed"}, - }, - }, - } -} - -func schema_openshift_api_console_v1_ConsoleSample(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleSample is an extension to customizing OpenShift web console by adding samples.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec contains configuration for a console sample.", - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleSampleSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleSampleSpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleSampleContainerImportSource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleSampleContainerImportSource let the user import a container image.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "image": { - SchemaProps: spec.SchemaProps{ - Description: "reference to a container image that provides a HTTP service. The service must be exposed on the default port (8080) unless otherwise configured with the port field.\n\nSupported formats:\n - /\n - docker.io//\n - quay.io//\n - quay.io//@sha256:\n - quay.io//:", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "service": { - SchemaProps: spec.SchemaProps{ - Description: "service contains configuration for the Service resource created for this sample.", - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleSampleContainerImportSourceService{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"image"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleSampleContainerImportSourceService{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleSampleContainerImportSourceService(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleSampleContainerImportSourceService let the samples author define defaults for the Service created for this sample.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "targetPort": { - SchemaProps: spec.SchemaProps{ - Description: "targetPort is the port that the service listens on for HTTP requests. This port will be used for Service and Route created for this sample. Port must be in the range 1 to 65535. Default port is 8080.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_console_v1_ConsoleSampleGitImportSource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleSampleGitImportSource let the user import code from a public Git repository.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "repository": { - SchemaProps: spec.SchemaProps{ - Description: "repository contains the reference to the actual Git repository.", - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleSampleGitImportSourceRepository{}.OpenAPIModelName()), - }, - }, - "service": { - SchemaProps: spec.SchemaProps{ - Description: "service contains configuration for the Service resource created for this sample.", - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleSampleGitImportSourceService{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"repository"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleSampleGitImportSourceRepository{}.OpenAPIModelName(), consolev1.ConsoleSampleGitImportSourceService{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleSampleGitImportSourceRepository(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleSampleGitImportSourceRepository let the user import code from a public git repository.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url of the Git repository that contains a HTTP service. The HTTP service must be exposed on the default port (8080) unless otherwise configured with the port field.\n\nOnly public repositories on GitHub, GitLab and Bitbucket are currently supported:\n\n - https://github.com//\n - https://gitlab.com//\n - https://bitbucket.org//\n\nThe url must have a maximum length of 256 characters.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "revision": { - SchemaProps: spec.SchemaProps{ - Description: "revision is the git revision at which to clone the git repository Can be used to clone a specific branch, tag or commit SHA. Must be at most 256 characters in length. When omitted the repository's default branch is used.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "contextDir": { - SchemaProps: spec.SchemaProps{ - Description: "contextDir is used to specify a directory within the repository to build the component. Must start with `/` and have a maximum length of 256 characters. When omitted, the default value is to build from the root of the repository.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"url"}, - }, - }, - } -} - -func schema_openshift_api_console_v1_ConsoleSampleGitImportSourceService(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleSampleGitImportSourceService let the samples author define defaults for the Service created for this sample.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "targetPort": { - SchemaProps: spec.SchemaProps{ - Description: "targetPort is the port that the service listens on for HTTP requests. This port will be used for Service created for this sample. Port must be in the range 1 to 65535. Default port is 8080.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_console_v1_ConsoleSampleList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleSample{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleSample{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleSampleSource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleSampleSource is the actual sample definition and can hold different sample types. Unsupported sample types will be ignored in the web console.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type of the sample, currently supported: \"GitImport\";\"ContainerImport\"\n\nPossible enum values:\n - `\"ContainerImport\"` A sample that let the user import a container image.\n - `\"GitImport\"` A sample that let the user import code from a git repository.", - Default: "", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"ContainerImport", "GitImport"}, - }, - }, - "gitImport": { - SchemaProps: spec.SchemaProps{ - Description: "gitImport allows the user to import code from a git repository.", - Ref: ref(consolev1.ConsoleSampleGitImportSource{}.OpenAPIModelName()), - }, - }, - "containerImport": { - SchemaProps: spec.SchemaProps{ - Description: "containerImport allows the user import a container image.", - Ref: ref(consolev1.ConsoleSampleContainerImportSource{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "containerImport": "ContainerImport", - "gitImport": "GitImport", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - consolev1.ConsoleSampleContainerImportSource{}.OpenAPIModelName(), consolev1.ConsoleSampleGitImportSource{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleSampleSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleSampleSpec is the desired sample for the web console. Samples will appear with their title, descriptions and a badge in a samples catalog.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "title": { - SchemaProps: spec.SchemaProps{ - Description: "title is the display name of the sample.\n\nIt is required and must be no more than 50 characters in length.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "abstract": { - SchemaProps: spec.SchemaProps{ - Description: "abstract is a short introduction to the sample.\n\nIt is required and must be no more than 100 characters in length.\n\nThe abstract is shown on the sample card tile below the title and provider and is limited to three lines of content.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "description": { - SchemaProps: spec.SchemaProps{ - Description: "description is a long form explanation of the sample.\n\nIt is required and can have a maximum length of **4096** characters.\n\nIt is a README.md-like content for additional information, links, pre-conditions, and other instructions. It will be rendered as Markdown so that it can contain line breaks, links, and other simple formatting.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "icon": { - SchemaProps: spec.SchemaProps{ - Description: "icon is an optional base64 encoded image and shown beside the sample title.\n\nThe format must follow the data: URL format and can have a maximum size of **10 KB**.\n\n data:[][;base64],\n\nFor example:\n\n data:image;base64, plus the base64 encoded image.\n\nVector images can also be used. SVG icons must start with:\n\n data:image/svg+xml;base64, plus the base64 encoded SVG image.\n\nAll sample catalog icons will be shown on a white background (also when the dark theme is used). The web console ensures that different aspect ratios work correctly. Currently, the surface of the icon is at most 40x100px.\n\nFor more information on the data URL format, please visit https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/Data_URLs.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is an optional label to group multiple samples.\n\nIt is optional and must be no more than 20 characters in length.\n\nRecommendation is a singular term like \"Builder Image\", \"Devfile\" or \"Serverless Function\".\n\nCurrently, the type is shown a badge on the sample card tile in the top right corner.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "provider": { - SchemaProps: spec.SchemaProps{ - Description: "provider is an optional label to honor who provides the sample.\n\nIt is optional and must be no more than 50 characters in length.\n\nA provider can be a company like \"Red Hat\" or an organization like \"CNCF\" or \"Knative\".\n\nCurrently, the provider is only shown on the sample card tile below the title with the prefix \"Provided by \"", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "tags": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "tags are optional string values that can be used to find samples in the samples catalog.\n\nExamples of common tags may be \"Java\", \"Quarkus\", etc.\n\nThey will be displayed on the samples details page.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "source": { - SchemaProps: spec.SchemaProps{ - Description: "source defines where to deploy the sample service from. The sample may be sourced from an external git repository or container image.", - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleSampleSource{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"title", "abstract", "description", "source"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleSampleSource{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleYAMLSample(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleYAMLSample is an extension for customizing OpenShift web console YAML samples.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleYAMLSampleSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleYAMLSampleSpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleYAMLSampleList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(consolev1.ConsoleYAMLSample{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - consolev1.ConsoleYAMLSample{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_ConsoleYAMLSampleSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleYAMLSampleSpec is the desired YAML sample configuration. Samples will appear with their descriptions in a samples sidebar when creating a resources in the web console.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "targetResource": { - SchemaProps: spec.SchemaProps{ - Description: "targetResource contains apiVersion and kind of the resource YAML sample is representating.", - Default: map[string]interface{}{}, - Ref: ref(metav1.TypeMeta{}.OpenAPIModelName()), - }, - }, - "title": { - SchemaProps: spec.SchemaProps{ - Description: "title of the YAML sample.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "description": { - SchemaProps: spec.SchemaProps{ - Description: "description of the YAML sample.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "yaml": { - SchemaProps: spec.SchemaProps{ - Description: "yaml is the YAML sample to display.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "snippet": { - SchemaProps: spec.SchemaProps{ - Description: "snippet indicates that the YAML sample is not the full YAML resource definition, but a fragment that can be inserted into the existing YAML document at the user's cursor.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"targetResource", "title", "description", "yaml"}, - }, - }, - Dependencies: []string{ - metav1.TypeMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_console_v1_Link(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Represents a standard link that could be generated in HTML", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "text": { - SchemaProps: spec.SchemaProps{ - Description: "text is the display text for the link", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "href": { - SchemaProps: spec.SchemaProps{ - Description: "href is the absolute URL for the link. Must use https:// for web URLs or mailto: for email links.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"text", "href"}, - }, - }, - } -} - -func schema_openshift_api_console_v1_NamespaceDashboardSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NamespaceDashboardSpec is a specification of namespaces in which the dashboard link should appear. If both namespaces and namespaceSelector are specified, the link will appear in namespaces that match either", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "namespaces": { - SchemaProps: spec.SchemaProps{ - Description: "namespaces is an array of namespace names in which the dashboard link should appear.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "namespaceSelector": { - SchemaProps: spec.SchemaProps{ - Description: "namespaceSelector is used to select the Namespaces that should contain dashboard link by label. If the namespace labels match, dashboard link will be shown for the namespaces.", - Ref: ref(metav1.LabelSelector{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.LabelSelector{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_etcd_v1_PacemakerCluster(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PacemakerCluster represents the current state of the pacemaker cluster as reported by the pcs status command. PacemakerCluster is a cluster-scoped singleton resource. The name of this instance is \"cluster\". This resource provides a view into the health and status of a pacemaker-managed cluster in Two Node OpenShift with Fencing deployments.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status contains the actual pacemaker cluster status information collected from the cluster. The goal of this status is to be able to quickly identify if pacemaker is in a healthy state. In Two Node OpenShift with Fencing, a healthy pacemaker cluster has 2 nodes, both of which have healthy kubelet, etcd, and fencing resources. This field is optional on creation - the status collector populates it immediately after creating the resource via the status subresource.", - Default: map[string]interface{}{}, - Ref: ref(etcdv1.PacemakerClusterStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata"}, - }, - }, - Dependencies: []string{ - etcdv1.PacemakerClusterStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_etcd_v1_PacemakerClusterFencingAgentStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PacemakerClusterFencingAgentStatus represents the status of a fencing agent that can fence a node. Fencing agents are STONITH (Shoot The Other Node In The Head) devices used to isolate failed nodes. Unlike regular pacemaker resources, fencing agents are mapped to their target node (the node they can fence), not the node where their monitoring operations are scheduled.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represent the observations of the fencing agent's current state. Known condition types are: \"Healthy\", \"InService\", \"Managed\", \"Enabled\", \"Operational\", \"Active\", \"Started\", \"Schedulable\". The \"Healthy\" condition is an aggregate that tracks the overall health of the fencing agent. The \"InService\" condition tracks whether the fencing agent is in service (not in maintenance mode). The \"Managed\" condition tracks whether the fencing agent is managed by pacemaker. The \"Enabled\" condition tracks whether the fencing agent is enabled. The \"Operational\" condition tracks whether the fencing agent is operational (not failed). The \"Active\" condition tracks whether the fencing agent is active (available to be used). The \"Started\" condition tracks whether the fencing agent is started. The \"Schedulable\" condition tracks whether the fencing agent is schedulable (not blocked). Each of these conditions is required, so the array must contain at least 8 items.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the unique identifier for this fencing agent (e.g., \"master-0_redfish\"). The name must be unique within the fencingAgents array for this node. It may contain alphanumeric characters, dots, hyphens, and underscores. Maximum length is 300 characters, providing headroom beyond the typical format of _ (253 for RFC 1123 node name + 1 underscore + type).", - Type: []string{"string"}, - Format: "", - }, - }, - "method": { - SchemaProps: spec.SchemaProps{ - Description: "method is the fencing method used by this agent. Valid values are \"Redfish\" and \"IPMI\". Redfish is a standard RESTful API for server management. IPMI (Intelligent Platform Management Interface) is a hardware management interface.\n\nPossible enum values:\n - `\"IPMI\"` uses IPMI (Intelligent Platform Management Interface), a hardware management interface.\n - `\"Redfish\"` uses Redfish, a standard RESTful API for server management.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"IPMI", "Redfish"}, - }, - }, - }, - Required: []string{"conditions", "name", "method"}, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_etcd_v1_PacemakerClusterList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PacemakerClusterList contains a list of PacemakerCluster objects. PacemakerCluster is a cluster-scoped singleton resource; only one instance named \"cluster\" may exist. This list type exists only to satisfy Kubernetes API conventions.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is a list of PacemakerCluster objects.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(etcdv1.PacemakerCluster{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - etcdv1.PacemakerCluster{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_etcd_v1_PacemakerClusterNodeStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PacemakerClusterNodeStatus represents the status of a single node in the pacemaker cluster including the node's conditions and the health of critical resources running on that node.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represent the observations of the node's current state. Known condition types are: \"Healthy\", \"Online\", \"InService\", \"Active\", \"Ready\", \"Clean\", \"Member\", \"FencingAvailable\", \"FencingHealthy\". The \"Healthy\" condition is an aggregate that tracks the overall health of the node. The \"Online\" condition tracks whether the node is online. The \"InService\" condition tracks whether the node is in service (not in maintenance mode). The \"Active\" condition tracks whether the node is active (not in standby mode). The \"Ready\" condition tracks whether the node is ready (not in a pending state). The \"Clean\" condition tracks whether the node is in a clean (status known) state. The \"Member\" condition tracks whether the node is a member of the cluster. The \"FencingAvailable\" condition tracks whether this node can be fenced by at least one healthy agent. The \"FencingHealthy\" condition tracks whether all fencing agents for this node are healthy. Each of these conditions is required, so the array must contain at least 9 items.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "nodeName": { - SchemaProps: spec.SchemaProps{ - Description: "nodeName is the name of the node. This is expected to match the Kubernetes node's name, which must be a lowercase RFC 1123 subdomain consisting of lowercase alphanumeric characters, '-' or '.', starting and ending with an alphanumeric character, and be at most 253 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - "addresses": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "addresses is a list of IP addresses for the node. Pacemaker allows multiple IP addresses for Corosync communication between nodes. The first address in this list is used for IP-based peer URLs for etcd membership. Each address must be a valid global unicast IPv4 or IPv6 address in canonical form (e.g., \"192.168.1.1\" not \"192.168.001.001\", or \"2001:db8::1\" not \"2001:0db8::1\"). This excludes loopback, link-local, and multicast addresses.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(etcdv1.PacemakerNodeAddress{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "resources": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resources contains the status of pacemaker resources scheduled on this node. Each resource entry includes the resource name and its health conditions. For Two Node OpenShift with Fencing, we track Kubelet and Etcd resources per node. Both resources are required to be present, so the array must contain at least 2 items. Valid resource names are \"Kubelet\" and \"Etcd\". Fencing agents are tracked separately in the fencingAgents field.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(etcdv1.PacemakerClusterResourceStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "fencingAgents": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "fencingAgents contains the status of fencing agents that can fence this node. Unlike resources (which are scheduled to run on this node), fencing agents are mapped to the node they can fence (their target), not the node where monitoring operations run. Each fencing agent entry includes a unique name, fencing type, target node, and health conditions. A node is considered fence-capable if at least one fencing agent is healthy. A healthy node is expected to have at least 1 fencing agent, but the list may be empty when fencing agent discovery fails. Names must be unique within this array.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(etcdv1.PacemakerClusterFencingAgentStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"conditions", "nodeName", "addresses", "resources", "fencingAgents"}, - }, - }, - Dependencies: []string{ - etcdv1.PacemakerClusterFencingAgentStatus{}.OpenAPIModelName(), etcdv1.PacemakerClusterResourceStatus{}.OpenAPIModelName(), etcdv1.PacemakerNodeAddress{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_etcd_v1_PacemakerClusterResourceStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PacemakerClusterResourceStatus represents the status of a pacemaker resource scheduled on a node. A pacemaker resource is a unit of work managed by pacemaker. In pacemaker terminology, resources are services or applications that pacemaker monitors, starts, stops, and moves between nodes to maintain high availability. For Two Node OpenShift with Fencing, we track two resources per node:\n - Kubelet (the Kubernetes node agent and a prerequisite for etcd)\n - Etcd (the distributed key-value store)\n\nFencing agents are tracked separately in the fencingAgents field because they are mapped to their target node (the node they can fence), not the node where monitoring operations are scheduled.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represent the observations of the resource's current state. Known condition types are: \"Healthy\", \"InService\", \"Managed\", \"Enabled\", \"Operational\", \"Active\", \"Started\", \"Schedulable\". The \"Healthy\" condition is an aggregate that tracks the overall health of the resource. The \"InService\" condition tracks whether the resource is in service (not in maintenance mode). The \"Managed\" condition tracks whether the resource is managed by pacemaker. The \"Enabled\" condition tracks whether the resource is enabled. The \"Operational\" condition tracks whether the resource is operational (not failed). The \"Active\" condition tracks whether the resource is active (available to be used). The \"Started\" condition tracks whether the resource is started. The \"Schedulable\" condition tracks whether the resource is schedulable (not blocked). Each of these conditions is required, so the array must contain at least 8 items.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the pacemaker resource. Valid values are \"Kubelet\" and \"Etcd\". The Kubelet resource is a prerequisite for etcd in Two Node OpenShift with Fencing deployments. The Etcd resource may temporarily transition to stopped during pacemaker quorum-recovery operations. Fencing agents are tracked separately in the node's fencingAgents field.\n\nPossible enum values:\n - `\"Etcd\"` is the etcd pacemaker resource. The etcd resource may temporarily transition to stopped during pacemaker quorum-recovery operations.\n - `\"Kubelet\"` is the kubelet pacemaker resource. The kubelet resource is a prerequisite for etcd in Two Node OpenShift with Fencing deployments.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Etcd", "Kubelet"}, - }, - }, - }, - Required: []string{"conditions", "name"}, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_etcd_v1_PacemakerClusterStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PacemakerClusterStatus contains the actual pacemaker cluster status information. As part of validating the status object, we need to ensure that the lastUpdated timestamp may not be set to an earlier timestamp than the current value. The validation rule checks if oldSelf has lastUpdated before comparing, to handle the initial status creation case.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represent the observations of the pacemaker cluster's current state. Known condition types are: \"Healthy\", \"InService\", \"NodeCountAsExpected\". The \"Healthy\" condition is an aggregate that tracks the overall health of the cluster. The \"InService\" condition tracks whether the cluster is in service (not in maintenance mode). The \"NodeCountAsExpected\" condition tracks whether the expected number of nodes are present. Each of these conditions is required, so the array must contain at least 3 items.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "lastUpdated": { - SchemaProps: spec.SchemaProps{ - Description: "lastUpdated is the timestamp when this status was last updated. This is useful for identifying stale status reports. It must be a valid timestamp in RFC3339 format. Once set, this field cannot be removed and cannot be set to an earlier timestamp than the current value.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "nodes": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "nodeName", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "nodes provides detailed status for each control-plane node in the Pacemaker cluster. While Pacemaker supports up to 32 nodes, the limit is set to 5 (max OpenShift control-plane nodes). For Two Node OpenShift with Fencing, exactly 2 nodes are expected in a healthy cluster. An empty list indicates a catastrophic failure where Pacemaker reports no nodes.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(etcdv1.PacemakerClusterNodeStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"conditions", "lastUpdated", "nodes"}, - }, - }, - Dependencies: []string{ - etcdv1.PacemakerClusterNodeStatus{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName(), metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_etcd_v1_PacemakerNodeAddress(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PacemakerNodeAddress contains information for a node's address. This is similar to corev1.NodeAddress but adds validation for IP addresses.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the type of node address. Currently only \"InternalIP\" is supported.\n\nPossible enum values:\n - `\"InternalIP\"` is an internal IP address assigned to the node. This is typically the IP address used for intra-cluster communication.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"InternalIP"}, - }, - }, - "address": { - SchemaProps: spec.SchemaProps{ - Description: "address is the node address. For InternalIP, this must be a valid global unicast IPv4 or IPv6 address in canonical form. Canonical form means the shortest standard representation (e.g., \"192.168.1.1\" not \"192.168.001.001\", or \"2001:db8::1\" not \"2001:0db8::1\"). Maximum length is 39 characters (full IPv6 address). Global unicast includes private/RFC1918 addresses but excludes loopback, link-local, and multicast.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"type", "address"}, - }, - }, - } -} - -func schema_openshift_api_etcd_v1alpha1_PacemakerCluster(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PacemakerCluster represents the current state of the pacemaker cluster as reported by the pcs status command. PacemakerCluster is a cluster-scoped singleton resource. The name of this instance is \"cluster\". This resource provides a view into the health and status of a pacemaker-managed cluster in Two Node OpenShift with Fencing deployments.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status contains the actual pacemaker cluster status information collected from the cluster. The goal of this status is to be able to quickly identify if pacemaker is in a healthy state. In Two Node OpenShift with Fencing, a healthy pacemaker cluster has 2 nodes, both of which have healthy kubelet, etcd, and fencing resources. This field is optional on creation - the status collector populates it immediately after creating the resource via the status subresource.", - Default: map[string]interface{}{}, - Ref: ref(etcdv1alpha1.PacemakerClusterStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata"}, - }, - }, - Dependencies: []string{ - etcdv1alpha1.PacemakerClusterStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_etcd_v1alpha1_PacemakerClusterFencingAgentStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PacemakerClusterFencingAgentStatus represents the status of a fencing agent that can fence a node. Fencing agents are STONITH (Shoot The Other Node In The Head) devices used to isolate failed nodes. Unlike regular pacemaker resources, fencing agents are mapped to their target node (the node they can fence), not the node where their monitoring operations are scheduled.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represent the observations of the fencing agent's current state. Known condition types are: \"Healthy\", \"InService\", \"Managed\", \"Enabled\", \"Operational\", \"Active\", \"Started\", \"Schedulable\". The \"Healthy\" condition is an aggregate that tracks the overall health of the fencing agent. The \"InService\" condition tracks whether the fencing agent is in service (not in maintenance mode). The \"Managed\" condition tracks whether the fencing agent is managed by pacemaker. The \"Enabled\" condition tracks whether the fencing agent is enabled. The \"Operational\" condition tracks whether the fencing agent is operational (not failed). The \"Active\" condition tracks whether the fencing agent is active (available to be used). The \"Started\" condition tracks whether the fencing agent is started. The \"Schedulable\" condition tracks whether the fencing agent is schedulable (not blocked). Each of these conditions is required, so the array must contain at least 8 items.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the unique identifier for this fencing agent (e.g., \"master-0_redfish\"). The name must be unique within the fencingAgents array for this node. It may contain alphanumeric characters, dots, hyphens, and underscores. Maximum length is 300 characters, providing headroom beyond the typical format of _ (253 for RFC 1123 node name + 1 underscore + type).", - Type: []string{"string"}, - Format: "", - }, - }, - "method": { - SchemaProps: spec.SchemaProps{ - Description: "method is the fencing method used by this agent. Valid values are \"Redfish\" and \"IPMI\". Redfish is a standard RESTful API for server management. IPMI (Intelligent Platform Management Interface) is a hardware management interface.\n\nPossible enum values:\n - `\"IPMI\"` uses IPMI (Intelligent Platform Management Interface), a hardware management interface.\n - `\"Redfish\"` uses Redfish, a standard RESTful API for server management.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"IPMI", "Redfish"}, - }, - }, - }, - Required: []string{"conditions", "name", "method"}, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_etcd_v1alpha1_PacemakerClusterList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PacemakerClusterList contains a list of PacemakerCluster objects. PacemakerCluster is a cluster-scoped singleton resource; only one instance named \"cluster\" may exist. This list type exists only to satisfy Kubernetes API conventions.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is a list of PacemakerCluster objects.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(etcdv1alpha1.PacemakerCluster{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - etcdv1alpha1.PacemakerCluster{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_etcd_v1alpha1_PacemakerClusterNodeStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PacemakerClusterNodeStatus represents the status of a single node in the pacemaker cluster including the node's conditions and the health of critical resources running on that node.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represent the observations of the node's current state. Known condition types are: \"Healthy\", \"Online\", \"InService\", \"Active\", \"Ready\", \"Clean\", \"Member\", \"FencingAvailable\", \"FencingHealthy\". The \"Healthy\" condition is an aggregate that tracks the overall health of the node. The \"Online\" condition tracks whether the node is online. The \"InService\" condition tracks whether the node is in service (not in maintenance mode). The \"Active\" condition tracks whether the node is active (not in standby mode). The \"Ready\" condition tracks whether the node is ready (not in a pending state). The \"Clean\" condition tracks whether the node is in a clean (status known) state. The \"Member\" condition tracks whether the node is a member of the cluster. The \"FencingAvailable\" condition tracks whether this node can be fenced by at least one healthy agent. The \"FencingHealthy\" condition tracks whether all fencing agents for this node are healthy. Each of these conditions is required, so the array must contain at least 9 items.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "nodeName": { - SchemaProps: spec.SchemaProps{ - Description: "nodeName is the name of the node. This is expected to match the Kubernetes node's name, which must be a lowercase RFC 1123 subdomain consisting of lowercase alphanumeric characters, '-' or '.', starting and ending with an alphanumeric character, and be at most 253 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - "addresses": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "addresses is a list of IP addresses for the node. Pacemaker allows multiple IP addresses for Corosync communication between nodes. The first address in this list is used for IP-based peer URLs for etcd membership. Each address must be a valid global unicast IPv4 or IPv6 address in canonical form (e.g., \"192.168.1.1\" not \"192.168.001.001\", or \"2001:db8::1\" not \"2001:0db8::1\"). This excludes loopback, link-local, and multicast addresses.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(etcdv1alpha1.PacemakerNodeAddress{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "resources": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resources contains the status of pacemaker resources scheduled on this node. Each resource entry includes the resource name and its health conditions. For Two Node OpenShift with Fencing, we track Kubelet and Etcd resources per node. Both resources are required to be present, so the array must contain at least 2 items. Valid resource names are \"Kubelet\" and \"Etcd\". Fencing agents are tracked separately in the fencingAgents field.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(etcdv1alpha1.PacemakerClusterResourceStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "fencingAgents": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "fencingAgents contains the status of fencing agents that can fence this node. Unlike resources (which are scheduled to run on this node), fencing agents are mapped to the node they can fence (their target), not the node where monitoring operations run. Each fencing agent entry includes a unique name, fencing type, target node, and health conditions. A node is considered fence-capable if at least one fencing agent is healthy. A healthy node is expected to have at least 1 fencing agent, but the list may be empty when fencing agent discovery fails. Names must be unique within this array.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(etcdv1alpha1.PacemakerClusterFencingAgentStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"conditions", "nodeName", "addresses", "resources", "fencingAgents"}, - }, - }, - Dependencies: []string{ - etcdv1alpha1.PacemakerClusterFencingAgentStatus{}.OpenAPIModelName(), etcdv1alpha1.PacemakerClusterResourceStatus{}.OpenAPIModelName(), etcdv1alpha1.PacemakerNodeAddress{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_etcd_v1alpha1_PacemakerClusterResourceStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PacemakerClusterResourceStatus represents the status of a pacemaker resource scheduled on a node. A pacemaker resource is a unit of work managed by pacemaker. In pacemaker terminology, resources are services or applications that pacemaker monitors, starts, stops, and moves between nodes to maintain high availability. For Two Node OpenShift with Fencing, we track two resources per node:\n - Kubelet (the Kubernetes node agent and a prerequisite for etcd)\n - Etcd (the distributed key-value store)\n\nFencing agents are tracked separately in the fencingAgents field because they are mapped to their target node (the node they can fence), not the node where monitoring operations are scheduled.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represent the observations of the resource's current state. Known condition types are: \"Healthy\", \"InService\", \"Managed\", \"Enabled\", \"Operational\", \"Active\", \"Started\", \"Schedulable\". The \"Healthy\" condition is an aggregate that tracks the overall health of the resource. The \"InService\" condition tracks whether the resource is in service (not in maintenance mode). The \"Managed\" condition tracks whether the resource is managed by pacemaker. The \"Enabled\" condition tracks whether the resource is enabled. The \"Operational\" condition tracks whether the resource is operational (not failed). The \"Active\" condition tracks whether the resource is active (available to be used). The \"Started\" condition tracks whether the resource is started. The \"Schedulable\" condition tracks whether the resource is schedulable (not blocked). Each of these conditions is required, so the array must contain at least 8 items.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the pacemaker resource. Valid values are \"Kubelet\" and \"Etcd\". The Kubelet resource is a prerequisite for etcd in Two Node OpenShift with Fencing deployments. The Etcd resource may temporarily transition to stopped during pacemaker quorum-recovery operations. Fencing agents are tracked separately in the node's fencingAgents field.\n\nPossible enum values:\n - `\"Etcd\"` is the etcd pacemaker resource. The etcd resource may temporarily transition to stopped during pacemaker quorum-recovery operations.\n - `\"Kubelet\"` is the kubelet pacemaker resource. The kubelet resource is a prerequisite for etcd in Two Node OpenShift with Fencing deployments.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Etcd", "Kubelet"}, - }, - }, - }, - Required: []string{"conditions", "name"}, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_etcd_v1alpha1_PacemakerClusterStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PacemakerClusterStatus contains the actual pacemaker cluster status information. As part of validating the status object, we need to ensure that the lastUpdated timestamp may not be set to an earlier timestamp than the current value. The validation rule checks if oldSelf has lastUpdated before comparing, to handle the initial status creation case.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represent the observations of the pacemaker cluster's current state. Known condition types are: \"Healthy\", \"InService\", \"NodeCountAsExpected\". The \"Healthy\" condition is an aggregate that tracks the overall health of the cluster. The \"InService\" condition tracks whether the cluster is in service (not in maintenance mode). The \"NodeCountAsExpected\" condition tracks whether the expected number of nodes are present. Each of these conditions is required, so the array must contain at least 3 items.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "lastUpdated": { - SchemaProps: spec.SchemaProps{ - Description: "lastUpdated is the timestamp when this status was last updated. This is useful for identifying stale status reports. It must be a valid timestamp in RFC3339 format. Once set, this field cannot be removed and cannot be set to an earlier timestamp than the current value.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "nodes": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "nodeName", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "nodes provides detailed status for each control-plane node in the Pacemaker cluster. While Pacemaker supports up to 32 nodes, the limit is set to 5 (max OpenShift control-plane nodes). For Two Node OpenShift with Fencing, exactly 2 nodes are expected in a healthy cluster. An empty list indicates a catastrophic failure where Pacemaker reports no nodes.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(etcdv1alpha1.PacemakerClusterNodeStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"conditions", "lastUpdated", "nodes"}, - }, - }, - Dependencies: []string{ - etcdv1alpha1.PacemakerClusterNodeStatus{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName(), metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_etcd_v1alpha1_PacemakerNodeAddress(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PacemakerNodeAddress contains information for a node's address. This is similar to corev1.NodeAddress but adds validation for IP addresses.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the type of node address. Currently only \"InternalIP\" is supported.\n\nPossible enum values:\n - `\"InternalIP\"` is an internal IP address assigned to the node. This is typically the IP address used for intra-cluster communication.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"InternalIP"}, - }, - }, - "address": { - SchemaProps: spec.SchemaProps{ - Description: "address is the node address. For InternalIP, this must be a valid global unicast IPv4 or IPv6 address in canonical form. Canonical form means the shortest standard representation (e.g., \"192.168.1.1\" not \"192.168.001.001\", or \"2001:db8::1\" not \"2001:0db8::1\"). Maximum length is 39 characters (full IPv6 address). Global unicast includes private/RFC1918 addresses but excludes loopback, link-local, and multicast.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"type", "address"}, - }, - }, - } -} - -func schema_openshift_api_example_v1_CELUnion(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CELUnion demonstrates how to use a discriminated union and how to validate it using CEL.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type determines which of the union members should be populated.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "requiredMember": { - SchemaProps: spec.SchemaProps{ - Description: "requiredMember is a union member that is required.", - Type: []string{"string"}, - Format: "", - }, - }, - "optionalMember": { - SchemaProps: spec.SchemaProps{ - Description: "optionalMember is a union member that is optional.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "optionalMember": "OptionalMember", - "requiredMember": "RequiredMember", - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_example_v1_EvolvingUnion(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the discriminator. It has different values for Default and for TechPreviewNoUpgrade", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"type"}, - }, - }, - } -} - -func schema_openshift_api_example_v1_FormatMarkerExamples(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "FormatMarkerExamples demonstrates all Kubebuilder Format markers supported as of Kubernetes 1.33. This struct provides a comprehensive reference for format marker validation. Each field uses a different format marker to validate its value.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "ipv4Address": { - SchemaProps: spec.SchemaProps{ - Description: "ipv4Address must be a valid IPv4 address in dotted-quad notation. Valid values range from 0.0.0.0 to 255.255.255.255 (e.g., 192.168.1.1).\n\nUse of Format=ipv4 is not recommended due to CVE-2021-29923 and CVE-2024-24790. Instead, use the CEL expression `isIP(self) && ip(self).family() == 4` to validate IPv4 addresses.", - Type: []string{"string"}, - Format: "", - }, - }, - "ipv6Address": { - SchemaProps: spec.SchemaProps{ - Description: "ipv6Address must be a valid IPv6 address. Valid examples include full form (2001:0db8:0000:0000:0000:0000:0000:0001) or compressed form (2001:db8::1 or ::1).\n\nUse of Format=ipv6 is not recommended due to CVE-2021-29923 and CVE-2024-24790. Instead, use the CEL expression `isIP(self) && ip(self).family() == 6` to validate IPv6 addresses.", - Type: []string{"string"}, - Format: "", - }, - }, - "cidrNotation": { - SchemaProps: spec.SchemaProps{ - Description: "cidrNotation must be a valid CIDR notation IP address range. Valid examples include IPv4 CIDR (10.0.0.0/8, 192.168.1.0/24) or IPv6 CIDR (fd00::/8, 2001:db8::/32).\n\nUse of Format=cidr is not recommended due to CVE-2021-29923 and CVE-2024-24790. Instead, use the CEL expression `isCIDR(self)` to validate CIDR notation. Additionally, use `isCIDR(self) && cidr(self).ip().family() == X` to validate IPvX specifically.", - Type: []string{"string"}, - Format: "", - }, - }, - "uriField": { - SchemaProps: spec.SchemaProps{ - Description: "uriField must be a valid URI following RFC 3986 syntax. Valid examples include https://example.com/path?query=value or /absolute-path.", - Type: []string{"string"}, - Format: "", - }, - }, - "emailAddress": { - SchemaProps: spec.SchemaProps{ - Description: "emailAddress must be a valid email address. Valid examples include user@example.com or firstname.lastname@company.co.uk.", - Type: []string{"string"}, - Format: "", - }, - }, - "hostnameField": { - SchemaProps: spec.SchemaProps{ - Description: "hostnameField must be a valid Internet hostname per RFC 1034. Valid examples include example.com, api.example.com, or my-service.", - Type: []string{"string"}, - Format: "", - }, - }, - "macAddress": { - SchemaProps: spec.SchemaProps{ - Description: "macAddress must be a valid MAC address. Valid examples include 00:1A:2B:3C:4D:5E or 00-1A-2B-3C-4D-5E.", - Type: []string{"string"}, - Format: "", - }, - }, - "uuidField": { - SchemaProps: spec.SchemaProps{ - Description: "uuidField must be a valid UUID (any version) in 8-4-4-4-12 format. Valid examples include 550e8400-e29b-41d4-a716-446655440000 or 123e4567-e89b-12d3-a456-426614174000.", - Type: []string{"string"}, - Format: "", - }, - }, - "uuid3Field": { - SchemaProps: spec.SchemaProps{ - Description: "uuid3Field must be a valid UUID version 3 (MD5 hash-based). Version 3 UUIDs are generated using MD5 hashing of a namespace and name. Valid example: a3bb189e-8bf9-3888-9912-ace4e6543002.", - Type: []string{"string"}, - Format: "", - }, - }, - "uuid4Field": { - SchemaProps: spec.SchemaProps{ - Description: "uuid4Field must be a valid UUID version 4 (random). Version 4 UUIDs are randomly generated. Valid example: 550e8400-e29b-41d4-a716-446655440000.", - Type: []string{"string"}, - Format: "", - }, - }, - "uuid5Field": { - SchemaProps: spec.SchemaProps{ - Description: "uuid5Field must be a valid UUID version 5 (SHA-1 hash-based). Version 5 UUIDs are generated using SHA-1 hashing of a namespace and name. Valid example: 74738ff5-5367-5958-9aee-98fffdcd1876.", - Type: []string{"string"}, - Format: "", - }, - }, - "dateField": { - SchemaProps: spec.SchemaProps{ - Description: "dateField must be a valid date in RFC 3339 full-date format (YYYY-MM-DD). Valid examples include 2024-01-15 or 2023-12-31.", - Type: []string{"string"}, - Format: "", - }, - }, - "dateTimeField": { - SchemaProps: spec.SchemaProps{ - Description: "dateTimeField must be a valid RFC 3339 date-time. Valid examples include 2024-01-15T14:30:00Z, 2024-01-15T14:30:00+00:00, or 2024-01-15T14:30:00.123Z.", - Type: []string{"string"}, - Format: "", - }, - }, - "durationField": { - SchemaProps: spec.SchemaProps{ - Description: "durationField must be a valid duration string parseable by Go's time.ParseDuration. Valid time units are ns, us (or µs), ms, s, m, h. Valid examples include 30s, 5m, 1h30m, 100ms, or 1h.", - Type: []string{"string"}, - Format: "", - }, - }, - "base64Data": { - SchemaProps: spec.SchemaProps{ - Description: "base64Data must be valid base64-encoded data. Valid examples include aGVsbG8= (encodes \"hello\") or SGVsbG8gV29ybGQh (encodes \"Hello World!\").", - Type: []string{"string"}, - Format: "", - }, - }, - "passwordField": { - SchemaProps: spec.SchemaProps{ - Description: "passwordField is a marker for sensitive data. Note that the password format marker does not perform any actual validation - it accepts any string value. This marker is primarily used to signal that the field contains sensitive information.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_example_v1_StableConfigType(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "StableConfigType is a stable config type that may include TechPreviewNoUpgrade fields.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the desired behavior of the StableConfigType.", - Default: map[string]interface{}{}, - Ref: ref(examplev1.StableConfigTypeSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status is the most recently observed status of the StableConfigType.", - Default: map[string]interface{}{}, - Ref: ref(examplev1.StableConfigTypeStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - examplev1.StableConfigTypeSpec{}.OpenAPIModelName(), examplev1.StableConfigTypeStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_example_v1_StableConfigTypeList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "StableConfigTypeList contains a list of StableConfigTypes.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(examplev1.StableConfigType{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - examplev1.StableConfigType{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_example_v1_StableConfigTypeSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "StableConfigTypeSpec is the desired state", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "coolNewField": { - SchemaProps: spec.SchemaProps{ - Description: "coolNewField is a field that is for tech preview only. On normal clusters this shouldn't be present", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "stableField": { - SchemaProps: spec.SchemaProps{ - Description: "stableField is a field that is present on default clusters and on tech preview clusters\n\nIf empty, the platform will choose a good default, which may change over time without notice.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "immutableField": { - SchemaProps: spec.SchemaProps{ - Description: "immutableField is a field that is immutable once the object has been created. It is required at all times.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "optionalImmutableField": { - SchemaProps: spec.SchemaProps{ - Description: "optionalImmutableField is a field that is immutable once set. It is optional but may not be changed once set.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "evolvingUnion": { - SchemaProps: spec.SchemaProps{ - Description: "evolvingUnion demonstrates how to phase in new values into discriminated union", - Default: map[string]interface{}{}, - Ref: ref(examplev1.EvolvingUnion{}.OpenAPIModelName()), - }, - }, - "celUnion": { - SchemaProps: spec.SchemaProps{ - Description: "celUnion demonstrates how to validate a discrminated union using CEL", - Default: map[string]interface{}{}, - Ref: ref(examplev1.CELUnion{}.OpenAPIModelName()), - }, - }, - "nonZeroDefault": { - SchemaProps: spec.SchemaProps{ - Description: "nonZeroDefault is a demonstration of creating an integer field that has a non zero default. It required two default tags (one for CRD generation, one for client generation) and must have `omitempty` and be optional. A minimum value is added to demonstrate that a zero value would not be accepted.", - Default: 8, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "evolvingCollection": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "evolvingCollection demonstrates how to have a collection where the maximum number of items varies on cluster type. For default clusters, this will be \"1\" but on TechPreview clusters, this value will be \"3\".", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "set": { - SchemaProps: spec.SchemaProps{ - Description: "set demonstrates how to define and validate set of strings", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "subdomainNameField": { - SchemaProps: spec.SchemaProps{ - Description: "subdomainNameField represents a kubenetes name field. The intention is that it validates the name in the same way metadata.Name is validated. That is, it is a DNS-1123 subdomain.", - Type: []string{"string"}, - Format: "", - }, - }, - "subnetsWithExclusions": { - SchemaProps: spec.SchemaProps{ - Description: "subnetsWithExclusions demonstrates how to validate a list of subnets with exclusions", - Default: map[string]interface{}{}, - Ref: ref(examplev1.SubnetsWithExclusions{}.OpenAPIModelName()), - }, - }, - "formatMarkerExamples": { - SchemaProps: spec.SchemaProps{ - Description: "formatMarkerExamples demonstrates all Kubebuilder Format markers supported as of Kubernetes 1.33. This field serves as a comprehensive reference for format marker validation.", - Ref: ref(examplev1.FormatMarkerExamples{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"immutableField"}, - }, - }, - Dependencies: []string{ - examplev1.CELUnion{}.OpenAPIModelName(), examplev1.EvolvingUnion{}.OpenAPIModelName(), examplev1.FormatMarkerExamples{}.OpenAPIModelName(), examplev1.SubnetsWithExclusions{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_example_v1_StableConfigTypeStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "StableConfigTypeStatus defines the observed status of the StableConfigType.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "Represents the observations of a foo's current state. Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\"", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "immutableField": { - SchemaProps: spec.SchemaProps{ - Description: "immutableField is a field that is immutable once the object has been created. It is required at all times.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_example_v1_SubnetsWithExclusions(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SubnetsWithExclusions is used to validate a list of subnets with exclusions. It demonstrates how exclusions should be validated as subnetworks of the networks listed in the subnets field.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "subnets": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "subnets is a list of subnets. It may contain up to 2 subnets. The list may be either 1 IPv4 subnet, 1 IPv6 subnet, or 1 of each.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "excludeSubnets": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "excludeSubnets is a list of CIDR exclusions. The subnets in this list must be subnetworks of the subnets in the subnets list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"subnets"}, - }, - }, - } -} - -func schema_openshift_api_example_v1alpha1_NotStableConfigType(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NotStableConfigType is a stable config type that is TechPreviewNoUpgrade only.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the desired behavior of the NotStableConfigType.", - Default: map[string]interface{}{}, - Ref: ref(examplev1alpha1.NotStableConfigTypeSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status is the most recently observed status of the NotStableConfigType.", - Default: map[string]interface{}{}, - Ref: ref(examplev1alpha1.NotStableConfigTypeStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - examplev1alpha1.NotStableConfigTypeSpec{}.OpenAPIModelName(), examplev1alpha1.NotStableConfigTypeStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_example_v1alpha1_NotStableConfigTypeList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NotStableConfigTypeList contains a list of NotStableConfigTypes.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(examplev1alpha1.NotStableConfigType{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - examplev1alpha1.NotStableConfigType{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_example_v1alpha1_NotStableConfigTypeSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NotStableConfigTypeSpec is the desired state", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "newField": { - SchemaProps: spec.SchemaProps{ - Description: "newField is a field that is tech preview, but because the entire type is gated, there is no marker on the field.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"newField"}, - }, - }, - } -} - -func schema_openshift_api_example_v1alpha1_NotStableConfigTypeStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NotStableConfigTypeStatus defines the observed status of the NotStableConfigType.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "Represents the observations of a foo's current state. Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\"", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_helm_v1beta1_ConnectionConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "url": { - SchemaProps: spec.SchemaProps{ - Description: "Chart repository URL", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca-bundle.crt\" is used to locate the data. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - "tlsClientConfig": { - SchemaProps: spec.SchemaProps{ - Description: "tlsClientConfig is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate and private key to present when connecting to the server. The key \"tls.crt\" is used to locate the client certificate. The key \"tls.key\" is used to locate the private key. The namespace for this secret is openshift-config.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"url"}, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName(), configv1.SecretNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_helm_v1beta1_ConnectionConfigNamespaceScoped(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "url": { - SchemaProps: spec.SchemaProps{ - Description: "Chart repository URL", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca-bundle.crt\" is used to locate the data. If empty, the default system roots are used. The namespace for this configmap must be same as the namespace where the project helm chart repository is getting instantiated.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - "tlsClientConfig": { - SchemaProps: spec.SchemaProps{ - Description: "tlsClientConfig is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate and private key to present when connecting to the server. The key \"tls.crt\" is used to locate the client certificate. The key \"tls.key\" is used to locate the private key. The namespace for this secret must be same as the namespace where the project helm chart repository is getting instantiated.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - "basicAuthConfig": { - SchemaProps: spec.SchemaProps{ - Description: "basicAuthConfig is an optional reference to a secret by name that contains the basic authentication credentials to present when connecting to the server. The key \"username\" is used locate the username. The key \"password\" is used to locate the password. The namespace for this secret must be same as the namespace where the project helm chart repository is getting instantiated.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"url"}, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName(), configv1.SecretNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_helm_v1beta1_HelmChartRepository(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "HelmChartRepository holds cluster-wide configuration for proxied Helm chart repository\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(v1beta1.HelmChartRepositorySpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "Observed status of the repository within the cluster..", - Default: map[string]interface{}{}, - Ref: ref(v1beta1.HelmChartRepositoryStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - v1beta1.HelmChartRepositorySpec{}.OpenAPIModelName(), v1beta1.HelmChartRepositoryStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_helm_v1beta1_HelmChartRepositoryList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(v1beta1.HelmChartRepository{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - v1beta1.HelmChartRepository{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_helm_v1beta1_HelmChartRepositorySpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Helm chart repository exposed within the cluster", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "disabled": { - SchemaProps: spec.SchemaProps{ - Description: "If set to true, disable the repo usage in the cluster/namespace", - Type: []string{"boolean"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "Optional associated human readable repository name, it can be used by UI for displaying purposes", - Type: []string{"string"}, - Format: "", - }, - }, - "description": { - SchemaProps: spec.SchemaProps{ - Description: "Optional human readable repository description, it can be used by UI for displaying purposes", - Type: []string{"string"}, - Format: "", - }, - }, - "connectionConfig": { - SchemaProps: spec.SchemaProps{ - Description: "Required configuration for connecting to the chart repo", - Default: map[string]interface{}{}, - Ref: ref(v1beta1.ConnectionConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"connectionConfig"}, - }, - }, - Dependencies: []string{ - v1beta1.ConnectionConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_helm_v1beta1_HelmChartRepositoryStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their statuses", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_helm_v1beta1_ProjectHelmChartRepository(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ProjectHelmChartRepository holds namespace-wide configuration for proxied Helm chart repository\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(v1beta1.ProjectHelmChartRepositorySpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "Observed status of the repository within the namespace..", - Default: map[string]interface{}{}, - Ref: ref(v1beta1.HelmChartRepositoryStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - v1beta1.HelmChartRepositoryStatus{}.OpenAPIModelName(), v1beta1.ProjectHelmChartRepositorySpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_helm_v1beta1_ProjectHelmChartRepositoryList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(v1beta1.ProjectHelmChartRepository{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - v1beta1.ProjectHelmChartRepository{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_helm_v1beta1_ProjectHelmChartRepositorySpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Project Helm chart repository exposed within a namespace", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "disabled": { - SchemaProps: spec.SchemaProps{ - Description: "If set to true, disable the repo usage in the namespace", - Type: []string{"boolean"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "Optional associated human readable repository name, it can be used by UI for displaying purposes", - Type: []string{"string"}, - Format: "", - }, - }, - "description": { - SchemaProps: spec.SchemaProps{ - Description: "Optional human readable repository description, it can be used by UI for displaying purposes", - Type: []string{"string"}, - Format: "", - }, - }, - "connectionConfig": { - SchemaProps: spec.SchemaProps{ - Description: "Required configuration for connecting to the chart repo", - Default: map[string]interface{}{}, - Ref: ref(v1beta1.ConnectionConfigNamespaceScoped{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"connectionConfig"}, - }, - }, - Dependencies: []string{ - v1beta1.ConnectionConfigNamespaceScoped{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_DockerImageReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DockerImageReference points to a container image.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "Registry": { - SchemaProps: spec.SchemaProps{ - Description: "Registry is the registry that contains the container image", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "Namespace": { - SchemaProps: spec.SchemaProps{ - Description: "Namespace is the namespace that contains the container image", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "Name": { - SchemaProps: spec.SchemaProps{ - Description: "Name is the name of the container image", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "Tag": { - SchemaProps: spec.SchemaProps{ - Description: "Tag is which tag of the container image is being referenced", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ID": { - SchemaProps: spec.SchemaProps{ - Description: "ID is the identifier for the container image", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"Registry", "Namespace", "Name", "Tag", "ID"}, - }, - }, - } -} - -func schema_openshift_api_image_v1_Image(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Image is an immutable representation of a container image and its metadata at a point in time. Images are named by taking a hash of their contents (metadata and content) and any change in format, content, or metadata results in a new name. The images resource is primarily for use by cluster administrators and integrations like the cluster image registry - end users, instead, access images via the imagestreamtags or imagestreamimages resources. While image metadata is stored in the API, any integration that implements the container image registry API must provide its own storage for the raw manifest data, image config, and layer contents.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "dockerImageReference": { - SchemaProps: spec.SchemaProps{ - Description: "dockerImageReference is the string that can be used to pull this image.", - Type: []string{"string"}, - Format: "", - }, - }, - "dockerImageMetadata": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-patch-strategy": "replace", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "dockerImageMetadata contains metadata about this image", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "dockerImageMetadataVersion": { - SchemaProps: spec.SchemaProps{ - Description: "dockerImageMetadataVersion conveys the version of the object, which if empty defaults to \"1.0\"", - Type: []string{"string"}, - Format: "", - }, - }, - "dockerImageManifest": { - SchemaProps: spec.SchemaProps{ - Description: "dockerImageManifest is the raw JSON of the manifest", - Type: []string{"string"}, - Format: "", - }, - }, - "dockerImageLayers": { - SchemaProps: spec.SchemaProps{ - Description: "dockerImageLayers represents the layers in the image. May not be set if the image does not define that data or if the image represents a manifest list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.ImageLayer{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "signatures": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "signatures holds all signatures of the image.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.ImageSignature{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "dockerImageSignatures": { - SchemaProps: spec.SchemaProps{ - Description: "dockerImageSignatures provides the signatures as opaque blobs. This is a part of manifest schema v1.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"string"}, - Format: "byte", - }, - }, - }, - }, - }, - "dockerImageManifestMediaType": { - SchemaProps: spec.SchemaProps{ - Description: "dockerImageManifestMediaType specifies the mediaType of manifest. This is a part of manifest schema v2.", - Type: []string{"string"}, - Format: "", - }, - }, - "dockerImageConfig": { - SchemaProps: spec.SchemaProps{ - Description: "dockerImageConfig is a JSON blob that the runtime uses to set up the container. This is a part of manifest schema v2. Will not be set when the image represents a manifest list.", - Type: []string{"string"}, - Format: "", - }, - }, - "dockerImageManifests": { - SchemaProps: spec.SchemaProps{ - Description: "dockerImageManifests holds information about sub-manifests when the image represents a manifest list. When this field is present, no DockerImageLayers should be specified.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.ImageManifest{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - imagev1.ImageLayer{}.OpenAPIModelName(), imagev1.ImageManifest{}.OpenAPIModelName(), imagev1.ImageSignature{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName(), runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_ImageBlobReferences(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageBlobReferences describes the blob references within an image.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "imageMissing": { - SchemaProps: spec.SchemaProps{ - Description: "imageMissing is true if the image is referenced by the image stream but the image object has been deleted from the API by an administrator. When this field is set, layers and config fields may be empty and callers that depend on the image metadata should consider the image to be unavailable for download or viewing.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "layers": { - SchemaProps: spec.SchemaProps{ - Description: "layers is the list of blobs that compose this image, from base layer to top layer. All layers referenced by this array will be defined in the blobs map. Some images may have zero layers.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "config": { - SchemaProps: spec.SchemaProps{ - Description: "config, if set, is the blob that contains the image config. Some images do not have separate config blobs and this field will be set to nil if so.", - Type: []string{"string"}, - Format: "", - }, - }, - "manifests": { - SchemaProps: spec.SchemaProps{ - Description: "manifests is the list of other image names that this image points to. For a single architecture image, it is empty. For a multi-arch image, it consists of the digests of single architecture images, such images shouldn't have layers nor config.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_image_v1_ImageImportSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageImportSpec describes a request to import a specific image.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "from": { - SchemaProps: spec.SchemaProps{ - Description: "from is the source of an image to import; only kind DockerImage is allowed", - Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - "to": { - SchemaProps: spec.SchemaProps{ - Description: "to is a tag in the current image stream to assign the imported image to, if name is not specified the default tag from from.name will be used", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "importPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "importPolicy is the policy controlling how the image is imported", - Default: map[string]interface{}{}, - Ref: ref(imagev1.TagImportPolicy{}.OpenAPIModelName()), - }, - }, - "referencePolicy": { - SchemaProps: spec.SchemaProps{ - Description: "referencePolicy defines how other components should consume the image", - Default: map[string]interface{}{}, - Ref: ref(imagev1.TagReferencePolicy{}.OpenAPIModelName()), - }, - }, - "includeManifest": { - SchemaProps: spec.SchemaProps{ - Description: "includeManifest determines if the manifest for each image is returned in the response", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"from"}, - }, - }, - Dependencies: []string{ - imagev1.TagImportPolicy{}.OpenAPIModelName(), imagev1.TagReferencePolicy{}.OpenAPIModelName(), corev1.LocalObjectReference{}.OpenAPIModelName(), corev1.ObjectReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_ImageImportStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageImportStatus describes the result of an image import.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status is the status of the image import, including errors encountered while retrieving the image", - Default: map[string]interface{}{}, - Ref: ref(metav1.Status{}.OpenAPIModelName()), - }, - }, - "image": { - SchemaProps: spec.SchemaProps{ - Description: "image is the metadata of that image, if the image was located", - Ref: ref(imagev1.Image{}.OpenAPIModelName()), - }, - }, - "tag": { - SchemaProps: spec.SchemaProps{ - Description: "tag is the tag this image was located under, if any", - Type: []string{"string"}, - Format: "", - }, - }, - "manifests": { - SchemaProps: spec.SchemaProps{ - Description: "manifests holds sub-manifests metadata when importing a manifest list", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.Image{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"status"}, - }, - }, - Dependencies: []string{ - imagev1.Image{}.OpenAPIModelName(), metav1.Status{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_ImageLayer(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageLayer represents a single layer of the image. Some images may have multiple layers. Some may have none.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of the layer as defined by the underlying store.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "size": { - SchemaProps: spec.SchemaProps{ - Description: "size of the layer in bytes as defined by the underlying store.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - "mediaType": { - SchemaProps: spec.SchemaProps{ - Description: "mediaType of the referenced object.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "size", "mediaType"}, - }, - }, - } -} - -func schema_openshift_api_image_v1_ImageLayerData(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageLayerData contains metadata about an image layer.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "size": { - SchemaProps: spec.SchemaProps{ - Description: "size of the layer in bytes as defined by the underlying store. This field is optional if the necessary information about size is not available.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "mediaType": { - SchemaProps: spec.SchemaProps{ - Description: "mediaType of the referenced object.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"size", "mediaType"}, - }, - }, - } -} - -func schema_openshift_api_image_v1_ImageList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageList is a list of Image objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is a list of images", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.Image{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - imagev1.Image{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_ImageLookupPolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageLookupPolicy describes how an image stream can be used to override the image references used by pods, builds, and other resources in a namespace.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "local": { - SchemaProps: spec.SchemaProps{ - Description: "local will change the docker short image references (like \"mysql\" or \"php:latest\") on objects in this namespace to the image ID whenever they match this image stream, instead of reaching out to a remote registry. The name will be fully qualified to an image ID if found. The tag's referencePolicy is taken into account on the replaced value. Only works within the current namespace.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"local"}, - }, - }, - } -} - -func schema_openshift_api_image_v1_ImageManifest(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageManifest represents sub-manifests of a manifest list. The Digest field points to a regular Image object.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "digest": { - SchemaProps: spec.SchemaProps{ - Description: "digest is the unique identifier for the manifest. It refers to an Image object.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "mediaType": { - SchemaProps: spec.SchemaProps{ - Description: "mediaType defines the type of the manifest, possible values are application/vnd.oci.image.manifest.v1+json, application/vnd.docker.distribution.manifest.v2+json or application/vnd.docker.distribution.manifest.v1+json.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "manifestSize": { - SchemaProps: spec.SchemaProps{ - Description: "manifestSize represents the size of the raw object contents, in bytes.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - "architecture": { - SchemaProps: spec.SchemaProps{ - Description: "architecture specifies the supported CPU architecture, for example `amd64` or `ppc64le`.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "os": { - SchemaProps: spec.SchemaProps{ - Description: "os specifies the operating system, for example `linux`.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "variant": { - SchemaProps: spec.SchemaProps{ - Description: "variant is an optional field repreenting a variant of the CPU, for example v6 to specify a particular CPU variant of the ARM CPU.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"digest", "mediaType", "manifestSize", "architecture", "os"}, - }, - }, - } -} - -func schema_openshift_api_image_v1_ImageSignature(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageSignature holds a signature of an image. It allows to verify image identity and possibly other claims as long as the signature is trusted. Based on this information it is possible to restrict runnable images to those matching cluster-wide policy. Mandatory fields should be parsed by clients doing image verification. The others are parsed from signature's content by the server. They serve just an informative purpose.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "type": { - SchemaProps: spec.SchemaProps{ - Description: "Required: Describes a type of stored blob.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "content": { - SchemaProps: spec.SchemaProps{ - Description: "Required: An opaque binary string which is an image's signature.", - Type: []string{"string"}, - Format: "byte", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represent the latest available observations of a signature's current state.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.SignatureCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "imageIdentity": { - SchemaProps: spec.SchemaProps{ - Description: "A human readable string representing image's identity. It could be a product name and version, or an image pull spec (e.g. \"registry.access.redhat.com/rhel7/rhel:7.2\").", - Type: []string{"string"}, - Format: "", - }, - }, - "signedClaims": { - SchemaProps: spec.SchemaProps{ - Description: "Contains claims from the signature.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "created": { - SchemaProps: spec.SchemaProps{ - Description: "If specified, it is the time of signature's creation.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "issuedBy": { - SchemaProps: spec.SchemaProps{ - Description: "If specified, it holds information about an issuer of signing certificate or key (a person or entity who signed the signing certificate or key).", - Ref: ref(imagev1.SignatureIssuer{}.OpenAPIModelName()), - }, - }, - "issuedTo": { - SchemaProps: spec.SchemaProps{ - Description: "If specified, it holds information about a subject of signing certificate or key (a person or entity who signed the image).", - Ref: ref(imagev1.SignatureSubject{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type", "content"}, - }, - }, - Dependencies: []string{ - imagev1.SignatureCondition{}.OpenAPIModelName(), imagev1.SignatureIssuer{}.OpenAPIModelName(), imagev1.SignatureSubject{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName(), metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_ImageStream(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "An ImageStream stores a mapping of tags to images, metadata overrides that are applied when images are tagged in a stream, and an optional reference to a container image repository on a registry. Users typically update the spec.tags field to point to external images which are imported from container registries using credentials in your namespace with the pull secret type, or to existing image stream tags and images which are immediately accessible for tagging or pulling. The history of images applied to a tag is visible in the status.tags field and any user who can view an image stream is allowed to tag that image into their own image streams. Access to pull images from the integrated registry is granted by having the \"get imagestreams/layers\" permission on a given image stream. Users may remove a tag by deleting the imagestreamtag resource, which causes both spec and status for that tag to be removed. Image stream history is retained until an administrator runs the prune operation, which removes references that are no longer in use. To preserve a historical image, ensure there is a tag in spec pointing to that image by its digest.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec describes the desired state of this stream", - Default: map[string]interface{}{}, - Ref: ref(imagev1.ImageStreamSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status describes the current state of this stream", - Default: map[string]interface{}{}, - Ref: ref(imagev1.ImageStreamStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - imagev1.ImageStreamSpec{}.OpenAPIModelName(), imagev1.ImageStreamStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_ImageStreamImage(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageStreamImage represents an Image that is retrieved by image name from an ImageStream. User interfaces and regular users can use this resource to access the metadata details of a tagged image in the image stream history for viewing, since Image resources are not directly accessible to end users. A not found error will be returned if no such image is referenced by a tag within the ImageStream. Images are created when spec tags are set on an image stream that represent an image in an external registry, when pushing to the integrated registry, or when tagging an existing image from one image stream to another. The name of an image stream image is in the form \"@\", where the digest is the content addressible identifier for the image (sha256:xxxxx...). You can use ImageStreamImages as the from.kind of an image stream spec tag to reference an image exactly. The only operations supported on the imagestreamimage endpoint are retrieving the image.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "image": { - SchemaProps: spec.SchemaProps{ - Description: "image associated with the ImageStream and image name.", - Default: map[string]interface{}{}, - Ref: ref(imagev1.Image{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"image"}, - }, - }, - Dependencies: []string{ - imagev1.Image{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_ImageStreamImport(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "The image stream import resource provides an easy way for a user to find and import container images from other container image registries into the server. Individual images or an entire image repository may be imported, and users may choose to see the results of the import prior to tagging the resulting images into the specified image stream.\n\nThis API is intended for end-user tools that need to see the metadata of the image prior to import (for instance, to generate an application from it). Clients that know the desired image can continue to create spec.tags directly into their image streams.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is a description of the images that the user wishes to import", - Default: map[string]interface{}{}, - Ref: ref(imagev1.ImageStreamImportSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status is the result of importing the image", - Default: map[string]interface{}{}, - Ref: ref(imagev1.ImageStreamImportStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec", "status"}, - }, - }, - Dependencies: []string{ - imagev1.ImageStreamImportSpec{}.OpenAPIModelName(), imagev1.ImageStreamImportStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_ImageStreamImportSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageStreamImportSpec defines what images should be imported.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "import": { - SchemaProps: spec.SchemaProps{ - Description: "import indicates whether to perform an import - if so, the specified tags are set on the spec and status of the image stream defined by the type meta.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "repository": { - SchemaProps: spec.SchemaProps{ - Description: "repository is an optional import of an entire container image repository. A maximum limit on the number of tags imported this way is imposed by the server.", - Ref: ref(imagev1.RepositoryImportSpec{}.OpenAPIModelName()), - }, - }, - "images": { - SchemaProps: spec.SchemaProps{ - Description: "images are a list of individual images to import.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.ImageImportSpec{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"import"}, - }, - }, - Dependencies: []string{ - imagev1.ImageImportSpec{}.OpenAPIModelName(), imagev1.RepositoryImportSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_ImageStreamImportStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageStreamImportStatus contains information about the status of an image stream import.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "import": { - SchemaProps: spec.SchemaProps{ - Description: "import is the image stream that was successfully updated or created when 'to' was set.", - Ref: ref(imagev1.ImageStream{}.OpenAPIModelName()), - }, - }, - "repository": { - SchemaProps: spec.SchemaProps{ - Description: "repository is set if spec.repository was set to the outcome of the import", - Ref: ref(imagev1.RepositoryImportStatus{}.OpenAPIModelName()), - }, - }, - "images": { - SchemaProps: spec.SchemaProps{ - Description: "images is set with the result of importing spec.images", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.ImageImportStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - imagev1.ImageImportStatus{}.OpenAPIModelName(), imagev1.ImageStream{}.OpenAPIModelName(), imagev1.RepositoryImportStatus{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_ImageStreamLayers(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageStreamLayers describes information about the layers referenced by images in this image stream.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "blobs": { - SchemaProps: spec.SchemaProps{ - Description: "blobs is a map of blob name to metadata about the blob.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.ImageLayerData{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "images": { - SchemaProps: spec.SchemaProps{ - Description: "images is a map between an image name and the names of the blobs and config that comprise the image.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.ImageBlobReferences{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"blobs", "images"}, - }, - }, - Dependencies: []string{ - imagev1.ImageBlobReferences{}.OpenAPIModelName(), imagev1.ImageLayerData{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_ImageStreamList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageStreamList is a list of ImageStream objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is a list of imageStreams", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.ImageStream{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - imagev1.ImageStream{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_ImageStreamMapping(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageStreamMapping represents a mapping from a single image stream tag to a container image as well as the reference to the container image stream the image came from. This resource is used by privileged integrators to create an image resource and to associate it with an image stream in the status tags field. Creating an ImageStreamMapping will allow any user who can view the image stream to tag or pull that image, so only create mappings where the user has proven they have access to the image contents directly. The only operation supported for this resource is create and the metadata name and namespace should be set to the image stream containing the tag that should be updated.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "image": { - SchemaProps: spec.SchemaProps{ - Description: "image is a container image.", - Default: map[string]interface{}{}, - Ref: ref(imagev1.Image{}.OpenAPIModelName()), - }, - }, - "tag": { - SchemaProps: spec.SchemaProps{ - Description: "tag is a string value this image can be located with inside the stream.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"image", "tag"}, - }, - }, - Dependencies: []string{ - imagev1.Image{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_ImageStreamSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageStreamSpec represents options for ImageStreams.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "lookupPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "lookupPolicy controls how other resources reference images within this namespace.", - Default: map[string]interface{}{}, - Ref: ref(imagev1.ImageLookupPolicy{}.OpenAPIModelName()), - }, - }, - "dockerImageRepository": { - SchemaProps: spec.SchemaProps{ - Description: "dockerImageRepository is optional, if specified this stream is backed by a container repository on this server Deprecated: This field is deprecated as of v3.7 and will be removed in a future release. Specify the source for the tags to be imported in each tag via the spec.tags.from reference instead.", - Type: []string{"string"}, - Format: "", - }, - }, - "tags": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "tags map arbitrary string values to specific image locators", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.TagReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - imagev1.ImageLookupPolicy{}.OpenAPIModelName(), imagev1.TagReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_ImageStreamStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageStreamStatus contains information about the state of this image stream.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "dockerImageRepository": { - SchemaProps: spec.SchemaProps{ - Description: "dockerImageRepository represents the effective location this stream may be accessed at. May be empty until the server determines where the repository is located", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "publicDockerImageRepository": { - SchemaProps: spec.SchemaProps{ - Description: "publicDockerImageRepository represents the public location from where the image can be pulled outside the cluster. This field may be empty if the administrator has not exposed the integrated registry externally.", - Type: []string{"string"}, - Format: "", - }, - }, - "tags": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-patch-merge-key": "tag", - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "tags are a historical record of images associated with each tag. The first entry in the TagEvent array is the currently tagged image.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.NamedTagEventList{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - imagev1.NamedTagEventList{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_ImageStreamTag(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageStreamTag represents an Image that is retrieved by tag name from an ImageStream. Use this resource to interact with the tags and images in an image stream by tag, or to see the image details for a particular tag. The image associated with this resource is the most recently successfully tagged, imported, or pushed image (as described in the image stream status.tags.items list for this tag). If an import is in progress or has failed the previous image will be shown. Deleting an image stream tag clears both the status and spec fields of an image stream. If no image can be retrieved for a given tag, a not found error will be returned.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "tag": { - SchemaProps: spec.SchemaProps{ - Description: "tag is the spec tag associated with this image stream tag, and it may be null if only pushes have occurred to this image stream.", - Ref: ref(imagev1.TagReference{}.OpenAPIModelName()), - }, - }, - "generation": { - SchemaProps: spec.SchemaProps{ - Description: "generation is the current generation of the tagged image - if tag is provided and this value is not equal to the tag generation, a user has requested an import that has not completed, or conditions will be filled out indicating any error.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - "lookupPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "lookupPolicy indicates whether this tag will handle image references in this namespace.", - Default: map[string]interface{}{}, - Ref: ref(imagev1.ImageLookupPolicy{}.OpenAPIModelName()), - }, - }, - "conditions": { - SchemaProps: spec.SchemaProps{ - Description: "conditions is an array of conditions that apply to the image stream tag.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.TagEventCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "image": { - SchemaProps: spec.SchemaProps{ - Description: "image associated with the ImageStream and tag.", - Default: map[string]interface{}{}, - Ref: ref(imagev1.Image{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"tag", "generation", "lookupPolicy", "image"}, - }, - }, - Dependencies: []string{ - imagev1.Image{}.OpenAPIModelName(), imagev1.ImageLookupPolicy{}.OpenAPIModelName(), imagev1.TagEventCondition{}.OpenAPIModelName(), imagev1.TagReference{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_ImageStreamTagList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageStreamTagList is a list of ImageStreamTag objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is the list of image stream tags", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.ImageStreamTag{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - imagev1.ImageStreamTag{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_ImageTag(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageTag represents a single tag within an image stream and includes the spec, the status history, and the currently referenced image (if any) of the provided tag. This type replaces the ImageStreamTag by providing a full view of the tag. ImageTags are returned for every spec or status tag present on the image stream. If no tag exists in either form, a not found error will be returned by the API. A create operation will succeed if no spec tag has already been defined and the spec field is set. Delete will remove both spec and status elements from the image stream.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is the spec tag associated with this image stream tag, and it may be null if only pushes have occurred to this image stream.", - Ref: ref(imagev1.TagReference{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status is the status tag details associated with this image stream tag, and it may be null if no push or import has been performed.", - Ref: ref(imagev1.NamedTagEventList{}.OpenAPIModelName()), - }, - }, - "image": { - SchemaProps: spec.SchemaProps{ - Description: "image is the details of the most recent image stream status tag, and it may be null if import has not completed or an administrator has deleted the image object. To verify this is the most recent image, you must verify the generation of the most recent status.items entry matches the spec tag (if a spec tag is set). This field will not be set when listing image tags.", - Ref: ref(imagev1.Image{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec", "status", "image"}, - }, - }, - Dependencies: []string{ - imagev1.Image{}.OpenAPIModelName(), imagev1.NamedTagEventList{}.OpenAPIModelName(), imagev1.TagReference{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_ImageTagList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageTagList is a list of ImageTag objects. When listing image tags, the image field is not populated. Tags are returned in alphabetical order by image stream and then tag.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is the list of image stream tags", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.ImageTag{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - imagev1.ImageTag{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_NamedTagEventList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NamedTagEventList relates a tag to its image history.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "tag": { - SchemaProps: spec.SchemaProps{ - Description: "tag is the tag for which the history is recorded", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "Standard object's metadata.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.TagEvent{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "conditions": { - SchemaProps: spec.SchemaProps{ - Description: "conditions is an array of conditions that apply to the tag event list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.TagEventCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"tag", "items"}, - }, - }, - Dependencies: []string{ - imagev1.TagEvent{}.OpenAPIModelName(), imagev1.TagEventCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_RepositoryImportSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RepositoryImportSpec describes a request to import images from a container image repository.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "from": { - SchemaProps: spec.SchemaProps{ - Description: "from is the source for the image repository to import; only kind DockerImage and a name of a container image repository is allowed", - Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - "importPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "importPolicy is the policy controlling how the image is imported", - Default: map[string]interface{}{}, - Ref: ref(imagev1.TagImportPolicy{}.OpenAPIModelName()), - }, - }, - "referencePolicy": { - SchemaProps: spec.SchemaProps{ - Description: "referencePolicy defines how other components should consume the image", - Default: map[string]interface{}{}, - Ref: ref(imagev1.TagReferencePolicy{}.OpenAPIModelName()), - }, - }, - "includeManifest": { - SchemaProps: spec.SchemaProps{ - Description: "includeManifest determines if the manifest for each image is returned in the response", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"from"}, - }, - }, - Dependencies: []string{ - imagev1.TagImportPolicy{}.OpenAPIModelName(), imagev1.TagReferencePolicy{}.OpenAPIModelName(), corev1.ObjectReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_RepositoryImportStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RepositoryImportStatus describes the result of an image repository import", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status reflects whether any failure occurred during import", - Default: map[string]interface{}{}, - Ref: ref(metav1.Status{}.OpenAPIModelName()), - }, - }, - "images": { - SchemaProps: spec.SchemaProps{ - Description: "images is a list of images successfully retrieved by the import of the repository.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(imagev1.ImageImportStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "additionalTags": { - SchemaProps: spec.SchemaProps{ - Description: "additionalTags are tags that exist in the repository but were not imported because a maximum limit of automatic imports was applied.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - imagev1.ImageImportStatus{}.OpenAPIModelName(), metav1.Status{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_SecretList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SecretList is a list of Secret.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "Items is a list of secret objects. More info: https://kubernetes.io/docs/concepts/configuration/secret", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.Secret{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - corev1.Secret{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_SignatureCondition(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SignatureCondition describes an image signature condition of particular kind at particular probe time.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type of signature condition, Complete or Failed.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status of the condition, one of True, False, Unknown.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "lastProbeTime": { - SchemaProps: spec.SchemaProps{ - Description: "Last time the condition was checked.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "lastTransitionTime": { - SchemaProps: spec.SchemaProps{ - Description: "Last time the condition transit from one status to another.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "reason": { - SchemaProps: spec.SchemaProps{ - Description: "(brief) reason for the condition's last transition.", - Type: []string{"string"}, - Format: "", - }, - }, - "message": { - SchemaProps: spec.SchemaProps{ - Description: "Human readable message indicating details about last transition.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"type", "status"}, - }, - }, - Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_SignatureGenericEntity(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SignatureGenericEntity holds a generic information about a person or entity who is an issuer or a subject of signing certificate or key.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "organization": { - SchemaProps: spec.SchemaProps{ - Description: "organization name.", - Type: []string{"string"}, - Format: "", - }, - }, - "commonName": { - SchemaProps: spec.SchemaProps{ - Description: "Common name (e.g. openshift-signing-service).", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_image_v1_SignatureIssuer(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SignatureIssuer holds information about an issuer of signing certificate or key.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "organization": { - SchemaProps: spec.SchemaProps{ - Description: "organization name.", - Type: []string{"string"}, - Format: "", - }, - }, - "commonName": { - SchemaProps: spec.SchemaProps{ - Description: "Common name (e.g. openshift-signing-service).", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_image_v1_SignatureSubject(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SignatureSubject holds information about a person or entity who created the signature.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "organization": { - SchemaProps: spec.SchemaProps{ - Description: "organization name.", - Type: []string{"string"}, - Format: "", - }, - }, - "commonName": { - SchemaProps: spec.SchemaProps{ - Description: "Common name (e.g. openshift-signing-service).", - Type: []string{"string"}, - Format: "", - }, - }, - "publicKeyID": { - SchemaProps: spec.SchemaProps{ - Description: "If present, it is a human readable key id of public key belonging to the subject used to verify image signature. It should contain at least 64 lowest bits of public key's fingerprint (e.g. 0x685ebe62bf278440).", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"publicKeyID"}, - }, - }, - } -} - -func schema_openshift_api_image_v1_TagEvent(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TagEvent is used by ImageStreamStatus to keep a historical record of images associated with a tag.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "created": { - SchemaProps: spec.SchemaProps{ - Description: "created holds the time the TagEvent was created", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "dockerImageReference": { - SchemaProps: spec.SchemaProps{ - Description: "dockerImageReference is the string that can be used to pull this image", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "image": { - SchemaProps: spec.SchemaProps{ - Description: "image is the image", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "generation": { - SchemaProps: spec.SchemaProps{ - Description: "generation is the spec tag generation that resulted in this tag being updated", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - Required: []string{"created", "dockerImageReference", "image", "generation"}, - }, - }, - Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_TagEventCondition(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TagEventCondition contains condition information for a tag event.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type of tag event condition, currently only ImportSuccess", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status of the condition, one of True, False, Unknown.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "lastTransitionTime": { - SchemaProps: spec.SchemaProps{ - Description: "lastTransitionTime is the time the condition transitioned from one status to another.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "reason": { - SchemaProps: spec.SchemaProps{ - Description: "reason is a brief machine readable explanation for the condition's last transition.", - Type: []string{"string"}, - Format: "", - }, - }, - "message": { - SchemaProps: spec.SchemaProps{ - Description: "message is a human readable description of the details about last transition, complementing reason.", - Type: []string{"string"}, - Format: "", - }, - }, - "generation": { - SchemaProps: spec.SchemaProps{ - Description: "generation is the spec tag generation that this status corresponds to", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - Required: []string{"type", "status", "generation"}, - }, - }, - Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_TagImportPolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TagImportPolicy controls how images related to this tag will be imported.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "insecure": { - SchemaProps: spec.SchemaProps{ - Description: "insecure is true if the server may bypass certificate verification or connect directly over HTTP during image import.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "scheduled": { - SchemaProps: spec.SchemaProps{ - Description: "scheduled indicates to the server that this tag should be periodically checked to ensure it is up to date, and imported", - Type: []string{"boolean"}, - Format: "", - }, - }, - "importMode": { - SchemaProps: spec.SchemaProps{ - Description: "importMode describes how to import an image manifest.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_image_v1_TagReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TagReference specifies optional annotations for images using this tag and an optional reference to an ImageStreamTag, ImageStreamImage, or DockerImage this tag should track.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of the tag", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "annotations": { - SchemaProps: spec.SchemaProps{ - Description: "Optional; if specified, annotations that are applied to images retrieved via ImageStreamTags.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "from": { - SchemaProps: spec.SchemaProps{ - Description: "Optional; if specified, a reference to another image that this tag should point to. Valid values are ImageStreamTag, ImageStreamImage, and DockerImage. ImageStreamTag references can only reference a tag within this same ImageStream.", - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - "reference": { - SchemaProps: spec.SchemaProps{ - Description: "reference states if the tag will be imported. Default value is false, which means the tag will be imported.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "generation": { - SchemaProps: spec.SchemaProps{ - Description: "generation is a counter that tracks mutations to the spec tag (user intent). When a tag reference is changed the generation is set to match the current stream generation (which is incremented every time spec is changed). Other processes in the system like the image importer observe that the generation of spec tag is newer than the generation recorded in the status and use that as a trigger to import the newest remote tag. To trigger a new import, clients may set this value to zero which will reset the generation to the latest stream generation. Legacy clients will send this value as nil which will be merged with the current tag generation.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "importPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "importPolicy is information that controls how images may be imported by the server.", - Default: map[string]interface{}{}, - Ref: ref(imagev1.TagImportPolicy{}.OpenAPIModelName()), - }, - }, - "referencePolicy": { - SchemaProps: spec.SchemaProps{ - Description: "referencePolicy defines how other components should consume the image.", - Default: map[string]interface{}{}, - Ref: ref(imagev1.TagReferencePolicy{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"name"}, - }, - }, - Dependencies: []string{ - imagev1.TagImportPolicy{}.OpenAPIModelName(), imagev1.TagReferencePolicy{}.OpenAPIModelName(), corev1.ObjectReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_image_v1_TagReferencePolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TagReferencePolicy describes how pull-specs for images in this image stream tag are generated when image change triggers in deployment configs or builds are resolved. This allows the image stream author to control how images are accessed.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type determines how the image pull spec should be transformed when the image stream tag is used in deployment config triggers or new builds. The default value is `Source`, indicating the original location of the image should be used (if imported). The user may also specify `Local`, indicating that the pull spec should point to the integrated container image registry and leverage the registry's ability to proxy the pull to an upstream registry. `Local` allows the credentials used to pull this image to be managed from the image stream's namespace, so others on the platform can access a remote image but have no access to the remote secret. It also allows the image layers to be mirrored into the local registry which the images can still be pulled even if the upstream registry is unavailable.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"type"}, - }, - }, - } -} - -func schema_openshift_api_insights_v1_Custom(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Custom provides the custom configuration of gatherers", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "configs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "configs is a required list of gatherers configurations that can be used to enable or disable specific gatherers. It may not exceed 100 items and each gatherer can be present only once. It is possible to disable an entire set of gatherers while allowing a specific function within that set. The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(insightsv1.GathererConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"configs"}, - }, - }, - Dependencies: []string{ - insightsv1.GathererConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1_DataGather(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DataGather provides data gather configuration options and status for the particular Insights data gathering.\n\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(insightsv1.DataGatherSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(insightsv1.DataGatherStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - insightsv1.DataGatherSpec{}.OpenAPIModelName(), insightsv1.DataGatherStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1_DataGatherList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DataGatherList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "items contains a list of DataGather resources.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(insightsv1.DataGather{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - insightsv1.DataGather{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1_DataGatherSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DataGatherSpec contains the configuration for the DataGather.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "dataPolicy": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "dataPolicy is an optional list of DataPolicyOptions that allows user to enable additional obfuscation of the Insights archive data. It may not exceed 2 items and must not contain duplicates. Valid values are ObfuscateNetworking and WorkloadNames. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When set to WorkloadNames, the gathered data about cluster resources will not contain the workload names for your deployments. Resources UIDs will be used instead. When omitted no obfuscation is applied.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "gatherers": { - SchemaProps: spec.SchemaProps{ - Description: "gatherers is a required field that specifies the configuration of the gatherers.", - Default: map[string]interface{}{}, - Ref: ref(insightsv1.Gatherers{}.OpenAPIModelName()), - }, - }, - "storage": { - SchemaProps: spec.SchemaProps{ - Description: "storage is an optional field that allows user to define persistent storage for gathering jobs to store the Insights data archive. If omitted, the gathering job will use ephemeral storage.", - Default: map[string]interface{}{}, - Ref: ref(insightsv1.Storage{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"gatherers"}, - }, - }, - Dependencies: []string{ - insightsv1.Gatherers{}.OpenAPIModelName(), insightsv1.Storage{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1_DataGatherStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DataGatherStatus contains information relating to the DataGather state.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is an optional field that provides details on the status of the gatherer job. It may not exceed 100 items and must not contain duplicates.\n\nThe current condition types are DataUploaded, DataRecorded, DataProcessed, RemoteConfigurationNotAvailable, RemoteConfigurationInvalid\n\nThe DataUploaded condition is used to represent whether or not the archive was successfully uploaded for further processing. When it has a status of True and a reason of Succeeded, the archive was successfully uploaded. When it has a status of Unknown and a reason of NoUploadYet, the upload has not occurred, or there was no data to upload. When it has a status of False and a reason Failed, the upload failed. The accompanying message will include the specific error encountered.\n\nThe DataRecorded condition is used to represent whether or not the archive was successfully recorded. When it has a status of True and a reason of Succeeded, the archive was recorded successfully. When it has a status of Unknown and a reason of NoDataGatheringYet, the data gathering process has not started yet. When it has a status of False and a reason of RecordingFailed, the recording failed and a message will include the specific error encountered.\n\nThe DataProcessed condition is used to represent whether or not the archive was processed by the processing service. When it has a status of True and a reason of Processed, the data was processed successfully. When it has a status of Unknown and a reason of NothingToProcessYet, there is no data to process at the moment. When it has a status of False and a reason of Failure, processing failed and a message will include the specific error encountered.\n\nThe RemoteConfigurationAvailable condition is used to represent whether the remote configuration is available. When it has a status of Unknown and a reason of Unknown or RemoteConfigNotRequestedYet, the state of the remote configuration is unknown—typically at startup. When it has a status of True and a reason of Succeeded, the configuration is available. When it has a status of False and a reason of NoToken, the configuration was disabled by removing the cloud.openshift.com field from the pull secret. When it has a status of False and a reason of DisabledByConfiguration, the configuration was disabled in insightsdatagather.config.openshift.io.\n\nThe RemoteConfigurationValid condition is used to represent whether the remote configuration is valid. When it has a status of Unknown and a reason of Unknown or NoValidationYet, the validity of the remote configuration is unknown—typically at startup. When it has a status of True and a reason of Succeeded, the configuration is valid. When it has a status of False and a reason of Invalid, the configuration is invalid.\n\nThe Progressing condition is used to represent the phase of gathering When it has a status of False and the reason is DataGatherPending, the gathering has not started yet. When it has a status of True and reason is Gathering, the gathering is running. When it has a status of False and reason is GatheringSucceeded, the gathering successfully finished. When it has a status of False and reason is GatheringFailed, the gathering failed.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "gatherers": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "gatherers is a list of active gatherers (and their statuses) in the last gathering.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(insightsv1.GathererStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "startTime": { - SchemaProps: spec.SchemaProps{ - Description: "startTime is the time when Insights data gathering started.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "finishTime": { - SchemaProps: spec.SchemaProps{ - Description: "finishTime is the time when Insights data gathering finished.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "relatedObjects": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - "namespace", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "relatedObjects is an optional list of resources which are useful when debugging or inspecting the data gathering Pod It may not exceed 100 items and must not contain duplicates.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(insightsv1.ObjectReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "insightsRequestID": { - SchemaProps: spec.SchemaProps{ - Description: "insightsRequestID is an optional Insights request ID to track the status of the Insights analysis (in console.redhat.com processing pipeline) for the corresponding Insights data archive. It may not exceed 256 characters and is immutable once set.", - Type: []string{"string"}, - Format: "", - }, - }, - "insightsReport": { - SchemaProps: spec.SchemaProps{ - Description: "insightsReport provides general Insights analysis results. When omitted, this means no data gathering has taken place yet or the corresponding Insights analysis (identified by \"insightsRequestID\") is not available.", - Default: map[string]interface{}{}, - Ref: ref(insightsv1.InsightsReport{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - insightsv1.GathererStatus{}.OpenAPIModelName(), insightsv1.InsightsReport{}.OpenAPIModelName(), insightsv1.ObjectReference{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName(), metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1_GathererConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GathererConfig allows to configure specific gatherers", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the required name of a specific gatherer. It may not exceed 256 characters. The format for a gatherer name is: {gatherer}/{function} where the function is optional. Gatherer consists of a lowercase letters only that may include underscores (_). Function consists of a lowercase letters only that may include underscores (_) and is separated from the gatherer by a forward slash (/). The particular gatherers can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", - Type: []string{"string"}, - Format: "", - }, - }, - "state": { - SchemaProps: spec.SchemaProps{ - Description: "state is a required field that allows you to configure specific gatherer. Valid values are \"Enabled\" and \"Disabled\". When set to Enabled the gatherer will run. When set to Disabled the gatherer will not run.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "state"}, - }, - }, - } -} - -func schema_openshift_api_insights_v1_GathererStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GathererStatus represents information about a particular data gatherer.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions provide details on the status of each gatherer.\n\nThe current condition type is DataGathered\n\nThe DataGathered condition is used to represent whether or not the data was gathered by a gatherer specified by name. When it has a status of True and a reason of GatheredOK, the data has been successfully gathered as expected. When it has a status of False and a reason of NoData, no data was gathered—for example, when the resource is not present in the cluster. When it has a status of False and a reason of GatherError, an error occurred and no data was gathered. When it has a status of False and a reason of GatherPanic, a panic occurred during gathering and no data was collected. When it has a status of False and a reason of GatherWithErrorReason, data was partially gathered or gathered with an error message.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the required name of the gatherer. It must contain at least 5 characters and may not exceed 256 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "lastGatherSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "lastGatherSeconds is required field that represents the time spent gathering in seconds", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"name", "lastGatherSeconds"}, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1_Gatherers(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Gatherers specifies the configuration of the gatherers", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "mode": { - SchemaProps: spec.SchemaProps{ - Description: "mode is a required field that specifies the mode for gatherers. Allowed values are All and Custom. When set to All, all gatherers will run and gather data. When set to Custom, the custom configuration from the custom field will be applied.", - Type: []string{"string"}, - Format: "", - }, - }, - "custom": { - SchemaProps: spec.SchemaProps{ - Description: "custom provides gathering configuration. It is required when mode is Custom, and forbidden otherwise. Custom configuration allows user to disable only a subset of gatherers. Gatherers that are not explicitly disabled in custom configuration will run.", - Default: map[string]interface{}{}, - Ref: ref(insightsv1.Custom{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"mode"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "mode", - "fields-to-discriminateBy": map[string]interface{}{ - "custom": "Custom", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - insightsv1.Custom{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1_HealthCheck(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "HealthCheck represents an Insights health check attributes.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "description": { - SchemaProps: spec.SchemaProps{ - Description: "description is required field that provides basic description of the healthcheck. It must contain at least 10 characters and may not exceed 2048 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "totalRisk": { - SchemaProps: spec.SchemaProps{ - Description: "totalRisk is the required field of the healthcheck. It is indicator of the total risk posed by the detected issue; combination of impact and likelihood. Allowed values are Low, Moderate, Important and Critical. The value represents the severity of the issue.", - Type: []string{"string"}, - Format: "", - }, - }, - "advisorURI": { - SchemaProps: spec.SchemaProps{ - Description: "advisorURI is required field that provides the URL link to the Insights Advisor. The link must be a valid HTTPS URL and the maximum length is 2048 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"description", "totalRisk", "advisorURI"}, - }, - }, - } -} - -func schema_openshift_api_insights_v1_InsightsReport(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "InsightsReport provides Insights health check report based on the most recently sent Insights data.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "downloadedTime": { - SchemaProps: spec.SchemaProps{ - Description: "downloadedTime is a required field that specifies when the Insights report was last downloaded.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "healthChecks": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "advisorURI", - "totalRisk", - "description", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "healthChecks is an optional field that provides basic information about active Insights recommendations, which serve as proactive notifications for potential issues in the cluster. When omitted, it means that there are no active recommendations in the cluster.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(insightsv1.HealthCheck{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "uri": { - SchemaProps: spec.SchemaProps{ - Description: "uri is a required field that provides the URL link from which the report was downloaded. The link must be a valid HTTPS URL and the maximum length is 2048 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"downloadedTime", "uri"}, - }, - }, - Dependencies: []string{ - insightsv1.HealthCheck{}.OpenAPIModelName(), metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1_ObjectReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ObjectReference contains enough information to let you inspect or modify the referred object.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "group": { - SchemaProps: spec.SchemaProps{ - Description: "group is required field that specifies the API Group of the Resource. Enter empty string for the core group. This value is empty or it should follow the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start with an alphabetic character and end with an alphanumeric character. Example: \"\", \"apps\", \"build.openshift.io\", etc.", - Type: []string{"string"}, - Format: "", - }, - }, - "resource": { - SchemaProps: spec.SchemaProps{ - Description: "resource is required field of the type that is being referenced and follows the DNS1035 format. It is normally the plural form of the resource kind in lowercase. It must be at most 63 characters in length, and must must consist of only lowercase alphanumeric characters and hyphens, and must start with an alphabetic character and end with an alphanumeric character. Example: \"deployments\", \"deploymentconfigs\", \"pods\", etc.", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is required field that specifies the referent that follows the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start with an alphabetic character and end with an alphanumeric character..", - Type: []string{"string"}, - Format: "", - }, - }, - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace if required field of the referent that follows the DNS1123 labels format. It must be at most 63 characters in length, and must must consist of only lowercase alphanumeric characters and hyphens, and must start with an alphabetic character and end with an alphanumeric character.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"group", "resource", "name", "namespace"}, - }, - }, - } -} - -func schema_openshift_api_insights_v1_PersistentVolumeClaimReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PersistentVolumeClaimReference is a reference to a PersistentVolumeClaim.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the PersistentVolumeClaim that will be used to store the Insights data archive. It is a string that follows the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start and end with an alphanumeric character.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_insights_v1_PersistentVolumeConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PersistentVolumeConfig provides configuration options for PersistentVolume storage.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "claim": { - SchemaProps: spec.SchemaProps{ - Description: "claim is a required field that specifies the configuration of the PersistentVolumeClaim that will be used to store the Insights data archive. The PersistentVolumeClaim must be created in the openshift-insights namespace.", - Default: map[string]interface{}{}, - Ref: ref(insightsv1.PersistentVolumeClaimReference{}.OpenAPIModelName()), - }, - }, - "mountPath": { - SchemaProps: spec.SchemaProps{ - Description: "mountPath is an optional field specifying the directory where the PVC will be mounted inside the Insights data gathering Pod. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default mount path is /var/lib/insights-operator The path may not exceed 1024 characters and must not contain a colon.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"claim"}, - }, - }, - Dependencies: []string{ - insightsv1.PersistentVolumeClaimReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1_Storage(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Storage provides persistent storage configuration options for gathering jobs. If the type is set to PersistentVolume, then the PersistentVolume must be defined. If the type is set to Ephemeral, then the PersistentVolume must not be defined.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is a required field that specifies the type of storage that will be used to store the Insights data archive. Valid values are \"PersistentVolume\" and \"Ephemeral\". When set to Ephemeral, the Insights data archive is stored in the ephemeral storage of the gathering job. When set to PersistentVolume, the Insights data archive is stored in the PersistentVolume that is defined by the PersistentVolume field.", - Type: []string{"string"}, - Format: "", - }, - }, - "persistentVolume": { - SchemaProps: spec.SchemaProps{ - Description: "persistentVolume is an optional field that specifies the PersistentVolume that will be used to store the Insights data archive. The PersistentVolume must be created in the openshift-insights namespace.", - Default: map[string]interface{}{}, - Ref: ref(insightsv1.PersistentVolumeConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "persistentVolume": "PersistentVolume", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - insightsv1.PersistentVolumeConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1alpha1_DataGather(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DataGather provides data gather configuration options and status for the particular Insights data gathering.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(insightsv1alpha1.DataGatherSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(insightsv1alpha1.DataGatherStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - insightsv1alpha1.DataGatherSpec{}.OpenAPIModelName(), insightsv1alpha1.DataGatherStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1alpha1_DataGatherList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DataGatherList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "items contains a list of DataGather resources.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(insightsv1alpha1.DataGather{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - insightsv1alpha1.DataGather{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1alpha1_DataGatherSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DataGatherSpec contains the configuration for the DataGather.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "dataPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "dataPolicy allows user to enable additional global obfuscation of the IP addresses and base domain in the Insights archive data. Valid values are \"ClearText\" and \"ObfuscateNetworking\". When set to ClearText the data is not obfuscated. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is ClearText.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "gatherers": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "gatherers is an optional list of gatherers configurations. The list must not exceed 100 items. The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(insightsv1alpha1.GathererConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "storage": { - SchemaProps: spec.SchemaProps{ - Description: "storage is an optional field that allows user to define persistent storage for gathering jobs to store the Insights data archive. If omitted, the gathering job will use ephemeral storage.", - Ref: ref(insightsv1alpha1.Storage{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - insightsv1alpha1.GathererConfig{}.OpenAPIModelName(), insightsv1alpha1.Storage{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1alpha1_DataGatherStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DataGatherStatus contains information relating to the DataGather state.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions provide details on the status of the gatherer job.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "dataGatherState": { - SchemaProps: spec.SchemaProps{ - Description: "dataGatherState reflects the current state of the data gathering process.", - Type: []string{"string"}, - Format: "", - }, - }, - "gatherers": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "gatherers is a list of active gatherers (and their statuses) in the last gathering.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(insightsv1alpha1.GathererStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "startTime": { - SchemaProps: spec.SchemaProps{ - Description: "startTime is the time when Insights data gathering started.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "finishTime": { - SchemaProps: spec.SchemaProps{ - Description: "finishTime is the time when Insights data gathering finished.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "relatedObjects": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - "namespace", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "relatedObjects is a list of resources which are useful when debugging or inspecting the data gathering Pod", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(insightsv1alpha1.ObjectReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "insightsRequestID": { - SchemaProps: spec.SchemaProps{ - Description: "insightsRequestID is an Insights request ID to track the status of the Insights analysis (in console.redhat.com processing pipeline) for the corresponding Insights data archive.", - Type: []string{"string"}, - Format: "", - }, - }, - "insightsReport": { - SchemaProps: spec.SchemaProps{ - Description: "insightsReport provides general Insights analysis results. When omitted, this means no data gathering has taken place yet or the corresponding Insights analysis (identified by \"insightsRequestID\") is not available.", - Default: map[string]interface{}{}, - Ref: ref(insightsv1alpha1.InsightsReport{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - insightsv1alpha1.GathererStatus{}.OpenAPIModelName(), insightsv1alpha1.InsightsReport{}.OpenAPIModelName(), insightsv1alpha1.ObjectReference{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName(), metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1alpha1_GathererConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "gathererConfig allows to configure specific gatherers", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the required name of specific gatherer It must be at most 256 characters in length. The format for the gatherer name should be: {gatherer}/{function} where the function is optional. Gatherer consists of a lowercase letters only that may include underscores (_). Function consists of a lowercase letters only that may include underscores (_) and is separated from the gatherer by a forward slash (/). The particular gatherers can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "state": { - SchemaProps: spec.SchemaProps{ - Description: "state allows you to configure specific gatherer. Valid values are \"Enabled\", \"Disabled\" and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default. The current default is Enabled.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_insights_v1alpha1_GathererStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "gathererStatus represents information about a particular data gatherer.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions provide details on the status of each gatherer.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the gatherer.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "lastGatherDuration": { - SchemaProps: spec.SchemaProps{ - Description: "lastGatherDuration represents the time spent gathering.", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"conditions", "name", "lastGatherDuration"}, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName(), metav1.Duration{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1alpha1_HealthCheck(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "healthCheck represents an Insights health check attributes.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "description": { - SchemaProps: spec.SchemaProps{ - Description: "description provides basic description of the healtcheck.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "totalRisk": { - SchemaProps: spec.SchemaProps{ - Description: "totalRisk of the healthcheck. Indicator of the total risk posed by the detected issue; combination of impact and likelihood. The values can be from 1 to 4, and the higher the number, the more important the issue.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "advisorURI": { - SchemaProps: spec.SchemaProps{ - Description: "advisorURI is required field that provides the URL link to the Insights Advisor. The link must be a valid HTTPS URL and the maximum length is 2048 characters.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "state": { - SchemaProps: spec.SchemaProps{ - Description: "state determines what the current state of the health check is. Health check is enabled by default and can be disabled by the user in the Insights advisor user interface.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"description", "totalRisk", "advisorURI", "state"}, - }, - }, - } -} - -func schema_openshift_api_insights_v1alpha1_InsightsReport(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "insightsReport provides Insights health check report based on the most recently sent Insights data.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "downloadedAt": { - SchemaProps: spec.SchemaProps{ - Description: "downloadedAt is the time when the last Insights report was downloaded. An empty value means that there has not been any Insights report downloaded yet and it usually appears in disconnected clusters (or clusters when the Insights data gathering is disabled).", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "healthChecks": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "healthChecks provides basic information about active Insights health checks in a cluster.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(insightsv1alpha1.HealthCheck{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "uri": { - SchemaProps: spec.SchemaProps{ - Description: "uri is optional field that provides the URL link from which the report was downloaded. The link must be a valid HTTPS URL and the maximum length is 2048 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - insightsv1alpha1.HealthCheck{}.OpenAPIModelName(), metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1alpha1_ObjectReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ObjectReference contains enough information to let you inspect or modify the referred object.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "group": { - SchemaProps: spec.SchemaProps{ - Description: "group is the API Group of the Resource. Enter empty string for the core group. This value is empty or should follow the DNS1123 subdomain format and it must be at most 253 characters in length. Example: \"\", \"apps\", \"build.openshift.io\", etc.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resource": { - SchemaProps: spec.SchemaProps{ - Description: "resource is required field of the type that is being referenced. It is normally the plural form of the resource kind in lowercase. This value should consist of only lowercase alphanumeric characters and hyphens. Example: \"deployments\", \"deploymentconfigs\", \"pods\", etc.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of the referent that follows the DNS1123 subdomain format. It must be at most 256 characters in length.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace of the referent that follows the DNS1123 subdomain format. It must be at most 253 characters in length.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"group", "resource", "name", "namespace"}, - }, - }, - } -} - -func schema_openshift_api_insights_v1alpha1_PersistentVolumeClaimReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "persistentVolumeClaimReference is a reference to a PersistentVolumeClaim.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is a string that follows the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start and end with an alphanumeric character.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_insights_v1alpha1_PersistentVolumeConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "persistentVolumeConfig provides configuration options for PersistentVolume storage.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "claim": { - SchemaProps: spec.SchemaProps{ - Description: "claim is a required field that specifies the configuration of the PersistentVolumeClaim that will be used to store the Insights data archive. The PersistentVolumeClaim must be created in the openshift-insights namespace.", - Default: map[string]interface{}{}, - Ref: ref(insightsv1alpha1.PersistentVolumeClaimReference{}.OpenAPIModelName()), - }, - }, - "mountPath": { - SchemaProps: spec.SchemaProps{ - Description: "mountPath is an optional field specifying the directory where the PVC will be mounted inside the Insights data gathering Pod. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default mount path is /var/lib/insights-operator The path may not exceed 1024 characters and must not contain a colon.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"claim"}, - }, - }, - Dependencies: []string{ - insightsv1alpha1.PersistentVolumeClaimReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1alpha1_Storage(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "storage provides persistent storage configuration options for gathering jobs. If the type is set to PersistentVolume, then the PersistentVolume must be defined. If the type is set to Ephemeral, then the PersistentVolume must not be defined.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is a required field that specifies the type of storage that will be used to store the Insights data archive. Valid values are \"PersistentVolume\" and \"Ephemeral\". When set to Ephemeral, the Insights data archive is stored in the ephemeral storage of the gathering job. When set to PersistentVolume, the Insights data archive is stored in the PersistentVolume that is defined by the PersistentVolume field.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "persistentVolume": { - SchemaProps: spec.SchemaProps{ - Description: "persistentVolume is an optional field that specifies the PersistentVolume that will be used to store the Insights data archive. The PersistentVolume must be created in the openshift-insights namespace.", - Ref: ref(insightsv1alpha1.PersistentVolumeConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - }, - Dependencies: []string{ - insightsv1alpha1.PersistentVolumeConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1alpha2_Custom(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "custom provides the custom configuration of gatherers", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "configs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "configs is a required list of gatherers configurations that can be used to enable or disable specific gatherers. It may not exceed 100 items and each gatherer can be present only once. It is possible to disable an entire set of gatherers while allowing a specific function within that set. The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(insightsv1alpha2.GathererConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"configs"}, - }, - }, - Dependencies: []string{ - insightsv1alpha2.GathererConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1alpha2_DataGather(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DataGather provides data gather configuration options and status for the particular Insights data gathering.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(insightsv1alpha2.DataGatherSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(insightsv1alpha2.DataGatherStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - insightsv1alpha2.DataGatherSpec{}.OpenAPIModelName(), insightsv1alpha2.DataGatherStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1alpha2_DataGatherList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DataGatherList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "items contains a list of DataGather resources.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(insightsv1alpha2.DataGather{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - insightsv1alpha2.DataGather{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1alpha2_DataGatherSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DataGatherSpec contains the configuration for the DataGather.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "dataPolicy": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "dataPolicy is an optional list of DataPolicyOptions that allows user to enable additional obfuscation of the Insights archive data. It may not exceed 2 items and must not contain duplicates. Valid values are ObfuscateNetworking and WorkloadNames. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When set to WorkloadNames, the gathered data about cluster resources will not contain the workload names for your deployments. Resources UIDs will be used instead. When omitted no obfuscation is applied.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "gatherers": { - SchemaProps: spec.SchemaProps{ - Description: "gatherers is an optional field that specifies the configuration of the gatherers. If omitted, all gatherers will be run.", - Ref: ref(insightsv1alpha2.Gatherers{}.OpenAPIModelName()), - }, - }, - "storage": { - SchemaProps: spec.SchemaProps{ - Description: "storage is an optional field that allows user to define persistent storage for gathering jobs to store the Insights data archive. If omitted, the gathering job will use ephemeral storage.", - Ref: ref(insightsv1alpha2.Storage{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - insightsv1alpha2.Gatherers{}.OpenAPIModelName(), insightsv1alpha2.Storage{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1alpha2_DataGatherStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DataGatherStatus contains information relating to the DataGather state.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is an optional field that provides details on the status of the gatherer job. It may not exceed 100 items and must not contain duplicates.\n\nThe current condition types are DataUploaded, DataRecorded, DataProcessed, RemoteConfigurationNotAvailable, RemoteConfigurationInvalid\n\nThe DataUploaded condition is used to represent whether or not the archive was successfully uploaded for further processing. When it has a status of True and a reason of Succeeded, the archive was successfully uploaded. When it has a status of Unknown and a reason of NoUploadYet, the upload has not occurred, or there was no data to upload. When it has a status of False and a reason Failed, the upload failed. The accompanying message will include the specific error encountered.\n\nThe DataRecorded condition is used to represent whether or not the archive was successfully recorded. When it has a status of True and a reason of Succeeded, the archive was recorded successfully. When it has a status of Unknown and a reason of NoDataGatheringYet, the data gathering process has not started yet. When it has a status of False and a reason of RecordingFailed, the recording failed and a message will include the specific error encountered.\n\nThe DataProcessed condition is used to represent whether or not the archive was processed by the processing service. When it has a status of True and a reason of Processed, the data was processed successfully. When it has a status of Unknown and a reason of NothingToProcessYet, there is no data to process at the moment. When it has a status of False and a reason of Failure, processing failed and a message will include the specific error encountered.\n\nThe RemoteConfigurationAvailable condition is used to represent whether the remote configuration is available. When it has a status of Unknown and a reason of Unknown or RemoteConfigNotRequestedYet, the state of the remote configuration is unknown—typically at startup. When it has a status of True and a reason of Succeeded, the configuration is available. When it has a status of False and a reason of NoToken, the configuration was disabled by removing the cloud.openshift.com field from the pull secret. When it has a status of False and a reason of DisabledByConfiguration, the configuration was disabled in insightsdatagather.config.openshift.io.\n\nThe RemoteConfigurationValid condition is used to represent whether the remote configuration is valid. When it has a status of Unknown and a reason of Unknown or NoValidationYet, the validity of the remote configuration is unknown—typically at startup. When it has a status of True and a reason of Succeeded, the configuration is valid. When it has a status of False and a reason of Invalid, the configuration is invalid.\n\nThe Progressing condition is used to represent the phase of gathering When it has a status of False and the reason is DataGatherPending, the gathering has not started yet. When it has a status of True and reason is Gathering, the gathering is running. When it has a status of False and reason is GatheringSucceeded, the gathering succesfully finished. When it has a status of False and reason is GatheringFailed, the gathering failed.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "gatherers": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "gatherers is a list of active gatherers (and their statuses) in the last gathering.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(insightsv1alpha2.GathererStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "startTime": { - SchemaProps: spec.SchemaProps{ - Description: "startTime is the time when Insights data gathering started.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "finishTime": { - SchemaProps: spec.SchemaProps{ - Description: "finishTime is the time when Insights data gathering finished.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "relatedObjects": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - "namespace", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "relatedObjects is an optional list of resources which are useful when debugging or inspecting the data gathering Pod It may not exceed 100 items and must not contain duplicates.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(insightsv1alpha2.ObjectReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "insightsRequestID": { - SchemaProps: spec.SchemaProps{ - Description: "insightsRequestID is an optional Insights request ID to track the status of the Insights analysis (in console.redhat.com processing pipeline) for the corresponding Insights data archive. It may not exceed 256 characters and is immutable once set.", - Type: []string{"string"}, - Format: "", - }, - }, - "insightsReport": { - SchemaProps: spec.SchemaProps{ - Description: "insightsReport provides general Insights analysis results. When omitted, this means no data gathering has taken place yet or the corresponding Insights analysis (identified by \"insightsRequestID\") is not available.", - Default: map[string]interface{}{}, - Ref: ref(insightsv1alpha2.InsightsReport{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - insightsv1alpha2.GathererStatus{}.OpenAPIModelName(), insightsv1alpha2.InsightsReport{}.OpenAPIModelName(), insightsv1alpha2.ObjectReference{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName(), metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1alpha2_GathererConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "gathererConfig allows to configure specific gatherers", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the required name of a specific gatherer It may not exceed 256 characters. The format for a gatherer name is: {gatherer}/{function} where the function is optional. Gatherer consists of a lowercase letters only that may include underscores (_). Function consists of a lowercase letters only that may include underscores (_) and is separated from the gatherer by a forward slash (/). The particular gatherers can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "state": { - SchemaProps: spec.SchemaProps{ - Description: "state is a required field that allows you to configure specific gatherer. Valid values are \"Enabled\" and \"Disabled\". When set to Enabled the gatherer will run. When set to Disabled the gatherer will not run.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "state"}, - }, - }, - } -} - -func schema_openshift_api_insights_v1alpha2_GathererStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "gathererStatus represents information about a particular data gatherer.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions provide details on the status of each gatherer.\n\nThe current condition type is DataGathered\n\nThe DataGathered condition is used to represent whether or not the data was gathered by a gatherer specified by name. When it has a status of True and a reason of GatheredOK, the data has been successfully gathered as expected. When it has a status of False and a reason of NoData, no data was gathered—for example, when the resource is not present in the cluster. When it has a status of False and a reason of GatherError, an error occurred and no data was gathered. When it has a status of False and a reason of GatherPanic, a panic occurred during gathering and no data was collected. When it has a status of False and a reason of GatherWithErrorReason, data was partially gathered or gathered with an error message.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the required name of the gatherer. It must contain at least 5 characters and may not exceed 256 characters.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "lastGatherSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "lastGatherSeconds is required field that represents the time spent gathering in seconds", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"name", "lastGatherSeconds"}, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1alpha2_Gatherers(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Gathereres specifies the configuration of the gatherers", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "mode": { - SchemaProps: spec.SchemaProps{ - Description: "mode is a required field that specifies the mode for gatherers. Allowed values are All and Custom. When set to All, all gatherers wil run and gather data. When set to Custom, the custom configuration from the custom field will be applied.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "custom": { - SchemaProps: spec.SchemaProps{ - Description: "custom provides gathering configuration. It is required when mode is Custom, and forbidden otherwise. Custom configuration allows user to disable only a subset of gatherers. Gatherers that are not explicitly disabled in custom configuration will run.", - Ref: ref(insightsv1alpha2.Custom{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"mode"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "mode", - "fields-to-discriminateBy": map[string]interface{}{ - "custom": "Custom", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - insightsv1alpha2.Custom{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1alpha2_HealthCheck(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "healthCheck represents an Insights health check attributes.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "description": { - SchemaProps: spec.SchemaProps{ - Description: "description is required field that provides basic description of the healtcheck. It must contain at least 10 characters and may not exceed 2048 characters.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "totalRisk": { - SchemaProps: spec.SchemaProps{ - Description: "totalRisk is the required field of the healthcheck. It is indicator of the total risk posed by the detected issue; combination of impact and likelihood. Allowed values are Low, Medium, Important and Critical. The value represents the severity of the issue.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "advisorURI": { - SchemaProps: spec.SchemaProps{ - Description: "advisorURI is required field that provides the URL link to the Insights Advisor. The link must be a valid HTTPS URL and the maximum length is 2048 characters.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"description", "totalRisk", "advisorURI"}, - }, - }, - } -} - -func schema_openshift_api_insights_v1alpha2_InsightsReport(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "insightsReport provides Insights health check report based on the most recently sent Insights data.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "downloadedTime": { - SchemaProps: spec.SchemaProps{ - Description: "downloadedTime is an optional time when the last Insights report was downloaded. An empty value means that there has not been any Insights report downloaded yet and it usually appears in disconnected clusters (or clusters when the Insights data gathering is disabled).", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "healthChecks": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "advisorURI", - "totalRisk", - "description", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "healthChecks provides basic information about active Insights health checks in a cluster.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(insightsv1alpha2.HealthCheck{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "uri": { - SchemaProps: spec.SchemaProps{ - Description: "uri is optional field that provides the URL link from which the report was downloaded. The link must be a valid HTTPS URL and the maximum length is 2048 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - insightsv1alpha2.HealthCheck{}.OpenAPIModelName(), metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1alpha2_ObjectReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ObjectReference contains enough information to let you inspect or modify the referred object.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "group": { - SchemaProps: spec.SchemaProps{ - Description: "group is required field that specifies the API Group of the Resource. Enter empty string for the core group. This value is empty or it should follow the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start with an alphabetic character and end with an alphanumeric character. Example: \"\", \"apps\", \"build.openshift.io\", etc.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resource": { - SchemaProps: spec.SchemaProps{ - Description: "resource is required field of the type that is being referenced and follows the DNS1035 format. It is normally the plural form of the resource kind in lowercase. It must be at most 63 characters in length, and must must consist of only lowercase alphanumeric characters and hyphens, and must start with an alphabetic character and end with an alphanumeric character. Example: \"deployments\", \"deploymentconfigs\", \"pods\", etc.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is required field that specifies the referent that follows the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start with an alphabetic character and end with an alphanumeric character..", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace if required field of the referent that follows the DNS1123 labels format. It must be at most 63 characters in length, and must must consist of only lowercase alphanumeric characters and hyphens, and must start with an alphabetic character and end with an alphanumeric character.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"group", "resource", "name", "namespace"}, - }, - }, - } -} - -func schema_openshift_api_insights_v1alpha2_PersistentVolumeClaimReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "persistentVolumeClaimReference is a reference to a PersistentVolumeClaim.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is a string that follows the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start and end with an alphanumeric character.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_insights_v1alpha2_PersistentVolumeConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "persistentVolumeConfig provides configuration options for PersistentVolume storage.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "claim": { - SchemaProps: spec.SchemaProps{ - Description: "claim is a required field that specifies the configuration of the PersistentVolumeClaim that will be used to store the Insights data archive. The PersistentVolumeClaim must be created in the openshift-insights namespace.", - Default: map[string]interface{}{}, - Ref: ref(insightsv1alpha2.PersistentVolumeClaimReference{}.OpenAPIModelName()), - }, - }, - "mountPath": { - SchemaProps: spec.SchemaProps{ - Description: "mountPath is an optional field specifying the directory where the PVC will be mounted inside the Insights data gathering Pod. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default mount path is /var/lib/insights-operator The path may not exceed 1024 characters and must not contain a colon.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"claim"}, - }, - }, - Dependencies: []string{ - insightsv1alpha2.PersistentVolumeClaimReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_insights_v1alpha2_Storage(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "storage provides persistent storage configuration options for gathering jobs. If the type is set to PersistentVolume, then the PersistentVolume must be defined. If the type is set to Ephemeral, then the PersistentVolume must not be defined.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is a required field that specifies the type of storage that will be used to store the Insights data archive. Valid values are \"PersistentVolume\" and \"Ephemeral\". When set to Ephemeral, the Insights data archive is stored in the ephemeral storage of the gathering job. When set to PersistentVolume, the Insights data archive is stored in the PersistentVolume that is defined by the PersistentVolume field.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "persistentVolume": { - SchemaProps: spec.SchemaProps{ - Description: "persistentVolume is an optional field that specifies the PersistentVolume that will be used to store the Insights data archive. The PersistentVolume must be created in the openshift-insights namespace.", - Ref: ref(insightsv1alpha2.PersistentVolumeConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "persistentVolume": "PersistentVolume", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - insightsv1alpha2.PersistentVolumeConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_kubecontrolplane_v1_AggregatorConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AggregatorConfig holds information required to make the aggregator function.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "proxyClientInfo": { - SchemaProps: spec.SchemaProps{ - Description: "proxyClientInfo specifies the client cert/key to use when proxying to aggregated API servers", - Default: map[string]interface{}{}, - Ref: ref(configv1.CertInfo{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"proxyClientInfo"}, - }, - }, - Dependencies: []string{ - configv1.CertInfo{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_kubecontrolplane_v1_KubeAPIServerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "servingInfo": { - SchemaProps: spec.SchemaProps{ - Description: "servingInfo describes how to start serving", - Default: map[string]interface{}{}, - Ref: ref(configv1.HTTPServingInfo{}.OpenAPIModelName()), - }, - }, - "corsAllowedOrigins": { - SchemaProps: spec.SchemaProps{ - Description: "corsAllowedOrigins", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "auditConfig": { - SchemaProps: spec.SchemaProps{ - Description: "auditConfig describes how to configure audit information", - Default: map[string]interface{}{}, - Ref: ref(configv1.AuditConfig{}.OpenAPIModelName()), - }, - }, - "storageConfig": { - SchemaProps: spec.SchemaProps{ - Description: "storageConfig contains information about how to use", - Default: map[string]interface{}{}, - Ref: ref(configv1.EtcdStorageConfig{}.OpenAPIModelName()), - }, - }, - "admission": { - SchemaProps: spec.SchemaProps{ - Description: "admissionConfig holds information about how to configure admission.", - Default: map[string]interface{}{}, - Ref: ref(configv1.AdmissionConfig{}.OpenAPIModelName()), - }, - }, - "kubeClientConfig": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.KubeClientConfig{}.OpenAPIModelName()), - }, - }, - "authConfig": { - SchemaProps: spec.SchemaProps{ - Description: "authConfig configures authentication options in addition to the standard oauth token and client certificate authenticators", - Default: map[string]interface{}{}, - Ref: ref(kubecontrolplanev1.MasterAuthConfig{}.OpenAPIModelName()), - }, - }, - "aggregatorConfig": { - SchemaProps: spec.SchemaProps{ - Description: "aggregatorConfig has options for configuring the aggregator component of the API server.", - Default: map[string]interface{}{}, - Ref: ref(kubecontrolplanev1.AggregatorConfig{}.OpenAPIModelName()), - }, - }, - "kubeletClientInfo": { - SchemaProps: spec.SchemaProps{ - Description: "kubeletClientInfo contains information about how to connect to kubelets", - Default: map[string]interface{}{}, - Ref: ref(kubecontrolplanev1.KubeletConnectionInfo{}.OpenAPIModelName()), - }, - }, - "servicesSubnet": { - SchemaProps: spec.SchemaProps{ - Description: "servicesSubnet is the subnet to use for assigning service IPs", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "servicesNodePortRange": { - SchemaProps: spec.SchemaProps{ - Description: "servicesNodePortRange is the range to use for assigning service public ports on a host.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "consolePublicURL": { - SchemaProps: spec.SchemaProps{ - Description: "DEPRECATED: consolePublicURL has been deprecated and setting it has no effect.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "userAgentMatchingConfig": { - SchemaProps: spec.SchemaProps{ - Description: "userAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!", - Default: map[string]interface{}{}, - Ref: ref(kubecontrolplanev1.UserAgentMatchingConfig{}.OpenAPIModelName()), - }, - }, - "imagePolicyConfig": { - SchemaProps: spec.SchemaProps{ - Description: "imagePolicyConfig feeds the image policy admission plugin", - Default: map[string]interface{}{}, - Ref: ref(kubecontrolplanev1.KubeAPIServerImagePolicyConfig{}.OpenAPIModelName()), - }, - }, - "projectConfig": { - SchemaProps: spec.SchemaProps{ - Description: "projectConfig feeds an admission plugin", - Default: map[string]interface{}{}, - Ref: ref(kubecontrolplanev1.KubeAPIServerProjectConfig{}.OpenAPIModelName()), - }, - }, - "serviceAccountPublicKeyFiles": { - SchemaProps: spec.SchemaProps{ - Description: "serviceAccountPublicKeyFiles is a list of files, each containing a PEM-encoded public RSA key. (If any file contains a private key, the public portion of the key is used) The list of public keys is used to verify presented service account tokens. Each key is tried in order until the list is exhausted or verification succeeds. If no keys are specified, no service account authentication will be available.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "oauthConfig": { - SchemaProps: spec.SchemaProps{ - Description: "oauthConfig, if present start the /oauth endpoint in this process", - Ref: ref(osinv1.OAuthConfig{}.OpenAPIModelName()), - }, - }, - "apiServerArguments": { - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - "minimumKubeletVersion": { - SchemaProps: spec.SchemaProps{ - Description: "minimumKubeletVersion is the lowest version of a kubelet that can join the cluster. Specifically, the apiserver will deny most authorization requests of kubelets that are older than the specified version, only allowing the kubelet to get and update its node object, and perform subjectaccessreviews. This means any kubelet that attempts to join the cluster will not be able to run any assigned workloads, and will eventually be marked as not ready. Its max length is 8, so maximum version allowed is either \"9.999.99\" or \"99.99.99\". Since the kubelet reports the version of the kubernetes release, not Openshift, this field references the underlying kubernetes version this version of Openshift is based off of. In other words: if an admin wishes to ensure no nodes run an older version than Openshift 4.17, then they should set the minimumKubeletVersion to 1.30.0. When comparing versions, the kubelet's version is stripped of any contents outside of major.minor.patch version. Thus, a kubelet with version \"1.0.0-ec.0\" will be compatible with minimumKubeletVersion \"1.0.0\" or earlier.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"servingInfo", "corsAllowedOrigins", "auditConfig", "storageConfig", "admission", "kubeClientConfig", "authConfig", "aggregatorConfig", "kubeletClientInfo", "servicesSubnet", "servicesNodePortRange", "consolePublicURL", "userAgentMatchingConfig", "imagePolicyConfig", "projectConfig", "serviceAccountPublicKeyFiles", "oauthConfig", "apiServerArguments"}, - }, - }, - Dependencies: []string{ - configv1.AdmissionConfig{}.OpenAPIModelName(), configv1.AuditConfig{}.OpenAPIModelName(), configv1.EtcdStorageConfig{}.OpenAPIModelName(), configv1.HTTPServingInfo{}.OpenAPIModelName(), configv1.KubeClientConfig{}.OpenAPIModelName(), kubecontrolplanev1.AggregatorConfig{}.OpenAPIModelName(), kubecontrolplanev1.KubeAPIServerImagePolicyConfig{}.OpenAPIModelName(), kubecontrolplanev1.KubeAPIServerProjectConfig{}.OpenAPIModelName(), kubecontrolplanev1.KubeletConnectionInfo{}.OpenAPIModelName(), kubecontrolplanev1.MasterAuthConfig{}.OpenAPIModelName(), kubecontrolplanev1.UserAgentMatchingConfig{}.OpenAPIModelName(), osinv1.OAuthConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_kubecontrolplane_v1_KubeAPIServerImagePolicyConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "internalRegistryHostname": { - SchemaProps: spec.SchemaProps{ - Description: "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "externalRegistryHostnames": { - SchemaProps: spec.SchemaProps{ - Description: "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"internalRegistryHostname", "externalRegistryHostnames"}, - }, - }, - } -} - -func schema_openshift_api_kubecontrolplane_v1_KubeAPIServerProjectConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "defaultNodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "defaultNodeSelector holds default project node label selector", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"defaultNodeSelector"}, - }, - }, - } -} - -func schema_openshift_api_kubecontrolplane_v1_KubeControllerManagerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "serviceServingCert": { - SchemaProps: spec.SchemaProps{ - Description: "serviceServingCert provides support for the old alpha service serving cert signer CA bundle", - Default: map[string]interface{}{}, - Ref: ref(kubecontrolplanev1.ServiceServingCert{}.OpenAPIModelName()), - }, - }, - "projectConfig": { - SchemaProps: spec.SchemaProps{ - Description: "projectConfig is an optimization for the daemonset controller", - Default: map[string]interface{}{}, - Ref: ref(kubecontrolplanev1.KubeControllerManagerProjectConfig{}.OpenAPIModelName()), - }, - }, - "extendedArguments": { - SchemaProps: spec.SchemaProps{ - Description: "extendedArguments is used to configure the kube-controller-manager", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - }, - Required: []string{"serviceServingCert", "projectConfig", "extendedArguments"}, - }, - }, - Dependencies: []string{ - kubecontrolplanev1.KubeControllerManagerProjectConfig{}.OpenAPIModelName(), kubecontrolplanev1.ServiceServingCert{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_kubecontrolplane_v1_KubeControllerManagerProjectConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "defaultNodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "defaultNodeSelector holds default project node label selector", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"defaultNodeSelector"}, - }, - }, - } -} - -func schema_openshift_api_kubecontrolplane_v1_KubeletConnectionInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KubeletConnectionInfo holds information necessary for connecting to a kubelet", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "port": { - SchemaProps: spec.SchemaProps{ - Description: "port is the port to connect to kubelets on", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is the CA for verifying TLS connections to kubelets", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"port", "ca", "certFile", "keyFile"}, - }, - }, - } -} - -func schema_openshift_api_kubecontrolplane_v1_MasterAuthConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MasterAuthConfig configures authentication options in addition to the standard oauth token and client certificate authenticators", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "requestHeader": { - SchemaProps: spec.SchemaProps{ - Description: "requestHeader holds options for setting up a front proxy against the API. It is optional.", - Ref: ref(kubecontrolplanev1.RequestHeaderAuthenticationOptions{}.OpenAPIModelName()), - }, - }, - "webhookTokenAuthenticators": { - SchemaProps: spec.SchemaProps{ - Description: "webhookTokenAuthenticators, if present configures remote token reviewers", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(kubecontrolplanev1.WebhookTokenAuthenticator{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "oauthMetadataFile": { - SchemaProps: spec.SchemaProps{ - Description: "oauthMetadataFile is a path to a file containing the discovery endpoint for OAuth 2.0 Authorization Server Metadata for an external OAuth server. See IETF Draft: // https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This option is mutually exclusive with OAuthConfig", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"requestHeader", "webhookTokenAuthenticators", "oauthMetadataFile"}, - }, - }, - Dependencies: []string{ - kubecontrolplanev1.RequestHeaderAuthenticationOptions{}.OpenAPIModelName(), kubecontrolplanev1.WebhookTokenAuthenticator{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_kubecontrolplane_v1_RequestHeaderAuthenticationOptions(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RequestHeaderAuthenticationOptions provides options for setting up a front proxy against the entire API instead of against the /oauth endpoint.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "clientCA": { - SchemaProps: spec.SchemaProps{ - Description: "clientCA is a file with the trusted signer certs. It is required.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientCommonNames": { - SchemaProps: spec.SchemaProps{ - Description: "clientCommonNames is a required list of common names to require a match from.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "usernameHeaders": { - SchemaProps: spec.SchemaProps{ - Description: "usernameHeaders is the list of headers to check for user information. First hit wins.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "groupHeaders": { - SchemaProps: spec.SchemaProps{ - Description: "groupHeaders is the set of headers to check for group information. All are unioned.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "extraHeaderPrefixes": { - SchemaProps: spec.SchemaProps{ - Description: "extraHeaderPrefixes is the set of request header prefixes to inspect for user extra. X-Remote-Extra- is suggested.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"clientCA", "clientCommonNames", "usernameHeaders", "groupHeaders", "extraHeaderPrefixes"}, - }, - }, - } -} - -func schema_openshift_api_kubecontrolplane_v1_ServiceServingCert(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"certFile"}, - }, - }, - } -} - -func schema_openshift_api_kubecontrolplane_v1_UserAgentDenyRule(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "UserAgentDenyRule adds a rejection message that can be used to help a user figure out how to get an approved client", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "regex": { - SchemaProps: spec.SchemaProps{ - Description: "regex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "httpVerbs": { - SchemaProps: spec.SchemaProps{ - Description: "httpVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "rejectionMessage": { - SchemaProps: spec.SchemaProps{ - Description: "rejectionMessage is the message shown when rejecting a client. If it is not a set, the default message is used.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"regex", "httpVerbs", "rejectionMessage"}, - }, - }, - } -} - -func schema_openshift_api_kubecontrolplane_v1_UserAgentMatchRule(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "UserAgentMatchRule describes how to match a given request based on User-Agent and HTTPVerb", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "regex": { - SchemaProps: spec.SchemaProps{ - Description: "regex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "httpVerbs": { - SchemaProps: spec.SchemaProps{ - Description: "httpVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"regex", "httpVerbs"}, - }, - }, - } -} - -func schema_openshift_api_kubecontrolplane_v1_UserAgentMatchingConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "requiredClients": { - SchemaProps: spec.SchemaProps{ - Description: "requiredClients if this list is non-empty, then a User-Agent must match one of the UserAgentRegexes to be allowed", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(kubecontrolplanev1.UserAgentMatchRule{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "deniedClients": { - SchemaProps: spec.SchemaProps{ - Description: "deniedClients if this list is non-empty, then a User-Agent must not match any of the UserAgentRegexes", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(kubecontrolplanev1.UserAgentDenyRule{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "defaultRejectionMessage": { - SchemaProps: spec.SchemaProps{ - Description: "defaultRejectionMessage is the message shown when rejecting a client. If it is not a set, a generic message is given.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"requiredClients", "deniedClients", "defaultRejectionMessage"}, - }, - }, - Dependencies: []string{ - kubecontrolplanev1.UserAgentDenyRule{}.OpenAPIModelName(), kubecontrolplanev1.UserAgentMatchRule{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_kubecontrolplane_v1_WebhookTokenAuthenticator(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "WebhookTokenAuthenticators holds the necessary configuation options for external token authenticators", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "configFile": { - SchemaProps: spec.SchemaProps{ - Description: "configFile is a path to a Kubeconfig file with the webhook configuration", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "cacheTTL": { - SchemaProps: spec.SchemaProps{ - Description: "cacheTTL indicates how long an authentication result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get a default timeout of 2 minutes. If zero (e.g. \"0m\"), caching is disabled", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"configFile", "cacheTTL"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_ActiveDirectoryConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ActiveDirectoryConfig holds the necessary configuration options to define how an LDAP group sync interacts with an LDAP server using the Active Directory schema", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "usersQuery": { - SchemaProps: spec.SchemaProps{ - Description: "AllUsersQuery holds the template for an LDAP query that returns user entries.", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.LDAPQuery{}.OpenAPIModelName()), - }, - }, - "userNameAttributes": { - SchemaProps: spec.SchemaProps{ - Description: "userNameAttributes defines which attributes on an LDAP user entry will be interpreted as its OpenShift user name.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "groupMembershipAttributes": { - SchemaProps: spec.SchemaProps{ - Description: "groupMembershipAttributes defines which attributes on an LDAP user entry will be interpreted as the groups it is a member of", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"usersQuery", "userNameAttributes", "groupMembershipAttributes"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.LDAPQuery{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_AdmissionConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AdmissionConfig holds the necessary configuration options for admission", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "pluginConfig": { - SchemaProps: spec.SchemaProps{ - Description: "pluginConfig allows specifying a configuration file per admission control plugin", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Ref: ref(legacyconfigv1.AdmissionPluginConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "pluginOrderOverride": { - SchemaProps: spec.SchemaProps{ - Description: "pluginOrderOverride is a list of admission control plugin names that will be installed on the master. Order is significant. If empty, a default list of plugins is used.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"pluginConfig"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.AdmissionPluginConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_AdmissionPluginConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AdmissionPluginConfig holds the necessary configuration options for admission plugins", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "location": { - SchemaProps: spec.SchemaProps{ - Description: "location is the path to a configuration file that contains the plugin's configuration", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "configuration": { - SchemaProps: spec.SchemaProps{ - Description: "configuration is an embedded configuration object to be used as the plugin's configuration. If present, it will be used instead of the path to the configuration file.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"location", "configuration"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_AggregatorConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AggregatorConfig holds information required to make the aggregator function.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "proxyClientInfo": { - SchemaProps: spec.SchemaProps{ - Description: "proxyClientInfo specifies the client cert/key to use when proxying to aggregated API servers", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.CertInfo{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"proxyClientInfo"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.CertInfo{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_AllowAllPasswordIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AllowAllPasswordIdentityProvider provides identities for users authenticating using non-empty passwords\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_AuditConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AuditConfig holds configuration for the audit capabilities", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "enabled": { - SchemaProps: spec.SchemaProps{ - Description: "If this flag is set, audit log will be printed in the logs. The logs contains, method, user and a requested URL.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "auditFilePath": { - SchemaProps: spec.SchemaProps{ - Description: "All requests coming to the apiserver will be logged to this file.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "maximumFileRetentionDays": { - SchemaProps: spec.SchemaProps{ - Description: "Maximum number of days to retain old log files based on the timestamp encoded in their filename.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "maximumRetainedFiles": { - SchemaProps: spec.SchemaProps{ - Description: "Maximum number of old log files to retain.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "maximumFileSizeMegabytes": { - SchemaProps: spec.SchemaProps{ - Description: "Maximum size in megabytes of the log file before it gets rotated. Defaults to 100MB.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "policyFile": { - SchemaProps: spec.SchemaProps{ - Description: "policyFile is a path to the file that defines the audit policy configuration.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "policyConfiguration": { - SchemaProps: spec.SchemaProps{ - Description: "policyConfiguration is an embedded policy configuration object to be used as the audit policy configuration. If present, it will be used instead of the path to the policy file.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "logFormat": { - SchemaProps: spec.SchemaProps{ - Description: "Format of saved audits (legacy or json).", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "webHookKubeConfig": { - SchemaProps: spec.SchemaProps{ - Description: "Path to a .kubeconfig formatted file that defines the audit webhook configuration.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "webHookMode": { - SchemaProps: spec.SchemaProps{ - Description: "Strategy for sending audit events (block or batch).", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"enabled", "auditFilePath", "maximumFileRetentionDays", "maximumRetainedFiles", "maximumFileSizeMegabytes", "policyFile", "policyConfiguration", "logFormat", "webHookKubeConfig", "webHookMode"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_AugmentedActiveDirectoryConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AugmentedActiveDirectoryConfig holds the necessary configuration options to define how an LDAP group sync interacts with an LDAP server using the augmented Active Directory schema", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "usersQuery": { - SchemaProps: spec.SchemaProps{ - Description: "AllUsersQuery holds the template for an LDAP query that returns user entries.", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.LDAPQuery{}.OpenAPIModelName()), - }, - }, - "userNameAttributes": { - SchemaProps: spec.SchemaProps{ - Description: "userNameAttributes defines which attributes on an LDAP user entry will be interpreted as its OpenShift user name.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "groupMembershipAttributes": { - SchemaProps: spec.SchemaProps{ - Description: "groupMembershipAttributes defines which attributes on an LDAP user entry will be interpreted as the groups it is a member of", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "groupsQuery": { - SchemaProps: spec.SchemaProps{ - Description: "AllGroupsQuery holds the template for an LDAP query that returns group entries.", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.LDAPQuery{}.OpenAPIModelName()), - }, - }, - "groupUIDAttribute": { - SchemaProps: spec.SchemaProps{ - Description: "GroupUIDAttributes defines which attribute on an LDAP group entry will be interpreted as its unique identifier. (ldapGroupUID)", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "groupNameAttributes": { - SchemaProps: spec.SchemaProps{ - Description: "groupNameAttributes defines which attributes on an LDAP group entry will be interpreted as its name to use for an OpenShift group", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"usersQuery", "userNameAttributes", "groupMembershipAttributes", "groupsQuery", "groupUIDAttribute", "groupNameAttributes"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.LDAPQuery{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_BasicAuthPasswordIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url is the remote URL to connect to", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is the CA for verifying TLS connections", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"url", "ca", "certFile", "keyFile"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_BuildDefaultsConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildDefaultsConfig controls the default information for Builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "gitHTTPProxy": { - SchemaProps: spec.SchemaProps{ - Description: "gitHTTPProxy is the location of the HTTPProxy for Git source", - Type: []string{"string"}, - Format: "", - }, - }, - "gitHTTPSProxy": { - SchemaProps: spec.SchemaProps{ - Description: "gitHTTPSProxy is the location of the HTTPSProxy for Git source", - Type: []string{"string"}, - Format: "", - }, - }, - "gitNoProxy": { - SchemaProps: spec.SchemaProps{ - Description: "gitNoProxy is the list of domains for which the proxy should not be used", - Type: []string{"string"}, - Format: "", - }, - }, - "env": { - SchemaProps: spec.SchemaProps{ - Description: "env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.EnvVar{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "sourceStrategyDefaults": { - SchemaProps: spec.SchemaProps{ - Description: "sourceStrategyDefaults are default values that apply to builds using the source strategy.", - Ref: ref(legacyconfigv1.SourceStrategyDefaultsConfig{}.OpenAPIModelName()), - }, - }, - "imageLabels": { - SchemaProps: spec.SchemaProps{ - Description: "imageLabels is a list of labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.ImageLabel{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector is a selector which must be true for the build pod to fit on a node", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "annotations": { - SchemaProps: spec.SchemaProps{ - Description: "annotations are annotations that will be added to the build pod", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "resources": { - SchemaProps: spec.SchemaProps{ - Description: "resources defines resource requirements to execute the build.", - Default: map[string]interface{}{}, - Ref: ref(corev1.ResourceRequirements{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.ImageLabel{}.OpenAPIModelName(), legacyconfigv1.SourceStrategyDefaultsConfig{}.OpenAPIModelName(), corev1.EnvVar{}.OpenAPIModelName(), corev1.ResourceRequirements{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_BuildOverridesConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildOverridesConfig controls override settings for builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "forcePull": { - SchemaProps: spec.SchemaProps{ - Description: "forcePull indicates whether the build strategy should always be set to ForcePull=true", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "imageLabels": { - SchemaProps: spec.SchemaProps{ - Description: "imageLabels is a list of labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.ImageLabel{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector is a selector which must be true for the build pod to fit on a node", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "annotations": { - SchemaProps: spec.SchemaProps{ - Description: "annotations are annotations that will be added to the build pod", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "tolerations": { - SchemaProps: spec.SchemaProps{ - Description: "tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.Toleration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"forcePull"}, - }, - }, - Dependencies: []string{ - buildv1.ImageLabel{}.OpenAPIModelName(), corev1.Toleration{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_CertInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CertInfo relates a certificate with a private key", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"certFile", "keyFile"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_ClientConnectionOverrides(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClientConnectionOverrides are a set of overrides to the default client connection settings.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "acceptContentTypes": { - SchemaProps: spec.SchemaProps{ - Description: "acceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the default value of 'application/json'. This field will control all connections to the server used by a particular client.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "contentType": { - SchemaProps: spec.SchemaProps{ - Description: "contentType is the content type used when sending data to the server from this client.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "qps": { - SchemaProps: spec.SchemaProps{ - Description: "qps controls the number of queries per second allowed for this connection.", - Default: 0, - Type: []string{"number"}, - Format: "float", - }, - }, - "burst": { - SchemaProps: spec.SchemaProps{ - Description: "burst allows extra queries to accumulate when a client is exceeding its rate.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"acceptContentTypes", "contentType", "qps", "burst"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_ClusterNetworkEntry(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterNetworkEntry defines an individual cluster network. The CIDRs cannot overlap with other cluster network CIDRs, CIDRs reserved for external ips, CIDRs reserved for service networks, and CIDRs reserved for ingress ips.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "cidr": { - SchemaProps: spec.SchemaProps{ - Description: "cidr defines the total range of a cluster networks address space.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "hostSubnetLength": { - SchemaProps: spec.SchemaProps{ - Description: "hostSubnetLength is the number of bits of the accompanying CIDR address to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pod.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - Required: []string{"cidr", "hostSubnetLength"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_ControllerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ControllerConfig holds configuration values for controllers", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "controllers": { - SchemaProps: spec.SchemaProps{ - Description: "controllers is a list of controllers to enable. '*' enables all on-by-default controllers, 'foo' enables the controller \"+ named 'foo', '-foo' disables the controller named 'foo'. Defaults to \"*\".", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "election": { - SchemaProps: spec.SchemaProps{ - Description: "election defines the configuration for electing a controller instance to make changes to the cluster. If unspecified, the ControllerTTL value is checked to determine whether the legacy direct etcd election code will be used.", - Ref: ref(legacyconfigv1.ControllerElectionConfig{}.OpenAPIModelName()), - }, - }, - "serviceServingCert": { - SchemaProps: spec.SchemaProps{ - Description: "serviceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.ServiceServingCert{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"controllers", "election", "serviceServingCert"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.ControllerElectionConfig{}.OpenAPIModelName(), legacyconfigv1.ServiceServingCert{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_ControllerElectionConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ControllerElectionConfig contains configuration values for deciding how a controller will be elected to act as leader.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "lockName": { - SchemaProps: spec.SchemaProps{ - Description: "lockName is the resource name used to act as the lock for determining which controller instance should lead.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "lockNamespace": { - SchemaProps: spec.SchemaProps{ - Description: "lockNamespace is the resource namespace used to act as the lock for determining which controller instance should lead. It defaults to \"kube-system\"", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "lockResource": { - SchemaProps: spec.SchemaProps{ - Description: "lockResource is the group and resource name to use to coordinate for the controller lock. If unset, defaults to \"configmaps\".", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.GroupResource{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"lockName", "lockNamespace", "lockResource"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.GroupResource{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_DNSConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNSConfig holds the necessary configuration options for DNS", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "bindAddress": { - SchemaProps: spec.SchemaProps{ - Description: "bindAddress is the ip:port to serve DNS on", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "bindNetwork": { - SchemaProps: spec.SchemaProps{ - Description: "bindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "allowRecursiveQueries": { - SchemaProps: spec.SchemaProps{ - Description: "allowRecursiveQueries allows the DNS server on the master to answer queries recursively. Note that open resolvers can be used for DNS amplification attacks and the master DNS should not be made accessible to public networks.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"bindAddress", "bindNetwork", "allowRecursiveQueries"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_DefaultAdmissionConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DefaultAdmissionConfig can be used to enable or disable various admission plugins. When this type is present as the `configuration` object under `pluginConfig` and *if* the admission plugin supports it, this will cause an \"off by default\" admission plugin to be enabled\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "disable": { - SchemaProps: spec.SchemaProps{ - Description: "disable turns off an admission plugin that is enabled by default.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"disable"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_DenyAllPasswordIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DenyAllPasswordIdentityProvider provides no identities for users\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_DockerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DockerConfig holds Docker related configuration options.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "execHandlerName": { - SchemaProps: spec.SchemaProps{ - Description: "execHandlerName is the name of the handler to use for executing commands in containers.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "dockerShimSocket": { - SchemaProps: spec.SchemaProps{ - Description: "dockerShimSocket is the location of the dockershim socket the kubelet uses. Currently unix socket is supported on Linux, and tcp is supported on windows. Examples:'unix:///var/run/dockershim.sock', 'tcp://localhost:3735'", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "dockerShimRootDirectory": { - SchemaProps: spec.SchemaProps{ - Description: "dockerShimRootDirectory is the dockershim root directory.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"execHandlerName", "dockerShimSocket", "dockerShimRootDirectory"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_EtcdConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "EtcdConfig holds the necessary configuration options for connecting with an etcd database", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "servingInfo": { - SchemaProps: spec.SchemaProps{ - Description: "servingInfo describes how to start serving the etcd master", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.ServingInfo{}.OpenAPIModelName()), - }, - }, - "address": { - SchemaProps: spec.SchemaProps{ - Description: "address is the advertised host:port for client connections to etcd", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "peerServingInfo": { - SchemaProps: spec.SchemaProps{ - Description: "peerServingInfo describes how to start serving the etcd peer", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.ServingInfo{}.OpenAPIModelName()), - }, - }, - "peerAddress": { - SchemaProps: spec.SchemaProps{ - Description: "peerAddress is the advertised host:port for peer connections to etcd", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "storageDirectory": { - SchemaProps: spec.SchemaProps{ - Description: "StorageDir is the path to the etcd storage directory", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"servingInfo", "address", "peerServingInfo", "peerAddress", "storageDirectory"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.ServingInfo{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_EtcdConnectionInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "EtcdConnectionInfo holds information necessary for connecting to an etcd server", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "urls": { - SchemaProps: spec.SchemaProps{ - Description: "urls are the URLs for etcd", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is a file containing trusted roots for the etcd server certificates", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"urls", "ca", "certFile", "keyFile"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_EtcdStorageConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "EtcdStorageConfig holds the necessary configuration options for the etcd storage underlying OpenShift and Kubernetes", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kubernetesStorageVersion": { - SchemaProps: spec.SchemaProps{ - Description: "kubernetesStorageVersion is the API version that Kube resources in etcd should be serialized to. This value should *not* be advanced until all clients in the cluster that read from etcd have code that allows them to read the new version.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "kubernetesStoragePrefix": { - SchemaProps: spec.SchemaProps{ - Description: "kubernetesStoragePrefix is the path within etcd that the Kubernetes resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located. The default value is 'kubernetes.io'.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "openShiftStorageVersion": { - SchemaProps: spec.SchemaProps{ - Description: "openShiftStorageVersion is the API version that OS resources in etcd should be serialized to. This value should *not* be advanced until all clients in the cluster that read from etcd have code that allows them to read the new version.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "openShiftStoragePrefix": { - SchemaProps: spec.SchemaProps{ - Description: "openShiftStoragePrefix is the path within etcd that the OpenShift resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located. The default value is 'openshift.io'.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"kubernetesStorageVersion", "kubernetesStoragePrefix", "openShiftStorageVersion", "openShiftStoragePrefix"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_GitHubIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "clientID": { - SchemaProps: spec.SchemaProps{ - Description: "clientID is the oauth client ID", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientSecret": { - SchemaProps: spec.SchemaProps{ - Description: "clientSecret is the oauth client secret", - Ref: ref(legacyconfigv1.StringSource{}.OpenAPIModelName()), - }, - }, - "organizations": { - SchemaProps: spec.SchemaProps{ - Description: "organizations optionally restricts which organizations are allowed to log in", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "teams": { - SchemaProps: spec.SchemaProps{ - Description: "teams optionally restricts which teams are allowed to log in. Format is /.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "hostname": { - SchemaProps: spec.SchemaProps{ - Description: "hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value that is configured at /setup/settings#hostname.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is the optional trusted certificate authority bundle to use when making requests to the server. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"clientID", "clientSecret", "organizations", "teams", "hostname", "ca"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.StringSource{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_GitLabIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url is the oauth server base URL", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientID": { - SchemaProps: spec.SchemaProps{ - Description: "clientID is the oauth client ID", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientSecret": { - SchemaProps: spec.SchemaProps{ - Description: "clientSecret is the oauth client secret", - Ref: ref(legacyconfigv1.StringSource{}.OpenAPIModelName()), - }, - }, - "legacy": { - SchemaProps: spec.SchemaProps{ - Description: "legacy determines if OAuth2 or OIDC should be used If true, OAuth2 is used If false, OIDC is used If nil and the URL's host is gitlab.com, OIDC is used Otherwise, OAuth2 is used In a future release, nil will default to using OIDC Eventually this flag will be removed and only OIDC will be used", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"ca", "url", "clientID", "clientSecret"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.StringSource{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_GoogleIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GoogleIdentityProvider provides identities for users authenticating using Google credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "clientID": { - SchemaProps: spec.SchemaProps{ - Description: "clientID is the oauth client ID", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientSecret": { - SchemaProps: spec.SchemaProps{ - Description: "clientSecret is the oauth client secret", - Ref: ref(legacyconfigv1.StringSource{}.OpenAPIModelName()), - }, - }, - "hostedDomain": { - SchemaProps: spec.SchemaProps{ - Description: "hostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"clientID", "clientSecret", "hostedDomain"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.StringSource{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_GrantConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GrantConfig holds the necessary configuration options for grant handlers", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "method": { - SchemaProps: spec.SchemaProps{ - Description: "method determines the default strategy to use when an OAuth client requests a grant. This method will be used only if the specific OAuth client doesn't provide a strategy of their own. Valid grant handling methods are:\n - auto: always approves grant requests, useful for trusted clients\n - prompt: prompts the end user for approval of grant requests, useful for third-party clients\n - deny: always denies grant requests, useful for black-listed clients", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "serviceAccountMethod": { - SchemaProps: spec.SchemaProps{ - Description: "serviceAccountMethod is used for determining client authorization for service account oauth client. It must be either: deny, prompt", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"method", "serviceAccountMethod"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_GroupResource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GroupResource points to a resource by its name and API group.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "group": { - SchemaProps: spec.SchemaProps{ - Description: "group is the name of an API group", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resource": { - SchemaProps: spec.SchemaProps{ - Description: "resource is the name of a resource.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"group", "resource"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_HTPasswdPasswordIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "file": { - SchemaProps: spec.SchemaProps{ - Description: "file is a reference to your htpasswd file", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"file"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_HTTPServingInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "HTTPServingInfo holds configuration for serving HTTP", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "bindAddress": { - SchemaProps: spec.SchemaProps{ - Description: "bindAddress is the ip:port to serve on", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "bindNetwork": { - SchemaProps: spec.SchemaProps{ - Description: "bindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientCA": { - SchemaProps: spec.SchemaProps{ - Description: "clientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "namedCertificates": { - SchemaProps: spec.SchemaProps{ - Description: "namedCertificates is a list of certificates to use to secure requests to specific hostnames", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.NamedCertificate{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "minTLSVersion": { - SchemaProps: spec.SchemaProps{ - Description: "minTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", - Type: []string{"string"}, - Format: "", - }, - }, - "cipherSuites": { - SchemaProps: spec.SchemaProps{ - Description: "cipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "maxRequestsInFlight": { - SchemaProps: spec.SchemaProps{ - Description: "maxRequestsInFlight is the number of concurrent requests allowed to the server. If zero, no limit.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "requestTimeoutSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "requestTimeoutSeconds is the number of seconds before requests are timed out. The default is 60 minutes, if -1 there is no limit on requests.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"bindAddress", "bindNetwork", "certFile", "keyFile", "clientCA", "namedCertificates", "maxRequestsInFlight", "requestTimeoutSeconds"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.NamedCertificate{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_IdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IdentityProvider provides identities for users authenticating using credentials", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is used to qualify the identities returned by this provider", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "challenge": { - SchemaProps: spec.SchemaProps{ - Description: "UseAsChallenger indicates whether to issue WWW-Authenticate challenges for this provider", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "login": { - SchemaProps: spec.SchemaProps{ - Description: "UseAsLogin indicates whether to use this identity provider for unauthenticated browsers to login against", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "mappingMethod": { - SchemaProps: spec.SchemaProps{ - Description: "mappingMethod determines how identities from this provider are mapped to users", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "provider": { - SchemaProps: spec.SchemaProps{ - Description: "provider contains the information about how to set up a specific identity provider", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"name", "challenge", "login", "mappingMethod", "provider"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_ImageConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageConfig holds the necessary configuration options for building image names for system components", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "format": { - SchemaProps: spec.SchemaProps{ - Description: "format is the format of the name to be built for the system component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "latest": { - SchemaProps: spec.SchemaProps{ - Description: "latest determines if the latest tag will be pulled from the registry", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"format", "latest"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_ImagePolicyConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImagePolicyConfig holds the necessary configuration options for limits and behavior for importing images", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "maxImagesBulkImportedPerRepository": { - SchemaProps: spec.SchemaProps{ - Description: "maxImagesBulkImportedPerRepository controls the number of images that are imported when a user does a bulk import of a container repository. This number defaults to 50 to prevent users from importing large numbers of images accidentally. Set -1 for no limit.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "disableScheduledImport": { - SchemaProps: spec.SchemaProps{ - Description: "disableScheduledImport allows scheduled background import of images to be disabled.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "scheduledImageImportMinimumIntervalSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "scheduledImageImportMinimumIntervalSeconds is the minimum number of seconds that can elapse between when image streams scheduled for background import are checked against the upstream repository. The default value is 15 minutes.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "maxScheduledImageImportsPerMinute": { - SchemaProps: spec.SchemaProps{ - Description: "maxScheduledImageImportsPerMinute is the maximum number of scheduled image streams that will be imported in the background per minute. The default value is 60. Set to -1 for unlimited.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "allowedRegistriesForImport": { - SchemaProps: spec.SchemaProps{ - Description: "allowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.RegistryLocation{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "internalRegistryHostname": { - SchemaProps: spec.SchemaProps{ - Description: "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format.", - Type: []string{"string"}, - Format: "", - }, - }, - "externalRegistryHostname": { - SchemaProps: spec.SchemaProps{ - Description: "externalRegistryHostname sets the hostname for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", - Type: []string{"string"}, - Format: "", - }, - }, - "additionalTrustedCA": { - SchemaProps: spec.SchemaProps{ - Description: "additionalTrustedCA is a path to a pem bundle file containing additional CAs that should be trusted during imagestream import.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"maxImagesBulkImportedPerRepository", "disableScheduledImport", "scheduledImageImportMinimumIntervalSeconds", "maxScheduledImageImportsPerMinute"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.RegistryLocation{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_JenkinsPipelineConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "JenkinsPipelineConfig holds configuration for the Jenkins pipeline strategy", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "autoProvisionEnabled": { - SchemaProps: spec.SchemaProps{ - Description: "autoProvisionEnabled determines whether a Jenkins server will be spawned from the provided template when the first build config in the project with type JenkinsPipeline is created. When not specified this option defaults to true.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "templateNamespace": { - SchemaProps: spec.SchemaProps{ - Description: "templateNamespace contains the namespace name where the Jenkins template is stored", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "templateName": { - SchemaProps: spec.SchemaProps{ - Description: "templateName is the name of the default Jenkins template", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "serviceName": { - SchemaProps: spec.SchemaProps{ - Description: "serviceName is the name of the Jenkins service OpenShift uses to detect whether a Jenkins pipeline handler has already been installed in a project. This value *must* match a service name in the provided template.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "parameters": { - SchemaProps: spec.SchemaProps{ - Description: "parameters specifies a set of optional parameters to the Jenkins template.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"autoProvisionEnabled", "templateNamespace", "templateName", "serviceName", "parameters"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_KeystonePasswordIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url is the remote URL to connect to", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is the CA for verifying TLS connections", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "domainName": { - SchemaProps: spec.SchemaProps{ - Description: "Domain Name is required for keystone v3", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "useKeystoneIdentity": { - SchemaProps: spec.SchemaProps{ - Description: "useKeystoneIdentity flag indicates that user should be authenticated by keystone ID, not by username", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"url", "ca", "certFile", "keyFile", "domainName", "useKeystoneIdentity"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_KubeletConnectionInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KubeletConnectionInfo holds information necessary for connecting to a kubelet", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "port": { - SchemaProps: spec.SchemaProps{ - Description: "port is the port to connect to kubelets on", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is the CA for verifying TLS connections to kubelets", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"port", "ca", "certFile", "keyFile"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_KubernetesMasterConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KubernetesMasterConfig holds the necessary configuration options for the Kubernetes master", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "apiLevels": { - SchemaProps: spec.SchemaProps{ - Description: "apiLevels is a list of API levels that should be enabled on startup: v1 as examples", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "disabledAPIGroupVersions": { - SchemaProps: spec.SchemaProps{ - Description: "disabledAPIGroupVersions is a map of groups to the versions (or *) that should be disabled.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - "masterIP": { - SchemaProps: spec.SchemaProps{ - Description: "masterIP is the public IP address of kubernetes stuff. If empty, the first result from net.InterfaceAddrs will be used.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "masterEndpointReconcileTTL": { - SchemaProps: spec.SchemaProps{ - Description: "masterEndpointReconcileTTL sets the time to live in seconds of an endpoint record recorded by each master. The endpoints are checked at an interval that is 2/3 of this value and this value defaults to 15s if unset. In very large clusters, this value may be increased to reduce the possibility that the master endpoint record expires (due to other load on the etcd server) and causes masters to drop in and out of the kubernetes service record. It is not recommended to set this value below 15s.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "servicesSubnet": { - SchemaProps: spec.SchemaProps{ - Description: "servicesSubnet is the subnet to use for assigning service IPs", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "servicesNodePortRange": { - SchemaProps: spec.SchemaProps{ - Description: "servicesNodePortRange is the range to use for assigning service public ports on a host.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "schedulerConfigFile": { - SchemaProps: spec.SchemaProps{ - Description: "schedulerConfigFile points to a file that describes how to set up the scheduler. If empty, you get the default scheduling rules.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "podEvictionTimeout": { - SchemaProps: spec.SchemaProps{ - Description: "podEvictionTimeout controls grace period for deleting pods on failed nodes. It takes valid time duration string. If empty, you get the default pod eviction timeout.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "proxyClientInfo": { - SchemaProps: spec.SchemaProps{ - Description: "proxyClientInfo specifies the client cert/key to use when proxying to pods", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.CertInfo{}.OpenAPIModelName()), - }, - }, - "apiServerArguments": { - SchemaProps: spec.SchemaProps{ - Description: "apiServerArguments are key value pairs that will be passed directly to the Kube apiserver that match the apiservers's command line arguments. These are not migrated, but if you reference a value that does not exist the server will not start. These values may override other settings in KubernetesMasterConfig which may cause invalid configurations.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - "controllerArguments": { - SchemaProps: spec.SchemaProps{ - Description: "controllerArguments are key value pairs that will be passed directly to the Kube controller manager that match the controller manager's command line arguments. These are not migrated, but if you reference a value that does not exist the server will not start. These values may override other settings in KubernetesMasterConfig which may cause invalid configurations.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - "schedulerArguments": { - SchemaProps: spec.SchemaProps{ - Description: "schedulerArguments are key value pairs that will be passed directly to the Kube scheduler that match the scheduler's command line arguments. These are not migrated, but if you reference a value that does not exist the server will not start. These values may override other settings in KubernetesMasterConfig which may cause invalid configurations.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - }, - Required: []string{"apiLevels", "disabledAPIGroupVersions", "masterIP", "masterEndpointReconcileTTL", "servicesSubnet", "servicesNodePortRange", "schedulerConfigFile", "podEvictionTimeout", "proxyClientInfo", "apiServerArguments", "controllerArguments", "schedulerArguments"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.CertInfo{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_LDAPAttributeMapping(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "id": { - SchemaProps: spec.SchemaProps{ - Description: "id is the list of attributes whose values should be used as the user ID. Required. LDAP standard identity attribute is \"dn\"", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "preferredUsername": { - SchemaProps: spec.SchemaProps{ - Description: "preferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "email": { - SchemaProps: spec.SchemaProps{ - Description: "email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"id", "preferredUsername", "name", "email"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_LDAPPasswordIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is\n ldap://host:port/basedn?attribute?scope?filter", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "bindDN": { - SchemaProps: spec.SchemaProps{ - Description: "bindDN is an optional DN to bind with during the search phase.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "bindPassword": { - SchemaProps: spec.SchemaProps{ - Description: "bindPassword is an optional password to bind with during the search phase.", - Ref: ref(legacyconfigv1.StringSource{}.OpenAPIModelName()), - }, - }, - "insecure": { - SchemaProps: spec.SchemaProps{ - Description: "Insecure, if true, indicates the connection should not use TLS. Cannot be set to true with a URL scheme of \"ldaps://\" If false, \"ldaps://\" URLs connect using TLS, and \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "attributes": { - SchemaProps: spec.SchemaProps{ - Description: "attributes maps LDAP attributes to identities", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.LDAPAttributeMapping{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"url", "bindDN", "bindPassword", "insecure", "ca", "attributes"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.LDAPAttributeMapping{}.OpenAPIModelName(), legacyconfigv1.StringSource{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_LDAPQuery(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LDAPQuery holds the options necessary to build an LDAP query", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "baseDN": { - SchemaProps: spec.SchemaProps{ - Description: "The DN of the branch of the directory where all searches should start from", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "scope": { - SchemaProps: spec.SchemaProps{ - Description: "The (optional) scope of the search. Can be: base: only the base object, one: all object on the base level, sub: the entire subtree Defaults to the entire subtree if not set", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "derefAliases": { - SchemaProps: spec.SchemaProps{ - Description: "The (optional) behavior of the search with regards to alisases. Can be: never: never dereference aliases, search: only dereference in searching, base: only dereference in finding the base object, always: always dereference Defaults to always dereferencing if not set", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "timeout": { - SchemaProps: spec.SchemaProps{ - Description: "TimeLimit holds the limit of time in seconds that any request to the server can remain outstanding before the wait for a response is given up. If this is 0, no client-side limit is imposed", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "filter": { - SchemaProps: spec.SchemaProps{ - Description: "filter is a valid LDAP search filter that retrieves all relevant entries from the LDAP server with the base DN", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "pageSize": { - SchemaProps: spec.SchemaProps{ - Description: "pageSize is the maximum preferred page size, measured in LDAP entries. A page size of 0 means no paging will be done.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"baseDN", "scope", "derefAliases", "timeout", "filter", "pageSize"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_LDAPSyncConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LDAPSyncConfig holds the necessary configuration options to define an LDAP group sync\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "url": { - SchemaProps: spec.SchemaProps{ - Description: "Host is the scheme, host and port of the LDAP server to connect to: scheme://host:port", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "bindDN": { - SchemaProps: spec.SchemaProps{ - Description: "bindDN is an optional DN to bind to the LDAP server with", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "bindPassword": { - SchemaProps: spec.SchemaProps{ - Description: "bindPassword is an optional password to bind with during the search phase.", - Ref: ref(legacyconfigv1.StringSource{}.OpenAPIModelName()), - }, - }, - "insecure": { - SchemaProps: spec.SchemaProps{ - Description: "Insecure, if true, indicates the connection should not use TLS. Cannot be set to true with a URL scheme of \"ldaps://\" If false, \"ldaps://\" URLs connect using TLS, and \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "groupUIDNameMapping": { - SchemaProps: spec.SchemaProps{ - Description: "LDAPGroupUIDToOpenShiftGroupNameMapping is an optional direct mapping of LDAP group UIDs to OpenShift Group names", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "rfc2307": { - SchemaProps: spec.SchemaProps{ - Description: "RFC2307Config holds the configuration for extracting data from an LDAP server set up in a fashion similar to RFC2307: first-class group and user entries, with group membership determined by a multi-valued attribute on the group entry listing its members", - Ref: ref(legacyconfigv1.RFC2307Config{}.OpenAPIModelName()), - }, - }, - "activeDirectory": { - SchemaProps: spec.SchemaProps{ - Description: "ActiveDirectoryConfig holds the configuration for extracting data from an LDAP server set up in a fashion similar to that used in Active Directory: first-class user entries, with group membership determined by a multi-valued attribute on members listing groups they are a member of", - Ref: ref(legacyconfigv1.ActiveDirectoryConfig{}.OpenAPIModelName()), - }, - }, - "augmentedActiveDirectory": { - SchemaProps: spec.SchemaProps{ - Description: "AugmentedActiveDirectoryConfig holds the configuration for extracting data from an LDAP server set up in a fashion similar to that used in Active Directory as described above, with one addition: first-class group entries exist and are used to hold metadata but not group membership", - Ref: ref(legacyconfigv1.AugmentedActiveDirectoryConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"url", "bindDN", "bindPassword", "insecure", "ca", "groupUIDNameMapping"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.ActiveDirectoryConfig{}.OpenAPIModelName(), legacyconfigv1.AugmentedActiveDirectoryConfig{}.OpenAPIModelName(), legacyconfigv1.RFC2307Config{}.OpenAPIModelName(), legacyconfigv1.StringSource{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_LocalQuota(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LocalQuota contains options for controlling local volume quota on the node.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "perFSGroup": { - SchemaProps: spec.SchemaProps{ - Description: "FSGroup can be specified to enable a quota on local storage use per unique FSGroup ID. At present this is only implemented for emptyDir volumes, and if the underlying volumeDirectory is on an XFS filesystem.", - Ref: ref(resource.Quantity{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"perFSGroup"}, - }, - }, - Dependencies: []string{ - resource.Quantity{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_MasterAuthConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MasterAuthConfig configures authentication options in addition to the standard oauth token and client certificate authenticators", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "requestHeader": { - SchemaProps: spec.SchemaProps{ - Description: "requestHeader holds options for setting up a front proxy against the API. It is optional.", - Ref: ref(legacyconfigv1.RequestHeaderAuthenticationOptions{}.OpenAPIModelName()), - }, - }, - "webhookTokenAuthenticators": { - SchemaProps: spec.SchemaProps{ - Description: "WebhookTokenAuthnConfig, if present configures remote token reviewers", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.WebhookTokenAuthenticator{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "oauthMetadataFile": { - SchemaProps: spec.SchemaProps{ - Description: "oauthMetadataFile is a path to a file containing the discovery endpoint for OAuth 2.0 Authorization Server Metadata for an external OAuth server. See IETF Draft: // https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This option is mutually exclusive with OAuthConfig", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"requestHeader", "webhookTokenAuthenticators", "oauthMetadataFile"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.RequestHeaderAuthenticationOptions{}.OpenAPIModelName(), legacyconfigv1.WebhookTokenAuthenticator{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_MasterClients(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MasterClients holds references to `.kubeconfig` files that qualify master clients for OpenShift and Kubernetes", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "openshiftLoopbackKubeConfig": { - SchemaProps: spec.SchemaProps{ - Description: "openshiftLoopbackKubeConfig is a .kubeconfig filename for system components to loopback to this master", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "openshiftLoopbackClientConnectionOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "openshiftLoopbackClientConnectionOverrides specifies client overrides for system components to loop back to this master.", - Ref: ref(legacyconfigv1.ClientConnectionOverrides{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"openshiftLoopbackKubeConfig", "openshiftLoopbackClientConnectionOverrides"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.ClientConnectionOverrides{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_MasterConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MasterConfig holds the necessary configuration options for the OpenShift master\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "servingInfo": { - SchemaProps: spec.SchemaProps{ - Description: "servingInfo describes how to start serving", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.HTTPServingInfo{}.OpenAPIModelName()), - }, - }, - "authConfig": { - SchemaProps: spec.SchemaProps{ - Description: "authConfig configures authentication options in addition to the standard oauth token and client certificate authenticators", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.MasterAuthConfig{}.OpenAPIModelName()), - }, - }, - "aggregatorConfig": { - SchemaProps: spec.SchemaProps{ - Description: "aggregatorConfig has options for configuring the aggregator component of the API server.", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.AggregatorConfig{}.OpenAPIModelName()), - }, - }, - "corsAllowedOrigins": { - SchemaProps: spec.SchemaProps{ - Description: "CORSAllowedOrigins", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "apiLevels": { - SchemaProps: spec.SchemaProps{ - Description: "apiLevels is a list of API levels that should be enabled on startup: v1 as examples", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "masterPublicURL": { - SchemaProps: spec.SchemaProps{ - Description: "masterPublicURL is how clients can access the OpenShift API server", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "controllers": { - SchemaProps: spec.SchemaProps{ - Description: "controllers is a list of the controllers that should be started. If set to \"none\", no controllers will start automatically. The default value is \"*\" which will start all controllers. When using \"*\", you may exclude controllers by prepending a \"-\" in front of their name. No other values are recognized at this time.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "admissionConfig": { - SchemaProps: spec.SchemaProps{ - Description: "admissionConfig contains admission control plugin configuration.", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.AdmissionConfig{}.OpenAPIModelName()), - }, - }, - "controllerConfig": { - SchemaProps: spec.SchemaProps{ - Description: "controllerConfig holds configuration values for controllers", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.ControllerConfig{}.OpenAPIModelName()), - }, - }, - "etcdStorageConfig": { - SchemaProps: spec.SchemaProps{ - Description: "etcdStorageConfig contains information about how API resources are stored in Etcd. These values are only relevant when etcd is the backing store for the cluster.", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.EtcdStorageConfig{}.OpenAPIModelName()), - }, - }, - "etcdClientInfo": { - SchemaProps: spec.SchemaProps{ - Description: "etcdClientInfo contains information about how to connect to etcd", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.EtcdConnectionInfo{}.OpenAPIModelName()), - }, - }, - "kubeletClientInfo": { - SchemaProps: spec.SchemaProps{ - Description: "kubeletClientInfo contains information about how to connect to kubelets", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.KubeletConnectionInfo{}.OpenAPIModelName()), - }, - }, - "kubernetesMasterConfig": { - SchemaProps: spec.SchemaProps{ - Description: "KubernetesMasterConfig, if present start the kubernetes master in this process", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.KubernetesMasterConfig{}.OpenAPIModelName()), - }, - }, - "etcdConfig": { - SchemaProps: spec.SchemaProps{ - Description: "EtcdConfig, if present start etcd in this process", - Ref: ref(legacyconfigv1.EtcdConfig{}.OpenAPIModelName()), - }, - }, - "oauthConfig": { - SchemaProps: spec.SchemaProps{ - Description: "OAuthConfig, if present start the /oauth endpoint in this process", - Ref: ref(legacyconfigv1.OAuthConfig{}.OpenAPIModelName()), - }, - }, - "dnsConfig": { - SchemaProps: spec.SchemaProps{ - Description: "DNSConfig, if present start the DNS server in this process", - Ref: ref(legacyconfigv1.DNSConfig{}.OpenAPIModelName()), - }, - }, - "serviceAccountConfig": { - SchemaProps: spec.SchemaProps{ - Description: "serviceAccountConfig holds options related to service accounts", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.ServiceAccountConfig{}.OpenAPIModelName()), - }, - }, - "masterClients": { - SchemaProps: spec.SchemaProps{ - Description: "masterClients holds all the client connection information for controllers and other system components", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.MasterClients{}.OpenAPIModelName()), - }, - }, - "imageConfig": { - SchemaProps: spec.SchemaProps{ - Description: "imageConfig holds options that describe how to build image names for system components", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.ImageConfig{}.OpenAPIModelName()), - }, - }, - "imagePolicyConfig": { - SchemaProps: spec.SchemaProps{ - Description: "imagePolicyConfig controls limits and behavior for importing images", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.ImagePolicyConfig{}.OpenAPIModelName()), - }, - }, - "policyConfig": { - SchemaProps: spec.SchemaProps{ - Description: "policyConfig holds information about where to locate critical pieces of bootstrapping policy", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.PolicyConfig{}.OpenAPIModelName()), - }, - }, - "projectConfig": { - SchemaProps: spec.SchemaProps{ - Description: "projectConfig holds information about project creation and defaults", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.ProjectConfig{}.OpenAPIModelName()), - }, - }, - "routingConfig": { - SchemaProps: spec.SchemaProps{ - Description: "routingConfig holds information about routing and route generation", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.RoutingConfig{}.OpenAPIModelName()), - }, - }, - "networkConfig": { - SchemaProps: spec.SchemaProps{ - Description: "networkConfig to be passed to the compiled in network plugin", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.MasterNetworkConfig{}.OpenAPIModelName()), - }, - }, - "volumeConfig": { - SchemaProps: spec.SchemaProps{ - Description: "MasterVolumeConfig contains options for configuring volume plugins in the master node.", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.MasterVolumeConfig{}.OpenAPIModelName()), - }, - }, - "jenkinsPipelineConfig": { - SchemaProps: spec.SchemaProps{ - Description: "jenkinsPipelineConfig holds information about the default Jenkins template used for JenkinsPipeline build strategy.", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.JenkinsPipelineConfig{}.OpenAPIModelName()), - }, - }, - "auditConfig": { - SchemaProps: spec.SchemaProps{ - Description: "auditConfig holds information related to auditing capabilities.", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.AuditConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"servingInfo", "authConfig", "aggregatorConfig", "corsAllowedOrigins", "apiLevels", "masterPublicURL", "controllers", "admissionConfig", "controllerConfig", "etcdStorageConfig", "etcdClientInfo", "kubeletClientInfo", "kubernetesMasterConfig", "etcdConfig", "oauthConfig", "dnsConfig", "serviceAccountConfig", "masterClients", "imageConfig", "imagePolicyConfig", "policyConfig", "projectConfig", "routingConfig", "networkConfig", "volumeConfig", "jenkinsPipelineConfig", "auditConfig"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.AdmissionConfig{}.OpenAPIModelName(), legacyconfigv1.AggregatorConfig{}.OpenAPIModelName(), legacyconfigv1.AuditConfig{}.OpenAPIModelName(), legacyconfigv1.ControllerConfig{}.OpenAPIModelName(), legacyconfigv1.DNSConfig{}.OpenAPIModelName(), legacyconfigv1.EtcdConfig{}.OpenAPIModelName(), legacyconfigv1.EtcdConnectionInfo{}.OpenAPIModelName(), legacyconfigv1.EtcdStorageConfig{}.OpenAPIModelName(), legacyconfigv1.HTTPServingInfo{}.OpenAPIModelName(), legacyconfigv1.ImageConfig{}.OpenAPIModelName(), legacyconfigv1.ImagePolicyConfig{}.OpenAPIModelName(), legacyconfigv1.JenkinsPipelineConfig{}.OpenAPIModelName(), legacyconfigv1.KubeletConnectionInfo{}.OpenAPIModelName(), legacyconfigv1.KubernetesMasterConfig{}.OpenAPIModelName(), legacyconfigv1.MasterAuthConfig{}.OpenAPIModelName(), legacyconfigv1.MasterClients{}.OpenAPIModelName(), legacyconfigv1.MasterNetworkConfig{}.OpenAPIModelName(), legacyconfigv1.MasterVolumeConfig{}.OpenAPIModelName(), legacyconfigv1.OAuthConfig{}.OpenAPIModelName(), legacyconfigv1.PolicyConfig{}.OpenAPIModelName(), legacyconfigv1.ProjectConfig{}.OpenAPIModelName(), legacyconfigv1.RoutingConfig{}.OpenAPIModelName(), legacyconfigv1.ServiceAccountConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_MasterNetworkConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MasterNetworkConfig to be passed to the compiled in network plugin", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "networkPluginName": { - SchemaProps: spec.SchemaProps{ - Description: "networkPluginName is the name of the network plugin to use", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clusterNetworkCIDR": { - SchemaProps: spec.SchemaProps{ - Description: "clusterNetworkCIDR is the CIDR string to specify the global overlay network's L3 space. Deprecated, but maintained for backwards compatibility, use ClusterNetworks instead.", - Type: []string{"string"}, - Format: "", - }, - }, - "clusterNetworks": { - SchemaProps: spec.SchemaProps{ - Description: "clusterNetworks is a list of ClusterNetwork objects that defines the global overlay network's L3 space by specifying a set of CIDR and netmasks that the SDN can allocate addressed from. If this is specified, then ClusterNetworkCIDR and HostSubnetLength may not be set.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.ClusterNetworkEntry{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "hostSubnetLength": { - SchemaProps: spec.SchemaProps{ - Description: "hostSubnetLength is the number of bits to allocate to each host's subnet e.g. 8 would mean a /24 network on the host. Deprecated, but maintained for backwards compatibility, use ClusterNetworks instead.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "serviceNetworkCIDR": { - SchemaProps: spec.SchemaProps{ - Description: "ServiceNetwork is the CIDR string to specify the service networks", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "externalIPNetworkCIDRs": { - SchemaProps: spec.SchemaProps{ - Description: "externalIPNetworkCIDRs controls what values are acceptable for the service external IP field. If empty, no externalIP may be set. It may contain a list of CIDRs which are checked for access. If a CIDR is prefixed with !, IPs in that CIDR will be rejected. Rejections will be applied first, then the IP checked against one of the allowed CIDRs. You should ensure this range does not overlap with your nodes, pods, or service CIDRs for security reasons.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "ingressIPNetworkCIDR": { - SchemaProps: spec.SchemaProps{ - Description: "ingressIPNetworkCIDR controls the range to assign ingress ips from for services of type LoadBalancer on bare metal. If empty, ingress ips will not be assigned. It may contain a single CIDR that will be allocated from. For security reasons, you should ensure that this range does not overlap with the CIDRs reserved for external ips, nodes, pods, or services.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "vxlanPort": { - SchemaProps: spec.SchemaProps{ - Description: "vxlanPort is the VXLAN port used by the cluster defaults. If it is not set, 4789 is the default value", - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - Required: []string{"networkPluginName", "clusterNetworks", "serviceNetworkCIDR", "externalIPNetworkCIDRs", "ingressIPNetworkCIDR"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.ClusterNetworkEntry{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_MasterVolumeConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MasterVolumeConfig contains options for configuring volume plugins in the master node.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "dynamicProvisioningEnabled": { - SchemaProps: spec.SchemaProps{ - Description: "dynamicProvisioningEnabled is a boolean that toggles dynamic provisioning off when false, defaults to true", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"dynamicProvisioningEnabled"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_NamedCertificate(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NamedCertificate specifies a certificate/key, and the names it should be served for", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "names": { - SchemaProps: spec.SchemaProps{ - Description: "names is a list of DNS names this certificate should be used to secure A name can be a normal DNS name, or can contain leading wildcard segments.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"names", "certFile", "keyFile"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_NodeAuthConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeAuthConfig holds authn/authz configuration options", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "authenticationCacheTTL": { - SchemaProps: spec.SchemaProps{ - Description: "authenticationCacheTTL indicates how long an authentication result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get the default timeout. If zero (e.g. \"0m\"), caching is disabled", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "authenticationCacheSize": { - SchemaProps: spec.SchemaProps{ - Description: "authenticationCacheSize indicates how many authentication results should be cached. If 0, the default cache size is used.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "authorizationCacheTTL": { - SchemaProps: spec.SchemaProps{ - Description: "authorizationCacheTTL indicates how long an authorization result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get the default timeout. If zero (e.g. \"0m\"), caching is disabled", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "authorizationCacheSize": { - SchemaProps: spec.SchemaProps{ - Description: "authorizationCacheSize indicates how many authorization results should be cached. If 0, the default cache size is used.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"authenticationCacheTTL", "authenticationCacheSize", "authorizationCacheTTL", "authorizationCacheSize"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_NodeConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeConfig is the fully specified config starting an OpenShift node\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "nodeName": { - SchemaProps: spec.SchemaProps{ - Description: "nodeName is the value used to identify this particular node in the cluster. If possible, this should be your fully qualified hostname. If you're describing a set of static nodes to the master, this value must match one of the values in the list", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "nodeIP": { - SchemaProps: spec.SchemaProps{ - Description: "Node may have multiple IPs, specify the IP to use for pod traffic routing If not specified, network parse/lookup on the nodeName is performed and the first non-loopback address is used", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "servingInfo": { - SchemaProps: spec.SchemaProps{ - Description: "servingInfo describes how to start serving", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.ServingInfo{}.OpenAPIModelName()), - }, - }, - "masterKubeConfig": { - SchemaProps: spec.SchemaProps{ - Description: "masterKubeConfig is a filename for the .kubeconfig file that describes how to connect this node to the master", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "masterClientConnectionOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "masterClientConnectionOverrides provides overrides to the client connection used to connect to the master.", - Ref: ref(legacyconfigv1.ClientConnectionOverrides{}.OpenAPIModelName()), - }, - }, - "dnsDomain": { - SchemaProps: spec.SchemaProps{ - Description: "dnsDomain holds the domain suffix that will be used for the DNS search path inside each container. Defaults to 'cluster.local'.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "dnsIP": { - SchemaProps: spec.SchemaProps{ - Description: "dnsIP is the IP address that pods will use to access cluster DNS. Defaults to the service IP of the Kubernetes master. This IP must be listening on port 53 for compatibility with libc resolvers (which cannot be configured to resolve names from any other port). When running more complex local DNS configurations, this is often set to the local address of a DNS proxy like dnsmasq, which then will consult either the local DNS (see dnsBindAddress) or the master DNS.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "dnsBindAddress": { - SchemaProps: spec.SchemaProps{ - Description: "dnsBindAddress is the ip:port to serve DNS on. If this is not set, the DNS server will not be started. Because most DNS resolvers will only listen on port 53, if you select an alternative port you will need a DNS proxy like dnsmasq to answer queries for containers. A common configuration is dnsmasq configured on a node IP listening on 53 and delegating queries for dnsDomain to this process, while sending other queries to the host environments nameservers.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "dnsNameservers": { - SchemaProps: spec.SchemaProps{ - Description: "dnsNameservers is a list of ip:port values of recursive nameservers to forward queries to when running a local DNS server if dnsBindAddress is set. If this value is empty, the DNS server will default to the nameservers listed in /etc/resolv.conf. If you have configured dnsmasq or another DNS proxy on the system, this value should be set to the upstream nameservers dnsmasq resolves with.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "dnsRecursiveResolvConf": { - SchemaProps: spec.SchemaProps{ - Description: "dnsRecursiveResolvConf is a path to a resolv.conf file that contains settings for an upstream server. Only the nameservers and port fields are used. The file must exist and parse correctly. It adds extra nameservers to DNSNameservers if set.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "networkPluginName": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated and maintained for backward compatibility, use NetworkConfig.NetworkPluginName instead", - Type: []string{"string"}, - Format: "", - }, - }, - "networkConfig": { - SchemaProps: spec.SchemaProps{ - Description: "networkConfig provides network options for the node", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.NodeNetworkConfig{}.OpenAPIModelName()), - }, - }, - "volumeDirectory": { - SchemaProps: spec.SchemaProps{ - Description: "volumeDirectory is the directory that volumes will be stored under", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "imageConfig": { - SchemaProps: spec.SchemaProps{ - Description: "imageConfig holds options that describe how to build image names for system components", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.ImageConfig{}.OpenAPIModelName()), - }, - }, - "allowDisabledDocker": { - SchemaProps: spec.SchemaProps{ - Description: "allowDisabledDocker if true, the Kubelet will ignore errors from Docker. This means that a node can start on a machine that doesn't have docker started.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "podManifestConfig": { - SchemaProps: spec.SchemaProps{ - Description: "podManifestConfig holds the configuration for enabling the Kubelet to create pods based from a manifest file(s) placed locally on the node", - Ref: ref(legacyconfigv1.PodManifestConfig{}.OpenAPIModelName()), - }, - }, - "authConfig": { - SchemaProps: spec.SchemaProps{ - Description: "authConfig holds authn/authz configuration options", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.NodeAuthConfig{}.OpenAPIModelName()), - }, - }, - "dockerConfig": { - SchemaProps: spec.SchemaProps{ - Description: "dockerConfig holds Docker related configuration options.", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.DockerConfig{}.OpenAPIModelName()), - }, - }, - "kubeletArguments": { - SchemaProps: spec.SchemaProps{ - Description: "kubeletArguments are key value pairs that will be passed directly to the Kubelet that match the Kubelet's command line arguments. These are not migrated or validated, so if you use them they may become invalid. These values override other settings in NodeConfig which may cause invalid configurations.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - "proxyArguments": { - SchemaProps: spec.SchemaProps{ - Description: "proxyArguments are key value pairs that will be passed directly to the Proxy that match the Proxy's command line arguments. These are not migrated or validated, so if you use them they may become invalid. These values override other settings in NodeConfig which may cause invalid configurations.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - "iptablesSyncPeriod": { - SchemaProps: spec.SchemaProps{ - Description: "iptablesSyncPeriod is how often iptable rules are refreshed", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "enableUnidling": { - SchemaProps: spec.SchemaProps{ - Description: "enableUnidling controls whether or not the hybrid unidling proxy will be set up", - Type: []string{"boolean"}, - Format: "", - }, - }, - "volumeConfig": { - SchemaProps: spec.SchemaProps{ - Description: "volumeConfig contains options for configuring volumes on the node.", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.NodeVolumeConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"nodeName", "nodeIP", "servingInfo", "masterKubeConfig", "masterClientConnectionOverrides", "dnsDomain", "dnsIP", "dnsBindAddress", "dnsNameservers", "dnsRecursiveResolvConf", "networkConfig", "volumeDirectory", "imageConfig", "allowDisabledDocker", "podManifestConfig", "authConfig", "dockerConfig", "iptablesSyncPeriod", "enableUnidling", "volumeConfig"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.ClientConnectionOverrides{}.OpenAPIModelName(), legacyconfigv1.DockerConfig{}.OpenAPIModelName(), legacyconfigv1.ImageConfig{}.OpenAPIModelName(), legacyconfigv1.NodeAuthConfig{}.OpenAPIModelName(), legacyconfigv1.NodeNetworkConfig{}.OpenAPIModelName(), legacyconfigv1.NodeVolumeConfig{}.OpenAPIModelName(), legacyconfigv1.PodManifestConfig{}.OpenAPIModelName(), legacyconfigv1.ServingInfo{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_NodeNetworkConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeNetworkConfig provides network options for the node", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "networkPluginName": { - SchemaProps: spec.SchemaProps{ - Description: "networkPluginName is a string specifying the networking plugin", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "mtu": { - SchemaProps: spec.SchemaProps{ - Description: "Maximum transmission unit for the network packets", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - Required: []string{"networkPluginName", "mtu"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_NodeVolumeConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeVolumeConfig contains options for configuring volumes on the node.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "localQuota": { - SchemaProps: spec.SchemaProps{ - Description: "localQuota contains options for controlling local volume quota on the node.", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.LocalQuota{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"localQuota"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.LocalQuota{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_OAuthConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OAuthConfig holds the necessary configuration options for OAuth authentication", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "masterCA": { - SchemaProps: spec.SchemaProps{ - Description: "masterCA is the CA for verifying the TLS connection back to the MasterURL.", - Type: []string{"string"}, - Format: "", - }, - }, - "masterURL": { - SchemaProps: spec.SchemaProps{ - Description: "masterURL is used for making server-to-server calls to exchange authorization codes for access tokens", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "masterPublicURL": { - SchemaProps: spec.SchemaProps{ - Description: "masterPublicURL is used for building valid client redirect URLs for internal and external access", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "assetPublicURL": { - SchemaProps: spec.SchemaProps{ - Description: "assetPublicURL is used for building valid client redirect URLs for external access", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "alwaysShowProviderSelection": { - SchemaProps: spec.SchemaProps{ - Description: "alwaysShowProviderSelection will force the provider selection page to render even when there is only a single provider.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "identityProviders": { - SchemaProps: spec.SchemaProps{ - Description: "identityProviders is an ordered list of ways for a user to identify themselves", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.IdentityProvider{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "grantConfig": { - SchemaProps: spec.SchemaProps{ - Description: "grantConfig describes how to handle grants", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.GrantConfig{}.OpenAPIModelName()), - }, - }, - "sessionConfig": { - SchemaProps: spec.SchemaProps{ - Description: "sessionConfig hold information about configuring sessions.", - Ref: ref(legacyconfigv1.SessionConfig{}.OpenAPIModelName()), - }, - }, - "tokenConfig": { - SchemaProps: spec.SchemaProps{ - Description: "tokenConfig contains options for authorization and access tokens", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.TokenConfig{}.OpenAPIModelName()), - }, - }, - "templates": { - SchemaProps: spec.SchemaProps{ - Description: "templates allow you to customize pages like the login page.", - Ref: ref(legacyconfigv1.OAuthTemplates{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"masterCA", "masterURL", "masterPublicURL", "assetPublicURL", "alwaysShowProviderSelection", "identityProviders", "grantConfig", "sessionConfig", "tokenConfig", "templates"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.GrantConfig{}.OpenAPIModelName(), legacyconfigv1.IdentityProvider{}.OpenAPIModelName(), legacyconfigv1.OAuthTemplates{}.OpenAPIModelName(), legacyconfigv1.SessionConfig{}.OpenAPIModelName(), legacyconfigv1.TokenConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_OAuthTemplates(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OAuthTemplates allow for customization of pages like the login page", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "login": { - SchemaProps: spec.SchemaProps{ - Description: "login is a path to a file containing a go template used to render the login page. If unspecified, the default login page is used.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "providerSelection": { - SchemaProps: spec.SchemaProps{ - Description: "providerSelection is a path to a file containing a go template used to render the provider selection page. If unspecified, the default provider selection page is used.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "error": { - SchemaProps: spec.SchemaProps{ - Description: "error is a path to a file containing a go template used to render error pages during the authentication or grant flow If unspecified, the default error page is used.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"login", "providerSelection", "error"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_OpenIDClaims(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "id": { - SchemaProps: spec.SchemaProps{ - Description: "id is the list of claims whose values should be used as the user ID. Required. OpenID standard identity claim is \"sub\"", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "preferredUsername": { - SchemaProps: spec.SchemaProps{ - Description: "preferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the id claim", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "email": { - SchemaProps: spec.SchemaProps{ - Description: "email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"id", "preferredUsername", "name", "email"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_OpenIDIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientID": { - SchemaProps: spec.SchemaProps{ - Description: "clientID is the oauth client ID", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientSecret": { - SchemaProps: spec.SchemaProps{ - Description: "clientSecret is the oauth client secret", - Ref: ref(legacyconfigv1.StringSource{}.OpenAPIModelName()), - }, - }, - "extraScopes": { - SchemaProps: spec.SchemaProps{ - Description: "extraScopes are any scopes to request in addition to the standard \"openid\" scope.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "extraAuthorizeParameters": { - SchemaProps: spec.SchemaProps{ - Description: "extraAuthorizeParameters are any custom parameters to add to the authorize request.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "urls": { - SchemaProps: spec.SchemaProps{ - Description: "urls to use to authenticate", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.OpenIDURLs{}.OpenAPIModelName()), - }, - }, - "claims": { - SchemaProps: spec.SchemaProps{ - Description: "claims mappings", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.OpenIDClaims{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"ca", "clientID", "clientSecret", "extraScopes", "extraAuthorizeParameters", "urls", "claims"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.OpenIDClaims{}.OpenAPIModelName(), legacyconfigv1.OpenIDURLs{}.OpenAPIModelName(), legacyconfigv1.StringSource{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_OpenIDURLs(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OpenIDURLs are URLs to use when authenticating with an OpenID identity provider", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "authorize": { - SchemaProps: spec.SchemaProps{ - Description: "authorize is the oauth authorization URL", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "token": { - SchemaProps: spec.SchemaProps{ - Description: "token is the oauth token granting URL", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "userInfo": { - SchemaProps: spec.SchemaProps{ - Description: "userInfo is the optional userinfo URL. If present, a granted access_token is used to request claims If empty, a granted id_token is parsed for claims", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"authorize", "token", "userInfo"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_PodManifestConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PodManifestConfig holds the necessary configuration options for using pod manifests", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "path": { - SchemaProps: spec.SchemaProps{ - Description: "path specifies the path for the pod manifest file or directory If its a directory, its expected to contain on or more manifest files This is used by the Kubelet to create pods on the node", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "fileCheckIntervalSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "fileCheckIntervalSeconds is the interval in seconds for checking the manifest file(s) for new data The interval needs to be a positive value", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - Required: []string{"path", "fileCheckIntervalSeconds"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_PolicyConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "holds the necessary configuration options for", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "userAgentMatchingConfig": { - SchemaProps: spec.SchemaProps{ - Description: "userAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.UserAgentMatchingConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"userAgentMatchingConfig"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.UserAgentMatchingConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_ProjectConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "holds the necessary configuration options for", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "defaultNodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "defaultNodeSelector holds default project node label selector", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "projectRequestMessage": { - SchemaProps: spec.SchemaProps{ - Description: "projectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "projectRequestTemplate": { - SchemaProps: spec.SchemaProps{ - Description: "projectRequestTemplate is the template to use for creating projects in response to projectrequest. It is in the format namespace/template and it is optional. If it is not specified, a default template is used.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "securityAllocator": { - SchemaProps: spec.SchemaProps{ - Description: "securityAllocator controls the automatic allocation of UIDs and MCS labels to a project. If nil, allocation is disabled.", - Ref: ref(legacyconfigv1.SecurityAllocator{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"defaultNodeSelector", "projectRequestMessage", "projectRequestTemplate", "securityAllocator"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.SecurityAllocator{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_RFC2307Config(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RFC2307Config holds the necessary configuration options to define how an LDAP group sync interacts with an LDAP server using the RFC2307 schema", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "groupsQuery": { - SchemaProps: spec.SchemaProps{ - Description: "AllGroupsQuery holds the template for an LDAP query that returns group entries.", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.LDAPQuery{}.OpenAPIModelName()), - }, - }, - "groupUIDAttribute": { - SchemaProps: spec.SchemaProps{ - Description: "GroupUIDAttributes defines which attribute on an LDAP group entry will be interpreted as its unique identifier. (ldapGroupUID)", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "groupNameAttributes": { - SchemaProps: spec.SchemaProps{ - Description: "groupNameAttributes defines which attributes on an LDAP group entry will be interpreted as its name to use for an OpenShift group", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "groupMembershipAttributes": { - SchemaProps: spec.SchemaProps{ - Description: "groupMembershipAttributes defines which attributes on an LDAP group entry will be interpreted as its members. The values contained in those attributes must be queryable by your UserUIDAttribute", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "usersQuery": { - SchemaProps: spec.SchemaProps{ - Description: "AllUsersQuery holds the template for an LDAP query that returns user entries.", - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.LDAPQuery{}.OpenAPIModelName()), - }, - }, - "userUIDAttribute": { - SchemaProps: spec.SchemaProps{ - Description: "userUIDAttribute defines which attribute on an LDAP user entry will be interpreted as its unique identifier. It must correspond to values that will be found from the GroupMembershipAttributes", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "userNameAttributes": { - SchemaProps: spec.SchemaProps{ - Description: "userNameAttributes defines which attributes on an LDAP user entry will be used, in order, as its OpenShift user name. The first attribute with a non-empty value is used. This should match your PreferredUsername setting for your LDAPPasswordIdentityProvider", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "tolerateMemberNotFoundErrors": { - SchemaProps: spec.SchemaProps{ - Description: "tolerateMemberNotFoundErrors determines the behavior of the LDAP sync job when missing user entries are encountered. If 'true', an LDAP query for users that doesn't find any will be tolerated and an only and error will be logged. If 'false', the LDAP sync job will fail if a query for users doesn't find any. The default value is 'false'. Misconfigured LDAP sync jobs with this flag set to 'true' can cause group membership to be removed, so it is recommended to use this flag with caution.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "tolerateMemberOutOfScopeErrors": { - SchemaProps: spec.SchemaProps{ - Description: "tolerateMemberOutOfScopeErrors determines the behavior of the LDAP sync job when out-of-scope user entries are encountered. If 'true', an LDAP query for a user that falls outside of the base DN given for the all user query will be tolerated and only an error will be logged. If 'false', the LDAP sync job will fail if a user query would search outside of the base DN specified by the all user query. Misconfigured LDAP sync jobs with this flag set to 'true' can result in groups missing users, so it is recommended to use this flag with caution.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"groupsQuery", "groupUIDAttribute", "groupNameAttributes", "groupMembershipAttributes", "usersQuery", "userUIDAttribute", "userNameAttributes", "tolerateMemberNotFoundErrors", "tolerateMemberOutOfScopeErrors"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.LDAPQuery{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_RegistryLocation(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "domainName": { - SchemaProps: spec.SchemaProps{ - Description: "domainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "insecure": { - SchemaProps: spec.SchemaProps{ - Description: "insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"domainName"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_RemoteConnectionInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RemoteConnectionInfo holds information necessary for establishing a remote connection", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url is the remote URL to connect to", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is the CA for verifying TLS connections", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"url", "ca", "certFile", "keyFile"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_RequestHeaderAuthenticationOptions(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RequestHeaderAuthenticationOptions provides options for setting up a front proxy against the entire API instead of against the /oauth endpoint.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "clientCA": { - SchemaProps: spec.SchemaProps{ - Description: "clientCA is a file with the trusted signer certs. It is required.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientCommonNames": { - SchemaProps: spec.SchemaProps{ - Description: "clientCommonNames is a required list of common names to require a match from.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "usernameHeaders": { - SchemaProps: spec.SchemaProps{ - Description: "usernameHeaders is the list of headers to check for user information. First hit wins.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "groupHeaders": { - SchemaProps: spec.SchemaProps{ - Description: "GroupNameHeader is the set of headers to check for group information. All are unioned.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "extraHeaderPrefixes": { - SchemaProps: spec.SchemaProps{ - Description: "extraHeaderPrefixes is the set of request header prefixes to inspect for user extra. X-Remote-Extra- is suggested.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"clientCA", "clientCommonNames", "usernameHeaders", "groupHeaders", "extraHeaderPrefixes"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_RequestHeaderIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "loginURL": { - SchemaProps: spec.SchemaProps{ - Description: "loginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "challengeURL": { - SchemaProps: spec.SchemaProps{ - Description: "challengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientCA": { - SchemaProps: spec.SchemaProps{ - Description: "clientCA is a file with the trusted signer certs. If empty, no request verification is done, and any direct request to the OAuth server can impersonate any identity from this provider, merely by setting a request header.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientCommonNames": { - SchemaProps: spec.SchemaProps{ - Description: "clientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "headers": { - SchemaProps: spec.SchemaProps{ - Description: "headers is the set of headers to check for identity information", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "preferredUsernameHeaders": { - SchemaProps: spec.SchemaProps{ - Description: "preferredUsernameHeaders is the set of headers to check for the preferred username", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "nameHeaders": { - SchemaProps: spec.SchemaProps{ - Description: "nameHeaders is the set of headers to check for the display name", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "emailHeaders": { - SchemaProps: spec.SchemaProps{ - Description: "emailHeaders is the set of headers to check for the email address", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"loginURL", "challengeURL", "clientCA", "clientCommonNames", "headers", "preferredUsernameHeaders", "nameHeaders", "emailHeaders"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_RoutingConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RoutingConfig holds the necessary configuration options for routing to subdomains", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "subdomain": { - SchemaProps: spec.SchemaProps{ - Description: "subdomain is the suffix appended to $service.$namespace. to form the default route hostname DEPRECATED: This field is being replaced by routers setting their own defaults. This is the \"default\" route.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"subdomain"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_SecurityAllocator(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SecurityAllocator controls the automatic allocation of UIDs and MCS labels to a project. If nil, allocation is disabled.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "uidAllocatorRange": { - SchemaProps: spec.SchemaProps{ - Description: "uidAllocatorRange defines the total set of Unix user IDs (UIDs) that will be allocated to projects automatically, and the size of the block each namespace gets. For example, 1000-1999/10 will allocate ten UIDs per namespace, and will be able to allocate up to 100 blocks before running out of space. The default is to allocate from 1 billion to 2 billion in 10k blocks (which is the expected size of the ranges container images will use once user namespaces are started).", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "mcsAllocatorRange": { - SchemaProps: spec.SchemaProps{ - Description: "mcsAllocatorRange defines the range of MCS categories that will be assigned to namespaces. The format is \"/[,]\". The default is \"s0/2\" and will allocate from c0 -> c1023, which means a total of 535k labels are available (1024 choose 2 ~ 535k). If this value is changed after startup, new projects may receive labels that are already allocated to other projects. Prefix may be any valid SELinux set of terms (including user, role, and type), although leaving them as the default will allow the server to set them automatically.\n\nExamples: * s0:/2 - Allocate labels from s0:c0,c0 to s0:c511,c511 * s0:/2,512 - Allocate labels from s0:c0,c0,c0 to s0:c511,c511,511", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "mcsLabelsPerProject": { - SchemaProps: spec.SchemaProps{ - Description: "mcsLabelsPerProject defines the number of labels that should be reserved per project. The default is 5 to match the default UID and MCS ranges (100k namespaces, 535k/5 labels).", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"uidAllocatorRange", "mcsAllocatorRange", "mcsLabelsPerProject"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_ServiceAccountConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ServiceAccountConfig holds the necessary configuration options for a service account", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managedNames": { - SchemaProps: spec.SchemaProps{ - Description: "managedNames is a list of service account names that will be auto-created in every namespace. If no names are specified, the ServiceAccountsController will not be started.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "limitSecretReferences": { - SchemaProps: spec.SchemaProps{ - Description: "limitSecretReferences controls whether or not to allow a service account to reference any secret in a namespace without explicitly referencing them", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "privateKeyFile": { - SchemaProps: spec.SchemaProps{ - Description: "privateKeyFile is a file containing a PEM-encoded private RSA key, used to sign service account tokens. If no private key is specified, the service account TokensController will not be started.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "publicKeyFiles": { - SchemaProps: spec.SchemaProps{ - Description: "publicKeyFiles is a list of files, each containing a PEM-encoded public RSA key. (If any file contains a private key, the public portion of the key is used) The list of public keys is used to verify presented service account tokens. Each key is tried in order until the list is exhausted or verification succeeds. If no keys are specified, no service account authentication will be available.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "masterCA": { - SchemaProps: spec.SchemaProps{ - Description: "masterCA is the CA for verifying the TLS connection back to the master. The service account controller will automatically inject the contents of this file into pods so they can verify connections to the master.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"managedNames", "limitSecretReferences", "privateKeyFile", "publicKeyFiles", "masterCA"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_ServiceServingCert(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "signer": { - SchemaProps: spec.SchemaProps{ - Description: "signer holds the signing information used to automatically sign serving certificates. If this value is nil, then certs are not signed automatically.", - Ref: ref(legacyconfigv1.CertInfo{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"signer"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.CertInfo{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_ServingInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ServingInfo holds information about serving web pages", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "bindAddress": { - SchemaProps: spec.SchemaProps{ - Description: "bindAddress is the ip:port to serve on", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "bindNetwork": { - SchemaProps: spec.SchemaProps{ - Description: "bindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientCA": { - SchemaProps: spec.SchemaProps{ - Description: "clientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "namedCertificates": { - SchemaProps: spec.SchemaProps{ - Description: "namedCertificates is a list of certificates to use to secure requests to specific hostnames", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.NamedCertificate{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "minTLSVersion": { - SchemaProps: spec.SchemaProps{ - Description: "minTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", - Type: []string{"string"}, - Format: "", - }, - }, - "cipherSuites": { - SchemaProps: spec.SchemaProps{ - Description: "cipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"bindAddress", "bindNetwork", "certFile", "keyFile", "clientCA", "namedCertificates"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.NamedCertificate{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_SessionConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SessionConfig specifies options for cookie-based sessions. Used by AuthRequestHandlerSession", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "sessionSecretsFile": { - SchemaProps: spec.SchemaProps{ - Description: "sessionSecretsFile is a reference to a file containing a serialized SessionSecrets object If no file is specified, a random signing and encryption key are generated at each server start", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "sessionMaxAgeSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "sessionMaxAgeSeconds specifies how long created sessions last. Used by AuthRequestHandlerSession", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "sessionName": { - SchemaProps: spec.SchemaProps{ - Description: "sessionName is the cookie name used to store the session", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"sessionSecretsFile", "sessionMaxAgeSeconds", "sessionName"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_SessionSecret(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SessionSecret is a secret used to authenticate/decrypt cookie-based sessions", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "authentication": { - SchemaProps: spec.SchemaProps{ - Description: "authentication is used to authenticate sessions using HMAC. Recommended to use a secret with 32 or 64 bytes.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "encryption": { - SchemaProps: spec.SchemaProps{ - Description: "encryption is used to encrypt sessions. Must be 16, 24, or 32 characters long, to select AES-128, AES-", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"authentication", "encryption"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_SessionSecrets(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SessionSecrets list the secrets to use to sign/encrypt and authenticate/decrypt created sessions.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "secrets": { - SchemaProps: spec.SchemaProps{ - Description: "secrets is a list of secrets New sessions are signed and encrypted using the first secret. Existing sessions are decrypted/authenticated by each secret until one succeeds. This allows rotating secrets.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.SessionSecret{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"secrets"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.SessionSecret{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_SourceStrategyDefaultsConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SourceStrategyDefaultsConfig contains values that apply to builds using the source strategy.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "incremental": { - SchemaProps: spec.SchemaProps{ - Description: "incremental indicates if s2i build strategies should perform an incremental build or not", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_StringSource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "StringSource allows specifying a string inline, or externally via env var or file. When it contains only a string value, it marshals to a simple JSON string.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value specifies the cleartext value, or an encrypted value if keyFile is specified.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "env": { - SchemaProps: spec.SchemaProps{ - Description: "env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "file": { - SchemaProps: spec.SchemaProps{ - Description: "file references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile references a file containing the key to use to decrypt the value.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"value", "env", "file", "keyFile"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_StringSourceSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "StringSourceSpec specifies a string value, or external location", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value specifies the cleartext value, or an encrypted value if keyFile is specified.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "env": { - SchemaProps: spec.SchemaProps{ - Description: "env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "file": { - SchemaProps: spec.SchemaProps{ - Description: "file references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile references a file containing the key to use to decrypt the value.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"value", "env", "file", "keyFile"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_TokenConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TokenConfig holds the necessary configuration options for authorization and access tokens", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "authorizeTokenMaxAgeSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "authorizeTokenMaxAgeSeconds defines the maximum age of authorize tokens", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "accessTokenMaxAgeSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "accessTokenMaxAgeSeconds defines the maximum age of access tokens", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "accessTokenInactivityTimeoutSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "accessTokenInactivityTimeoutSeconds defined the default token inactivity timeout for tokens granted by any client. Setting it to nil means the feature is completely disabled (default) The default setting can be overridden on OAuthClient basis. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Valid values are: - 0: Tokens never time out - X: Tokens time out if there is no activity for X seconds The current minimum allowed value for X is 300 (5 minutes)", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"authorizeTokenMaxAgeSeconds", "accessTokenMaxAgeSeconds"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_UserAgentDenyRule(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "UserAgentDenyRule adds a rejection message that can be used to help a user figure out how to get an approved client", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "regex": { - SchemaProps: spec.SchemaProps{ - Description: "UserAgentRegex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "httpVerbs": { - SchemaProps: spec.SchemaProps{ - Description: "httpVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "rejectionMessage": { - SchemaProps: spec.SchemaProps{ - Description: "rejectionMessage is the message shown when rejecting a client. If it is not a set, the default message is used.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"regex", "httpVerbs", "rejectionMessage"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_UserAgentMatchRule(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "UserAgentMatchRule describes how to match a given request based on User-Agent and HTTPVerb", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "regex": { - SchemaProps: spec.SchemaProps{ - Description: "UserAgentRegex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "httpVerbs": { - SchemaProps: spec.SchemaProps{ - Description: "httpVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"regex", "httpVerbs"}, - }, - }, - } -} - -func schema_openshift_api_legacyconfig_v1_UserAgentMatchingConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "requiredClients": { - SchemaProps: spec.SchemaProps{ - Description: "If this list is non-empty, then a User-Agent must match one of the UserAgentRegexes to be allowed", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.UserAgentMatchRule{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "deniedClients": { - SchemaProps: spec.SchemaProps{ - Description: "If this list is non-empty, then a User-Agent must not match any of the UserAgentRegexes", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(legacyconfigv1.UserAgentDenyRule{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "defaultRejectionMessage": { - SchemaProps: spec.SchemaProps{ - Description: "defaultRejectionMessage is the message shown when rejecting a client. If it is not a set, a generic message is given.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"requiredClients", "deniedClients", "defaultRejectionMessage"}, - }, - }, - Dependencies: []string{ - legacyconfigv1.UserAgentDenyRule{}.OpenAPIModelName(), legacyconfigv1.UserAgentMatchRule{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_legacyconfig_v1_WebhookTokenAuthenticator(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "WebhookTokenAuthenticators holds the necessary configuation options for external token authenticators", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "configFile": { - SchemaProps: spec.SchemaProps{ - Description: "configFile is a path to a Kubeconfig file with the webhook configuration", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "cacheTTL": { - SchemaProps: spec.SchemaProps{ - Description: "cacheTTL indicates how long an authentication result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get a default timeout of 2 minutes. If zero (e.g. \"0m\"), caching is disabled", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"configFile", "cacheTTL"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1_AWSFailureDomain(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSFailureDomain configures failure domain information for the AWS platform.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "subnet": { - SchemaProps: spec.SchemaProps{ - Description: "subnet is a reference to the subnet to use for this instance.", - Ref: ref(machinev1.AWSResourceReference{}.OpenAPIModelName()), - }, - }, - "placement": { - SchemaProps: spec.SchemaProps{ - Description: "placement configures the placement information for this instance.", - Default: map[string]interface{}{}, - Ref: ref(machinev1.AWSFailureDomainPlacement{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1.AWSFailureDomainPlacement{}.OpenAPIModelName(), machinev1.AWSResourceReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_AWSFailureDomainPlacement(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSFailureDomainPlacement configures the placement information for the AWSFailureDomain.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "availabilityZone": { - SchemaProps: spec.SchemaProps{ - Description: "availabilityZone is the availability zone of the instance.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"availabilityZone"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1_AWSResourceFilter(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSResourceFilter is a filter used to identify an AWS resource", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of the filter. Filter names are case-sensitive.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "values": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "values includes one or more filter values. Filter values are case-sensitive.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1_AWSResourceReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSResourceReference is a reference to a specific AWS resource by ID, ARN, or filters. Only one of ID, ARN or Filters may be specified. Specifying more than one will result in a validation error.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type determines how the reference will fetch the AWS resource.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "id": { - SchemaProps: spec.SchemaProps{ - Description: "id of resource.", - Type: []string{"string"}, - Format: "", - }, - }, - "arn": { - SchemaProps: spec.SchemaProps{ - Description: "arn of resource.", - Type: []string{"string"}, - Format: "", - }, - }, - "filters": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "filters is a set of filters used to identify a resource.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.AWSResourceFilter{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "arn": "ARN", - "filters": "Filters", - "id": "ID", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1.AWSResourceFilter{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_AlibabaCloudMachineProviderConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AlibabaCloudMachineProviderConfig is the Schema for the alibabacloudmachineproviderconfig API Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "instanceType": { - SchemaProps: spec.SchemaProps{ - Description: "The instance type of the instance.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "vpcId": { - SchemaProps: spec.SchemaProps{ - Description: "The ID of the vpc", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "regionId": { - SchemaProps: spec.SchemaProps{ - Description: "The ID of the region in which to create the instance. You can call the DescribeRegions operation to query the most recent region list.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "zoneId": { - SchemaProps: spec.SchemaProps{ - Description: "The ID of the zone in which to create the instance. You can call the DescribeZones operation to query the most recent region list.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "imageId": { - SchemaProps: spec.SchemaProps{ - Description: "The ID of the image used to create the instance.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "dataDisk": { - SchemaProps: spec.SchemaProps{ - Description: "DataDisks holds information regarding the extra disks attached to the instance", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.DataDiskProperties{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "securityGroups": { - SchemaProps: spec.SchemaProps{ - Description: "securityGroups is a list of security group references to assign to the instance. A reference holds either the security group ID, the resource name, or the required tags to search. When more than one security group is returned for a tag search, all the groups are associated with the instance up to the maximum number of security groups to which an instance can belong. For more information, see the \"Security group limits\" section in Limits. https://www.alibabacloud.com/help/en/doc-detail/25412.htm", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.AlibabaResourceReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "bandwidth": { - SchemaProps: spec.SchemaProps{ - Description: "bandwidth describes the internet bandwidth strategy for the instance", - Default: map[string]interface{}{}, - Ref: ref(machinev1.BandwidthProperties{}.OpenAPIModelName()), - }, - }, - "systemDisk": { - SchemaProps: spec.SchemaProps{ - Description: "systemDisk holds the properties regarding the system disk for the instance", - Default: map[string]interface{}{}, - Ref: ref(machinev1.SystemDiskProperties{}.OpenAPIModelName()), - }, - }, - "vSwitch": { - SchemaProps: spec.SchemaProps{ - Description: "vSwitch is a reference to the vswitch to use for this instance. A reference holds either the vSwitch ID, the resource name, or the required tags to search. When more than one vSwitch is returned for a tag search, only the first vSwitch returned will be used. This parameter is required when you create an instance of the VPC type. You can call the DescribeVSwitches operation to query the created vSwitches.", - Default: map[string]interface{}{}, - Ref: ref(machinev1.AlibabaResourceReference{}.OpenAPIModelName()), - }, - }, - "ramRoleName": { - SchemaProps: spec.SchemaProps{ - Description: "ramRoleName is the name of the instance Resource Access Management (RAM) role. This allows the instance to perform API calls as this specified RAM role.", - Type: []string{"string"}, - Format: "", - }, - }, - "resourceGroup": { - SchemaProps: spec.SchemaProps{ - Description: "resourceGroup references the resource group to which to assign the instance. A reference holds either the resource group ID, the resource name, or the required tags to search. When more than one resource group are returned for a search, an error will be produced and the Machine will not be created. Resource Groups do not support searching by tags.", - Default: map[string]interface{}{}, - Ref: ref(machinev1.AlibabaResourceReference{}.OpenAPIModelName()), - }, - }, - "tenancy": { - SchemaProps: spec.SchemaProps{ - Description: "tenancy specifies whether to create the instance on a dedicated host. Valid values:\n\ndefault: creates the instance on a non-dedicated host. host: creates the instance on a dedicated host. If you do not specify the DedicatedHostID parameter, Alibaba Cloud automatically selects a dedicated host for the instance. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `default`.", - Type: []string{"string"}, - Format: "", - }, - }, - "userDataSecret": { - SchemaProps: spec.SchemaProps{ - Description: "userDataSecret contains a local reference to a secret that contains the UserData to apply to the instance", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "credentialsSecret": { - SchemaProps: spec.SchemaProps{ - Description: "credentialsSecret is a reference to the secret with alibabacloud credentials. Otherwise, defaults to permissions provided by attached RAM role where the actuator is running.", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "tag": { - SchemaProps: spec.SchemaProps{ - Description: "Tags are the set of metadata to add to an instance.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.Tag{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"instanceType", "vpcId", "regionId", "zoneId", "imageId", "vSwitch", "resourceGroup"}, - }, - }, - Dependencies: []string{ - machinev1.AlibabaResourceReference{}.OpenAPIModelName(), machinev1.BandwidthProperties{}.OpenAPIModelName(), machinev1.DataDiskProperties{}.OpenAPIModelName(), machinev1.SystemDiskProperties{}.OpenAPIModelName(), machinev1.Tag{}.OpenAPIModelName(), corev1.LocalObjectReference{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_AlibabaCloudMachineProviderConfigList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AlibabaCloudMachineProviderConfigList contains a list of AlibabaCloudMachineProviderConfig Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.AlibabaCloudMachineProviderConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - machinev1.AlibabaCloudMachineProviderConfig{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_AlibabaCloudMachineProviderStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AlibabaCloudMachineProviderStatus is the Schema for the alibabacloudmachineproviderconfig API Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "instanceId": { - SchemaProps: spec.SchemaProps{ - Description: "instanceId is the instance ID of the machine created in alibabacloud", - Type: []string{"string"}, - Format: "", - }, - }, - "instanceState": { - SchemaProps: spec.SchemaProps{ - Description: "instanceState is the state of the alibabacloud instance for this machine", - Type: []string{"string"}, - Format: "", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a set of conditions associated with the Machine to indicate errors or other status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_AlibabaResourceReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ResourceTagReference is a reference to a specific AlibabaCloud resource by ID, or tags. Only one of ID or Tags may be specified. Specifying more than one will result in a validation error.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type identifies the resource reference type for this entry.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "id": { - SchemaProps: spec.SchemaProps{ - Description: "id of resource", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of the resource", - Type: []string{"string"}, - Format: "", - }, - }, - "tags": { - SchemaProps: spec.SchemaProps{ - Description: "tags is a set of metadata based upon ECS object tags used to identify a resource. For details about usage when multiple resources are found, please see the owning parent field documentation.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.Tag{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"type"}, - }, - }, - Dependencies: []string{ - machinev1.Tag{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_AzureFailureDomain(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AzureFailureDomain configures failure domain information for the Azure platform.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "zone": { - SchemaProps: spec.SchemaProps{ - Description: "Availability Zone for the virtual machine. If nil, the virtual machine should be deployed to no zone.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "subnet": { - SchemaProps: spec.SchemaProps{ - Description: "subnet is the name of the network subnet in which the VM will be created. When omitted, the subnet value from the machine providerSpec template will be used.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"zone"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1_BandwidthProperties(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Bandwidth describes the bandwidth strategy for the network of the instance", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "internetMaxBandwidthIn": { - SchemaProps: spec.SchemaProps{ - Description: "internetMaxBandwidthIn is the maximum inbound public bandwidth. Unit: Mbit/s. Valid values: When the purchased outbound public bandwidth is less than or equal to 10 Mbit/s, the valid values of this parameter are 1 to 10. Currently the default is `10` when outbound bandwidth is less than or equal to 10 Mbit/s. When the purchased outbound public bandwidth is greater than 10, the valid values are 1 to the InternetMaxBandwidthOut value. Currently the default is the value used for `InternetMaxBandwidthOut` when outbound public bandwidth is greater than 10.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "internetMaxBandwidthOut": { - SchemaProps: spec.SchemaProps{ - Description: "internetMaxBandwidthOut is the maximum outbound public bandwidth. Unit: Mbit/s. Valid values: 0 to 100. When a value greater than 0 is used then a public IP address is assigned to the instance. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `0`", - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1_ControlPlaneMachineSet(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ControlPlaneMachineSet ensures that a specified number of control plane machine replicas are running at any given time. Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.ControlPlaneMachineSetSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.ControlPlaneMachineSetStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1.ControlPlaneMachineSetSpec{}.OpenAPIModelName(), machinev1.ControlPlaneMachineSetStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_ControlPlaneMachineSetList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ControlPlaneMachineSetList contains a list of ControlPlaneMachineSet Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.ControlPlaneMachineSet{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - machinev1.ControlPlaneMachineSet{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_ControlPlaneMachineSetSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ControlPlaneMachineSet represents the configuration of the ControlPlaneMachineSet.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "machineNamePrefix": { - SchemaProps: spec.SchemaProps{ - Description: "machineNamePrefix is the prefix used when creating machine names. Each machine name will consist of this prefix, followed by a randomly generated string of 5 characters, and the index of the machine. It must be a lowercase RFC 1123 subdomain, consisting of lowercase alphanumeric characters, hyphens ('-'), and periods ('.'). Each block, separated by periods, must start and end with an alphanumeric character. Hyphens are not allowed at the start or end of a block, and consecutive periods are not permitted. The prefix must be between 1 and 245 characters in length. For example, if machineNamePrefix is set to 'control-plane', and three machines are created, their names might be: control-plane-abcde-0, control-plane-fghij-1, control-plane-klmno-2", - Type: []string{"string"}, - Format: "", - }, - }, - "state": { - SchemaProps: spec.SchemaProps{ - Description: "state defines whether the ControlPlaneMachineSet is Active or Inactive. When Inactive, the ControlPlaneMachineSet will not take any action on the state of the Machines within the cluster. When Active, the ControlPlaneMachineSet will reconcile the Machines and will update the Machines as necessary. Once Active, a ControlPlaneMachineSet cannot be made Inactive. To prevent further action please remove the ControlPlaneMachineSet.", - Default: "Inactive", - Type: []string{"string"}, - Format: "", - }, - }, - "replicas": { - SchemaProps: spec.SchemaProps{ - Description: "replicas defines how many Control Plane Machines should be created by this ControlPlaneMachineSet. This field is immutable and cannot be changed after cluster installation. The ControlPlaneMachineSet only operates with 3 or 5 node control planes, 3 and 5 are the only valid values for this field.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "strategy": { - SchemaProps: spec.SchemaProps{ - Description: "strategy defines how the ControlPlaneMachineSet will update Machines when it detects a change to the ProviderSpec.", - Default: map[string]interface{}{}, - Ref: ref(machinev1.ControlPlaneMachineSetStrategy{}.OpenAPIModelName()), - }, - }, - "selector": { - SchemaProps: spec.SchemaProps{ - Description: "Label selector for Machines. Existing Machines selected by this selector will be the ones affected by this ControlPlaneMachineSet. It must match the template's labels. This field is considered immutable after creation of the resource.", - Default: map[string]interface{}{}, - Ref: ref(metav1.LabelSelector{}.OpenAPIModelName()), - }, - }, - "template": { - SchemaProps: spec.SchemaProps{ - Description: "template describes the Control Plane Machines that will be created by this ControlPlaneMachineSet.", - Default: map[string]interface{}{}, - Ref: ref(machinev1.ControlPlaneMachineSetTemplate{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"replicas", "selector", "template"}, - }, - }, - Dependencies: []string{ - machinev1.ControlPlaneMachineSetStrategy{}.OpenAPIModelName(), machinev1.ControlPlaneMachineSetTemplate{}.OpenAPIModelName(), metav1.LabelSelector{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_ControlPlaneMachineSetStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ControlPlaneMachineSetStatus represents the status of the ControlPlaneMachineSet CRD.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represents the observations of the ControlPlaneMachineSet's current state. Known .status.conditions.type are: Available, Degraded and Progressing.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the most recent generation observed for this ControlPlaneMachineSet. It corresponds to the ControlPlaneMachineSets's generation, which is updated on mutation by the API Server.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "replicas": { - SchemaProps: spec.SchemaProps{ - Description: "replicas is the number of Control Plane Machines created by the ControlPlaneMachineSet controller. Note that during update operations this value may differ from the desired replica count.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas is the number of Control Plane Machines created by the ControlPlaneMachineSet controller which are ready. Note that this value may be higher than the desired number of replicas while rolling updates are in-progress.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "updatedReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "updatedReplicas is the number of non-terminated Control Plane Machines created by the ControlPlaneMachineSet controller that have the desired provider spec and are ready. This value is set to 0 when a change is detected to the desired spec. When the update strategy is RollingUpdate, this will also coincide with starting the process of updating the Machines. When the update strategy is OnDelete, this value will remain at 0 until a user deletes an existing replica and its replacement has become ready.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "unavailableReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "unavailableReplicas is the number of Control Plane Machines that are still required before the ControlPlaneMachineSet reaches the desired available capacity. When this value is non-zero, the number of ReadyReplicas is less than the desired Replicas.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_ControlPlaneMachineSetStrategy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ControlPlaneMachineSetStrategy defines the strategy for applying updates to the Control Plane Machines managed by the ControlPlaneMachineSet.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type defines the type of update strategy that should be used when updating Machines owned by the ControlPlaneMachineSet. Valid values are \"RollingUpdate\" and \"OnDelete\". The current default value is \"RollingUpdate\".", - Default: "RollingUpdate", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1_ControlPlaneMachineSetTemplate(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ControlPlaneMachineSetTemplate is a template used by the ControlPlaneMachineSet to create the Machines that it will manage in the future.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "machineType": { - SchemaProps: spec.SchemaProps{ - Description: "machineType determines the type of Machines that should be managed by the ControlPlaneMachineSet. Currently, the only valid value is machines_v1beta1_machine_openshift_io.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "machines_v1beta1_machine_openshift_io": { - SchemaProps: spec.SchemaProps{ - Description: "OpenShiftMachineV1Beta1Machine defines the template for creating Machines from the v1beta1.machine.openshift.io API group.", - Ref: ref(machinev1.OpenShiftMachineV1Beta1MachineTemplate{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"machineType"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "machineType", - "fields-to-discriminateBy": map[string]interface{}{ - "machines_v1beta1_machine_openshift_io": "OpenShiftMachineV1Beta1Machine", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1.OpenShiftMachineV1Beta1MachineTemplate{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_ControlPlaneMachineSetTemplateObjectMeta(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ControlPlaneMachineSetTemplateObjectMeta is a subset of the metav1.ObjectMeta struct. It allows users to specify labels and annotations that will be copied onto Machines created from this template.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "labels": { - SchemaProps: spec.SchemaProps{ - Description: "Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels. This field must contain both the 'machine.openshift.io/cluster-api-machine-role' and 'machine.openshift.io/cluster-api-machine-type' labels, both with a value of 'master'. It must also contain a label with the key 'machine.openshift.io/cluster-api-cluster'.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "annotations": { - SchemaProps: spec.SchemaProps{ - Description: "annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"labels"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1_DataDiskProperties(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DataDisk contains the information regarding the datadisk attached to an instance", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "Name": { - SchemaProps: spec.SchemaProps{ - Description: "Name is the name of data disk N. If the name is specified the name must be 2 to 128 characters in length. It must start with a letter and cannot start with http:// or https://. It can contain letters, digits, colons (:), underscores (_), and hyphens (-).\n\nEmpty value means the platform chooses a default, which is subject to change over time. Currently the default is `\"\"`.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "SnapshotID": { - SchemaProps: spec.SchemaProps{ - Description: "SnapshotID is the ID of the snapshot used to create data disk N. Valid values of N: 1 to 16.\n\nWhen the DataDisk.N.SnapshotID parameter is specified, the DataDisk.N.Size parameter is ignored. The data disk is created based on the size of the specified snapshot. Use snapshots created after July 15, 2013. Otherwise, an error is returned and your request is rejected.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "Size": { - SchemaProps: spec.SchemaProps{ - Description: "Size of the data disk N. Valid values of N: 1 to 16. Unit: GiB. Valid values:\n\nValid values when DataDisk.N.Category is set to cloud_efficiency: 20 to 32768 Valid values when DataDisk.N.Category is set to cloud_ssd: 20 to 32768 Valid values when DataDisk.N.Category is set to cloud_essd: 20 to 32768 Valid values when DataDisk.N.Category is set to cloud: 5 to 2000 The value of this parameter must be greater than or equal to the size of the snapshot specified by the SnapshotID parameter.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - "DiskEncryption": { - SchemaProps: spec.SchemaProps{ - Description: "DiskEncryption specifies whether to encrypt data disk N.\n\nEmpty value means the platform chooses a default, which is subject to change over time. Currently the default is `disabled`.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "PerformanceLevel": { - SchemaProps: spec.SchemaProps{ - Description: "PerformanceLevel is the performance level of the ESSD used as as data disk N. The N value must be the same as that in DataDisk.N.Category when DataDisk.N.Category is set to cloud_essd. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is `PL1`. Valid values:\n\nPL0: A single ESSD can deliver up to 10,000 random read/write IOPS. PL1: A single ESSD can deliver up to 50,000 random read/write IOPS. PL2: A single ESSD can deliver up to 100,000 random read/write IOPS. PL3: A single ESSD can deliver up to 1,000,000 random read/write IOPS. For more information about ESSD performance levels, see ESSDs.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "Category": { - SchemaProps: spec.SchemaProps{ - Description: "Category describes the type of data disk N. Valid values: cloud_efficiency: ultra disk cloud_ssd: standard SSD cloud_essd: ESSD cloud: basic disk Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently for non-I/O optimized instances of retired instance types, the default is `cloud`. Currently for other instances, the default is `cloud_efficiency`.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "KMSKeyID": { - SchemaProps: spec.SchemaProps{ - Description: "KMSKeyID is the ID of the Key Management Service (KMS) key to be used by data disk N. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `\"\"` which is interpreted as do not use KMSKey encryption.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "DiskPreservation": { - SchemaProps: spec.SchemaProps{ - Description: "DiskPreservation specifies whether to release data disk N along with the instance. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `DeleteWithInstance`", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1_FailureDomains(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "FailureDomain represents the different configurations required to spread Machines across failure domains on different platforms.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "platform": { - SchemaProps: spec.SchemaProps{ - Description: "platform identifies the platform for which the FailureDomain represents. Currently supported values are AWS, Azure, GCP, OpenStack, VSphere and Nutanix.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "aws": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "aws configures failure domain information for the AWS platform.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.AWSFailureDomain{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "azure": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "azure configures failure domain information for the Azure platform.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.AzureFailureDomain{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "gcp": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "gcp configures failure domain information for the GCP platform.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.GCPFailureDomain{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "vsphere": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "vsphere configures failure domain information for the VSphere platform.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.VSphereFailureDomain{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "openstack": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "openstack configures failure domain information for the OpenStack platform.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.OpenStackFailureDomain{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "nutanix": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "nutanix configures failure domain information for the Nutanix platform.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.NutanixFailureDomainReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"platform"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "platform", - "fields-to-discriminateBy": map[string]interface{}{ - "aws": "AWS", - "azure": "Azure", - "gcp": "GCP", - "nutanix": "Nutanix", - "openstack": "OpenStack", - "vsphere": "VSphere", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1.AWSFailureDomain{}.OpenAPIModelName(), machinev1.AzureFailureDomain{}.OpenAPIModelName(), machinev1.GCPFailureDomain{}.OpenAPIModelName(), machinev1.NutanixFailureDomainReference{}.OpenAPIModelName(), machinev1.OpenStackFailureDomain{}.OpenAPIModelName(), machinev1.VSphereFailureDomain{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_GCPFailureDomain(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GCPFailureDomain configures failure domain information for the GCP platform", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "zone": { - SchemaProps: spec.SchemaProps{ - Description: "zone is the zone in which the GCP machine provider will create the VM.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"zone"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1_LoadBalancerReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LoadBalancerReference is a reference to a load balancer on IBM Cloud virtual private cloud(VPC).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of the LoadBalancer in IBM Cloud VPC. The name should be between 1 and 63 characters long and may consist of lowercase alphanumeric characters and hyphens only. The value must not end with a hyphen. It is a reference to existing LoadBalancer created by openshift installer component.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type of the LoadBalancer service supported by IBM Cloud VPC. Currently, only Application LoadBalancer is supported. More details about Application LoadBalancer https://cloud.ibm.com/docs/vpc?topic=vpc-load-balancers-about&interface=ui Supported values are Application.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "type"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1_NutanixCategory(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NutanixCategory identifies a pair of prism category key and value", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "key": { - SchemaProps: spec.SchemaProps{ - Description: "key is the prism category key name", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value is the prism category value associated with the key", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"key", "value"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1_NutanixFailureDomainReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NutanixFailureDomainReference refers to the failure domain of the Nutanix platform.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of the failure domain in which the nutanix machine provider will create the VM. Failure domains are defined in a cluster's config.openshift.io/Infrastructure resource.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1_NutanixGPU(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NutanixGPU holds the identity of a Nutanix GPU resource in the Prism Central", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the identifier type of the GPU device. Valid values are Name and DeviceID.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "deviceID": { - SchemaProps: spec.SchemaProps{ - Description: "deviceID is the GPU device ID with the integer value.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the GPU device name", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "deviceID": "DeviceID", - "name": "Name", - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1_NutanixMachineProviderConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NutanixMachineProviderConfig is the Schema for the nutanixmachineproviderconfigs API Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "cluster": { - SchemaProps: spec.SchemaProps{ - Description: "cluster is to identify the cluster (the Prism Element under management of the Prism Central), in which the Machine's VM will be created. The cluster identifier (uuid or name) can be obtained from the Prism Central console or using the prism_central API.", - Default: map[string]interface{}{}, - Ref: ref(machinev1.NutanixResourceIdentifier{}.OpenAPIModelName()), - }, - }, - "image": { - SchemaProps: spec.SchemaProps{ - Description: "image is to identify the rhcos image uploaded to the Prism Central (PC) The image identifier (uuid or name) can be obtained from the Prism Central console or using the prism_central API.", - Default: map[string]interface{}{}, - Ref: ref(machinev1.NutanixResourceIdentifier{}.OpenAPIModelName()), - }, - }, - "subnets": { - SchemaProps: spec.SchemaProps{ - Description: "subnets holds a list of identifiers (one or more) of the cluster's network subnets for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be obtained from the Prism Central console or using the prism_central API.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.NutanixResourceIdentifier{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "vcpusPerSocket": { - SchemaProps: spec.SchemaProps{ - Description: "vcpusPerSocket is the number of vCPUs per socket of the VM", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "vcpuSockets": { - SchemaProps: spec.SchemaProps{ - Description: "vcpuSockets is the number of vCPU sockets of the VM", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "memorySize": { - SchemaProps: spec.SchemaProps{ - Description: "memorySize is the memory size (in Quantity format) of the VM The minimum memorySize is 2Gi bytes", - Ref: ref(resource.Quantity{}.OpenAPIModelName()), - }, - }, - "systemDiskSize": { - SchemaProps: spec.SchemaProps{ - Description: "systemDiskSize is size (in Quantity format) of the system disk of the VM The minimum systemDiskSize is 20Gi bytes", - Ref: ref(resource.Quantity{}.OpenAPIModelName()), - }, - }, - "bootType": { - SchemaProps: spec.SchemaProps{ - Description: "bootType indicates the boot type (Legacy, UEFI or SecureBoot) the Machine's VM uses to boot. If this field is empty or omitted, the VM will use the default boot type \"Legacy\" to boot. \"SecureBoot\" depends on \"UEFI\" boot, i.e., enabling \"SecureBoot\" means that \"UEFI\" boot is also enabled.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "project": { - SchemaProps: spec.SchemaProps{ - Description: "project optionally identifies a Prism project for the Machine's VM to associate with.", - Default: map[string]interface{}{}, - Ref: ref(machinev1.NutanixResourceIdentifier{}.OpenAPIModelName()), - }, - }, - "categories": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "key", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "categories optionally adds one or more prism categories (each with key and value) for the Machine's VM to associate with. All the category key and value pairs specified must already exist in the prism central.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.NutanixCategory{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "gpus": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "gpus is a list of GPU devices to attach to the machine's VM. The GPU devices should already exist in Prism Central and associated with one of the Prism Element's hosts and available for the VM to attach (in \"UNUSED\" status).", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.NutanixGPU{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "dataDisks": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "dataDisks holds information of the data disks to attach to the Machine's VM", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.NutanixVMDisk{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "userDataSecret": { - SchemaProps: spec.SchemaProps{ - Description: "userDataSecret is a local reference to a secret that contains the UserData to apply to the VM", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "credentialsSecret": { - SchemaProps: spec.SchemaProps{ - Description: "credentialsSecret is a local reference to a secret that contains the credentials data to access Nutanix PC client", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "failureDomain": { - SchemaProps: spec.SchemaProps{ - Description: "failureDomain refers to the name of the FailureDomain with which this Machine is associated. If this is configured, the Nutanix machine controller will use the prism_central endpoint and credentials defined in the referenced FailureDomain to communicate to the prism_central. It will also verify that the 'cluster' and subnets' configuration in the NutanixMachineProviderConfig is consistent with that in the referenced failureDomain.", - Ref: ref(machinev1.NutanixFailureDomainReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"cluster", "image", "subnets", "vcpusPerSocket", "vcpuSockets", "memorySize", "systemDiskSize", "credentialsSecret"}, - }, - }, - Dependencies: []string{ - machinev1.NutanixCategory{}.OpenAPIModelName(), machinev1.NutanixFailureDomainReference{}.OpenAPIModelName(), machinev1.NutanixGPU{}.OpenAPIModelName(), machinev1.NutanixResourceIdentifier{}.OpenAPIModelName(), machinev1.NutanixVMDisk{}.OpenAPIModelName(), corev1.LocalObjectReference{}.OpenAPIModelName(), resource.Quantity{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_NutanixMachineProviderStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NutanixMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains nutanix-specific status information. Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a set of conditions associated with the Machine to indicate errors or other status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "vmUUID": { - SchemaProps: spec.SchemaProps{ - Description: "vmUUID is the Machine associated VM's UUID The field is missing before the VM is created. Once the VM is created, the field is filled with the VM's UUID and it will not change. The vmUUID is used to find the VM when updating the Machine status, and to delete the VM when the Machine is deleted.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_NutanixResourceIdentifier(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NutanixResourceIdentifier holds the identity of a Nutanix PC resource (cluster, image, subnet, etc.)", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the identifier type to use for this resource.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "uuid": { - SchemaProps: spec.SchemaProps{ - Description: "uuid is the UUID of the resource in the PC.", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the resource name in the PC", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "name": "Name", - "uuid": "UUID", - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1_NutanixStorageResourceIdentifier(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NutanixStorageResourceIdentifier holds the identity of a Nutanix storage resource (storage_container, etc.)", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the identifier type to use for this resource. The valid value is \"uuid\".", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "uuid": { - SchemaProps: spec.SchemaProps{ - Description: "uuid is the UUID of the storage resource in the PC.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "uuid": "UUID", - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1_NutanixVMDisk(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NutanixDataDisk specifies the VM data disk configuration parameters.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "diskSize": { - SchemaProps: spec.SchemaProps{ - Description: "diskSize is size (in Quantity format) of the disk attached to the VM. See https://pkg.go.dev/k8s.io/apimachinery/pkg/api/resource#Format for the Quantity format and example documentation. The minimum diskSize is 1GB.", - Ref: ref(resource.Quantity{}.OpenAPIModelName()), - }, - }, - "deviceProperties": { - SchemaProps: spec.SchemaProps{ - Description: "deviceProperties are the properties of the disk device.", - Ref: ref(machinev1.NutanixVMDiskDeviceProperties{}.OpenAPIModelName()), - }, - }, - "storageConfig": { - SchemaProps: spec.SchemaProps{ - Description: "storageConfig are the storage configuration parameters of the VM disks.", - Ref: ref(machinev1.NutanixVMStorageConfig{}.OpenAPIModelName()), - }, - }, - "dataSource": { - SchemaProps: spec.SchemaProps{ - Description: "dataSource refers to a data source image for the VM disk.", - Ref: ref(machinev1.NutanixResourceIdentifier{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"diskSize"}, - }, - }, - Dependencies: []string{ - machinev1.NutanixResourceIdentifier{}.OpenAPIModelName(), machinev1.NutanixVMDiskDeviceProperties{}.OpenAPIModelName(), machinev1.NutanixVMStorageConfig{}.OpenAPIModelName(), resource.Quantity{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_NutanixVMDiskDeviceProperties(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NutanixVMDiskDeviceProperties specifies the disk device properties.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "deviceType": { - SchemaProps: spec.SchemaProps{ - Description: "deviceType specifies the disk device type. The valid values are \"Disk\" and \"CDRom\", and the default is \"Disk\".", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "adapterType": { - SchemaProps: spec.SchemaProps{ - Description: "adapterType is the adapter type of the disk address. If the deviceType is \"Disk\", the valid adapterType can be \"SCSI\", \"IDE\", \"PCI\", \"SATA\" or \"SPAPR\". If the deviceType is \"CDRom\", the valid adapterType can be \"IDE\" or \"SATA\".", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "deviceIndex": { - SchemaProps: spec.SchemaProps{ - Description: "deviceIndex is the index of the disk address. The valid values are non-negative integers, with the default value 0. For a Machine VM, the deviceIndex for the disks with the same deviceType.adapterType combination should start from 0 and increase consecutively afterwards. Note that for each Machine VM, the Disk.SCSI.0 and CDRom.IDE.0 are reserved to be used by the VM's system. So for dataDisks of Disk.SCSI and CDRom.IDE, the deviceIndex should start from 1.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"deviceType", "adapterType", "deviceIndex"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1_NutanixVMStorageConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NutanixVMStorageConfig specifies the storage configuration parameters for VM disks.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "diskMode": { - SchemaProps: spec.SchemaProps{ - Description: "diskMode specifies the disk mode. The valid values are Standard and Flash, and the default is Standard.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "storageContainer": { - SchemaProps: spec.SchemaProps{ - Description: "storageContainer refers to the storage_container used by the VM disk.", - Ref: ref(machinev1.NutanixStorageResourceIdentifier{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"diskMode"}, - }, - }, - Dependencies: []string{ - machinev1.NutanixStorageResourceIdentifier{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_OpenShiftMachineV1Beta1MachineTemplate(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OpenShiftMachineV1Beta1MachineTemplate is a template for the ControlPlaneMachineSet to create Machines from the v1beta1.machine.openshift.io API group.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "failureDomains": { - SchemaProps: spec.SchemaProps{ - Description: "failureDomains is the list of failure domains (sometimes called availability zones) in which the ControlPlaneMachineSet should balance the Control Plane Machines. This will be merged into the ProviderSpec given in the template. This field is optional on platforms that do not require placement information.", - Ref: ref(machinev1.FailureDomains{}.OpenAPIModelName()), - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "ObjectMeta is the standard object metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata Labels are required to match the ControlPlaneMachineSet selector.", - Default: map[string]interface{}{}, - Ref: ref(machinev1.ControlPlaneMachineSetTemplateObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec contains the desired configuration of the Control Plane Machines. The ProviderSpec within contains platform specific details for creating the Control Plane Machines. The ProviderSe should be complete apart from the platform specific failure domain field. This will be overridden when the Machines are created based on the FailureDomains field.", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.MachineSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - machinev1.ControlPlaneMachineSetTemplateObjectMeta{}.OpenAPIModelName(), machinev1.FailureDomains{}.OpenAPIModelName(), machinev1beta1.MachineSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_OpenStackFailureDomain(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OpenStackFailureDomain configures failure domain information for the OpenStack platform.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "availabilityZone": { - SchemaProps: spec.SchemaProps{ - Description: "availabilityZone is the nova availability zone in which the OpenStack machine provider will create the VM. If not specified, the VM will be created in the default availability zone specified in the nova configuration. Availability zone names must NOT contain : since it is used by admin users to specify hosts where instances are launched in server creation. Also, it must not contain spaces otherwise it will lead to node that belongs to this availability zone register failure, see kubernetes/cloud-provider-openstack#1379 for further information. The maximum length of availability zone name is 63 as per labels limits.", - Type: []string{"string"}, - Format: "", - }, - }, - "rootVolume": { - SchemaProps: spec.SchemaProps{ - Description: "rootVolume contains settings that will be used by the OpenStack machine provider to create the root volume attached to the VM. If not specified, no root volume will be created.", - Ref: ref(machinev1.RootVolume{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1.RootVolume{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_PowerVSMachineProviderConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PowerVSMachineProviderConfig is the type that will be embedded in a Machine.Spec.ProviderSpec field for a PowerVS virtual machine. It is used by the PowerVS machine actuator to create a single Machine.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "userDataSecret": { - SchemaProps: spec.SchemaProps{ - Description: "userDataSecret contains a local reference to a secret that contains the UserData to apply to the instance.", - Ref: ref(machinev1.PowerVSSecretReference{}.OpenAPIModelName()), - }, - }, - "credentialsSecret": { - SchemaProps: spec.SchemaProps{ - Description: "credentialsSecret is a reference to the secret with IBM Cloud credentials.", - Ref: ref(machinev1.PowerVSSecretReference{}.OpenAPIModelName()), - }, - }, - "serviceInstance": { - SchemaProps: spec.SchemaProps{ - Description: "serviceInstance is the reference to the Power VS service on which the server instance(VM) will be created. Power VS service is a container for all Power VS instances at a specific geographic region. serviceInstance can be created via IBM Cloud catalog or CLI. supported serviceInstance identifier in PowerVSResource are Name and ID and that can be obtained from IBM Cloud UI or IBM Cloud cli. More detail about Power VS service instance. https://cloud.ibm.com/docs/power-iaas?topic=power-iaas-creating-power-virtual-server", - Default: map[string]interface{}{}, - Ref: ref(machinev1.PowerVSResource{}.OpenAPIModelName()), - }, - }, - "image": { - SchemaProps: spec.SchemaProps{ - Description: "image is to identify the rhcos image uploaded to IBM COS bucket which is used to create the instance. supported image identifier in PowerVSResource are Name and ID and that can be obtained from IBM Cloud UI or IBM Cloud cli.", - Default: map[string]interface{}{}, - Ref: ref(machinev1.PowerVSResource{}.OpenAPIModelName()), - }, - }, - "network": { - SchemaProps: spec.SchemaProps{ - Description: "network is the reference to the Network to use for this instance. supported network identifier in PowerVSResource are Name, ID and RegEx and that can be obtained from IBM Cloud UI or IBM Cloud cli.", - Default: map[string]interface{}{}, - Ref: ref(machinev1.PowerVSResource{}.OpenAPIModelName()), - }, - }, - "keyPairName": { - SchemaProps: spec.SchemaProps{ - Description: "keyPairName is the name of the KeyPair to use for SSH. The key pair will be exposed to the instance via the instance metadata service. On boot, the OS will copy the public keypair into the authorized keys for the core user.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "systemType": { - SchemaProps: spec.SchemaProps{ - Description: "systemType is the System type used to host the instance. systemType determines the number of cores and memory that is available. Few of the supported SystemTypes are s922,e880,e980. e880 systemType available only in Dallas Datacenters. e980 systemType available in Datacenters except Dallas and Washington. When omitted, this means that the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is s922 which is generally available.", - Type: []string{"string"}, - Format: "", - }, - }, - "processorType": { - SchemaProps: spec.SchemaProps{ - Description: "processorType is the VM instance processor type. It must be set to one of the following values: Dedicated, Capped or Shared. Dedicated: resources are allocated for a specific client, The hypervisor makes a 1:1 binding of a partition’s processor to a physical processor core. Shared: Shared among other clients. Capped: Shared, but resources do not expand beyond those that are requested, the amount of CPU time is Capped to the value specified for the entitlement. if the processorType is selected as Dedicated, then processors value cannot be fractional. When omitted, this means that the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is Shared.", - Type: []string{"string"}, - Format: "", - }, - }, - "processors": { - SchemaProps: spec.SchemaProps{ - Description: "processors is the number of virtual processors in a virtual machine. when the processorType is selected as Dedicated the processors value cannot be fractional. maximum value for the Processors depends on the selected SystemType. when SystemType is set to e880 or e980 maximum Processors value is 143. when SystemType is set to s922 maximum Processors value is 15. minimum value for Processors depends on the selected ProcessorType. when ProcessorType is set as Shared or Capped, The minimum processors is 0.5. when ProcessorType is set as Dedicated, The minimum processors is 1. When omitted, this means that the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default is set based on the selected ProcessorType. when ProcessorType selected as Dedicated, the default is set to 1. when ProcessorType selected as Shared or Capped, the default is set to 0.5.", - Ref: ref(intstr.IntOrString{}.OpenAPIModelName()), - }, - }, - "memoryGiB": { - SchemaProps: spec.SchemaProps{ - Description: "memoryGiB is the size of a virtual machine's memory, in GiB. maximum value for the MemoryGiB depends on the selected SystemType. when SystemType is set to e880 maximum MemoryGiB value is 7463 GiB. when SystemType is set to e980 maximum MemoryGiB value is 15307 GiB. when SystemType is set to s922 maximum MemoryGiB value is 942 GiB. The minimum memory is 32 GiB. When omitted, this means the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 32.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "loadBalancers": { - SchemaProps: spec.SchemaProps{ - Description: "loadBalancers is the set of load balancers to which the new control plane instance should be added once it is created.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1.LoadBalancerReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"serviceInstance", "image", "network", "keyPairName"}, - }, - }, - Dependencies: []string{ - machinev1.LoadBalancerReference{}.OpenAPIModelName(), machinev1.PowerVSResource{}.OpenAPIModelName(), machinev1.PowerVSSecretReference{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName(), intstr.IntOrString{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_PowerVSMachineProviderStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PowerVSMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains PowerVS-specific status information.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a set of conditions associated with the Machine to indicate errors or other status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "instanceId": { - SchemaProps: spec.SchemaProps{ - Description: "instanceId is the instance ID of the machine created in PowerVS instanceId uniquely identifies a Power VS server instance(VM) under a Power VS service. This will help in updating or deleting a VM in Power VS Cloud", - Type: []string{"string"}, - Format: "", - }, - }, - "serviceInstanceID": { - SchemaProps: spec.SchemaProps{ - Description: "serviceInstanceID is the reference to the Power VS ServiceInstance on which the machine instance will be created. serviceInstanceID uniquely identifies the Power VS service By setting serviceInstanceID it will become easy and efficient to fetch a server instance(VM) within Power VS Cloud.", - Type: []string{"string"}, - Format: "", - }, - }, - "instanceState": { - SchemaProps: spec.SchemaProps{ - Description: "instanceState is the state of the PowerVS instance for this machine Possible instance states are Active, Build, ShutOff, Reboot This is used to display additional information to user regarding instance current state", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1_PowerVSResource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PowerVSResource is a reference to a specific PowerVS resource by ID, Name or RegEx Only one of ID, Name or RegEx may be specified. Specifying more than one will result in a validation error.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type identifies the resource type for this entry. Valid values are ID, Name and RegEx", - Type: []string{"string"}, - Format: "", - }, - }, - "id": { - SchemaProps: spec.SchemaProps{ - Description: "id of resource", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of resource", - Type: []string{"string"}, - Format: "", - }, - }, - "regex": { - SchemaProps: spec.SchemaProps{ - Description: "regex to find resource Regex contains the pattern to match to find a resource", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "fields-to-discriminateBy": map[string]interface{}{ - "id": "ID", - "name": "Name", - "regex": "RegEx", - "type": "Type", - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1_PowerVSSecretReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PowerVSSecretReference contains enough information to locate the referenced secret inside the same namespace.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of the secret.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-map-type": "atomic", - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1_RootVolume(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RootVolume represents the volume metadata to boot from. The original RootVolume struct is defined in the v1alpha1 but it's not best practice to use it directly here so we define a new one that should stay in sync with the original one.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "availabilityZone": { - SchemaProps: spec.SchemaProps{ - Description: "availabilityZone specifies the Cinder availability zone where the root volume will be created. If not specifified, the root volume will be created in the availability zone specified by the volume type in the cinder configuration. If the volume type (configured in the OpenStack cluster) does not specify an availability zone, the root volume will be created in the default availability zone specified in the cinder configuration. See https://docs.openstack.org/cinder/latest/admin/availability-zone-type.html for more details. If the OpenStack cluster is deployed with the cross_az_attach configuration option set to false, the root volume will have to be in the same availability zone as the VM (defined by OpenStackFailureDomain.AvailabilityZone). Availability zone names must NOT contain spaces otherwise it will lead to volume that belongs to this availability zone register failure, see kubernetes/cloud-provider-openstack#1379 for further information. The maximum length of availability zone name is 63 as per labels limits.", - Type: []string{"string"}, - Format: "", - }, - }, - "volumeType": { - SchemaProps: spec.SchemaProps{ - Description: "volumeType specifies the type of the root volume that will be provisioned. The maximum length of a volume type name is 255 characters, as per the OpenStack limit.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"volumeType"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1_SystemDiskProperties(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SystemDiskProperties contains the information regarding the system disk including performance, size, name, and category", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "category": { - SchemaProps: spec.SchemaProps{ - Description: "category is the category of the system disk. Valid values: cloud_essd: ESSD. When the parameter is set to this value, you can use the SystemDisk.PerformanceLevel parameter to specify the performance level of the disk. cloud_efficiency: ultra disk. cloud_ssd: standard SSD. cloud: basic disk. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently for non-I/O optimized instances of retired instance types, the default is `cloud`. Currently for other instances, the default is `cloud_efficiency`.", - Type: []string{"string"}, - Format: "", - }, - }, - "performanceLevel": { - SchemaProps: spec.SchemaProps{ - Description: "performanceLevel is the performance level of the ESSD used as the system disk. Valid values:\n\nPL0: A single ESSD can deliver up to 10,000 random read/write IOPS. PL1: A single ESSD can deliver up to 50,000 random read/write IOPS. PL2: A single ESSD can deliver up to 100,000 random read/write IOPS. PL3: A single ESSD can deliver up to 1,000,000 random read/write IOPS. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is `PL1`. For more information about ESSD performance levels, see ESSDs.", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the system disk. If the name is specified the name must be 2 to 128 characters in length. It must start with a letter and cannot start with http:// or https://. It can contain letters, digits, colons (:), underscores (_), and hyphens (-). Empty value means the platform chooses a default, which is subject to change over time. Currently the default is `\"\"`.", - Type: []string{"string"}, - Format: "", - }, - }, - "size": { - SchemaProps: spec.SchemaProps{ - Description: "size is the size of the system disk. Unit: GiB. Valid values: 20 to 500. The value must be at least 20 and greater than or equal to the size of the image. Empty value means the platform chooses a default, which is subject to change over time. Currently the default is `40` or the size of the image depending on whichever is greater.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1_Tag(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Tag The tags of ECS Instance", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "Key": { - SchemaProps: spec.SchemaProps{ - Description: "Key is the name of the key pair", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "Value": { - SchemaProps: spec.SchemaProps{ - Description: "Value is the value or data of the key pair", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"Key", "Value"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1_VSphereFailureDomain(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VSphereFailureDomain configures failure domain information for the vSphere platform", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of the failure domain in which the vSphere machine provider will create the VM. Failure domains are defined in a cluster's config.openshift.io/Infrastructure resource. When balancing machines across failure domains, the control plane machine set will inject configuration from the Infrastructure resource into the machine providerSpec to allocate the machine to a failure domain.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1alpha1_AdditionalBlockDevice(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "additionalBlockDevice is a block device to attach to the server.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of the block device in the context of a machine. If the block device is a volume, the Cinder volume will be named as a combination of the machine name and this name. Also, this name will be used for tagging the block device. Information about the block device tag can be obtained from the OpenStack metadata API or the config drive.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "sizeGiB": { - SchemaProps: spec.SchemaProps{ - Description: "sizeGiB is the size of the block device in gibibytes (GiB).", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "storage": { - SchemaProps: spec.SchemaProps{ - Description: "storage specifies the storage type of the block device and additional storage options.", - Default: map[string]interface{}{}, - Ref: ref(machinev1alpha1.BlockDeviceStorage{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"name", "sizeGiB", "storage"}, - }, - }, - Dependencies: []string{ - machinev1alpha1.BlockDeviceStorage{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1alpha1_AddressPair(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "ipAddress": { - SchemaProps: spec.SchemaProps{ - Type: []string{"string"}, - Format: "", - }, - }, - "macAddress": { - SchemaProps: spec.SchemaProps{ - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1alpha1_BlockDeviceStorage(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "blockDeviceStorage is the storage type of a block device to create and contains additional storage options.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the type of block device to create. This can be either \"Volume\" or \"Local\".", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "volume": { - SchemaProps: spec.SchemaProps{ - Description: "volume contains additional storage options for a volume block device.", - Ref: ref(machinev1alpha1.BlockDeviceVolume{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "volume": "Volume", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1alpha1.BlockDeviceVolume{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1alpha1_BlockDeviceVolume(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "blockDeviceVolume contains additional storage options for a volume block device.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the Cinder volume type of the volume. If omitted, the default Cinder volume type that is configured in the OpenStack cloud will be used.", - Type: []string{"string"}, - Format: "", - }, - }, - "availabilityZone": { - SchemaProps: spec.SchemaProps{ - Description: "availabilityZone is the volume availability zone to create the volume in. If omitted, the availability zone of the server will be used. The availability zone must NOT contain spaces otherwise it will lead to volume that belongs to this availability zone register failure, see kubernetes/cloud-provider-openstack#1379 for further information.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1alpha1_Filter(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "id": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: use NetworkParam.uuid instead. Ignored if NetworkParam.uuid is set.", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name filters networks by name.", - Type: []string{"string"}, - Format: "", - }, - }, - "description": { - SchemaProps: spec.SchemaProps{ - Description: "description filters networks by description.", - Type: []string{"string"}, - Format: "", - }, - }, - "tenantId": { - SchemaProps: spec.SchemaProps{ - Description: "tenantId filters networks by tenant ID. Deprecated: use projectId instead. tenantId will be ignored if projectId is set.", - Type: []string{"string"}, - Format: "", - }, - }, - "projectId": { - SchemaProps: spec.SchemaProps{ - Description: "projectId filters networks by project ID.", - Type: []string{"string"}, - Format: "", - }, - }, - "tags": { - SchemaProps: spec.SchemaProps{ - Description: "tags filters by networks containing all specified tags. Multiple tags are comma separated.", - Type: []string{"string"}, - Format: "", - }, - }, - "tagsAny": { - SchemaProps: spec.SchemaProps{ - Description: "tagsAny filters by networks containing any specified tags. Multiple tags are comma separated.", - Type: []string{"string"}, - Format: "", - }, - }, - "notTags": { - SchemaProps: spec.SchemaProps{ - Description: "notTags filters by networks which don't match all specified tags. NOT (t1 AND t2...) Multiple tags are comma separated.", - Type: []string{"string"}, - Format: "", - }, - }, - "notTagsAny": { - SchemaProps: spec.SchemaProps{ - Description: "notTagsAny filters by networks which don't match any specified tags. NOT (t1 OR t2...) Multiple tags are comma separated.", - Type: []string{"string"}, - Format: "", - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: status is silently ignored. It has no replacement.", - Type: []string{"string"}, - Format: "", - }, - }, - "adminStateUp": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: adminStateUp is silently ignored. It has no replacement.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "shared": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: shared is silently ignored. It has no replacement.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "marker": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: marker is silently ignored. It has no replacement.", - Type: []string{"string"}, - Format: "", - }, - }, - "limit": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: limit is silently ignored. It has no replacement.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "sortKey": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: sortKey is silently ignored. It has no replacement.", - Type: []string{"string"}, - Format: "", - }, - }, - "sortDir": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: sortDir is silently ignored. It has no replacement.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1alpha1_FixedIPs(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "subnetID": { - SchemaProps: spec.SchemaProps{ - Description: "subnetID specifies the ID of the subnet where the fixed IP will be allocated.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ipAddress": { - SchemaProps: spec.SchemaProps{ - Description: "ipAddress is a specific IP address to use in the given subnet. Port creation will fail if the address is not available. If not specified, an available IP from the given subnet will be selected automatically.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"subnetID"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1alpha1_NetworkParam(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "uuid": { - SchemaProps: spec.SchemaProps{ - Description: "The UUID of the network. Required if you omit the port attribute.", - Type: []string{"string"}, - Format: "", - }, - }, - "fixedIp": { - SchemaProps: spec.SchemaProps{ - Description: "A fixed IPv4 address for the NIC. Deprecated: fixedIP is silently ignored. Use subnets instead.", - Type: []string{"string"}, - Format: "", - }, - }, - "filter": { - SchemaProps: spec.SchemaProps{ - Description: "Filters for optional network query", - Default: map[string]interface{}{}, - Ref: ref(machinev1alpha1.Filter{}.OpenAPIModelName()), - }, - }, - "subnets": { - SchemaProps: spec.SchemaProps{ - Description: "Subnet within a network to use", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1alpha1.SubnetParam{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "noAllowedAddressPairs": { - SchemaProps: spec.SchemaProps{ - Description: "noAllowedAddressPairs disables creation of allowed address pairs for the network ports", - Type: []string{"boolean"}, - Format: "", - }, - }, - "portTags": { - SchemaProps: spec.SchemaProps{ - Description: "portTags allows users to specify a list of tags to add to ports created in a given network", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "vnicType": { - SchemaProps: spec.SchemaProps{ - Description: "The virtual network interface card (vNIC) type that is bound to the neutron port.", - Type: []string{"string"}, - Format: "", - }, - }, - "profile": { - SchemaProps: spec.SchemaProps{ - Description: "A dictionary that enables the application running on the specified host to pass and receive virtual network interface (VIF) port-specific information to the plug-in.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "portSecurity": { - SchemaProps: spec.SchemaProps{ - Description: "portSecurity optionally enables or disables security on ports managed by OpenStack", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1alpha1.Filter{}.OpenAPIModelName(), machinev1alpha1.SubnetParam{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1alpha1_OpenstackProviderSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OpenstackProviderSpec is the type that will be embedded in a Machine.Spec.ProviderSpec field for an OpenStack Instance. It is used by the Openstack machine actuator to create a single machine instance. Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "cloudsSecret": { - SchemaProps: spec.SchemaProps{ - Description: "The name of the secret containing the openstack credentials", - Ref: ref(corev1.SecretReference{}.OpenAPIModelName()), - }, - }, - "cloudName": { - SchemaProps: spec.SchemaProps{ - Description: "The name of the cloud to use from the clouds secret", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "flavor": { - SchemaProps: spec.SchemaProps{ - Description: "The flavor reference for the flavor for your server instance.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "image": { - SchemaProps: spec.SchemaProps{ - Description: "The name of the image to use for your server instance. If the RootVolume is specified, this will be ignored and use rootVolume directly.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyName": { - SchemaProps: spec.SchemaProps{ - Description: "The ssh key to inject in the instance", - Type: []string{"string"}, - Format: "", - }, - }, - "sshUserName": { - SchemaProps: spec.SchemaProps{ - Description: "The machine ssh username Deprecated: sshUserName is silently ignored.", - Type: []string{"string"}, - Format: "", - }, - }, - "networks": { - SchemaProps: spec.SchemaProps{ - Description: "A networks object. Required parameter when there are multiple networks defined for the tenant. When you do not specify the networks parameter, the server attaches to the only network created for the current tenant.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1alpha1.NetworkParam{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "ports": { - SchemaProps: spec.SchemaProps{ - Description: "Create and assign additional ports to instances", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1alpha1.PortOpts{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "floatingIP": { - SchemaProps: spec.SchemaProps{ - Description: "floatingIP specifies a floating IP to be associated with the machine. Note that it is not safe to use this parameter in a MachineSet, as only one Machine may be assigned the same floating IP.\n\nDeprecated: floatingIP will be removed in a future release as it cannot be implemented correctly.", - Type: []string{"string"}, - Format: "", - }, - }, - "availabilityZone": { - SchemaProps: spec.SchemaProps{ - Description: "The availability zone from which to launch the server.", - Type: []string{"string"}, - Format: "", - }, - }, - "securityGroups": { - SchemaProps: spec.SchemaProps{ - Description: "The names of the security groups to assign to the instance", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1alpha1.SecurityGroupParam{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "userDataSecret": { - SchemaProps: spec.SchemaProps{ - Description: "The name of the secret containing the user data (startup script in most cases)", - Ref: ref(corev1.SecretReference{}.OpenAPIModelName()), - }, - }, - "trunk": { - SchemaProps: spec.SchemaProps{ - Description: "Whether the server instance is created on a trunk port or not.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "tags": { - SchemaProps: spec.SchemaProps{ - Description: "Machine tags Requires Nova api 2.52 minimum!", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "serverMetadata": { - SchemaProps: spec.SchemaProps{ - Description: "Metadata mapping. Allows you to create a map of key value pairs to add to the server instance.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "configDrive": { - SchemaProps: spec.SchemaProps{ - Description: "Config Drive support", - Type: []string{"boolean"}, - Format: "", - }, - }, - "rootVolume": { - SchemaProps: spec.SchemaProps{ - Description: "The volume metadata to boot from", - Ref: ref(machinev1alpha1.RootVolume{}.OpenAPIModelName()), - }, - }, - "additionalBlockDevices": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "additionalBlockDevices is a list of specifications for additional block devices to attach to the server instance", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1alpha1.AdditionalBlockDevice{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "serverGroupID": { - SchemaProps: spec.SchemaProps{ - Description: "The server group to assign the machine to.", - Type: []string{"string"}, - Format: "", - }, - }, - "serverGroupName": { - SchemaProps: spec.SchemaProps{ - Description: "The server group to assign the machine to. A server group with that name will be created if it does not exist. If both ServerGroupID and ServerGroupName are non-empty, they must refer to the same OpenStack resource.", - Type: []string{"string"}, - Format: "", - }, - }, - "primarySubnet": { - SchemaProps: spec.SchemaProps{ - Description: "The subnet that a set of machines will get ingress/egress traffic from Deprecated: primarySubnet is silently ignored. Use subnets instead.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"cloudsSecret", "cloudName", "flavor", "image"}, - }, - }, - Dependencies: []string{ - machinev1alpha1.AdditionalBlockDevice{}.OpenAPIModelName(), machinev1alpha1.NetworkParam{}.OpenAPIModelName(), machinev1alpha1.PortOpts{}.OpenAPIModelName(), machinev1alpha1.RootVolume{}.OpenAPIModelName(), machinev1alpha1.SecurityGroupParam{}.OpenAPIModelName(), corev1.SecretReference{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1alpha1_PortOpts(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "networkID": { - SchemaProps: spec.SchemaProps{ - Description: "networkID is the ID of the network the port will be created in. It is required.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "nameSuffix": { - SchemaProps: spec.SchemaProps{ - Description: "If nameSuffix is specified the created port will be named -. If not specified the port will be named -.", - Type: []string{"string"}, - Format: "", - }, - }, - "description": { - SchemaProps: spec.SchemaProps{ - Description: "description specifies the description of the created port.", - Type: []string{"string"}, - Format: "", - }, - }, - "adminStateUp": { - SchemaProps: spec.SchemaProps{ - Description: "adminStateUp sets the administrative state of the created port to up (true), or down (false).", - Type: []string{"boolean"}, - Format: "", - }, - }, - "macAddress": { - SchemaProps: spec.SchemaProps{ - Description: "macAddress specifies the MAC address of the created port.", - Type: []string{"string"}, - Format: "", - }, - }, - "fixedIPs": { - SchemaProps: spec.SchemaProps{ - Description: "fixedIPs specifies a set of fixed IPs to assign to the port. They must all be valid for the port's network.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1alpha1.FixedIPs{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "tenantID": { - SchemaProps: spec.SchemaProps{ - Description: "tenantID specifies the tenant ID of the created port. Note that this requires OpenShift to have administrative permissions, which is typically not the case. Use of this field is not recommended. Deprecated: tenantID is silently ignored.", - Type: []string{"string"}, - Format: "", - }, - }, - "projectID": { - SchemaProps: spec.SchemaProps{ - Description: "projectID specifies the project ID of the created port. Note that this requires OpenShift to have administrative permissions, which is typically not the case. Use of this field is not recommended. Deprecated: projectID is silently ignored.", - Type: []string{"string"}, - Format: "", - }, - }, - "securityGroups": { - SchemaProps: spec.SchemaProps{ - Description: "securityGroups specifies a set of security group UUIDs to use instead of the machine's default security groups. The default security groups will be used if this is left empty or not specified.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "allowedAddressPairs": { - SchemaProps: spec.SchemaProps{ - Description: "allowedAddressPairs specifies a set of allowed address pairs to add to the port.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1alpha1.AddressPair{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "tags": { - SchemaProps: spec.SchemaProps{ - Description: "tags species a set of tags to add to the port.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "vnicType": { - SchemaProps: spec.SchemaProps{ - Description: "The virtual network interface card (vNIC) type that is bound to the neutron port.", - Type: []string{"string"}, - Format: "", - }, - }, - "profile": { - SchemaProps: spec.SchemaProps{ - Description: "A dictionary that enables the application running on the specified host to pass and receive virtual network interface (VIF) port-specific information to the plug-in.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "portSecurity": { - SchemaProps: spec.SchemaProps{ - Description: "enable or disable security on a given port incompatible with securityGroups and allowedAddressPairs", - Type: []string{"boolean"}, - Format: "", - }, - }, - "trunk": { - SchemaProps: spec.SchemaProps{ - Description: "Enables and disables trunk at port level. If not provided, openStackMachine.Spec.Trunk is inherited.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "hostID": { - SchemaProps: spec.SchemaProps{ - Description: "The ID of the host where the port is allocated. Do not use this field: it cannot be used correctly. Deprecated: hostID is silently ignored. It will be removed with no replacement.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"networkID"}, - }, - }, - Dependencies: []string{ - machinev1alpha1.AddressPair{}.OpenAPIModelName(), machinev1alpha1.FixedIPs{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1alpha1_RootVolume(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "sourceUUID": { - SchemaProps: spec.SchemaProps{ - Description: "sourceUUID specifies the UUID of a glance image used to populate the root volume. Deprecated: set image in the platform spec instead. This will be ignored if image is set in the platform spec.", - Type: []string{"string"}, - Format: "", - }, - }, - "volumeType": { - SchemaProps: spec.SchemaProps{ - Description: "volumeType specifies a volume type to use when creating the root volume. If not specified the default volume type will be used.", - Type: []string{"string"}, - Format: "", - }, - }, - "diskSize": { - SchemaProps: spec.SchemaProps{ - Description: "diskSize specifies the size, in GiB, of the created root volume.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "availabilityZone": { - SchemaProps: spec.SchemaProps{ - Description: "availabilityZone specifies the Cinder availability where the root volume will be created.", - Type: []string{"string"}, - Format: "", - }, - }, - "sourceType": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: sourceType will be silently ignored. There is no replacement.", - Type: []string{"string"}, - Format: "", - }, - }, - "deviceType": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: deviceType will be silently ignored. There is no replacement.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1alpha1_SecurityGroupFilter(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "id": { - SchemaProps: spec.SchemaProps{ - Description: "id specifies the ID of a security group to use. If set, id will not be validated before use. An invalid id will result in failure to create a server with an appropriate error message.", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name filters security groups by name.", - Type: []string{"string"}, - Format: "", - }, - }, - "description": { - SchemaProps: spec.SchemaProps{ - Description: "description filters security groups by description.", - Type: []string{"string"}, - Format: "", - }, - }, - "tenantId": { - SchemaProps: spec.SchemaProps{ - Description: "tenantId filters security groups by tenant ID. Deprecated: use projectId instead. tenantId will be ignored if projectId is set.", - Type: []string{"string"}, - Format: "", - }, - }, - "projectId": { - SchemaProps: spec.SchemaProps{ - Description: "projectId filters security groups by project ID.", - Type: []string{"string"}, - Format: "", - }, - }, - "tags": { - SchemaProps: spec.SchemaProps{ - Description: "tags filters by security groups containing all specified tags. Multiple tags are comma separated.", - Type: []string{"string"}, - Format: "", - }, - }, - "tagsAny": { - SchemaProps: spec.SchemaProps{ - Description: "tagsAny filters by security groups containing any specified tags. Multiple tags are comma separated.", - Type: []string{"string"}, - Format: "", - }, - }, - "notTags": { - SchemaProps: spec.SchemaProps{ - Description: "notTags filters by security groups which don't match all specified tags. NOT (t1 AND t2...) Multiple tags are comma separated.", - Type: []string{"string"}, - Format: "", - }, - }, - "notTagsAny": { - SchemaProps: spec.SchemaProps{ - Description: "notTagsAny filters by security groups which don't match any specified tags. NOT (t1 OR t2...) Multiple tags are comma separated.", - Type: []string{"string"}, - Format: "", - }, - }, - "limit": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: limit is silently ignored. It has no replacement.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "marker": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: marker is silently ignored. It has no replacement.", - Type: []string{"string"}, - Format: "", - }, - }, - "sortKey": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: sortKey is silently ignored. It has no replacement.", - Type: []string{"string"}, - Format: "", - }, - }, - "sortDir": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: sortDir is silently ignored. It has no replacement.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1alpha1_SecurityGroupParam(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "uuid": { - SchemaProps: spec.SchemaProps{ - Description: "Security Group UUID", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "Security Group name", - Type: []string{"string"}, - Format: "", - }, - }, - "filter": { - SchemaProps: spec.SchemaProps{ - Description: "Filters used to query security groups in openstack", - Default: map[string]interface{}{}, - Ref: ref(machinev1alpha1.SecurityGroupFilter{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1alpha1.SecurityGroupFilter{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1alpha1_SubnetFilter(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "id": { - SchemaProps: spec.SchemaProps{ - Description: "id is the uuid of a specific subnet to use. If specified, id will not be validated. Instead server creation will fail with an appropriate error.", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name filters subnets by name.", - Type: []string{"string"}, - Format: "", - }, - }, - "description": { - SchemaProps: spec.SchemaProps{ - Description: "description filters subnets by description.", - Type: []string{"string"}, - Format: "", - }, - }, - "networkId": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: networkId is silently ignored. Set uuid on the containing network definition instead.", - Type: []string{"string"}, - Format: "", - }, - }, - "tenantId": { - SchemaProps: spec.SchemaProps{ - Description: "tenantId filters subnets by tenant ID. Deprecated: use projectId instead. tenantId will be ignored if projectId is set.", - Type: []string{"string"}, - Format: "", - }, - }, - "projectId": { - SchemaProps: spec.SchemaProps{ - Description: "projectId filters subnets by project ID.", - Type: []string{"string"}, - Format: "", - }, - }, - "ipVersion": { - SchemaProps: spec.SchemaProps{ - Description: "ipVersion filters subnets by IP version.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "gateway_ip": { - SchemaProps: spec.SchemaProps{ - Description: "gateway_ip filters subnets by gateway IP.", - Type: []string{"string"}, - Format: "", - }, - }, - "cidr": { - SchemaProps: spec.SchemaProps{ - Description: "cidr filters subnets by CIDR.", - Type: []string{"string"}, - Format: "", - }, - }, - "ipv6AddressMode": { - SchemaProps: spec.SchemaProps{ - Description: "ipv6AddressMode filters subnets by IPv6 address mode.", - Type: []string{"string"}, - Format: "", - }, - }, - "ipv6RaMode": { - SchemaProps: spec.SchemaProps{ - Description: "ipv6RaMode filters subnets by IPv6 router adversiement mode.", - Type: []string{"string"}, - Format: "", - }, - }, - "subnetpoolId": { - SchemaProps: spec.SchemaProps{ - Description: "subnetpoolId filters subnets by subnet pool ID. Deprecated: subnetpoolId is silently ignored.", - Type: []string{"string"}, - Format: "", - }, - }, - "tags": { - SchemaProps: spec.SchemaProps{ - Description: "tags filters by subnets containing all specified tags. Multiple tags are comma separated.", - Type: []string{"string"}, - Format: "", - }, - }, - "tagsAny": { - SchemaProps: spec.SchemaProps{ - Description: "tagsAny filters by subnets containing any specified tags. Multiple tags are comma separated.", - Type: []string{"string"}, - Format: "", - }, - }, - "notTags": { - SchemaProps: spec.SchemaProps{ - Description: "notTags filters by subnets which don't match all specified tags. NOT (t1 AND t2...) Multiple tags are comma separated.", - Type: []string{"string"}, - Format: "", - }, - }, - "notTagsAny": { - SchemaProps: spec.SchemaProps{ - Description: "notTagsAny filters by subnets which don't match any specified tags. NOT (t1 OR t2...) Multiple tags are comma separated.", - Type: []string{"string"}, - Format: "", - }, - }, - "enableDhcp": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: enableDhcp is silently ignored. It has no replacement.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "limit": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: limit is silently ignored. It has no replacement.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "marker": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: marker is silently ignored. It has no replacement.", - Type: []string{"string"}, - Format: "", - }, - }, - "sortKey": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: sortKey is silently ignored. It has no replacement.", - Type: []string{"string"}, - Format: "", - }, - }, - "sortDir": { - SchemaProps: spec.SchemaProps{ - Description: "Deprecated: sortDir is silently ignored. It has no replacement.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1alpha1_SubnetParam(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "uuid": { - SchemaProps: spec.SchemaProps{ - Description: "The UUID of the network. Required if you omit the port attribute.", - Type: []string{"string"}, - Format: "", - }, - }, - "filter": { - SchemaProps: spec.SchemaProps{ - Description: "Filters for optional network query", - Default: map[string]interface{}{}, - Ref: ref(machinev1alpha1.SubnetFilter{}.OpenAPIModelName()), - }, - }, - "portTags": { - SchemaProps: spec.SchemaProps{ - Description: "portTags are tags that are added to ports created on this subnet", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "portSecurity": { - SchemaProps: spec.SchemaProps{ - Description: "portSecurity optionally enables or disables security on ports managed by OpenStack Deprecated: portSecurity is silently ignored. Set portSecurity on the parent network instead.", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1alpha1.SubnetFilter{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_AWSMachineProviderConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSMachineProviderConfig is the Schema for the awsmachineproviderconfigs API Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "ami": { - SchemaProps: spec.SchemaProps{ - Description: "ami is the reference to the AMI from which to create the machine instance.", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.AWSResourceReference{}.OpenAPIModelName()), - }, - }, - "instanceType": { - SchemaProps: spec.SchemaProps{ - Description: "instanceType is the type of instance to create. Example: m4.xlarge", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "cpuOptions": { - SchemaProps: spec.SchemaProps{ - Description: "cpuOptions defines CPU-related settings for the instance, including the confidential computing policy. When omitted, this means no opinion and the AWS platform is left to choose a reasonable default. More info: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CpuOptionsRequest.html, https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cpu-options-supported-instances-values.html", - Ref: ref(machinev1beta1.CPUOptions{}.OpenAPIModelName()), - }, - }, - "tags": { - SchemaProps: spec.SchemaProps{ - Description: "tags is the set of tags to add to apply to an instance, in addition to the ones added by default by the actuator. These tags are additive. The actuator will ensure these tags are present, but will not remove any other tags that may exist on the instance.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.TagSpecification{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "iamInstanceProfile": { - SchemaProps: spec.SchemaProps{ - Description: "iamInstanceProfile is a reference to an IAM role to assign to the instance", - Ref: ref(machinev1beta1.AWSResourceReference{}.OpenAPIModelName()), - }, - }, - "userDataSecret": { - SchemaProps: spec.SchemaProps{ - Description: "userDataSecret contains a local reference to a secret that contains the UserData to apply to the instance", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "credentialsSecret": { - SchemaProps: spec.SchemaProps{ - Description: "credentialsSecret is a reference to the secret with AWS credentials. Otherwise, defaults to permissions provided by attached IAM role where the actuator is running.", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "keyName": { - SchemaProps: spec.SchemaProps{ - Description: "keyName is the name of the KeyPair to use for SSH", - Type: []string{"string"}, - Format: "", - }, - }, - "deviceIndex": { - SchemaProps: spec.SchemaProps{ - Description: "deviceIndex is the index of the device on the instance for the network interface attachment. Defaults to 0.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - "publicIp": { - SchemaProps: spec.SchemaProps{ - Description: "publicIp specifies whether the instance should get a public IP. If not present, it should use the default of its subnet.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "networkInterfaceType": { - SchemaProps: spec.SchemaProps{ - Description: "networkInterfaceType specifies the type of network interface to be used for the primary network interface. Valid values are \"ENA\", \"EFA\", and omitted, which means no opinion and the platform chooses a good default which may change over time. The current default value is \"ENA\". Please visit https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html to learn more about the AWS Elastic Fabric Adapter interface option.", - Type: []string{"string"}, - Format: "", - }, - }, - "securityGroups": { - SchemaProps: spec.SchemaProps{ - Description: "securityGroups is an array of references to security groups that should be applied to the instance.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.AWSResourceReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "subnet": { - SchemaProps: spec.SchemaProps{ - Description: "subnet is a reference to the subnet to use for this instance", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.AWSResourceReference{}.OpenAPIModelName()), - }, - }, - "placement": { - SchemaProps: spec.SchemaProps{ - Description: "placement specifies where to create the instance in AWS", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.Placement{}.OpenAPIModelName()), - }, - }, - "loadBalancers": { - SchemaProps: spec.SchemaProps{ - Description: "loadBalancers is the set of load balancers to which the new instance should be added once it is created.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.LoadBalancerReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "blockDevices": { - SchemaProps: spec.SchemaProps{ - Description: "blockDevices is the set of block device mapping associated to this instance, block device without a name will be used as a root device and only one device without a name is allowed https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/block-device-mapping-concepts.html", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.BlockDeviceMappingSpec{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "spotMarketOptions": { - SchemaProps: spec.SchemaProps{ - Description: "spotMarketOptions allows users to configure instances to be run using AWS Spot instances.", - Ref: ref(machinev1beta1.SpotMarketOptions{}.OpenAPIModelName()), - }, - }, - "metadataServiceOptions": { - SchemaProps: spec.SchemaProps{ - Description: "metadataServiceOptions allows users to configure instance metadata service interaction options. If nothing specified, default AWS IMDS settings will be applied. https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_InstanceMetadataOptionsRequest.html", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.MetadataServiceOptions{}.OpenAPIModelName()), - }, - }, - "placementGroupName": { - SchemaProps: spec.SchemaProps{ - Description: "placementGroupName specifies the name of the placement group in which to launch the instance. The placement group must already be created and may use any placement strategy. When omitted, no placement group is used when creating the EC2 instance.", - Type: []string{"string"}, - Format: "", - }, - }, - "placementGroupPartition": { - SchemaProps: spec.SchemaProps{ - Description: "placementGroupPartition is the partition number within the placement group in which to launch the instance. This must be an integer value between 1 and 7. It is only valid if the placement group, referred in `PlacementGroupName` was created with strategy set to partition.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "capacityReservationId": { - SchemaProps: spec.SchemaProps{ - Description: "capacityReservationId specifies the target Capacity Reservation into which the instance should be launched. The field size should be greater than 0 and the field input must start with cr-***", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "marketType": { - SchemaProps: spec.SchemaProps{ - Description: "marketType specifies the type of market for the EC2 instance. Valid values are OnDemand, Spot, CapacityBlock and omitted.\n\nDefaults to OnDemand. When SpotMarketOptions is provided, the marketType defaults to \"Spot\".\n\nWhen set to OnDemand the instance runs as a standard OnDemand instance. When set to Spot the instance runs as a Spot instance. When set to CapacityBlock the instance utilizes pre-purchased compute capacity (capacity blocks) with AWS Capacity Reservations. If this value is selected, capacityReservationID must be specified to identify the target reservation.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"ami", "instanceType", "deviceIndex", "subnet", "placement"}, - }, - }, - Dependencies: []string{ - machinev1beta1.AWSResourceReference{}.OpenAPIModelName(), machinev1beta1.BlockDeviceMappingSpec{}.OpenAPIModelName(), machinev1beta1.CPUOptions{}.OpenAPIModelName(), machinev1beta1.LoadBalancerReference{}.OpenAPIModelName(), machinev1beta1.MetadataServiceOptions{}.OpenAPIModelName(), machinev1beta1.Placement{}.OpenAPIModelName(), machinev1beta1.SpotMarketOptions{}.OpenAPIModelName(), machinev1beta1.TagSpecification{}.OpenAPIModelName(), corev1.LocalObjectReference{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_AWSMachineProviderConfigList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSMachineProviderConfigList contains a list of AWSMachineProviderConfig Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.AWSMachineProviderConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - machinev1beta1.AWSMachineProviderConfig{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_AWSMachineProviderStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains AWS-specific status information. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "instanceId": { - SchemaProps: spec.SchemaProps{ - Description: "instanceId is the instance ID of the machine created in AWS", - Type: []string{"string"}, - Format: "", - }, - }, - "instanceState": { - SchemaProps: spec.SchemaProps{ - Description: "instanceState is the state of the AWS instance for this machine", - Type: []string{"string"}, - Format: "", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a set of conditions associated with the Machine to indicate errors or other status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "dedicatedHost": { - SchemaProps: spec.SchemaProps{ - Description: "dedicatedHost tracks the dynamically allocated dedicated host. This field is populated when allocationStrategy is Dynamic (with or without DynamicHostAllocation). When omitted, this indicates that the dedicated host has not yet been allocated, or allocation is in progress.", - Ref: ref(machinev1beta1.DedicatedHostStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.DedicatedHostStatus{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_AWSResourceReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSResourceReference is a reference to a specific AWS resource by ID, ARN, or filters. Only one of ID, ARN or Filters may be specified. Specifying more than one will result in a validation error.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "id": { - SchemaProps: spec.SchemaProps{ - Description: "id of resource", - Type: []string{"string"}, - Format: "", - }, - }, - "arn": { - SchemaProps: spec.SchemaProps{ - Description: "arn of resource", - Type: []string{"string"}, - Format: "", - }, - }, - "filters": { - SchemaProps: spec.SchemaProps{ - Description: "filters is a set of filters used to identify a resource", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.Filter{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.Filter{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_AddressesFromPool(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AddressesFromPool is an IPAddressPool that will be used to create IPAddressClaims for fulfillment by an external controller.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "group": { - SchemaProps: spec.SchemaProps{ - Description: "group of the IP address pool type known to an external IPAM controller. This should be a fully qualified domain name, for example, externalipam.controller.io.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resource": { - SchemaProps: spec.SchemaProps{ - Description: "resource of the IP address pool type known to an external IPAM controller. It is normally the plural form of the resource kind in lowercase, for example, ippools.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of an IP address pool, for example, pool-config-1.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"group", "resource", "name"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_AzureBootDiagnostics(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AzureBootDiagnostics configures the boot diagnostics settings for the virtual machine. This allows you to configure capturing serial output from the virtual machine on boot. This is useful for debugging software based launch issues.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "storageAccountType": { - SchemaProps: spec.SchemaProps{ - Description: "storageAccountType determines if the storage account for storing the diagnostics data should be provisioned by Azure (AzureManaged) or by the customer (CustomerManaged).", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "customerManaged": { - SchemaProps: spec.SchemaProps{ - Description: "customerManaged provides reference to the customer manager storage account.", - Ref: ref(machinev1beta1.AzureCustomerManagedBootDiagnostics{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"storageAccountType"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "storageAccountType", - "fields-to-discriminateBy": map[string]interface{}{ - "customerManaged": "CustomerManaged", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.AzureCustomerManagedBootDiagnostics{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_AzureCustomerManagedBootDiagnostics(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AzureCustomerManagedBootDiagnostics provides reference to a customer managed storage account.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "storageAccountURI": { - SchemaProps: spec.SchemaProps{ - Description: "storageAccountURI is the URI of the customer managed storage account. The URI typically will be `https://.blob.core.windows.net/` but may differ if you are using Azure DNS zone endpoints. You can find the correct endpoint by looking for the Blob Primary Endpoint in the endpoints tab in the Azure console.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"storageAccountURI"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_AzureDiagnostics(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AzureDiagnostics is used to configure the diagnostic settings of the virtual machine.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "boot": { - SchemaProps: spec.SchemaProps{ - Description: "AzureBootDiagnostics configures the boot diagnostics settings for the virtual machine. This allows you to configure capturing serial output from the virtual machine on boot. This is useful for debugging software based launch issues.", - Ref: ref(machinev1beta1.AzureBootDiagnostics{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.AzureBootDiagnostics{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_AzureMachineProviderSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AzureMachineProviderSpec is the type that will be embedded in a Machine.Spec.ProviderSpec field for an Azure virtual machine. It is used by the Azure machine actuator to create a single Machine. Required parameters such as location that are not specified by this configuration, will be defaulted by the actuator. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "userDataSecret": { - SchemaProps: spec.SchemaProps{ - Description: "userDataSecret contains a local reference to a secret that contains the UserData to apply to the instance", - Ref: ref(corev1.SecretReference{}.OpenAPIModelName()), - }, - }, - "credentialsSecret": { - SchemaProps: spec.SchemaProps{ - Description: "credentialsSecret is a reference to the secret with Azure credentials.", - Ref: ref(corev1.SecretReference{}.OpenAPIModelName()), - }, - }, - "location": { - SchemaProps: spec.SchemaProps{ - Description: "location is the region to use to create the instance", - Type: []string{"string"}, - Format: "", - }, - }, - "vmSize": { - SchemaProps: spec.SchemaProps{ - Description: "vmSize is the size of the VM to create.", - Type: []string{"string"}, - Format: "", - }, - }, - "image": { - SchemaProps: spec.SchemaProps{ - Description: "image is the OS image to use to create the instance.", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.Image{}.OpenAPIModelName()), - }, - }, - "osDisk": { - SchemaProps: spec.SchemaProps{ - Description: "osDisk represents the parameters for creating the OS disk.", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.OSDisk{}.OpenAPIModelName()), - }, - }, - "dataDisks": { - SchemaProps: spec.SchemaProps{ - Description: "DataDisk specifies the parameters that are used to add one or more data disks to the machine.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.DataDisk{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "sshPublicKey": { - SchemaProps: spec.SchemaProps{ - Description: "sshPublicKey is the public key to use to SSH to the virtual machine.", - Type: []string{"string"}, - Format: "", - }, - }, - "publicIP": { - SchemaProps: spec.SchemaProps{ - Description: "publicIP if true a public IP will be used", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "tags": { - SchemaProps: spec.SchemaProps{ - Description: "tags is a list of tags to apply to the machine.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "securityGroup": { - SchemaProps: spec.SchemaProps{ - Description: "Network Security Group that needs to be attached to the machine's interface. No security group will be attached if empty.", - Type: []string{"string"}, - Format: "", - }, - }, - "applicationSecurityGroups": { - SchemaProps: spec.SchemaProps{ - Description: "Application Security Groups that need to be attached to the machine's interface. No application security groups will be attached if zero-length.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "subnet": { - SchemaProps: spec.SchemaProps{ - Description: "subnet to use for this instance", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "publicLoadBalancer": { - SchemaProps: spec.SchemaProps{ - Description: "publicLoadBalancer to use for this instance", - Type: []string{"string"}, - Format: "", - }, - }, - "internalLoadBalancer": { - SchemaProps: spec.SchemaProps{ - Description: "InternalLoadBalancerName to use for this instance", - Type: []string{"string"}, - Format: "", - }, - }, - "natRule": { - SchemaProps: spec.SchemaProps{ - Description: "natRule to set inbound NAT rule of the load balancer", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "managedIdentity": { - SchemaProps: spec.SchemaProps{ - Description: "managedIdentity to set managed identity name", - Type: []string{"string"}, - Format: "", - }, - }, - "vnet": { - SchemaProps: spec.SchemaProps{ - Description: "vnet to set virtual network name", - Type: []string{"string"}, - Format: "", - }, - }, - "zone": { - SchemaProps: spec.SchemaProps{ - Description: "Availability Zone for the virtual machine. If nil, the virtual machine should be deployed to no zone", - Type: []string{"string"}, - Format: "", - }, - }, - "networkResourceGroup": { - SchemaProps: spec.SchemaProps{ - Description: "networkResourceGroup is the resource group for the virtual machine's network", - Type: []string{"string"}, - Format: "", - }, - }, - "resourceGroup": { - SchemaProps: spec.SchemaProps{ - Description: "resourceGroup is the resource group for the virtual machine", - Type: []string{"string"}, - Format: "", - }, - }, - "spotVMOptions": { - SchemaProps: spec.SchemaProps{ - Description: "spotVMOptions allows the ability to specify the Machine should use a Spot VM", - Ref: ref(machinev1beta1.SpotVMOptions{}.OpenAPIModelName()), - }, - }, - "securityProfile": { - SchemaProps: spec.SchemaProps{ - Description: "securityProfile specifies the Security profile settings for a virtual machine.", - Ref: ref(machinev1beta1.SecurityProfile{}.OpenAPIModelName()), - }, - }, - "ultraSSDCapability": { - SchemaProps: spec.SchemaProps{ - Description: "ultraSSDCapability enables or disables Azure UltraSSD capability for a virtual machine. This can be used to allow/disallow binding of Azure UltraSSD to the Machine both as Data Disks or via Persistent Volumes. This Azure feature is subject to a specific scope and certain limitations. More informations on this can be found in the official Azure documentation for Ultra Disks: (https://docs.microsoft.com/en-us/azure/virtual-machines/disks-enable-ultra-ssd?tabs=azure-portal#ga-scope-and-limitations).\n\nWhen omitted, if at least one Data Disk of type UltraSSD is specified, the platform will automatically enable the capability. If a Perisistent Volume backed by an UltraSSD is bound to a Pod on the Machine, when this field is ommitted, the platform will *not* automatically enable the capability (unless already enabled by the presence of an UltraSSD as Data Disk). This may manifest in the Pod being stuck in `ContainerCreating` phase. This defaulting behaviour may be subject to change in future.\n\nWhen set to \"Enabled\", if the capability is available for the Machine based on the scope and limitations described above, the capability will be set on the Machine. This will thus allow UltraSSD both as Data Disks and Persistent Volumes. If set to \"Enabled\" when the capability can't be available due to scope and limitations, the Machine will go into \"Failed\" state.\n\nWhen set to \"Disabled\", UltraSSDs will not be allowed either as Data Disks nor as Persistent Volumes. In this case if any UltraSSDs are specified as Data Disks on a Machine, the Machine will go into a \"Failed\" state. If instead any UltraSSDs are backing the volumes (via Persistent Volumes) of any Pods scheduled on a Node which is backed by the Machine, the Pod may get stuck in `ContainerCreating` phase.", - Type: []string{"string"}, - Format: "", - }, - }, - "acceleratedNetworking": { - SchemaProps: spec.SchemaProps{ - Description: "acceleratedNetworking enables or disables Azure accelerated networking feature. Set to false by default. If true, then this will depend on whether the requested VMSize is supported. If set to true with an unsupported VMSize, Azure will return an error.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "availabilitySet": { - SchemaProps: spec.SchemaProps{ - Description: "availabilitySet specifies the availability set to use for this instance. Availability set should be precreated, before using this field.", - Type: []string{"string"}, - Format: "", - }, - }, - "diagnostics": { - SchemaProps: spec.SchemaProps{ - Description: "diagnostics configures the diagnostics settings for the virtual machine. This allows you to configure boot diagnostics such as capturing serial output from the virtual machine on boot. This is useful for debugging software based launch issues.", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.AzureDiagnostics{}.OpenAPIModelName()), - }, - }, - "capacityReservationGroupID": { - SchemaProps: spec.SchemaProps{ - Description: "capacityReservationGroupID specifies the capacity reservation group resource id that should be used for allocating the virtual machine. The field size should be greater than 0 and the field input must start with '/'. The input for capacityReservationGroupID must be similar to '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/capacityReservationGroups/{capacityReservationGroupName}'. The keys which are used should be among 'subscriptions', 'providers' and 'resourcegroups' followed by valid ID or names respectively.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"image", "osDisk", "publicIP", "subnet"}, - }, - }, - Dependencies: []string{ - machinev1beta1.AzureDiagnostics{}.OpenAPIModelName(), machinev1beta1.DataDisk{}.OpenAPIModelName(), machinev1beta1.Image{}.OpenAPIModelName(), machinev1beta1.OSDisk{}.OpenAPIModelName(), machinev1beta1.SecurityProfile{}.OpenAPIModelName(), machinev1beta1.SpotVMOptions{}.OpenAPIModelName(), corev1.SecretReference{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_AzureMachineProviderStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AzureMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains Azure-specific status information. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "vmId": { - SchemaProps: spec.SchemaProps{ - Description: "vmId is the ID of the virtual machine created in Azure.", - Type: []string{"string"}, - Format: "", - }, - }, - "vmState": { - SchemaProps: spec.SchemaProps{ - Description: "vmState is the provisioning state of the Azure virtual machine.", - Type: []string{"string"}, - Format: "", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a set of conditions associated with the Machine to indicate errors or other status.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_BlockDeviceMappingSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BlockDeviceMappingSpec describes a block device mapping", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "deviceName": { - SchemaProps: spec.SchemaProps{ - Description: "The device name exposed to the machine (for example, /dev/sdh or xvdh).", - Type: []string{"string"}, - Format: "", - }, - }, - "ebs": { - SchemaProps: spec.SchemaProps{ - Description: "Parameters used to automatically set up EBS volumes when the machine is launched.", - Ref: ref(machinev1beta1.EBSBlockDeviceSpec{}.OpenAPIModelName()), - }, - }, - "noDevice": { - SchemaProps: spec.SchemaProps{ - Description: "Suppresses the specified device included in the block device mapping of the AMI.", - Type: []string{"string"}, - Format: "", - }, - }, - "virtualName": { - SchemaProps: spec.SchemaProps{ - Description: "The virtual device name (ephemeralN). Machine store volumes are numbered starting from 0. An machine type with 2 available machine store volumes can specify mappings for ephemeral0 and ephemeral1.The number of available machine store volumes depends on the machine type. After you connect to the machine, you must mount the volume.\n\nConstraints: For M3 machines, you must specify machine store volumes in the block device mapping for the machine. When you launch an M3 machine, we ignore any machine store volumes specified in the block device mapping for the AMI.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.EBSBlockDeviceSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_CPUOptions(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CPUOptions defines CPU-related settings for the instance, including the confidential computing policy. If provided, it must not be empty — at least one field must be set.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "confidentialCompute": { - SchemaProps: spec.SchemaProps{ - Description: "confidentialCompute specifies whether confidential computing should be enabled for the instance, and, if so, which confidential computing technology to use. Valid values are: Disabled, AMDEncryptedVirtualizationNestedPaging and omitted. When set to Disabled, confidential computing will be disabled for the instance. When set to AMDEncryptedVirtualizationNestedPaging, AMD SEV-SNP will be used as the confidential computing technology for the instance. In this case, ensure the following conditions are met: 1) The selected instance type supports AMD SEV-SNP. 2) The selected AWS region supports AMD SEV-SNP. 3) The selected AMI supports AMD SEV-SNP. More details can be checked at https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sev-snp.html When omitted, this means no opinion and the AWS platform is left to choose a reasonable default, which is subject to change without notice. The current default is Disabled.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_Condition(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Condition defines an observation of a Machine API resource operational state.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type of condition in CamelCase or in foo.example.com/CamelCase. Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status of the condition, one of True, False, Unknown.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "severity": { - SchemaProps: spec.SchemaProps{ - Description: "severity provides an explicit classification of Reason code, so the users or machines can immediately understand the current situation and act accordingly. The Severity field MUST be set only when Status=False.", - Type: []string{"string"}, - Format: "", - }, - }, - "lastTransitionTime": { - SchemaProps: spec.SchemaProps{ - Description: "Last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "reason": { - SchemaProps: spec.SchemaProps{ - Description: "The reason for the condition's last transition in CamelCase. The specific API may choose whether or not this field is considered a guaranteed API. This field may not be empty.", - Type: []string{"string"}, - Format: "", - }, - }, - "message": { - SchemaProps: spec.SchemaProps{ - Description: "A human readable message indicating details about the transition. This field may be empty.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"type", "status", "lastTransitionTime"}, - }, - }, - Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_ConfidentialVM(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConfidentialVM defines the UEFI settings for the virtual machine.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "uefiSettings": { - SchemaProps: spec.SchemaProps{ - Description: "uefiSettings specifies the security settings like secure boot and vTPM used while creating the virtual machine.", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.UEFISettings{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"uefiSettings"}, - }, - }, - Dependencies: []string{ - machinev1beta1.UEFISettings{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_DataDisk(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DataDisk specifies the parameters that are used to add one or more data disks to the machine. A Data Disk is a managed disk that's attached to a virtual machine to store application data. It differs from an OS Disk as it doesn't come with a pre-installed OS, and it cannot contain the boot volume. It is registered as SCSI drive and labeled with the chosen `lun`. e.g. for `lun: 0` the raw disk device will be available at `/dev/disk/azure/scsi1/lun0`.\n\nAs the Data Disk disk device is attached raw to the virtual machine, it will need to be partitioned, formatted with a filesystem and mounted, in order for it to be usable. This can be done by creating a custom userdata Secret with custom Ignition configuration to achieve the desired initialization. At this stage the previously defined `lun` is to be used as the \"device\" key for referencing the raw disk device to be initialized. Once the custom userdata Secret has been created, it can be referenced in the Machine's `.providerSpec.userDataSecret`. For further guidance and examples, please refer to the official OpenShift docs.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "nameSuffix": { - SchemaProps: spec.SchemaProps{ - Description: "nameSuffix is the suffix to be appended to the machine name to generate the disk name. Each disk name will be in format _. NameSuffix name must start and finish with an alphanumeric character and can only contain letters, numbers, underscores, periods or hyphens. The overall disk name must not exceed 80 chars in length.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "diskSizeGB": { - SchemaProps: spec.SchemaProps{ - Description: "diskSizeGB is the size in GB to assign to the data disk.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "managedDisk": { - SchemaProps: spec.SchemaProps{ - Description: "managedDisk specifies the Managed Disk parameters for the data disk. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is a ManagedDisk with with storageAccountType: \"Premium_LRS\" and diskEncryptionSet.id: \"Default\".", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.DataDiskManagedDiskParameters{}.OpenAPIModelName()), - }, - }, - "lun": { - SchemaProps: spec.SchemaProps{ - Description: "lun Specifies the logical unit number of the data disk. This value is used to identify data disks within the VM and therefore must be unique for each data disk attached to a VM. This value is also needed for referencing the data disks devices within userdata to perform disk initialization through Ignition (e.g. partition/format/mount). The value must be between 0 and 63.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "cachingType": { - SchemaProps: spec.SchemaProps{ - Description: "cachingType specifies the caching requirements. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is CachingTypeNone.", - Type: []string{"string"}, - Format: "", - }, - }, - "deletionPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "deletionPolicy specifies the data disk deletion policy upon Machine deletion. Possible values are \"Delete\",\"Detach\". When \"Delete\" is used the data disk is deleted when the Machine is deleted. When \"Detach\" is used the data disk is detached from the Machine and retained when the Machine is deleted.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"nameSuffix", "diskSizeGB", "lun", "deletionPolicy"}, - }, - }, - Dependencies: []string{ - machinev1beta1.DataDiskManagedDiskParameters{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_DataDiskManagedDiskParameters(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DataDiskManagedDiskParameters is the parameters of a DataDisk managed disk.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "storageAccountType": { - SchemaProps: spec.SchemaProps{ - Description: "storageAccountType is the storage account type to use. Possible values include \"Standard_LRS\", \"Premium_LRS\" and \"UltraSSD_LRS\".", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "diskEncryptionSet": { - SchemaProps: spec.SchemaProps{ - Description: "diskEncryptionSet is the disk encryption set properties. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is a DiskEncryptionSet with id: \"Default\".", - Ref: ref(machinev1beta1.DiskEncryptionSetParameters{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"storageAccountType"}, - }, - }, - Dependencies: []string{ - machinev1beta1.DiskEncryptionSetParameters{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_DedicatedHost(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DedicatedHost represents the configuration for the usage of dedicated host.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "allocationStrategy": { - SchemaProps: spec.SchemaProps{ - Description: "allocationStrategy specifies if the dedicated host will be provided by the admin through the id field or if the host will be dynamically allocated. Valid values are UserProvided and Dynamic. When omitted, the value defaults to \"UserProvided\", which requires the id field to be set. When allocationStrategy is set to UserProvided, an ID of the dedicated host to assign must be provided. When allocationStrategy is set to Dynamic, a dedicated host will be allocated and used to assign instances. When allocationStrategy is set to Dynamic, and dynamicHostAllocation is configured, a dedicated host will be allocated and the tags in dynamicHostAllocation will be assigned to that host.\n\nPossible enum values:\n - `\"Dynamic\"` specifies that the system should dynamically allocate a dedicated host for instances.\n - `\"UserProvided\"` specifies that the system should assign instances to a user-provided dedicated host.", - Default: "UserProvided", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Dynamic", "UserProvided"}, - }, - }, - "id": { - SchemaProps: spec.SchemaProps{ - Description: "id identifies the AWS Dedicated Host on which the instance must run. The value must start with \"h-\" followed by either 8 or 17 lowercase hexadecimal characters (0-9 and a-f). The use of 8 lowercase hexadecimal characters is for older legacy hosts that may not have been migrated to newer format. Must be either 10 or 19 characters in length. This field is required when allocationStrategy is UserProvided, and forbidden otherwise. When omitted with allocationStrategy set to Dynamic, the platform will dynamically allocate a dedicated host.", - Type: []string{"string"}, - Format: "", - }, - }, - "dynamicHostAllocation": { - SchemaProps: spec.SchemaProps{ - Description: "dynamicHostAllocation specifies tags to apply to a dynamically allocated dedicated host. This field is only allowed when allocationStrategy is Dynamic, and is mutually exclusive with id. When specified, a dedicated host will be allocated with the provided tags applied. When omitted (and allocationStrategy is Dynamic), a dedicated host will be allocated without any additional tags.", - Ref: ref(machinev1beta1.DynamicHostAllocationSpec{}.OpenAPIModelName()), - }, - }, - }, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "allocationStrategy", - "fields-to-discriminateBy": map[string]interface{}{ - "dynamicHostAllocation": "DynamicHostAllocation", - "id": "ID", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.DynamicHostAllocationSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_DedicatedHostStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DedicatedHostStatus defines the observed state of a dynamically allocated dedicated host associated with an AWSMachine. This struct is used to track the ID of the dedicated host.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "id": { - SchemaProps: spec.SchemaProps{ - Description: "id tracks the dynamically allocated dedicated host ID. This field is populated when allocationStrategy is Dynamic (with or without DynamicHostAllocation). The value must start with \"h-\" followed by either 8 or 17 lowercase hexadecimal characters (0-9 and a-f). The use of 8 lowercase hexadecimal characters is for older legacy hosts that may not have been migrated to newer format. Must be either 10 or 19 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"id"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_DiskEncryptionSetParameters(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DiskEncryptionSetParameters is the disk encryption set properties", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "id": { - SchemaProps: spec.SchemaProps{ - Description: "id is the disk encryption set ID Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is: \"Default\".", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_DiskSettings(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DiskSettings describe ephemeral disk settings for the os disk.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "ephemeralStorageLocation": { - SchemaProps: spec.SchemaProps{ - Description: "ephemeralStorageLocation enables ephemeral OS when set to 'Local'. Possible values include: 'Local'. See https://docs.microsoft.com/en-us/azure/virtual-machines/ephemeral-os-disks for full details. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is that disks are saved to remote Azure storage.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_DynamicHostAllocationSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DynamicHostAllocationSpec defines the configuration for dynamic dedicated host allocation. This specification always allocates exactly one dedicated host per machine. At least one property must be specified when this struct is used. Currently only Tags are available for configuring, but in the future more configs may become available.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "tags": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "tags specifies a set of key-value pairs to apply to the allocated dedicated host. When omitted, no additional user-defined tags will be applied to the allocated host. A maximum of 50 tags can be specified.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.TagSpecification{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.TagSpecification{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_EBSBlockDeviceSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "EBSBlockDeviceSpec describes a block device for an EBS volume. https://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/EbsBlockDevice", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "deleteOnTermination": { - SchemaProps: spec.SchemaProps{ - Description: "Indicates whether the EBS volume is deleted on machine termination.\n\nDeprecated: setting this field has no effect.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "encrypted": { - SchemaProps: spec.SchemaProps{ - Description: "Indicates whether the EBS volume is encrypted. Encrypted Amazon EBS volumes may only be attached to machines that support Amazon EBS encryption.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "kmsKey": { - SchemaProps: spec.SchemaProps{ - Description: "Indicates the KMS key that should be used to encrypt the Amazon EBS volume.", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.AWSResourceReference{}.OpenAPIModelName()), - }, - }, - "iops": { - SchemaProps: spec.SchemaProps{ - Description: "The number of I/O operations per second (IOPS) that the volume supports. For io1, this represents the number of IOPS that are provisioned for the volume. For gp2, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. For more information about General Purpose SSD baseline performance, I/O credits, and bursting, see Amazon EBS Volume Types (http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html) in the Amazon Elastic Compute Cloud User Guide.\n\nMinimal and maximal IOPS for io1 and gp2 are constrained. Please, check https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html for precise boundaries for individual volumes.\n\nCondition: This parameter is required for requests to create io1 volumes; it is not used in requests to create gp2, st1, sc1, or standard volumes.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "throughputMib": { - SchemaProps: spec.SchemaProps{ - Description: "throughputMib to provision in MiB/s supported for the volume type. Not applicable to all types.\n\nThis parameter is valid only for gp3 volumes. Valid Range: Minimum value of 125. Maximum value of 2000.\n\nWhen omitted, this means no opinion, and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 125.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "volumeSize": { - SchemaProps: spec.SchemaProps{ - Description: "The size of the volume, in GiB.\n\nConstraints: 1-16384 for General Purpose SSD (gp2), 4-16384 for Provisioned IOPS SSD (io1), 500-16384 for Throughput Optimized HDD (st1), 500-16384 for Cold HDD (sc1), and 1-1024 for Magnetic (standard) volumes. If you specify a snapshot, the volume size must be equal to or larger than the snapshot size.\n\nDefault: If you're creating the volume from a snapshot and don't specify a volume size, the default is the snapshot size.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "volumeType": { - SchemaProps: spec.SchemaProps{ - Description: "volumeType can be of type gp2, gp3, io1, st1, sc1, or standard. Default: standard", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.AWSResourceReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_Filter(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Filter is a filter used to identify an AWS resource", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of the filter. Filter names are case-sensitive.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "values": { - SchemaProps: spec.SchemaProps{ - Description: "values includes one or more filter values. Filter values are case-sensitive.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_GCPDisk(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GCPDisk describes disks for GCP.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "autoDelete": { - SchemaProps: spec.SchemaProps{ - Description: "autoDelete indicates if the disk will be auto-deleted when the instance is deleted (default false).", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "boot": { - SchemaProps: spec.SchemaProps{ - Description: "boot indicates if this is a boot disk (default false).", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "sizeGb": { - SchemaProps: spec.SchemaProps{ - Description: "sizeGb is the size of the disk (in GB).", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the type of the disk (eg: pd-standard).", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "image": { - SchemaProps: spec.SchemaProps{ - Description: "image is the source image to create this disk.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "labels": { - SchemaProps: spec.SchemaProps{ - Description: "labels list of labels to apply to the disk.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "encryptionKey": { - SchemaProps: spec.SchemaProps{ - Description: "encryptionKey is the customer-supplied encryption key of the disk.", - Ref: ref(machinev1beta1.GCPEncryptionKeyReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"autoDelete", "boot", "sizeGb", "type", "image", "labels"}, - }, - }, - Dependencies: []string{ - machinev1beta1.GCPEncryptionKeyReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_GCPEncryptionKeyReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GCPEncryptionKeyReference describes the encryptionKey to use for a disk's encryption.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kmsKey": { - SchemaProps: spec.SchemaProps{ - Description: "KMSKeyName is the reference KMS key, in the format", - Ref: ref(machinev1beta1.GCPKMSKeyReference{}.OpenAPIModelName()), - }, - }, - "kmsKeyServiceAccount": { - SchemaProps: spec.SchemaProps{ - Description: "kmsKeyServiceAccount is the service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used. See https://cloud.google.com/compute/docs/access/service-accounts#compute_engine_service_account for details on the default service account.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.GCPKMSKeyReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_GCPGPUConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GCPGPUConfig describes type and count of GPUs attached to the instance on GCP.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "count": { - SchemaProps: spec.SchemaProps{ - Description: "count is the number of GPUs to be attached to an instance.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the type of GPU to be attached to an instance. Supported GPU types are: nvidia-tesla-k80, nvidia-tesla-p100, nvidia-tesla-v100, nvidia-tesla-p4, nvidia-tesla-t4", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"count", "type"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_GCPKMSKeyReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GCPKMSKeyReference gathers required fields for looking up a GCP KMS Key", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the customer managed encryption key to be used for the disk encryption.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyRing": { - SchemaProps: spec.SchemaProps{ - Description: "keyRing is the name of the KMS Key Ring which the KMS Key belongs to.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "projectID": { - SchemaProps: spec.SchemaProps{ - Description: "projectID is the ID of the Project in which the KMS Key Ring exists. Defaults to the VM ProjectID if not set.", - Type: []string{"string"}, - Format: "", - }, - }, - "location": { - SchemaProps: spec.SchemaProps{ - Description: "location is the GCP location in which the Key Ring exists.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "keyRing", "location"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_GCPMachineProviderSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GCPMachineProviderSpec is the type that will be embedded in a Machine.Spec.ProviderSpec field for an GCP virtual machine. It is used by the GCP machine actuator to create a single Machine. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "userDataSecret": { - SchemaProps: spec.SchemaProps{ - Description: "userDataSecret contains a local reference to a secret that contains the UserData to apply to the instance", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "credentialsSecret": { - SchemaProps: spec.SchemaProps{ - Description: "credentialsSecret is a reference to the secret with GCP credentials.", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "canIPForward": { - SchemaProps: spec.SchemaProps{ - Description: "canIPForward Allows this instance to send and receive packets with non-matching destination or source IPs. This is required if you plan to use this instance to forward routes.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "deletionProtection": { - SchemaProps: spec.SchemaProps{ - Description: "deletionProtection whether the resource should be protected against deletion.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "disks": { - SchemaProps: spec.SchemaProps{ - Description: "disks is a list of disks to be attached to the VM.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Ref: ref(machinev1beta1.GCPDisk{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "labels": { - SchemaProps: spec.SchemaProps{ - Description: "labels list of labels to apply to the VM.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "gcpMetadata": { - SchemaProps: spec.SchemaProps{ - Description: "Metadata key/value pairs to apply to the VM.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Ref: ref(machinev1beta1.GCPMetadata{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "networkInterfaces": { - SchemaProps: spec.SchemaProps{ - Description: "networkInterfaces is a list of network interfaces to be attached to the VM.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Ref: ref(machinev1beta1.GCPNetworkInterface{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "serviceAccounts": { - SchemaProps: spec.SchemaProps{ - Description: "serviceAccounts is a list of GCP service accounts to be used by the VM.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.GCPServiceAccount{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "tags": { - SchemaProps: spec.SchemaProps{ - Description: "tags list of network tags to apply to the VM.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "targetPools": { - SchemaProps: spec.SchemaProps{ - Description: "targetPools are used for network TCP/UDP load balancing. A target pool references member instances, an associated legacy HttpHealthCheck resource, and, optionally, a backup target pool", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "machineType": { - SchemaProps: spec.SchemaProps{ - Description: "machineType is the machine type to use for the VM.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "region": { - SchemaProps: spec.SchemaProps{ - Description: "region is the region in which the GCP machine provider will create the VM.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "zone": { - SchemaProps: spec.SchemaProps{ - Description: "zone is the zone in which the GCP machine provider will create the VM.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "projectID": { - SchemaProps: spec.SchemaProps{ - Description: "projectID is the project in which the GCP machine provider will create the VM.", - Type: []string{"string"}, - Format: "", - }, - }, - "gpus": { - SchemaProps: spec.SchemaProps{ - Description: "gpus is a list of GPUs to be attached to the VM.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.GCPGPUConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "preemptible": { - SchemaProps: spec.SchemaProps{ - Description: "preemptible indicates if created instance is preemptible.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "provisioningModel": { - SchemaProps: spec.SchemaProps{ - Description: "provisioningModel is an optional field that determines the provisioning model for the GCP machine instance. Valid values are \"Spot\" and omitted. When set to Spot, the instance runs as a Google Cloud Spot instance which provides significant cost savings but may be preempted by Google Cloud Platform when resources are needed elsewhere. When omitted, the machine will be provisioned as a standard on-demand instance. This field cannot be used together with the preemptible field.", - Type: []string{"string"}, - Format: "", - }, - }, - "onHostMaintenance": { - SchemaProps: spec.SchemaProps{ - Description: "onHostMaintenance determines the behavior when a maintenance event occurs that might cause the instance to reboot. This is required to be set to \"Terminate\" if you want to provision machine with attached GPUs. Otherwise, allowed values are \"Migrate\" and \"Terminate\". If omitted, the platform chooses a default, which is subject to change over time, currently that default is \"Migrate\".", - Type: []string{"string"}, - Format: "", - }, - }, - "restartPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "restartPolicy determines the behavior when an instance crashes or the underlying infrastructure provider stops the instance as part of a maintenance event (default \"Always\"). Cannot be \"Always\" with preemptible instances. Otherwise, allowed values are \"Always\" and \"Never\". If omitted, the platform chooses a default, which is subject to change over time, currently that default is \"Always\". RestartPolicy represents AutomaticRestart in GCP compute api", - Type: []string{"string"}, - Format: "", - }, - }, - "shieldedInstanceConfig": { - SchemaProps: spec.SchemaProps{ - Description: "shieldedInstanceConfig is the Shielded VM configuration for the VM", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.GCPShieldedInstanceConfig{}.OpenAPIModelName()), - }, - }, - "confidentialCompute": { - SchemaProps: spec.SchemaProps{ - Description: "confidentialCompute is an optional field defining whether the instance should have confidential compute enabled or not, and the confidential computing technology of choice. Allowed values are omitted, Disabled, Enabled, AMDEncryptedVirtualization, AMDEncryptedVirtualizationNestedPaging, and IntelTrustedDomainExtensions When set to Disabled, the machine will not be configured to be a confidential computing instance. When set to Enabled, the machine will be configured as a confidential computing instance with no preference on the confidential compute policy used. In this mode, the platform chooses a default that is subject to change over time. Currently, the default is to use AMD Secure Encrypted Virtualization. When set to AMDEncryptedVirtualization, the machine will be configured as a confidential computing instance with AMD Secure Encrypted Virtualization (AMD SEV) as the confidential computing technology. When set to AMDEncryptedVirtualizationNestedPaging, the machine will be configured as a confidential computing instance with AMD Secure Encrypted Virtualization Secure Nested Paging (AMD SEV-SNP) as the confidential computing technology. When set to IntelTrustedDomainExtensions, the machine will be configured as a confidential computing instance with Intel Trusted Domain Extensions (Intel TDX) as the confidential computing technology. If any value other than Disabled is set the selected machine type must support that specific confidential computing technology. The machine series supporting confidential computing technologies can be checked at https://cloud.google.com/confidential-computing/confidential-vm/docs/supported-configurations#all-confidential-vm-instances Currently, AMDEncryptedVirtualization is supported in c2d, n2d, and c3d machines. AMDEncryptedVirtualizationNestedPaging is supported in n2d machines. IntelTrustedDomainExtensions is supported in c3 machines. If any value other than Disabled is set, the selected region must support that specific confidential computing technology. The list of regions supporting confidential computing technologies can be checked at https://cloud.google.com/confidential-computing/confidential-vm/docs/supported-configurations#supported-zones If any value other than Disabled is set onHostMaintenance is required to be set to \"Terminate\". If omitted, the platform chooses a default, which is subject to change over time, currently that default is Disabled.", - Type: []string{"string"}, - Format: "", - }, - }, - "resourceManagerTags": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "key", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resourceManagerTags is an optional list of tags to apply to the GCP resources created for the cluster. See https://cloud.google.com/resource-manager/docs/tags/tags-overview for information on tagging GCP resources. GCP supports a maximum of 50 tags per resource.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.ResourceManagerTag{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"canIPForward", "deletionProtection", "serviceAccounts", "machineType", "region", "zone"}, - }, - }, - Dependencies: []string{ - machinev1beta1.GCPDisk{}.OpenAPIModelName(), machinev1beta1.GCPGPUConfig{}.OpenAPIModelName(), machinev1beta1.GCPMetadata{}.OpenAPIModelName(), machinev1beta1.GCPNetworkInterface{}.OpenAPIModelName(), machinev1beta1.GCPServiceAccount{}.OpenAPIModelName(), machinev1beta1.GCPShieldedInstanceConfig{}.OpenAPIModelName(), machinev1beta1.ResourceManagerTag{}.OpenAPIModelName(), corev1.LocalObjectReference{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_GCPMachineProviderStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GCPMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains GCP-specific status information. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "instanceId": { - SchemaProps: spec.SchemaProps{ - Description: "instanceId is the ID of the instance in GCP", - Type: []string{"string"}, - Format: "", - }, - }, - "instanceState": { - SchemaProps: spec.SchemaProps{ - Description: "instanceState is the provisioning state of the GCP Instance.", - Type: []string{"string"}, - Format: "", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a set of conditions associated with the Machine to indicate errors or other status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_GCPMetadata(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GCPMetadata describes metadata for GCP.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "key": { - SchemaProps: spec.SchemaProps{ - Description: "key is the metadata key.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value is the metadata value.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"key", "value"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_GCPNetworkInterface(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GCPNetworkInterface describes network interfaces for GCP", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "publicIP": { - SchemaProps: spec.SchemaProps{ - Description: "publicIP indicates if true a public IP will be used", - Type: []string{"boolean"}, - Format: "", - }, - }, - "network": { - SchemaProps: spec.SchemaProps{ - Description: "network is the network name.", - Type: []string{"string"}, - Format: "", - }, - }, - "projectID": { - SchemaProps: spec.SchemaProps{ - Description: "projectID is the project in which the GCP machine provider will create the VM.", - Type: []string{"string"}, - Format: "", - }, - }, - "subnetwork": { - SchemaProps: spec.SchemaProps{ - Description: "subnetwork is the subnetwork name.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_GCPServiceAccount(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GCPServiceAccount describes service accounts for GCP.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "email": { - SchemaProps: spec.SchemaProps{ - Description: "email is the service account email.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "scopes": { - SchemaProps: spec.SchemaProps{ - Description: "scopes list of scopes to be assigned to the service account.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"email", "scopes"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_GCPShieldedInstanceConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GCPShieldedInstanceConfig describes the shielded VM configuration of the instance on GCP. Shielded VM configuration allow users to enable and disable Secure Boot, vTPM, and Integrity Monitoring.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "secureBoot": { - SchemaProps: spec.SchemaProps{ - Description: "secureBoot Defines whether the instance should have secure boot enabled. Secure Boot verify the digital signature of all boot components, and halting the boot process if signature verification fails. If omitted, the platform chooses a default, which is subject to change over time, currently that default is Disabled.", - Type: []string{"string"}, - Format: "", - }, - }, - "virtualizedTrustedPlatformModule": { - SchemaProps: spec.SchemaProps{ - Description: "virtualizedTrustedPlatformModule enable virtualized trusted platform module measurements to create a known good boot integrity policy baseline. The integrity policy baseline is used for comparison with measurements from subsequent VM boots to determine if anything has changed. This is required to be set to \"Enabled\" if IntegrityMonitoring is enabled. If omitted, the platform chooses a default, which is subject to change over time, currently that default is Enabled.", - Type: []string{"string"}, - Format: "", - }, - }, - "integrityMonitoring": { - SchemaProps: spec.SchemaProps{ - Description: "integrityMonitoring determines whether the instance should have integrity monitoring that verify the runtime boot integrity. Compares the most recent boot measurements to the integrity policy baseline and return a pair of pass/fail results depending on whether they match or not. If omitted, the platform chooses a default, which is subject to change over time, currently that default is Enabled.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_HostPlacement(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "HostPlacement is the type that will be used to configure the placement of AWS instances.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "affinity": { - SchemaProps: spec.SchemaProps{ - Description: "affinity specifies the affinity setting for the instance. Allowed values are AnyAvailable and DedicatedHost. When Affinity is set to DedicatedHost, an instance started onto a specific host always restarts on the same host if stopped. In this scenario, the `dedicatedHost` field must be set. When Affinity is set to AnyAvailable, and you stop and restart the instance, it can be restarted on any available host. When Affinity is set to AnyAvailable and the `dedicatedHost` field is defined, it runs on specified Dedicated Host, but may move if stopped.", - Type: []string{"string"}, - Format: "", - }, - }, - "dedicatedHost": { - SchemaProps: spec.SchemaProps{ - Description: "dedicatedHost specifies the exact host that an instance should be restarted on if stopped. dedicatedHost is required when 'affinity' is set to DedicatedHost, and optional otherwise.", - Ref: ref(machinev1beta1.DedicatedHost{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"affinity"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "affinity", - "fields-to-discriminateBy": map[string]interface{}{ - "dedicatedHost": "DedicatedHost", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.DedicatedHost{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_Image(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Image is a mirror of azure sdk compute.ImageReference", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "publisher": { - SchemaProps: spec.SchemaProps{ - Description: "publisher is the name of the organization that created the image", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "offer": { - SchemaProps: spec.SchemaProps{ - Description: "offer specifies the name of a group of related images created by the publisher. For example, UbuntuServer, WindowsServer", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "sku": { - SchemaProps: spec.SchemaProps{ - Description: "sku specifies an instance of an offer, such as a major release of a distribution. For example, 18.04-LTS, 2019-Datacenter", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version specifies the version of an image sku. The allowed formats are Major.Minor.Build or 'latest'. Major, Minor, and Build are decimal numbers. Specify 'latest' to use the latest version of an image available at deploy time. Even if you use 'latest', the VM image will not automatically update after deploy time even if a new version becomes available.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resourceID": { - SchemaProps: spec.SchemaProps{ - Description: "resourceID specifies an image to use by ID", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type identifies the source of the image and related information, such as purchase plans. Valid values are \"ID\", \"MarketplaceWithPlan\", \"MarketplaceNoPlan\", and omitted, which means no opinion and the platform chooses a good default which may change over time. Currently that default is \"MarketplaceNoPlan\" if publisher data is supplied, or \"ID\" if not. For more information about purchase plans, see: https://docs.microsoft.com/en-us/azure/virtual-machines/linux/cli-ps-findimage#check-the-purchase-plan-information", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"publisher", "offer", "sku", "version", "resourceID"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_LastOperation(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LastOperation represents the detail of the last performed operation on the MachineObject.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "description": { - SchemaProps: spec.SchemaProps{ - Description: "description is the human-readable description of the last operation.", - Type: []string{"string"}, - Format: "", - }, - }, - "lastUpdated": { - SchemaProps: spec.SchemaProps{ - Description: "lastUpdated is the timestamp at which LastOperation API was last-updated.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "state": { - SchemaProps: spec.SchemaProps{ - Description: "state is the current status of the last performed operation. E.g. Processing, Failed, Successful etc", - Type: []string{"string"}, - Format: "", - }, - }, - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the type of operation which was last performed. E.g. Create, Delete, Update etc", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_LifecycleHook(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LifecycleHook represents a single instance of a lifecycle hook", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name defines a unique name for the lifcycle hook. The name should be unique and descriptive, ideally 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase. Names must be unique and should only be managed by a single entity.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "owner": { - SchemaProps: spec.SchemaProps{ - Description: "owner defines the owner of the lifecycle hook. This should be descriptive enough so that users can identify who/what is responsible for blocking the lifecycle. This could be the name of a controller (e.g. clusteroperator/etcd) or an administrator managing the hook.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "owner"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_LifecycleHooks(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LifecycleHooks allow users to pause operations on the machine at certain prefedined points within the machine lifecycle.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "preDrain": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "preDrain hooks prevent the machine from being drained. This also blocks further lifecycle events, such as termination.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.LifecycleHook{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "preTerminate": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "preTerminate hooks prevent the machine from being terminated. PreTerminate hooks be actioned after the Machine has been drained.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.LifecycleHook{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.LifecycleHook{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_LoadBalancerReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LoadBalancerReference is a reference to a load balancer on AWS.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "type": { - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "type"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_Machine(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Machine is the Schema for the machines API Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.MachineSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.MachineStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.MachineSpec{}.OpenAPIModelName(), machinev1beta1.MachineStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_MachineHealthCheck(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MachineHealthCheck is the Schema for the machinehealthchecks API Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "Specification of machine health check policy", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.MachineHealthCheckSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "Most recently observed status of MachineHealthCheck resource", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.MachineHealthCheckStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.MachineHealthCheckSpec{}.OpenAPIModelName(), machinev1beta1.MachineHealthCheckStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_MachineHealthCheckList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MachineHealthCheckList contains a list of MachineHealthCheck Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.MachineHealthCheck{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - machinev1beta1.MachineHealthCheck{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_MachineHealthCheckSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MachineHealthCheckSpec defines the desired state of MachineHealthCheck", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "selector": { - SchemaProps: spec.SchemaProps{ - Description: "Label selector to match machines whose health will be exercised. Note: An empty selector will match all machines.", - Default: map[string]interface{}{}, - Ref: ref(metav1.LabelSelector{}.OpenAPIModelName()), - }, - }, - "unhealthyConditions": { - SchemaProps: spec.SchemaProps{ - Description: "unhealthyConditions contains a list of the conditions that determine whether a node is considered unhealthy. The conditions are combined in a logical OR, i.e. if any of the conditions is met, the node is unhealthy.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.UnhealthyCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "maxUnhealthy": { - SchemaProps: spec.SchemaProps{ - Description: "Any farther remediation is only allowed if at most \"MaxUnhealthy\" machines selected by \"selector\" are not healthy. Expects either a postive integer value or a percentage value. Percentage values must be positive whole numbers and are capped at 100%. Both 0 and 0% are valid and will block all remediation. Defaults to 100% if not set.", - Ref: ref(intstr.IntOrString{}.OpenAPIModelName()), - }, - }, - "nodeStartupTimeout": { - SchemaProps: spec.SchemaProps{ - Description: "Machines older than this duration without a node will be considered to have failed and will be remediated. To prevent Machines without Nodes from being removed, disable startup checks by setting this value explicitly to \"0\". Expects an unsigned duration string of decimal numbers each with optional fraction and a unit suffix, eg \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - "remediationTemplate": { - SchemaProps: spec.SchemaProps{ - Description: "remediationTemplate is a reference to a remediation template provided by an infrastructure provider.\n\nThis field is completely optional, when filled, the MachineHealthCheck controller creates a new object from the template referenced and hands off remediation of the machine to a controller that lives outside of Machine API Operator.", - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"selector", "unhealthyConditions"}, - }, - }, - Dependencies: []string{ - machinev1beta1.UnhealthyCondition{}.OpenAPIModelName(), corev1.ObjectReference{}.OpenAPIModelName(), metav1.Duration{}.OpenAPIModelName(), metav1.LabelSelector{}.OpenAPIModelName(), intstr.IntOrString{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_MachineHealthCheckStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MachineHealthCheckStatus defines the observed state of MachineHealthCheck", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "expectedMachines": { - SchemaProps: spec.SchemaProps{ - Description: "total number of machines counted by this machine health check", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "currentHealthy": { - SchemaProps: spec.SchemaProps{ - Description: "total number of machines counted by this machine health check", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "remediationsAllowed": { - SchemaProps: spec.SchemaProps{ - Description: "remediationsAllowed is the number of further remediations allowed by this machine health check before maxUnhealthy short circuiting will be applied", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions defines the current state of the MachineHealthCheck", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_MachineList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MachineList contains a list of Machine Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.Machine{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - machinev1beta1.Machine{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_MachineSet(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MachineSet ensures that a specified number of machines replicas are running at any given time. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.MachineSetSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.MachineSetStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.MachineSetSpec{}.OpenAPIModelName(), machinev1beta1.MachineSetStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_MachineSetList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MachineSetList contains a list of MachineSet Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.MachineSet{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - machinev1beta1.MachineSet{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_MachineSetSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MachineSetSpec defines the desired state of MachineSet", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "replicas": { - SchemaProps: spec.SchemaProps{ - Description: "replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "minReadySeconds": { - SchemaProps: spec.SchemaProps{ - Description: "minReadySeconds is the minimum number of seconds for which a newly created machine should be ready. Defaults to 0 (machine will be considered available as soon as it is ready)", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "deletePolicy": { - SchemaProps: spec.SchemaProps{ - Description: "deletePolicy defines the policy used to identify nodes to delete when downscaling. Defaults to \"Random\". Valid values are \"Random, \"Newest\", \"Oldest\"", - Type: []string{"string"}, - Format: "", - }, - }, - "selector": { - SchemaProps: spec.SchemaProps{ - Description: "selector is a label query over machines that should match the replica count. Label keys and values that must match in order to be controlled by this MachineSet. It must match the machine template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", - Default: map[string]interface{}{}, - Ref: ref(metav1.LabelSelector{}.OpenAPIModelName()), - }, - }, - "template": { - SchemaProps: spec.SchemaProps{ - Description: "template is the object that describes the machine that will be created if insufficient replicas are detected.", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.MachineTemplateSpec{}.OpenAPIModelName()), - }, - }, - "authoritativeAPI": { - SchemaProps: spec.SchemaProps{ - Description: "authoritativeAPI is the API that is authoritative for this resource. Valid values are MachineAPI and ClusterAPI. When set to MachineAPI, writes to the spec of the machine.openshift.io copy of this resource will be reflected into the cluster.x-k8s.io copy. When set to ClusterAPI, writes to the spec of the cluster.x-k8s.io copy of this resource will be reflected into the machine.openshift.io copy. Updates to the status will be reflected in both copies of the resource, based on the controller implementing the functionality of the API. Currently the authoritative API determines which controller will manage the resource, this will change in a future release. To ensure the change has been accepted, please verify that the `status.authoritativeAPI` field has been updated to the desired value and that the `Synchronized` condition is present and set to `True`.", - Default: "MachineAPI", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"selector"}, - }, - }, - Dependencies: []string{ - machinev1beta1.MachineTemplateSpec{}.OpenAPIModelName(), metav1.LabelSelector{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_MachineSetStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MachineSetStatus defines the observed state of MachineSet", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "replicas": { - SchemaProps: spec.SchemaProps{ - Description: "replicas is the most recently observed number of replicas.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "fullyLabeledReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "The number of replicas that have labels matching the labels of the machine template of the MachineSet.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "The number of ready replicas for this MachineSet. A machine is considered ready when the node has been created and is \"Ready\".", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "availableReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "The number of available replicas (ready for at least minReadySeconds) for this MachineSet.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration reflects the generation of the most recently observed MachineSet.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "labelSelector": { - SchemaProps: spec.SchemaProps{ - Description: "labelSelector is a label selector, in string format, for Machines corresponding to the MachineSet. It is exposed via the scale subresource as status.selector. When omitted, the MachineSet controller has not yet reconciled spec.selector into status.labelSelector. When present, it must not be empty and must not exceed 4096 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "errorReason": { - SchemaProps: spec.SchemaProps{ - Description: "In the event that there is a terminal problem reconciling the replicas, both ErrorReason and ErrorMessage will be set. ErrorReason will be populated with a succinct value suitable for machine interpretation, while ErrorMessage will contain a more verbose string suitable for logging and human consumption.\n\nThese fields should not be set for transitive errors that a controller faces that are expected to be fixed automatically over time (like service outages), but instead indicate that something is fundamentally wrong with the MachineTemplate's spec or the configuration of the machine controller, and that manual intervention is required. Examples of terminal errors would be invalid combinations of settings in the spec, values that are unsupported by the machine controller, or the responsible machine controller itself being critically misconfigured.\n\nAny transient errors that occur during the reconciliation of Machines can be added as events to the MachineSet object and/or logged in the controller's output.", - Type: []string{"string"}, - Format: "", - }, - }, - "errorMessage": { - SchemaProps: spec.SchemaProps{ - Type: []string{"string"}, - Format: "", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions defines the current state of the MachineSet", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "authoritativeAPI": { - SchemaProps: spec.SchemaProps{ - Description: "authoritativeAPI is the API that is authoritative for this resource. Valid values are MachineAPI, ClusterAPI and Migrating. This value is updated by the migration controller to reflect the authoritative API. Machine API and Cluster API controllers use this value to determine whether or not to reconcile the resource. When set to Migrating, the migration controller is currently performing the handover of authority from one API to the other.", - Type: []string{"string"}, - Format: "", - }, - }, - "synchronizedAPI": { - SchemaProps: spec.SchemaProps{ - Description: "synchronizedAPI holds the last stable value of authoritativeAPI. It is used to detect migration cancellation requests and to restore the resource to its previous state. Valid values are \"MachineAPI\" and \"ClusterAPI\". When omitted, the resource has not yet been reconciled by the migration controller.", - Type: []string{"string"}, - Format: "", - }, - }, - "synchronizedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "synchronizedGeneration is the generation of the authoritative resource that the non-authoritative resource is synchronised with. This field is set when the authoritative resource is updated and the sync controller has updated the non-authoritative resource to match.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_MachineSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MachineSpec defines the desired state of Machine", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "ObjectMeta will autopopulate the Node created. Use this to indicate what labels, annotations, name prefix, etc., should be used when creating the Node.", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "lifecycleHooks": { - SchemaProps: spec.SchemaProps{ - Description: "lifecycleHooks allow users to pause operations on the machine at certain predefined points within the machine lifecycle.", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.LifecycleHooks{}.OpenAPIModelName()), - }, - }, - "taints": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "The list of the taints to be applied to the corresponding Node in additive manner. This list will not overwrite any other taints added to the Node on an ongoing basis by other entities. These taints should be actively reconciled e.g. if you ask the machine controller to apply a taint and then manually remove the taint the machine controller will put it back) but not have the machine controller remove any taints", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.Taint{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "providerSpec": { - SchemaProps: spec.SchemaProps{ - Description: "providerSpec details Provider-specific configuration to use during node creation.", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.ProviderSpec{}.OpenAPIModelName()), - }, - }, - "providerID": { - SchemaProps: spec.SchemaProps{ - Description: "providerID is the identification ID of the machine provided by the provider. This field must match the provider ID as seen on the node object corresponding to this machine. This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a generic out-of-tree provider for autoscaler, this field is required by autoscaler to be able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver and then a comparison is done to find out unregistered machines and are marked for delete. This field will be set by the actuators and consumed by higher level entities like autoscaler that will be interfacing with cluster-api as generic provider.", - Type: []string{"string"}, - Format: "", - }, - }, - "authoritativeAPI": { - SchemaProps: spec.SchemaProps{ - Description: "authoritativeAPI is the API that is authoritative for this resource. Valid values are MachineAPI and ClusterAPI. When set to MachineAPI, writes to the spec of the machine.openshift.io copy of this resource will be reflected into the cluster.x-k8s.io copy. When set to ClusterAPI, writes to the spec of the cluster.x-k8s.io copy of this resource will be reflected into the machine.openshift.io copy. Updates to the status will be reflected in both copies of the resource, based on the controller implementing the functionality of the API. Currently the authoritative API determines which controller will manage the resource, this will change in a future release. To ensure the change has been accepted, please verify that the `status.authoritativeAPI` field has been updated to the desired value and that the `Synchronized` condition is present and set to `True`.", - Default: "MachineAPI", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.LifecycleHooks{}.OpenAPIModelName(), machinev1beta1.ObjectMeta{}.OpenAPIModelName(), machinev1beta1.ProviderSpec{}.OpenAPIModelName(), corev1.Taint{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_MachineStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MachineStatus defines the observed state of Machine", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "nodeRef": { - SchemaProps: spec.SchemaProps{ - Description: "nodeRef will point to the corresponding Node if it exists.", - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - "lastUpdated": { - SchemaProps: spec.SchemaProps{ - Description: "lastUpdated identifies when this status was last observed.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "errorReason": { - SchemaProps: spec.SchemaProps{ - Description: "errorReason will be set in the event that there is a terminal problem reconciling the Machine and will contain a succinct value suitable for machine interpretation.\n\nThis field should not be set for transitive errors that a controller faces that are expected to be fixed automatically over time (like service outages), but instead indicate that something is fundamentally wrong with the Machine's spec or the configuration of the controller, and that manual intervention is required. Examples of terminal errors would be invalid combinations of settings in the spec, values that are unsupported by the controller, or the responsible controller itself being critically misconfigured.\n\nAny transient errors that occur during the reconciliation of Machines can be added as events to the Machine object and/or logged in the controller's output.", - Type: []string{"string"}, - Format: "", - }, - }, - "errorMessage": { - SchemaProps: spec.SchemaProps{ - Description: "errorMessage will be set in the event that there is a terminal problem reconciling the Machine and will contain a more verbose string suitable for logging and human consumption.\n\nThis field should not be set for transitive errors that a controller faces that are expected to be fixed automatically over time (like service outages), but instead indicate that something is fundamentally wrong with the Machine's spec or the configuration of the controller, and that manual intervention is required. Examples of terminal errors would be invalid combinations of settings in the spec, values that are unsupported by the controller, or the responsible controller itself being critically misconfigured.\n\nAny transient errors that occur during the reconciliation of Machines can be added as events to the Machine object and/or logged in the controller's output.", - Type: []string{"string"}, - Format: "", - }, - }, - "providerStatus": { - SchemaProps: spec.SchemaProps{ - Description: "providerStatus details a Provider-specific status. It is recommended that providers maintain their own versioned API types that should be serialized/deserialized from this field.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "addresses": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "addresses is a list of addresses assigned to the machine. Queried from cloud provider, if available.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.NodeAddress{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "lastOperation": { - SchemaProps: spec.SchemaProps{ - Description: "lastOperation describes the last-operation performed by the machine-controller. This API should be useful as a history in terms of the latest operation performed on the specific machine. It should also convey the state of the latest-operation for example if it is still on-going, failed or completed successfully.", - Ref: ref(machinev1beta1.LastOperation{}.OpenAPIModelName()), - }, - }, - "phase": { - SchemaProps: spec.SchemaProps{ - Description: "phase represents the current phase of machine actuation. One of: Failed, Provisioning, Provisioned, Running, Deleting", - Type: []string{"string"}, - Format: "", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions defines the current state of the Machine", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "authoritativeAPI": { - SchemaProps: spec.SchemaProps{ - Description: "authoritativeAPI is the API that is authoritative for this resource. Valid values are MachineAPI, ClusterAPI and Migrating. This value is updated by the migration controller to reflect the authoritative API. Machine API and Cluster API controllers use this value to determine whether or not to reconcile the resource. When set to Migrating, the migration controller is currently performing the handover of authority from one API to the other.", - Type: []string{"string"}, - Format: "", - }, - }, - "synchronizedAPI": { - SchemaProps: spec.SchemaProps{ - Description: "synchronizedAPI holds the last stable value of authoritativeAPI. It is used to detect migration cancellation requests and to restore the resource to its previous state. Valid values are \"MachineAPI\" and \"ClusterAPI\". When omitted, the resource has not yet been reconciled by the migration controller.", - Type: []string{"string"}, - Format: "", - }, - }, - "synchronizedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "synchronizedGeneration is the generation of the authoritative resource that the non-authoritative resource is synchronised with. This field is set when the authoritative resource is updated and the sync controller has updated the non-authoritative resource to match.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.Condition{}.OpenAPIModelName(), machinev1beta1.LastOperation{}.OpenAPIModelName(), corev1.NodeAddress{}.OpenAPIModelName(), corev1.ObjectReference{}.OpenAPIModelName(), metav1.Time{}.OpenAPIModelName(), runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_MachineTemplateSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MachineTemplateSpec describes the data needed to create a Machine from a template", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "Specification of the desired behavior of the machine. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.MachineSpec{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.MachineSpec{}.OpenAPIModelName(), machinev1beta1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_MetadataServiceOptions(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MetadataServiceOptions defines the options available to a user when configuring Instance Metadata Service (IMDS) Options.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "authentication": { - SchemaProps: spec.SchemaProps{ - Description: "authentication determines whether or not the host requires the use of authentication when interacting with the metadata service. When using authentication, this enforces v2 interaction method (IMDSv2) with the metadata service. When omitted, this means the user has no opinion and the value is left to the platform to choose a good default, which is subject to change over time. The current default is optional. At this point this field represents `HttpTokens` parameter from `InstanceMetadataOptionsRequest` structure in AWS EC2 API https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_InstanceMetadataOptionsRequest.html", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_NetworkDeviceSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NetworkDeviceSpec defines the network configuration for a virtual machine's network device.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "networkName": { - SchemaProps: spec.SchemaProps{ - Description: "networkName is the name of the vSphere network or port group to which the network device will be connected, for example, port-group-1. When not provided, the vCenter API will attempt to select a default network. The available networks (port groups) can be listed using `govc ls 'network/*'`", - Type: []string{"string"}, - Format: "", - }, - }, - "gateway": { - SchemaProps: spec.SchemaProps{ - Description: "gateway is an IPv4 or IPv6 address which represents the subnet gateway, for example, 192.168.1.1.", - Type: []string{"string"}, - Format: "", - }, - }, - "ipAddrs": { - SchemaProps: spec.SchemaProps{ - Description: "ipAddrs is a list of one or more IPv4 and/or IPv6 addresses and CIDR to assign to this device, for example, 192.168.1.100/24. IP addresses provided via ipAddrs are intended to allow explicit assignment of a machine's IP address. IP pool configurations provided via addressesFromPool, however, defer IP address assignment to an external controller. If both addressesFromPool and ipAddrs are empty or not defined, DHCP will be used to assign an IP address. If both ipAddrs and addressesFromPools are defined, the IP addresses associated with ipAddrs will be applied first followed by IP addresses from addressesFromPools.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "nameservers": { - SchemaProps: spec.SchemaProps{ - Description: "nameservers is a list of IPv4 and/or IPv6 addresses used as DNS nameservers, for example, 8.8.8.8. a nameserver is not provided by a fulfilled IPAddressClaim. If DHCP is not the source of IP addresses for this network device, nameservers should include a valid nameserver.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "addressesFromPools": { - SchemaProps: spec.SchemaProps{ - Description: "addressesFromPools is a list of references to IP pool types and instances which are handled by an external controller. addressesFromPool configurations provided via addressesFromPools defer IP address assignment to an external controller. IP addresses provided via ipAddrs, however, are intended to allow explicit assignment of a machine's IP address. If both addressesFromPool and ipAddrs are empty or not defined, DHCP will assign an IP address. If both ipAddrs and addressesFromPools are defined, the IP addresses associated with ipAddrs will be applied first followed by IP addresses from addressesFromPools.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.AddressesFromPool{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.AddressesFromPool{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_NetworkSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NetworkSpec defines the virtual machine's network configuration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "devices": { - SchemaProps: spec.SchemaProps{ - Description: "devices defines the virtual machine's network interfaces.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.NetworkDeviceSpec{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"devices"}, - }, - }, - Dependencies: []string{ - machinev1beta1.NetworkDeviceSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_OSDisk(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "osType": { - SchemaProps: spec.SchemaProps{ - Description: "osType is the operating system type of the OS disk. Possible values include \"Linux\" and \"Windows\".", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "managedDisk": { - SchemaProps: spec.SchemaProps{ - Description: "managedDisk specifies the Managed Disk parameters for the OS disk.", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.OSDiskManagedDiskParameters{}.OpenAPIModelName()), - }, - }, - "diskSizeGB": { - SchemaProps: spec.SchemaProps{ - Description: "diskSizeGB is the size in GB to assign to the data disk.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "diskSettings": { - SchemaProps: spec.SchemaProps{ - Description: "diskSettings describe ephemeral disk settings for the os disk.", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.DiskSettings{}.OpenAPIModelName()), - }, - }, - "cachingType": { - SchemaProps: spec.SchemaProps{ - Description: "cachingType specifies the caching requirements. Possible values include: 'None', 'ReadOnly', 'ReadWrite'. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is `None`.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"osType", "managedDisk", "diskSizeGB"}, - }, - }, - Dependencies: []string{ - machinev1beta1.DiskSettings{}.OpenAPIModelName(), machinev1beta1.OSDiskManagedDiskParameters{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_OSDiskManagedDiskParameters(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OSDiskManagedDiskParameters is the parameters of a OSDisk managed disk.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "storageAccountType": { - SchemaProps: spec.SchemaProps{ - Description: "storageAccountType is the storage account type to use. Possible values include \"Standard_LRS\", \"Premium_LRS\".", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "diskEncryptionSet": { - SchemaProps: spec.SchemaProps{ - Description: "diskEncryptionSet is the disk encryption set properties", - Ref: ref(machinev1beta1.DiskEncryptionSetParameters{}.OpenAPIModelName()), - }, - }, - "securityProfile": { - SchemaProps: spec.SchemaProps{ - Description: "securityProfile specifies the security profile for the managed disk.", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.VMDiskSecurityProfile{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"storageAccountType"}, - }, - }, - Dependencies: []string{ - machinev1beta1.DiskEncryptionSetParameters{}.OpenAPIModelName(), machinev1beta1.VMDiskSecurityProfile{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_ObjectMeta(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create. This is a copy of customizable fields from metav1.ObjectMeta.\n\nObjectMeta is embedded in `Machine.Spec`, `MachineDeployment.Template` and `MachineSet.Template`, which are not top-level Kubernetes objects. Given that metav1.ObjectMeta has lots of special cases and read-only fields which end up in the generated CRD validation, having it as a subset simplifies the API and some issues that can impact user experience.\n\nDuring the [upgrade to controller-tools@v2](https://github.com/kubernetes-sigs/cluster-api/pull/1054) for v1alpha2, we noticed a failure would occur running Cluster API test suite against the new CRDs, specifically `spec.metadata.creationTimestamp in body must be of type string: \"null\"`. The investigation showed that `controller-tools@v2` behaves differently than its previous version when handling types from [metav1](k8s.io/apimachinery/pkg/apis/meta/v1) package.\n\nIn more details, we found that embedded (non-top level) types that embedded `metav1.ObjectMeta` had validation properties, including for `creationTimestamp` (metav1.Time). The `metav1.Time` type specifies a custom json marshaller that, when IsZero() is true, returns `null` which breaks validation because the field isn't marked as nullable.\n\nIn future versions, controller-tools@v2 might allow overriding the type and validation for embedded types. When that happens, this hack should be revisited.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names", - Type: []string{"string"}, - Format: "", - }, - }, - "generateName": { - SchemaProps: spec.SchemaProps{ - Description: "generateName is an optional prefix, used by the server, to generate a unique name ONLY IF the Name field has not been provided. If this field is used, the name returned to the client will be different than the name passed. This value will also be combined with a unique suffix. The provided value has the same validation rules as the Name field, and may be truncated by the length of the suffix required to make the value unique on the server.\n\nIf this field is specified and the generated name exists, the server will NOT return a 409 - instead, it will either return 201 Created or 500 with Reason ServerTimeout indicating a unique name could not be found in the time allotted, and the client should retry (optionally after the time indicated in the Retry-After header).\n\nApplied only if Name is not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency", - Type: []string{"string"}, - Format: "", - }, - }, - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace defines the space within each name must be unique. An empty namespace is equivalent to the \"default\" namespace, but \"default\" is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.\n\nMust be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces", - Type: []string{"string"}, - Format: "", - }, - }, - "labels": { - SchemaProps: spec.SchemaProps{ - Description: "Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "annotations": { - SchemaProps: spec.SchemaProps{ - Description: "annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "ownerReferences": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "uid", - }, - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "uid", - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "List of objects depended by this object. If ALL objects in the list have been deleted, this object will be garbage collected. If this object is managed by a controller, then an entry in this list will point to this controller, with the controller field set to true. There cannot be more than one managing controller.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.OwnerReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.OwnerReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_Placement(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Placement indicates where to create the instance in AWS", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "region": { - SchemaProps: spec.SchemaProps{ - Description: "region is the region to use to create the instance", - Type: []string{"string"}, - Format: "", - }, - }, - "availabilityZone": { - SchemaProps: spec.SchemaProps{ - Description: "availabilityZone is the availability zone of the instance", - Type: []string{"string"}, - Format: "", - }, - }, - "tenancy": { - SchemaProps: spec.SchemaProps{ - Description: "tenancy indicates if instance should run on shared or single-tenant hardware. There are supported 3 options: default, dedicated and host. When set to default Runs on shared multi-tenant hardware. When dedicated Runs on single-tenant hardware (any dedicated instance hardware). When host and the host object is not provided: Runs on Dedicated Host; best-effort restart on same host. When `host` and `host` object is provided with affinity `dedicatedHost` defined: Runs on specified Dedicated Host.", - Type: []string{"string"}, - Format: "", - }, - }, - "host": { - SchemaProps: spec.SchemaProps{ - Description: "host configures placement on AWS Dedicated Hosts. This allows admins to assign instances to specific host for a variety of needs including for regulatory compliance, to leverage existing per-socket or per-core software licenses (BYOL), and to gain visibility and control over instance placement on a physical server. When omitted, the instance is not constrained to a dedicated host.", - Ref: ref(machinev1beta1.HostPlacement{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.HostPlacement{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_ProviderSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ProviderSpec defines the configuration to use during node creation.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value is an inlined, serialized representation of the resource configuration. It is recommended that providers maintain their own versioned API types that should be serialized/deserialized from this field, akin to component config.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_ResourceManagerTag(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ResourceManagerTag is a tag to apply to GCP resources created for the cluster.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "parentID": { - SchemaProps: spec.SchemaProps{ - Description: "parentID is the ID of the hierarchical resource where the tags are defined e.g. at the Organization or the Project level. To find the Organization or Project ID ref https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects An OrganizationID can have a maximum of 32 characters and must consist of decimal numbers, and cannot have leading zeroes. A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters, numbers, and hyphens, and must start with a letter, and cannot end with a hyphen.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "key": { - SchemaProps: spec.SchemaProps{ - Description: "key is the key part of the tag. A tag key can have a maximum of 63 characters and cannot be empty. Tag key must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `._-`.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value is the value part of the tag. A tag value can have a maximum of 63 characters and cannot be empty. Tag value must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `_-.@%=+:,*#&(){}[]` and spaces.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"parentID", "key", "value"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_SecurityProfile(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SecurityProfile specifies the Security profile settings for a virtual machine or virtual machine scale set.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "encryptionAtHost": { - SchemaProps: spec.SchemaProps{ - Description: "encryptionAtHost indicates whether Host Encryption should be enabled or disabled for a virtual machine or virtual machine scale set. This should be disabled when SecurityEncryptionType is set to DiskWithVMGuestState. Default is disabled.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "settings": { - SchemaProps: spec.SchemaProps{ - Description: "settings specify the security type and the UEFI settings of the virtual machine. This field can be set for Confidential VMs and Trusted Launch for VMs.", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.SecuritySettings{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.SecuritySettings{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_SecuritySettings(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SecuritySettings define the security type and the UEFI settings of the virtual machine.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "securityType": { - SchemaProps: spec.SchemaProps{ - Description: "securityType specifies the SecurityType of the virtual machine. It has to be set to any specified value to enable UEFISettings. The default behavior is: UEFISettings will not be enabled unless this property is set.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "confidentialVM": { - SchemaProps: spec.SchemaProps{ - Description: "confidentialVM specifies the security configuration of the virtual machine. For more information regarding Confidential VMs, please refer to: https://learn.microsoft.com/azure/confidential-computing/confidential-vm-overview", - Ref: ref(machinev1beta1.ConfidentialVM{}.OpenAPIModelName()), - }, - }, - "trustedLaunch": { - SchemaProps: spec.SchemaProps{ - Description: "trustedLaunch specifies the security configuration of the virtual machine. For more information regarding TrustedLaunch for VMs, please refer to: https://learn.microsoft.com/azure/virtual-machines/trusted-launch", - Ref: ref(machinev1beta1.TrustedLaunch{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"securityType"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "securityType", - "fields-to-discriminateBy": map[string]interface{}{ - "confidentialVM": "ConfidentialVM", - "trustedLaunch": "TrustedLaunch", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.ConfidentialVM{}.OpenAPIModelName(), machinev1beta1.TrustedLaunch{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_SpotMarketOptions(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SpotMarketOptions defines the options available to a user when configuring Machines to run on Spot instances. Most users should provide an empty struct.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "maxPrice": { - SchemaProps: spec.SchemaProps{ - Description: "The maximum price the user is willing to pay for their instances Default: On-Demand price", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_SpotVMOptions(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SpotVMOptions defines the options relevant to running the Machine on Spot VMs", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "maxPrice": { - SchemaProps: spec.SchemaProps{ - Description: "maxPrice defines the maximum price the user is willing to pay for Spot VM instances", - Ref: ref(resource.Quantity{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - resource.Quantity{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_TagSpecification(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TagSpecification is the name/value pair for a tag", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of the tag. This field is required and must be a non-empty string. Must be between 1 and 128 characters in length.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value of the tag. When omitted, this creates a tag with an empty string as the value.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_TrustedLaunch(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TrustedLaunch defines the UEFI settings for the virtual machine.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "uefiSettings": { - SchemaProps: spec.SchemaProps{ - Description: "uefiSettings specifies the security settings like secure boot and vTPM used while creating the virtual machine.", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.UEFISettings{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"uefiSettings"}, - }, - }, - Dependencies: []string{ - machinev1beta1.UEFISettings{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_UEFISettings(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "UEFISettings specifies the security settings like secure boot and vTPM used while creating the virtual machine.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "secureBoot": { - SchemaProps: spec.SchemaProps{ - Description: "secureBoot specifies whether secure boot should be enabled on the virtual machine. Secure Boot verifies the digital signature of all boot components and halts the boot process if signature verification fails. If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.", - Type: []string{"string"}, - Format: "", - }, - }, - "virtualizedTrustedPlatformModule": { - SchemaProps: spec.SchemaProps{ - Description: "virtualizedTrustedPlatformModule specifies whether vTPM should be enabled on the virtual machine. When enabled the virtualized trusted platform module measurements are used to create a known good boot integrity policy baseline. The integrity policy baseline is used for comparison with measurements from subsequent VM boots to determine if anything has changed. This is required to be enabled if SecurityEncryptionType is defined. If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_UnhealthyCondition(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "UnhealthyCondition represents a Node condition type and value with a timeout specified as a duration. When the named condition has been in the given status for at least the timeout value, a node is considered unhealthy.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "timeout": { - SchemaProps: spec.SchemaProps{ - Description: "Expects an unsigned duration string of decimal numbers each with optional fraction and a unit suffix, eg \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type", "status", "timeout"}, - }, - }, - Dependencies: []string{ - metav1.Duration{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_VMDiskSecurityProfile(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VMDiskSecurityProfile specifies the security profile settings for the managed disk. It can be set only for Confidential VMs.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "diskEncryptionSet": { - SchemaProps: spec.SchemaProps{ - Description: "diskEncryptionSet specifies the customer managed disk encryption set resource id for the managed disk that is used for Customer Managed Key encrypted ConfidentialVM OS Disk and VMGuest blob.", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.DiskEncryptionSetParameters{}.OpenAPIModelName()), - }, - }, - "securityEncryptionType": { - SchemaProps: spec.SchemaProps{ - Description: "securityEncryptionType specifies the encryption type of the managed disk. It is set to DiskWithVMGuestState to encrypt the managed disk along with the VMGuestState blob, and to VMGuestStateOnly to encrypt the VMGuestState blob only. When set to VMGuestStateOnly, the vTPM should be enabled. When set to DiskWithVMGuestState, both SecureBoot and vTPM should be enabled. If the above conditions are not fulfilled, the VM will not be created and the respective error will be returned. It can be set only for Confidential VMs. Confidential VMs are defined by their SecurityProfile.SecurityType being set to ConfidentialVM, the SecurityEncryptionType of their OS disk being set to one of the allowed values and by enabling the respective SecurityProfile.UEFISettings of the VM (i.e. vTPM and SecureBoot), depending on the selected SecurityEncryptionType. For further details on Azure Confidential VMs, please refer to the respective documentation: https://learn.microsoft.com/azure/confidential-computing/confidential-vm-overview", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - machinev1beta1.DiskEncryptionSetParameters{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_VSphereDisk(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VSphereDisk describes additional disks for vSphere.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is used to identify the disk definition. name is required needs to be unique so that it can be used to clearly identify purpose of the disk. It must be at most 80 characters in length and must consist only of alphanumeric characters, hyphens and underscores, and must start and end with an alphanumeric character.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "sizeGiB": { - SchemaProps: spec.SchemaProps{ - Description: "sizeGiB is the size of the disk in GiB. The maximum supported size 16384 GiB.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "provisioningMode": { - SchemaProps: spec.SchemaProps{ - Description: "provisioningMode is an optional field that specifies the provisioning type to be used by this vSphere data disk. Allowed values are \"Thin\", \"Thick\", \"EagerlyZeroed\", and omitted. When set to Thin, the disk will be made using thin provisioning allocating the bare minimum space. When set to Thick, the full disk size will be allocated when disk is created. When set to EagerlyZeroed, the disk will be created using eager zero provisioning. An eager zeroed thick disk has all space allocated and wiped clean of any previous contents on the physical media at creation time. Such disks may take longer time during creation compared to other disk formats. When omitted, no setting will be applied to the data disk and the provisioning mode for the disk will be determined by the default storage policy configured for the datastore in vSphere.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "sizeGiB"}, - }, - }, - } -} - -func schema_openshift_api_machine_v1beta1_VSphereMachineProviderSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VSphereMachineProviderSpec is the type that will be embedded in a Machine.Spec.ProviderSpec field for an VSphere virtual machine. It is used by the vSphere machine actuator to create a single Machine. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "userDataSecret": { - SchemaProps: spec.SchemaProps{ - Description: "userDataSecret contains a local reference to a secret that contains the UserData to apply to the instance", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "credentialsSecret": { - SchemaProps: spec.SchemaProps{ - Description: "credentialsSecret is a reference to the secret with vSphere credentials.", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "template": { - SchemaProps: spec.SchemaProps{ - Description: "template is the name, inventory path, or instance UUID of the template used to clone new machines.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "workspace": { - SchemaProps: spec.SchemaProps{ - Description: "workspace describes the workspace to use for the machine.", - Ref: ref(machinev1beta1.Workspace{}.OpenAPIModelName()), - }, - }, - "network": { - SchemaProps: spec.SchemaProps{ - Description: "network is the network configuration for this machine's VM.", - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.NetworkSpec{}.OpenAPIModelName()), - }, - }, - "numCPUs": { - SchemaProps: spec.SchemaProps{ - Description: "numCPUs is the number of virtual processors in a virtual machine. Defaults to the analogue property value in the template from which this machine is cloned.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "numCoresPerSocket": { - SchemaProps: spec.SchemaProps{ - Description: "NumCPUs is the number of cores among which to distribute CPUs in this virtual machine. Defaults to the analogue property value in the template from which this machine is cloned.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "memoryMiB": { - SchemaProps: spec.SchemaProps{ - Description: "memoryMiB is the size of a virtual machine's memory, in MiB. Defaults to the analogue property value in the template from which this machine is cloned.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "diskGiB": { - SchemaProps: spec.SchemaProps{ - Description: "diskGiB is the size of a virtual machine's disk, in GiB. Defaults to the analogue property value in the template from which this machine is cloned. This parameter will be ignored if 'LinkedClone' CloneMode is set.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "tagIDs": { - SchemaProps: spec.SchemaProps{ - Description: "tagIDs is an optional set of tags to add to an instance. Specified tagIDs must use URN-notation instead of display names. A maximum of 10 tag IDs may be specified.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "snapshot": { - SchemaProps: spec.SchemaProps{ - Description: "snapshot is the name of the snapshot from which the VM was cloned", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "cloneMode": { - SchemaProps: spec.SchemaProps{ - Description: "cloneMode specifies the type of clone operation. The LinkedClone mode is only support for templates that have at least one snapshot. If the template has no snapshots, then CloneMode defaults to FullClone. When LinkedClone mode is enabled the DiskGiB field is ignored as it is not possible to expand disks of linked clones. Defaults to FullClone. When using LinkedClone, if no snapshots exist for the source template, falls back to FullClone.", - Type: []string{"string"}, - Format: "", - }, - }, - "dataDisks": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "dataDisks is a list of non OS disks to be created and attached to the VM. The max number of disk allowed to be attached is currently 29. The max number of disks for any controller is 30, but VM template will always have OS disk so that will leave 29 disks on any controller type.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machinev1beta1.VSphereDisk{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"template", "network"}, - }, - }, - Dependencies: []string{ - machinev1beta1.NetworkSpec{}.OpenAPIModelName(), machinev1beta1.VSphereDisk{}.OpenAPIModelName(), machinev1beta1.Workspace{}.OpenAPIModelName(), corev1.LocalObjectReference{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_VSphereMachineProviderStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "VSphereMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains VSphere-specific status information. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "instanceId": { - SchemaProps: spec.SchemaProps{ - Description: "instanceId is the ID of the instance in VSphere", - Type: []string{"string"}, - Format: "", - }, - }, - "instanceState": { - SchemaProps: spec.SchemaProps{ - Description: "instanceState is the provisioning state of the VSphere Instance.", - Type: []string{"string"}, - Format: "", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a set of conditions associated with the Machine to indicate errors or other status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "taskRef": { - SchemaProps: spec.SchemaProps{ - Description: "taskRef is a managed object reference to a Task related to the machine. This value is set automatically at runtime and should not be set or modified by users.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machine_v1beta1_Workspace(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "WorkspaceConfig defines a workspace configuration for the vSphere cloud provider.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "server": { - SchemaProps: spec.SchemaProps{ - Description: "server is the IP address or FQDN of the vSphere endpoint.", - Type: []string{"string"}, - Format: "", - }, - }, - "datacenter": { - SchemaProps: spec.SchemaProps{ - Description: "datacenter is the datacenter in which VMs are created/located.", - Type: []string{"string"}, - Format: "", - }, - }, - "folder": { - SchemaProps: spec.SchemaProps{ - Description: "folder is the folder in which VMs are created/located.", - Type: []string{"string"}, - Format: "", - }, - }, - "datastore": { - SchemaProps: spec.SchemaProps{ - Description: "datastore is the datastore in which VMs are created/located.", - Type: []string{"string"}, - Format: "", - }, - }, - "resourcePool": { - SchemaProps: spec.SchemaProps{ - Description: "resourcePool is the resource pool in which VMs are created/located.", - Type: []string{"string"}, - Format: "", - }, - }, - "vmGroup": { - SchemaProps: spec.SchemaProps{ - Description: "vmGroup is the cluster vm group in which virtual machines will be added for vm host group based zonal.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machineconfiguration_v1alpha1_InternalReleaseImage(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "InternalReleaseImage is used to keep track and manage a set of release bundles (OCP and OLM operators images) that are stored into the control planes nodes.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec describes the configuration of this internal release image.", - Default: map[string]interface{}{}, - Ref: ref(machineconfigurationv1alpha1.InternalReleaseImageSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status describes the last observed state of this internal release image.", - Default: map[string]interface{}{}, - Ref: ref(machineconfigurationv1alpha1.InternalReleaseImageStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - machineconfigurationv1alpha1.InternalReleaseImageSpec{}.OpenAPIModelName(), machineconfigurationv1alpha1.InternalReleaseImageStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machineconfiguration_v1alpha1_InternalReleaseImageBundleStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represent the observations of an internal release image current state. Valid types are: Mounted, Installing, Available, Removing and Degraded.\n\nIf Mounted is true, that means that a valid ISO has been discovered and mounted on one of the cluster nodes. If Installing is true, that means that a new release bundle is currently being copied on one (or more) cluster nodes, and not yet completed. If Available is true, it means that the release has been previously installed on all the cluster nodes, and it can be used. If Removing is true, it means that a release deletion is in progress on one (or more) cluster nodes, and not yet completed. If Degraded is true, that means something has gone wrong (possibly on one or more cluster nodes).\n\nIn general, after installing a new release bundle, it is required to wait for the Conditions \"Available\" to become \"True\" (and all the other conditions to be equal to \"False\") before being able to pull its content.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name indicates the desired release bundle identifier. This field is required and must be between 1 and 64 characters long. The expected name format is ocp-release-bundle--.", - Type: []string{"string"}, - Format: "", - }, - }, - "image": { - SchemaProps: spec.SchemaProps{ - Description: "image is an OCP release image referenced by digest. The format of the image pull spec is: host[:port][/namespace]/name@sha256:, where the digest must be 64 characters long, and consist only of lowercase hexadecimal characters, a-f and 0-9. The length of the whole spec must be between 1 to 447 characters. The field is optional, and it will be provided after a release will be successfully installed.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machineconfiguration_v1alpha1_InternalReleaseImageList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "InternalReleaseImageList is a list of InternalReleaseImage resources\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machineconfigurationv1alpha1.InternalReleaseImage{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - machineconfigurationv1alpha1.InternalReleaseImage{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machineconfiguration_v1alpha1_InternalReleaseImageRef(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "InternalReleaseImageRef is used to provide a simple reference for a release bundle. Currently it contains only the name field.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name indicates the desired release bundle identifier. This field is required and must be between 1 and 64 characters long. The expected name format is ocp-release-bundle--.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_machineconfiguration_v1alpha1_InternalReleaseImageSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "InternalReleaseImageSpec defines the desired state of a InternalReleaseImage.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "releases": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "releases is a list of release bundle identifiers that the user wants to add/remove to/from the control plane nodes. Entries must be unique, keyed on the name field. releases must contain at least one entry and must not exceed 16 entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machineconfigurationv1alpha1.InternalReleaseImageRef{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"releases"}, - }, - }, - Dependencies: []string{ - machineconfigurationv1alpha1.InternalReleaseImageRef{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machineconfiguration_v1alpha1_InternalReleaseImageStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "InternalReleaseImageStatus describes the current state of a InternalReleaseImage.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represent the observations of the InternalReleaseImage controller current state. Valid types are: Degraded. If Degraded is true, that means something has gone wrong in the controller.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "releases": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "releases is a list of the release bundles currently owned and managed by the cluster. A release bundle content could be safely pulled only when its Conditions field contains at least an Available entry set to \"True\" and Degraded to \"False\". Entries must be unique, keyed on the name field. releases must contain at least one entry and must not exceed 32 entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machineconfigurationv1alpha1.InternalReleaseImageBundleStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"releases"}, - }, - }, - Dependencies: []string{ - machineconfigurationv1alpha1.InternalReleaseImageBundleStatus{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machineconfiguration_v1alpha1_OSImageStream(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OSImageStream describes a set of streams and associated images available for the MachineConfigPools to be used as base OS images.\n\nThe resource is a singleton named \"cluster\".\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec contains the desired OSImageStream config configuration.", - Ref: ref(machineconfigurationv1alpha1.OSImageStreamSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status describes the last observed state of this OSImageStream. Populated by the MachineConfigOperator after reading release metadata. When not present, the controller has not yet reconciled this resource.", - Default: map[string]interface{}{}, - Ref: ref(machineconfigurationv1alpha1.OSImageStreamStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - machineconfigurationv1alpha1.OSImageStreamSpec{}.OpenAPIModelName(), machineconfigurationv1alpha1.OSImageStreamStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machineconfiguration_v1alpha1_OSImageStreamList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OSImageStreamList is a list of OSImageStream resources\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machineconfigurationv1alpha1.OSImageStream{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - machineconfigurationv1alpha1.OSImageStream{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_machineconfiguration_v1alpha1_OSImageStreamSet(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the required identifier of the stream.\n\nname is determined by the operator based on the OCI label of the discovered OS or Extension Image.\n\nMust be a valid RFC 1123 subdomain between 1 and 253 characters in length, consisting of lowercase alphanumeric characters, hyphens ('-'), and periods ('.').", - Type: []string{"string"}, - Format: "", - }, - }, - "osImage": { - SchemaProps: spec.SchemaProps{ - Description: "osImage is a required OS Image referenced by digest.\n\nosImage contains the immutable, fundamental operating system components, including the kernel and base utilities, that define the core environment for the node's host operating system.\n\nThe format of the image pull spec is: host[:port][/namespace]/name@sha256:, where the digest must be 64 characters long, and consist only of lowercase hexadecimal characters, a-f and 0-9. The length of the whole spec must be between 1 to 447 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "osExtensionsImage": { - SchemaProps: spec.SchemaProps{ - Description: "osExtensionsImage is a required OS Extensions Image referenced by digest.\n\nosExtensionsImage bundles the extra repositories used to enable extensions, augmenting the base operating system without modifying the underlying immutable osImage.\n\nThe format of the image pull spec is: host[:port][/namespace]/name@sha256:, where the digest must be 64 characters long, and consist only of lowercase hexadecimal characters, a-f and 0-9. The length of the whole spec must be between 1 to 447 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "osImage", "osExtensionsImage"}, - }, - }, - } -} - -func schema_openshift_api_machineconfiguration_v1alpha1_OSImageStreamSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OSImageStreamSpec defines the desired state of a OSImageStream.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "defaultStream": { - SchemaProps: spec.SchemaProps{ - Description: "defaultStream is the desired name of the stream that should be used as the default when no specific stream is requested by a MachineConfigPool.\n\nThis field is set by the installer during installation. Users may need to update it if the currently selected stream is no longer available, for example when the stream has reached its End of Life. The MachineConfigOperator uses this value to determine which stream from status.availableStreams to apply as the default for MachineConfigPools that do not specify a stream override.\n\nWhen status.availableStreams has been populated by the operator, updating this field requires that the new value references the name of one of the streams in status.availableStreams. Status-only updates by the operator are not subject to this constraint, allowing the operator to update availableStreams independently of this field. During initial creation, before the operator has populated status, any valid value is accepted.\n\nWhen omitted, the operator determines the default stream automatically. Once set, this field cannot be removed.\n\nIt must be a valid RFC 1123 subdomain between 1 and 253 characters in length, consisting of lowercase alphanumeric characters, hyphens ('-'), and periods ('.').", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_machineconfiguration_v1alpha1_OSImageStreamStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OSImageStreamStatus describes the current state of a OSImageStream", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "availableStreams": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "availableStreams is a list of the available OS Image Streams that can be used as the base image for MachineConfigPools. availableStreams is required, must have at least one item, must not exceed 100 items, and must have unique entries keyed on the name field.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(machineconfigurationv1alpha1.OSImageStreamSet{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "defaultStream": { - SchemaProps: spec.SchemaProps{ - Description: "defaultStream is the name of the stream that should be used as the default when no specific stream is requested by a MachineConfigPool.\n\nIt must be a valid RFC 1123 subdomain between 1 and 253 characters in length, consisting of lowercase alphanumeric characters, hyphens ('-'), and periods ('.'), and must reference the name of one of the streams in availableStreams.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"availableStreams", "defaultStream"}, - }, - }, - Dependencies: []string{ - machineconfigurationv1alpha1.OSImageStreamSet{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_monitoring_v1_AlertRelabelConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AlertRelabelConfig defines a set of relabel configs for alerts.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec describes the desired state of this AlertRelabelConfig object.", - Default: map[string]interface{}{}, - Ref: ref(monitoringv1.AlertRelabelConfigSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status describes the current state of this AlertRelabelConfig object.", - Default: map[string]interface{}{}, - Ref: ref(monitoringv1.AlertRelabelConfigStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - monitoringv1.AlertRelabelConfigSpec{}.OpenAPIModelName(), monitoringv1.AlertRelabelConfigStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_monitoring_v1_AlertRelabelConfigList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AlertRelabelConfigList is a list of AlertRelabelConfigs.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is a list of AlertRelabelConfigs.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(monitoringv1.AlertRelabelConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - monitoringv1.AlertRelabelConfig{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_monitoring_v1_AlertRelabelConfigSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AlertRelabelConfigsSpec is the desired state of an AlertRelabelConfig resource.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "configs": { - SchemaProps: spec.SchemaProps{ - Description: "configs is a list of sequentially evaluated alert relabel configs.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(monitoringv1.RelabelConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"configs"}, - }, - }, - Dependencies: []string{ - monitoringv1.RelabelConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_monitoring_v1_AlertRelabelConfigStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AlertRelabelConfigStatus is the status of an AlertRelabelConfig resource.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions contains details on the state of the AlertRelabelConfig, may be empty.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_monitoring_v1_AlertingRule(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AlertingRule represents a set of user-defined Prometheus rule groups containing alerting rules. This resource is the supported method for cluster admins to create alerts based on metrics recorded by the platform monitoring stack in OpenShift, i.e. the Prometheus instance deployed to the openshift-monitoring namespace. You might use this to create custom alerting rules not shipped with OpenShift based on metrics from components such as the node_exporter, which provides machine-level metrics such as CPU usage, or kube-state-metrics, which provides metrics on Kubernetes usage.\n\nThe API is mostly compatible with the upstream PrometheusRule type from the prometheus-operator. The primary difference being that recording rules are not allowed here -- only alerting rules. For each AlertingRule resource created, a corresponding PrometheusRule will be created in the openshift-monitoring namespace. OpenShift requires admins to use the AlertingRule resource rather than the upstream type in order to allow better OpenShift specific defaulting and validation, while not modifying the upstream APIs directly.\n\nYou can find upstream API documentation for PrometheusRule resources here:\n\nhttps://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec describes the desired state of this AlertingRule object.", - Default: map[string]interface{}{}, - Ref: ref(monitoringv1.AlertingRuleSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status describes the current state of this AlertOverrides object.", - Default: map[string]interface{}{}, - Ref: ref(monitoringv1.AlertingRuleStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - monitoringv1.AlertingRuleSpec{}.OpenAPIModelName(), monitoringv1.AlertingRuleStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_monitoring_v1_AlertingRuleList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AlertingRuleList is a list of AlertingRule objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is a list of AlertingRule objects.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(monitoringv1.AlertingRule{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - monitoringv1.AlertingRule{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_monitoring_v1_AlertingRuleSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AlertingRuleSpec is the desired state of an AlertingRule resource.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "groups": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "groups is a list of grouped alerting rules. Rule groups are the unit at which Prometheus parallelizes rule processing. All rules in a single group share a configured evaluation interval. All rules in the group will be processed together on this interval, sequentially, and all rules will be processed.\n\nIt's common to group related alerting rules into a single AlertingRule resources, and within that resource, closely related alerts, or simply alerts with the same interval, into individual groups. You are also free to create AlertingRule resources with only a single rule group, but be aware that this can have a performance impact on Prometheus if the group is extremely large or has very complex query expressions to evaluate. Spreading very complex rules across multiple groups to allow them to be processed in parallel is also a common use-case.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(monitoringv1.RuleGroup{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"groups"}, - }, - }, - Dependencies: []string{ - monitoringv1.RuleGroup{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_monitoring_v1_AlertingRuleStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AlertingRuleStatus is the status of an AlertingRule resource.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "prometheusRule": { - SchemaProps: spec.SchemaProps{ - Description: "prometheusRule is the generated PrometheusRule for this AlertingRule. Each AlertingRule instance results in a generated PrometheusRule object in the same namespace, which is always the openshift-monitoring namespace.", - Default: map[string]interface{}{}, - Ref: ref(monitoringv1.PrometheusRuleRef{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - monitoringv1.PrometheusRuleRef{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_monitoring_v1_PrometheusRuleRef(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PrometheusRuleRef is a reference to an existing PrometheusRule object. Each AlertingRule instance results in a generated PrometheusRule object in the same namespace, which is always the openshift-monitoring namespace. This is used to point to the generated PrometheusRule object in the AlertingRule status.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name of the referenced PrometheusRule.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_monitoring_v1_RelabelConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RelabelConfig allows dynamic rewriting of label sets for alerts. See Prometheus documentation: - https://prometheus.io/docs/prometheus/latest/configuration/configuration/#alert_relabel_configs - https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "sourceLabels": { - SchemaProps: spec.SchemaProps{ - Description: "sourceLabels select values from existing labels. Their content is concatenated using the configured separator and matched against the configured regular expression for the 'Replace', 'Keep', and 'Drop' actions. Not allowed for actions 'LabelKeep' and 'LabelDrop'.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "separator": { - SchemaProps: spec.SchemaProps{ - Description: "separator placed between concatenated source label values. When omitted, Prometheus will use its default value of ';'.", - Type: []string{"string"}, - Format: "", - }, - }, - "targetLabel": { - SchemaProps: spec.SchemaProps{ - Description: "targetLabel to which the resulting value is written in a 'Replace' action. It is required for 'Replace' and 'HashMod' actions and forbidden for actions 'LabelKeep' and 'LabelDrop'. Regex capture groups are available.", - Type: []string{"string"}, - Format: "", - }, - }, - "regex": { - SchemaProps: spec.SchemaProps{ - Description: "regex against which the extracted value is matched. Default is: '(.*)' regex is required for all actions except 'HashMod'", - Type: []string{"string"}, - Format: "", - }, - }, - "modulus": { - SchemaProps: spec.SchemaProps{ - Description: "modulus to take of the hash of the source label values. This can be combined with the 'HashMod' action to set 'target_label' to the 'modulus' of a hash of the concatenated 'source_labels'. This is only valid if sourceLabels is not empty and action is not 'LabelKeep' or 'LabelDrop'.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "replacement": { - SchemaProps: spec.SchemaProps{ - Description: "replacement value against which a regex replace is performed if the regular expression matches. This is required if the action is 'Replace' or 'LabelMap' and forbidden for actions 'LabelKeep' and 'LabelDrop'. Regex capture groups are available. Default is: '$1'", - Type: []string{"string"}, - Format: "", - }, - }, - "action": { - SchemaProps: spec.SchemaProps{ - Description: "action to perform based on regex matching. Must be one of: 'Replace', 'Keep', 'Drop', 'HashMod', 'LabelMap', 'LabelDrop', or 'LabelKeep'. Default is: 'Replace'", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_monitoring_v1_Rule(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Rule describes an alerting rule. See Prometheus documentation: - https://www.prometheus.io/docs/prometheus/latest/configuration/alerting_rules", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "alert": { - SchemaProps: spec.SchemaProps{ - Description: "alert is the name of the alert. Must be a valid label value, i.e. may contain any Unicode character.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "expr": { - SchemaProps: spec.SchemaProps{ - Description: "expr is the PromQL expression to evaluate. Every evaluation cycle this is evaluated at the current time, and all resultant time series become pending or firing alerts. This is most often a string representing a PromQL expression, e.g.: mapi_current_pending_csr > mapi_max_pending_csr In rare cases this could be a simple integer, e.g. a simple \"1\" if the intent is to create an alert that is always firing. This is sometimes used to create an always-firing \"Watchdog\" alert in order to ensure the alerting pipeline is functional.", - Ref: ref(intstr.IntOrString{}.OpenAPIModelName()), - }, - }, - "for": { - SchemaProps: spec.SchemaProps{ - Description: "for is the time period after which alerts are considered firing after first returning results. Alerts which have not yet fired for long enough are considered pending.", - Type: []string{"string"}, - Format: "", - }, - }, - "labels": { - SchemaProps: spec.SchemaProps{ - Description: "labels to add or overwrite for each alert. The results of the PromQL expression for the alert will result in an existing set of labels for the alert, after evaluating the expression, for any label specified here with the same name as a label in that set, the label here wins and overwrites the previous value. These should typically be short identifying values that may be useful to query against. A common example is the alert severity, where one sets `severity: warning` under the `labels` key:", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "annotations": { - SchemaProps: spec.SchemaProps{ - Description: "annotations to add to each alert. These are values that can be used to store longer additional information that you won't query on, such as alert descriptions or runbook links.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"alert", "expr"}, - }, - }, - Dependencies: []string{ - intstr.IntOrString{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_monitoring_v1_RuleGroup(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RuleGroup is a list of sequentially evaluated alerting rules.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the group.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "interval": { - SchemaProps: spec.SchemaProps{ - Description: "interval is how often rules in the group are evaluated. If not specified, it defaults to the global.evaluation_interval configured in Prometheus, which itself defaults to 30 seconds. You can check if this value has been modified from the default on your cluster by inspecting the platform Prometheus configuration: The relevant field in that resource is: spec.evaluationInterval", - Type: []string{"string"}, - Format: "", - }, - }, - "rules": { - SchemaProps: spec.SchemaProps{ - Description: "rules is a list of sequentially evaluated alerting rules. Prometheus may process rule groups in parallel, but rules within a single group are always processed sequentially, and all rules are processed.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(monitoringv1.Rule{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"name", "rules"}, - }, - }, - Dependencies: []string{ - monitoringv1.Rule{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_network_v1_ClusterNetwork(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterNetwork was used by OpenShift SDN. DEPRECATED: OpenShift SDN is no longer supported and this object is no longer used in any way by OpenShift.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "network": { - SchemaProps: spec.SchemaProps{ - Description: "network is a CIDR string specifying the global overlay network's L3 space", - Type: []string{"string"}, - Format: "", - }, - }, - "hostsubnetlength": { - SchemaProps: spec.SchemaProps{ - Description: "hostsubnetlength is the number of bits of network to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pods", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "serviceNetwork": { - SchemaProps: spec.SchemaProps{ - Description: "serviceNetwork is the CIDR range that Service IP addresses are allocated from", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "pluginName": { - SchemaProps: spec.SchemaProps{ - Description: "pluginName is the name of the network plugin being used", - Type: []string{"string"}, - Format: "", - }, - }, - "clusterNetworks": { - SchemaProps: spec.SchemaProps{ - Description: "clusterNetworks is a list of ClusterNetwork objects that defines the global overlay network's L3 space by specifying a set of CIDR and netmasks that the SDN can allocate addresses from.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(networkv1.ClusterNetworkEntry{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "vxlanPort": { - SchemaProps: spec.SchemaProps{ - Description: "vxlanPort sets the VXLAN destination port used by the cluster. It is set by the master configuration file on startup and cannot be edited manually. Valid values for VXLANPort are integers 1-65535 inclusive and if unset defaults to 4789. Changing VXLANPort allows users to resolve issues between openshift SDN and other software trying to use the same VXLAN destination port.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "mtu": { - SchemaProps: spec.SchemaProps{ - Description: "mtu is the MTU for the overlay network. This should be 50 less than the MTU of the network connecting the nodes. It is normally autodetected by the cluster network operator.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - Required: []string{"serviceNetwork", "clusterNetworks"}, - }, - }, - Dependencies: []string{ - networkv1.ClusterNetworkEntry{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_network_v1_ClusterNetworkEntry(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterNetworkEntry defines an individual cluster network. The CIDRs cannot overlap with other cluster network CIDRs, CIDRs reserved for external ips, CIDRs reserved for service networks, and CIDRs reserved for ingress ips.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "CIDR": { - SchemaProps: spec.SchemaProps{ - Description: "CIDR defines the total range of a cluster networks address space.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "hostSubnetLength": { - SchemaProps: spec.SchemaProps{ - Description: "hostSubnetLength is the number of bits of the accompanying CIDR address to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pods.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - Required: []string{"CIDR", "hostSubnetLength"}, - }, - }, - } -} - -func schema_openshift_api_network_v1_ClusterNetworkList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterNetworkList is a collection of ClusterNetworks\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is the list of cluster networks", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(networkv1.ClusterNetwork{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - networkv1.ClusterNetwork{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_network_v1_EgressNetworkPolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "EgressNetworkPolicy was used by OpenShift SDN. DEPRECATED: OpenShift SDN is no longer supported and this object is no longer used in any way by OpenShift.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the current egress network policy", - Default: map[string]interface{}{}, - Ref: ref(networkv1.EgressNetworkPolicySpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - networkv1.EgressNetworkPolicySpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_network_v1_EgressNetworkPolicyList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "EgressNetworkPolicyList is a collection of EgressNetworkPolicy\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is the list of policies", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(networkv1.EgressNetworkPolicy{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - networkv1.EgressNetworkPolicy{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_network_v1_EgressNetworkPolicyPeer(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "EgressNetworkPolicyPeer specifies a target to apply egress network policy to", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "cidrSelector": { - SchemaProps: spec.SchemaProps{ - Description: "cidrSelector is the CIDR range to allow/deny traffic to. If this is set, dnsName must be unset Ideally we would have liked to use the cidr openapi format for this property. But openshift-sdn only supports v4 while specifying the cidr format allows both v4 and v6 cidrs We are therefore using a regex pattern to validate instead.", - Type: []string{"string"}, - Format: "", - }, - }, - "dnsName": { - SchemaProps: spec.SchemaProps{ - Description: "dnsName is the domain name to allow/deny traffic to. If this is set, cidrSelector must be unset", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_network_v1_EgressNetworkPolicyRule(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "EgressNetworkPolicyRule contains a single egress network policy rule", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type marks this as an \"Allow\" or \"Deny\" rule", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "to": { - SchemaProps: spec.SchemaProps{ - Description: "to is the target that traffic is allowed/denied to", - Default: map[string]interface{}{}, - Ref: ref(networkv1.EgressNetworkPolicyPeer{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type", "to"}, - }, - }, - Dependencies: []string{ - networkv1.EgressNetworkPolicyPeer{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_network_v1_EgressNetworkPolicySpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "EgressNetworkPolicySpec provides a list of policies on outgoing network traffic", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "egress": { - SchemaProps: spec.SchemaProps{ - Description: "egress contains the list of egress policy rules", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(networkv1.EgressNetworkPolicyRule{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"egress"}, - }, - }, - Dependencies: []string{ - networkv1.EgressNetworkPolicyRule{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_network_v1_HostSubnet(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "HostSubnet was used by OpenShift SDN. DEPRECATED: OpenShift SDN is no longer supported and this object is no longer used in any way by OpenShift.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "host": { - SchemaProps: spec.SchemaProps{ - Description: "host is the name of the node. (This is the same as the object's name, but both fields must be set.)", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "hostIP": { - SchemaProps: spec.SchemaProps{ - Description: "hostIP is the IP address to be used as a VTEP by other nodes in the overlay network", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "subnet": { - SchemaProps: spec.SchemaProps{ - Description: "subnet is the CIDR range of the overlay network assigned to the node for its pods", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "egressIPs": { - SchemaProps: spec.SchemaProps{ - Description: "egressIPs is the list of automatic egress IP addresses currently hosted by this node. If EgressCIDRs is empty, this can be set by hand; if EgressCIDRs is set then the master will overwrite the value here with its own allocation of egress IPs.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "egressCIDRs": { - SchemaProps: spec.SchemaProps{ - Description: "egressCIDRs is the list of CIDR ranges available for automatically assigning egress IPs to this node from. If this field is set then EgressIPs should be treated as read-only.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"host", "hostIP", "subnet"}, - }, - }, - Dependencies: []string{ - metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_network_v1_HostSubnetList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "HostSubnetList is a collection of HostSubnets\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is the list of host subnets", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(networkv1.HostSubnet{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - networkv1.HostSubnet{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_network_v1_NetNamespace(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NetNamespace was used by OpenShift SDN. DEPRECATED: OpenShift SDN is no longer supported and this object is no longer used in any way by OpenShift.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "netname": { - SchemaProps: spec.SchemaProps{ - Description: "netname is the name of the network namespace. (This is the same as the object's name, but both fields must be set.)", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "netid": { - SchemaProps: spec.SchemaProps{ - Description: "netid is the network identifier of the network namespace assigned to each overlay network packet. This can be manipulated with the \"oc adm pod-network\" commands.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - "egressIPs": { - SchemaProps: spec.SchemaProps{ - Description: "egressIPs is a list of reserved IPs that will be used as the source for external traffic coming from pods in this namespace. (If empty, external traffic will be masqueraded to Node IPs.)", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"netname", "netid"}, - }, - }, - Dependencies: []string{ - metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_network_v1_NetNamespaceList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NetNamespaceList is a collection of NetNamespaces\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is the list of net namespaces", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(networkv1.NetNamespace{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - networkv1.NetNamespace{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_network_v1alpha1_DNSNameResolver(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNSNameResolver stores the DNS name resolution information of a DNS name. It can be enabled by the TechPreviewNoUpgrade feature set. It can also be enabled by the feature gate DNSNameResolver when using CustomNoUpgrade feature set.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the desired behavior of the DNSNameResolver.", - Default: map[string]interface{}{}, - Ref: ref(networkv1alpha1.DNSNameResolverSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status is the most recently observed status of the DNSNameResolver.", - Default: map[string]interface{}{}, - Ref: ref(networkv1alpha1.DNSNameResolverStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - networkv1alpha1.DNSNameResolverSpec{}.OpenAPIModelName(), networkv1alpha1.DNSNameResolverStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_network_v1alpha1_DNSNameResolverList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNSNameResolverList contains a list of DNSNameResolvers.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items gives the list of DNSNameResolvers.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(networkv1alpha1.DNSNameResolver{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - networkv1alpha1.DNSNameResolver{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_network_v1alpha1_DNSNameResolverResolvedAddress(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNSNameResolverResolvedAddress describes the details of an IP address for a resolved DNS name.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "ip": { - SchemaProps: spec.SchemaProps{ - Description: "ip is an IP address associated with the dnsName. The validity of the IP address expires after lastLookupTime + ttlSeconds. To refresh the information, a DNS lookup will be performed upon the expiration of the IP address's validity. If the information is not refreshed then it will be removed with a grace period after the expiration of the IP address's validity.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ttlSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "ttlSeconds is the time-to-live value of the IP address. The validity of the IP address expires after lastLookupTime + ttlSeconds. On a successful DNS lookup the value of this field will be updated with the current time-to-live value. If the information is not refreshed then it will be removed with a grace period after the expiration of the IP address's validity.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "lastLookupTime": { - SchemaProps: spec.SchemaProps{ - Description: "lastLookupTime is the timestamp when the last DNS lookup was completed successfully. The validity of the IP address expires after lastLookupTime + ttlSeconds. The value of this field will be updated to the current time on a successful DNS lookup. If the information is not refreshed then it will be removed with a grace period after the expiration of the IP address's validity.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"ip", "ttlSeconds", "lastLookupTime"}, - }, - }, - Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_network_v1alpha1_DNSNameResolverResolvedName(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNSNameResolverResolvedName describes the details of a resolved DNS name.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions provide information about the state of the DNS name. Known .status.conditions.type is: \"Degraded\". \"Degraded\" is true when the last resolution failed for the DNS name, and false otherwise.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "dnsName": { - SchemaProps: spec.SchemaProps{ - Description: "dnsName is the resolved DNS name matching the name field of DNSNameResolverSpec. This field can store both regular and wildcard DNS names which match the spec.name field. When the spec.name field contains a regular DNS name, this field will store the same regular DNS name after it is successfully resolved. When the spec.name field contains a wildcard DNS name, each resolvedName.dnsName will store the regular DNS names which match the wildcard DNS name and have been successfully resolved. If the wildcard DNS name can also be successfully resolved, then this field will store the wildcard DNS name as well.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resolvedAddresses": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "ip", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resolvedAddresses gives the list of associated IP addresses and their corresponding TTLs and last lookup times for the dnsName.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(networkv1alpha1.DNSNameResolverResolvedAddress{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "resolutionFailures": { - SchemaProps: spec.SchemaProps{ - Description: "resolutionFailures keeps the count of how many consecutive times the DNS resolution failed for the dnsName. If the DNS resolution succeeds then the field will be set to zero. Upon every failure, the value of the field will be incremented by one. The details about the DNS name will be removed, if the value of resolutionFailures reaches 5 and the TTL of all the associated IP addresses have expired.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"dnsName", "resolvedAddresses"}, - }, - }, - Dependencies: []string{ - networkv1alpha1.DNSNameResolverResolvedAddress{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_network_v1alpha1_DNSNameResolverSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNSNameResolverSpec is a desired state description of DNSNameResolver.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the DNS name for which the DNS name resolution information will be stored. For a regular DNS name, only the DNS name resolution information of the regular DNS name will be stored. For a wildcard DNS name, the DNS name resolution information of all the DNS names that match the wildcard DNS name will be stored. For a wildcard DNS name, the '*' will match only one label. Additionally, only a single '*' can be used at the beginning of the wildcard DNS name. For example, '*.example.com.' will match 'sub1.example.com.' but won't match 'sub2.sub1.example.com.'", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_network_v1alpha1_DNSNameResolverStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNSNameResolverStatus defines the observed status of DNSNameResolver.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "resolvedNames": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "dnsName", - }, - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "dnsName", - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "resolvedNames contains a list of matching DNS names and their corresponding IP addresses along with their TTL and last DNS lookup times.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(networkv1alpha1.DNSNameResolverResolvedName{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - networkv1alpha1.DNSNameResolverResolvedName{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_networkoperator_v1_EgressRouter(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "EgressRouter is a feature allowing the user to define an egress router that acts as a bridge between pods and external systems. The egress router runs a service that redirects egress traffic originating from a pod or a group of pods to a remote external system or multiple destinations as per configuration.\n\nIt is consumed by the cluster-network-operator. More specifically, given an EgressRouter CR with , the CNO will create and manage: - A service called - An egress pod called - A NAD called \n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).\n\nEgressRouter is a single egressrouter pod configuration object.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "Specification of the desired egress router.", - Default: map[string]interface{}{}, - Ref: ref(networkoperatorv1.EgressRouterSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "Observed status of EgressRouter.", - Default: map[string]interface{}{}, - Ref: ref(networkoperatorv1.EgressRouterStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - networkoperatorv1.EgressRouterSpec{}.OpenAPIModelName(), networkoperatorv1.EgressRouterStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_networkoperator_v1_EgressRouterSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "EgressRouterSpec contains the configuration for an egress router. Mode, networkInterface and addresses fields must be specified along with exactly one \"Config\" that matches the mode. Each config consists of parameters specific to that mode.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "mode": { - SchemaProps: spec.SchemaProps{ - Description: "mode depicts the mode that is used for the egress router. The default mode is \"Redirect\" and is the only supported mode currently.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "redirect": { - SchemaProps: spec.SchemaProps{ - Description: "redirect represents the configuration parameters specific to redirect mode.", - Ref: ref(networkoperatorv1.RedirectConfig{}.OpenAPIModelName()), - }, - }, - "networkInterface": { - SchemaProps: spec.SchemaProps{ - Description: "Specification of interface to create/use. The default is macvlan. Currently only macvlan is supported.", - Default: map[string]interface{}{}, - Ref: ref(networkoperatorv1.EgressRouterInterface{}.OpenAPIModelName()), - }, - }, - "addresses": { - SchemaProps: spec.SchemaProps{ - Description: "List of IP addresses to configure on the pod's secondary interface.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(networkoperatorv1.EgressRouterAddress{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"mode", "networkInterface", "addresses"}, - }, - }, - Dependencies: []string{ - networkoperatorv1.EgressRouterAddress{}.OpenAPIModelName(), networkoperatorv1.EgressRouterInterface{}.OpenAPIModelName(), networkoperatorv1.RedirectConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_oauth_v1_ClusterRoleScopeRestriction(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterRoleScopeRestriction describes restrictions on cluster role scopes", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "roleNames": { - SchemaProps: spec.SchemaProps{ - Description: "roleNames is the list of cluster roles that can referenced. * means anything", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "namespaces": { - SchemaProps: spec.SchemaProps{ - Description: "namespaces is the list of namespaces that can be referenced. * means any of them (including *)", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "allowEscalation": { - SchemaProps: spec.SchemaProps{ - Description: "allowEscalation indicates whether you can request roles and their escalating resources", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"roleNames", "namespaces", "allowEscalation"}, - }, - }, - } -} - -func schema_openshift_api_oauth_v1_OAuthAccessToken(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OAuthAccessToken describes an OAuth access token. The name of a token must be prefixed with a `sha256~` string, must not contain \"/\" or \"%\" characters and must be at least 32 characters long.\n\nThe name of the token is constructed from the actual token by sha256-hashing it and using URL-safe unpadded base64-encoding (as described in RFC4648) on the hashed result.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "clientName": { - SchemaProps: spec.SchemaProps{ - Description: "clientName references the client that created this token.", - Type: []string{"string"}, - Format: "", - }, - }, - "expiresIn": { - SchemaProps: spec.SchemaProps{ - Description: "expiresIn is the seconds from CreationTime before this token expires.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "scopes": { - SchemaProps: spec.SchemaProps{ - Description: "scopes is an array of the requested scopes.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "redirectURI": { - SchemaProps: spec.SchemaProps{ - Description: "redirectURI is the redirection associated with the token.", - Type: []string{"string"}, - Format: "", - }, - }, - "userName": { - SchemaProps: spec.SchemaProps{ - Description: "userName is the user name associated with this token", - Type: []string{"string"}, - Format: "", - }, - }, - "userUID": { - SchemaProps: spec.SchemaProps{ - Description: "userUID is the unique UID associated with this token", - Type: []string{"string"}, - Format: "", - }, - }, - "authorizeToken": { - SchemaProps: spec.SchemaProps{ - Description: "authorizeToken contains the token that authorized this token", - Type: []string{"string"}, - Format: "", - }, - }, - "refreshToken": { - SchemaProps: spec.SchemaProps{ - Description: "refreshToken is the value by which this token can be renewed. Can be blank.", - Type: []string{"string"}, - Format: "", - }, - }, - "inactivityTimeoutSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "inactivityTimeoutSeconds is the value in seconds, from the CreationTimestamp, after which this token can no longer be used. The value is automatically incremented when the token is used.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_oauth_v1_OAuthAccessTokenList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OAuthAccessTokenList is a collection of OAuth access tokens\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is the list of OAuth access tokens", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(oauthv1.OAuthAccessToken{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - oauthv1.OAuthAccessToken{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_oauth_v1_OAuthAuthorizeToken(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OAuthAuthorizeToken describes an OAuth authorization token\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "clientName": { - SchemaProps: spec.SchemaProps{ - Description: "clientName references the client that created this token.", - Type: []string{"string"}, - Format: "", - }, - }, - "expiresIn": { - SchemaProps: spec.SchemaProps{ - Description: "expiresIn is the seconds from CreationTime before this token expires.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "scopes": { - SchemaProps: spec.SchemaProps{ - Description: "scopes is an array of the requested scopes.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "redirectURI": { - SchemaProps: spec.SchemaProps{ - Description: "redirectURI is the redirection associated with the token.", - Type: []string{"string"}, - Format: "", - }, - }, - "state": { - SchemaProps: spec.SchemaProps{ - Description: "state data from request", - Type: []string{"string"}, - Format: "", - }, - }, - "userName": { - SchemaProps: spec.SchemaProps{ - Description: "userName is the user name associated with this token", - Type: []string{"string"}, - Format: "", - }, - }, - "userUID": { - SchemaProps: spec.SchemaProps{ - Description: "userUID is the unique UID associated with this token. UserUID and UserName must both match for this token to be valid.", - Type: []string{"string"}, - Format: "", - }, - }, - "codeChallenge": { - SchemaProps: spec.SchemaProps{ - Description: "codeChallenge is the optional code_challenge associated with this authorization code, as described in rfc7636", - Type: []string{"string"}, - Format: "", - }, - }, - "codeChallengeMethod": { - SchemaProps: spec.SchemaProps{ - Description: "codeChallengeMethod is the optional code_challenge_method associated with this authorization code, as described in rfc7636", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_oauth_v1_OAuthAuthorizeTokenList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OAuthAuthorizeTokenList is a collection of OAuth authorization tokens\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is the list of OAuth authorization tokens", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(oauthv1.OAuthAuthorizeToken{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - oauthv1.OAuthAuthorizeToken{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_oauth_v1_OAuthClient(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OAuthClient describes an OAuth client\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "secret": { - SchemaProps: spec.SchemaProps{ - Description: "secret is the unique secret associated with a client", - Type: []string{"string"}, - Format: "", - }, - }, - "additionalSecrets": { - SchemaProps: spec.SchemaProps{ - Description: "additionalSecrets holds other secrets that may be used to identify the client. This is useful for rotation and for service account token validation", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "respondWithChallenges": { - SchemaProps: spec.SchemaProps{ - Description: "respondWithChallenges indicates whether the client wants authentication needed responses made in the form of challenges instead of redirects", - Type: []string{"boolean"}, - Format: "", - }, - }, - "redirectURIs": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "redirectURIs is the valid redirection URIs associated with a client", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "grantMethod": { - SchemaProps: spec.SchemaProps{ - Description: "grantMethod is a required field which determines how to handle grants for this client. Valid grant handling methods are:\n - auto: always approves grant requests, useful for trusted clients\n - prompt: prompts the end user for approval of grant requests, useful for third-party clients", - Type: []string{"string"}, - Format: "", - }, - }, - "scopeRestrictions": { - SchemaProps: spec.SchemaProps{ - Description: "scopeRestrictions describes which scopes this client can request. Each requested scope is checked against each restriction. If any restriction matches, then the scope is allowed. If no restriction matches, then the scope is denied.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(oauthv1.ScopeRestriction{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "accessTokenMaxAgeSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "accessTokenMaxAgeSeconds overrides the default access token max age for tokens granted to this client. 0 means no expiration.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "accessTokenInactivityTimeoutSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "accessTokenInactivityTimeoutSeconds overrides the default token inactivity timeout for tokens granted to this client. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. This value needs to be set only if the default set in configuration is not appropriate for this client. Valid values are: - 0: Tokens for this client never time out - X: Tokens time out if there is no activity for X seconds The current minimum allowed value for X is 300 (5 minutes)\n\nWARNING: existing tokens' timeout will not be affected (lowered) by changing this value", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - }, - }, - Dependencies: []string{ - oauthv1.ScopeRestriction{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_oauth_v1_OAuthClientAuthorization(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OAuthClientAuthorization describes an authorization created by an OAuth client\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "clientName": { - SchemaProps: spec.SchemaProps{ - Description: "clientName references the client that created this authorization", - Type: []string{"string"}, - Format: "", - }, - }, - "userName": { - SchemaProps: spec.SchemaProps{ - Description: "userName is the user name that authorized this client", - Type: []string{"string"}, - Format: "", - }, - }, - "userUID": { - SchemaProps: spec.SchemaProps{ - Description: "userUID is the unique UID associated with this authorization. UserUID and UserName must both match for this authorization to be valid.", - Type: []string{"string"}, - Format: "", - }, - }, - "scopes": { - SchemaProps: spec.SchemaProps{ - Description: "scopes is an array of the granted scopes.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_oauth_v1_OAuthClientAuthorizationList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OAuthClientAuthorizationList is a collection of OAuth client authorizations\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is the list of OAuth client authorizations", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(oauthv1.OAuthClientAuthorization{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - oauthv1.OAuthClientAuthorization{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_oauth_v1_OAuthClientList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OAuthClientList is a collection of OAuth clients\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is the list of OAuth clients", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(oauthv1.OAuthClient{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - oauthv1.OAuthClient{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_oauth_v1_OAuthRedirectReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OAuthRedirectReference is a reference to an OAuth redirect object.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "reference": { - SchemaProps: spec.SchemaProps{ - Description: "The reference to an redirect object in the current namespace.", - Default: map[string]interface{}{}, - Ref: ref(oauthv1.RedirectReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - oauthv1.RedirectReference{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_oauth_v1_RedirectReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RedirectReference specifies the target in the current namespace that resolves into redirect URIs. Only the 'Route' kind is currently allowed.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "group": { - SchemaProps: spec.SchemaProps{ - Description: "The group of the target that is being referred to.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "The kind of the target that is being referred to. Currently, only 'Route' is allowed.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "The name of the target that is being referred to. e.g. name of the Route.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"group", "kind", "name"}, - }, - }, - } -} - -func schema_openshift_api_oauth_v1_ScopeRestriction(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ScopeRestriction describe one restriction on scopes. Exactly one option must be non-nil.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "literals": { - SchemaProps: spec.SchemaProps{ - Description: "ExactValues means the scope has to match a particular set of strings exactly", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "clusterRole": { - SchemaProps: spec.SchemaProps{ - Description: "clusterRole describes a set of restrictions for cluster role scoping.", - Ref: ref(oauthv1.ClusterRoleScopeRestriction{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - oauthv1.ClusterRoleScopeRestriction{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_oauth_v1_UserOAuthAccessToken(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "UserOAuthAccessToken is a virtual resource to mirror OAuthAccessTokens to the user the access token was issued for", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "clientName": { - SchemaProps: spec.SchemaProps{ - Description: "clientName references the client that created this token.", - Type: []string{"string"}, - Format: "", - }, - }, - "expiresIn": { - SchemaProps: spec.SchemaProps{ - Description: "expiresIn is the seconds from CreationTime before this token expires.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "scopes": { - SchemaProps: spec.SchemaProps{ - Description: "scopes is an array of the requested scopes.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "redirectURI": { - SchemaProps: spec.SchemaProps{ - Description: "redirectURI is the redirection associated with the token.", - Type: []string{"string"}, - Format: "", - }, - }, - "userName": { - SchemaProps: spec.SchemaProps{ - Description: "userName is the user name associated with this token", - Type: []string{"string"}, - Format: "", - }, - }, - "userUID": { - SchemaProps: spec.SchemaProps{ - Description: "userUID is the unique UID associated with this token", - Type: []string{"string"}, - Format: "", - }, - }, - "authorizeToken": { - SchemaProps: spec.SchemaProps{ - Description: "authorizeToken contains the token that authorized this token", - Type: []string{"string"}, - Format: "", - }, - }, - "refreshToken": { - SchemaProps: spec.SchemaProps{ - Description: "refreshToken is the value by which this token can be renewed. Can be blank.", - Type: []string{"string"}, - Format: "", - }, - }, - "inactivityTimeoutSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "inactivityTimeoutSeconds is the value in seconds, from the CreationTimestamp, after which this token can no longer be used. The value is automatically incremented when the token is used.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_oauth_v1_UserOAuthAccessTokenList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "UserOAuthAccessTokenList is a collection of access tokens issued on behalf of the requesting user\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(oauthv1.UserOAuthAccessToken{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - oauthv1.UserOAuthAccessToken{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_APIServers(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "perGroupOptions": { - SchemaProps: spec.SchemaProps{ - Description: "perGroupOptions is a list of enabled/disabled API servers in addition to the defaults", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.PerGroupOptions{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"perGroupOptions"}, - }, - }, - Dependencies: []string{ - openshiftcontrolplanev1.PerGroupOptions{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_BuildControllerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "imageTemplateFormat": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.ImageConfig{}.OpenAPIModelName()), - }, - }, - "buildDefaults": { - SchemaProps: spec.SchemaProps{ - Ref: ref(openshiftcontrolplanev1.BuildDefaultsConfig{}.OpenAPIModelName()), - }, - }, - "buildOverrides": { - SchemaProps: spec.SchemaProps{ - Ref: ref(openshiftcontrolplanev1.BuildOverridesConfig{}.OpenAPIModelName()), - }, - }, - "additionalTrustedCA": { - SchemaProps: spec.SchemaProps{ - Description: "additionalTrustedCA is a path to a pem bundle file containing additional CAs that should be trusted for image pushes and pulls during builds.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"imageTemplateFormat", "buildDefaults", "buildOverrides", "additionalTrustedCA"}, - }, - }, - Dependencies: []string{ - openshiftcontrolplanev1.BuildDefaultsConfig{}.OpenAPIModelName(), openshiftcontrolplanev1.BuildOverridesConfig{}.OpenAPIModelName(), openshiftcontrolplanev1.ImageConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_BuildDefaultsConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildDefaultsConfig controls the default information for Builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "gitHTTPProxy": { - SchemaProps: spec.SchemaProps{ - Description: "gitHTTPProxy is the location of the HTTPProxy for Git source", - Type: []string{"string"}, - Format: "", - }, - }, - "gitHTTPSProxy": { - SchemaProps: spec.SchemaProps{ - Description: "gitHTTPSProxy is the location of the HTTPSProxy for Git source", - Type: []string{"string"}, - Format: "", - }, - }, - "gitNoProxy": { - SchemaProps: spec.SchemaProps{ - Description: "gitNoProxy is the list of domains for which the proxy should not be used", - Type: []string{"string"}, - Format: "", - }, - }, - "env": { - SchemaProps: spec.SchemaProps{ - Description: "env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.EnvVar{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "sourceStrategyDefaults": { - SchemaProps: spec.SchemaProps{ - Description: "sourceStrategyDefaults are default values that apply to builds using the source strategy.", - Ref: ref(openshiftcontrolplanev1.SourceStrategyDefaultsConfig{}.OpenAPIModelName()), - }, - }, - "imageLabels": { - SchemaProps: spec.SchemaProps{ - Description: "imageLabels is a list of labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.ImageLabel{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector is a selector which must be true for the build pod to fit on a node", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "annotations": { - SchemaProps: spec.SchemaProps{ - Description: "annotations are annotations that will be added to the build pod", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "resources": { - SchemaProps: spec.SchemaProps{ - Description: "resources defines resource requirements to execute the build.", - Default: map[string]interface{}{}, - Ref: ref(corev1.ResourceRequirements{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.ImageLabel{}.OpenAPIModelName(), openshiftcontrolplanev1.SourceStrategyDefaultsConfig{}.OpenAPIModelName(), corev1.EnvVar{}.OpenAPIModelName(), corev1.ResourceRequirements{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_BuildOverridesConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BuildOverridesConfig controls override settings for builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "forcePull": { - SchemaProps: spec.SchemaProps{ - Description: "forcePull overrides, if set, the equivalent value in the builds, i.e. false disables force pull for all builds, true enables force pull for all builds, independently of what each build specifies itself", - Type: []string{"boolean"}, - Format: "", - }, - }, - "imageLabels": { - SchemaProps: spec.SchemaProps{ - Description: "imageLabels is a list of labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(buildv1.ImageLabel{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector is a selector which must be true for the build pod to fit on a node", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "annotations": { - SchemaProps: spec.SchemaProps{ - Description: "annotations are annotations that will be added to the build pod", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "tolerations": { - SchemaProps: spec.SchemaProps{ - Description: "tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.Toleration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - buildv1.ImageLabel{}.OpenAPIModelName(), corev1.Toleration{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_ClusterNetworkEntry(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterNetworkEntry defines an individual cluster network. The CIDRs cannot overlap with other cluster network CIDRs, CIDRs reserved for external ips, CIDRs reserved for service networks, and CIDRs reserved for ingress ips.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "cidr": { - SchemaProps: spec.SchemaProps{ - Description: "cidr defines the total range of a cluster networks address space.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "hostSubnetLength": { - SchemaProps: spec.SchemaProps{ - Description: "hostSubnetLength is the number of bits of the accompanying CIDR address to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pod.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - Required: []string{"cidr", "hostSubnetLength"}, - }, - }, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_DeployerControllerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "imageTemplateFormat": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.ImageConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"imageTemplateFormat"}, - }, - }, - Dependencies: []string{ - openshiftcontrolplanev1.ImageConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_DockerPullSecretControllerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "registryURLs": { - SchemaProps: spec.SchemaProps{ - Description: "registryURLs is a list of urls that the docker pull secrets should be valid for.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "internalRegistryHostname": { - SchemaProps: spec.SchemaProps{ - Description: "internalRegistryHostname is the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format. Docker pull secrets will be generated for this registry.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"registryURLs", "internalRegistryHostname"}, - }, - }, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_FrontProxyConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "clientCA": { - SchemaProps: spec.SchemaProps{ - Description: "clientCA is a path to the CA bundle to use to verify the common name of the front proxy's client cert", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "allowedNames": { - SchemaProps: spec.SchemaProps{ - Description: "allowedNames is an optional list of common names to require a match from.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "usernameHeaders": { - SchemaProps: spec.SchemaProps{ - Description: "usernameHeaders is the set of headers to check for the username", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "groupHeaders": { - SchemaProps: spec.SchemaProps{ - Description: "groupHeaders is the set of headers to check for groups", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "extraHeaderPrefixes": { - SchemaProps: spec.SchemaProps{ - Description: "extraHeaderPrefixes is the set of header prefixes to check for user extra", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"clientCA", "allowedNames", "usernameHeaders", "groupHeaders", "extraHeaderPrefixes"}, - }, - }, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_ImageConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ImageConfig holds the necessary configuration options for building image names for system components", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "format": { - SchemaProps: spec.SchemaProps{ - Description: "format is the format of the name to be built for the system component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "latest": { - SchemaProps: spec.SchemaProps{ - Description: "latest determines if the latest tag will be pulled from the registry", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"format", "latest"}, - }, - }, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_ImageImportControllerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "maxScheduledImageImportsPerMinute": { - SchemaProps: spec.SchemaProps{ - Description: "maxScheduledImageImportsPerMinute is the maximum number of image streams that will be imported in the background per minute. The default value is 60. Set to -1 for unlimited.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "disableScheduledImport": { - SchemaProps: spec.SchemaProps{ - Description: "disableScheduledImport allows scheduled background import of images to be disabled.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "scheduledImageImportMinimumIntervalSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "scheduledImageImportMinimumIntervalSeconds is the minimum number of seconds that can elapse between when image streams scheduled for background import are checked against the upstream repository. The default value is 15 minutes.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"maxScheduledImageImportsPerMinute", "disableScheduledImport", "scheduledImageImportMinimumIntervalSeconds"}, - }, - }, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_ImagePolicyConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "maxImagesBulkImportedPerRepository": { - SchemaProps: spec.SchemaProps{ - Description: "maxImagesBulkImportedPerRepository controls the number of images that are imported when a user does a bulk import of a container repository. This number is set low to prevent users from importing large numbers of images accidentally. Set -1 for no limit.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "allowedRegistriesForImport": { - SchemaProps: spec.SchemaProps{ - Description: "allowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.RegistryLocation{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "internalRegistryHostname": { - SchemaProps: spec.SchemaProps{ - Description: "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "externalRegistryHostnames": { - SchemaProps: spec.SchemaProps{ - Description: "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "additionalTrustedCA": { - SchemaProps: spec.SchemaProps{ - Description: "additionalTrustedCA is a path to a pem bundle file containing additional CAs that should be trusted during imagestream import.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "imageStreamImportMode": { - SchemaProps: spec.SchemaProps{ - Description: "imageStreamImportMode provides the import mode value for imagestreams. It can be `Legacy` or `PreserveOriginal`. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.If this value is specified, this setting is applied to all newly created imagestreams which do not have the value set.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.", - Default: "", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Legacy", "PreserveOriginal"}, - }, - }, - }, - Required: []string{"maxImagesBulkImportedPerRepository", "allowedRegistriesForImport", "internalRegistryHostname", "externalRegistryHostnames", "additionalTrustedCA"}, - }, - }, - Dependencies: []string{ - openshiftcontrolplanev1.RegistryLocation{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_IngressControllerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "ingressIPNetworkCIDR": { - SchemaProps: spec.SchemaProps{ - Description: "ingressIPNetworkCIDR controls the range to assign ingress ips from for services of type LoadBalancer on bare metal. If empty, ingress ips will not be assigned. It may contain a single CIDR that will be allocated from. For security reasons, you should ensure that this range does not overlap with the CIDRs reserved for external ips, nodes, pods, or services.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"ingressIPNetworkCIDR"}, - }, - }, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_JenkinsPipelineConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "JenkinsPipelineConfig holds configuration for the Jenkins pipeline strategy", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "autoProvisionEnabled": { - SchemaProps: spec.SchemaProps{ - Description: "autoProvisionEnabled determines whether a Jenkins server will be spawned from the provided template when the first build config in the project with type JenkinsPipeline is created. When not specified this option defaults to true.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "templateNamespace": { - SchemaProps: spec.SchemaProps{ - Description: "templateNamespace contains the namespace name where the Jenkins template is stored", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "templateName": { - SchemaProps: spec.SchemaProps{ - Description: "templateName is the name of the default Jenkins template", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "serviceName": { - SchemaProps: spec.SchemaProps{ - Description: "serviceName is the name of the Jenkins service OpenShift uses to detect whether a Jenkins pipeline handler has already been installed in a project. This value *must* match a service name in the provided template.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "parameters": { - SchemaProps: spec.SchemaProps{ - Description: "parameters specifies a set of optional parameters to the Jenkins template.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"autoProvisionEnabled", "templateNamespace", "templateName", "serviceName", "parameters"}, - }, - }, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_NetworkControllerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MasterNetworkConfig to be passed to the compiled in network plugin", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "networkPluginName": { - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clusterNetworks": { - SchemaProps: spec.SchemaProps{ - Description: "clusterNetworks contains a list of cluster networks that defines the global overlay networks L3 space.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.ClusterNetworkEntry{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "serviceNetworkCIDR": { - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "vxlanPort": { - SchemaProps: spec.SchemaProps{ - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - Required: []string{"networkPluginName", "clusterNetworks", "serviceNetworkCIDR", "vxlanPort"}, - }, - }, - Dependencies: []string{ - openshiftcontrolplanev1.ClusterNetworkEntry{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_OpenShiftAPIServerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "servingInfo": { - SchemaProps: spec.SchemaProps{ - Description: "servingInfo describes how to start serving", - Default: map[string]interface{}{}, - Ref: ref(configv1.HTTPServingInfo{}.OpenAPIModelName()), - }, - }, - "corsAllowedOrigins": { - SchemaProps: spec.SchemaProps{ - Description: "corsAllowedOrigins", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "auditConfig": { - SchemaProps: spec.SchemaProps{ - Description: "auditConfig describes how to configure audit information", - Default: map[string]interface{}{}, - Ref: ref(configv1.AuditConfig{}.OpenAPIModelName()), - }, - }, - "storageConfig": { - SchemaProps: spec.SchemaProps{ - Description: "storageConfig contains information about how to use", - Default: map[string]interface{}{}, - Ref: ref(configv1.EtcdStorageConfig{}.OpenAPIModelName()), - }, - }, - "admission": { - SchemaProps: spec.SchemaProps{ - Description: "admissionConfig holds information about how to configure admission.", - Default: map[string]interface{}{}, - Ref: ref(configv1.AdmissionConfig{}.OpenAPIModelName()), - }, - }, - "kubeClientConfig": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.KubeClientConfig{}.OpenAPIModelName()), - }, - }, - "aggregatorConfig": { - SchemaProps: spec.SchemaProps{ - Description: "aggregatorConfig contains information about how to verify the aggregator front proxy", - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.FrontProxyConfig{}.OpenAPIModelName()), - }, - }, - "imagePolicyConfig": { - SchemaProps: spec.SchemaProps{ - Description: "imagePolicyConfig feeds the image policy admission plugin", - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.ImagePolicyConfig{}.OpenAPIModelName()), - }, - }, - "projectConfig": { - SchemaProps: spec.SchemaProps{ - Description: "projectConfig feeds an admission plugin", - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.ProjectConfig{}.OpenAPIModelName()), - }, - }, - "routingConfig": { - SchemaProps: spec.SchemaProps{ - Description: "routingConfig holds information about routing and route generation", - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.RoutingConfig{}.OpenAPIModelName()), - }, - }, - "serviceAccountOAuthGrantMethod": { - SchemaProps: spec.SchemaProps{ - Description: "serviceAccountOAuthGrantMethod is used for determining client authorization for service account oauth client. It must be either: deny, prompt, or \"\"", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "jenkinsPipelineConfig": { - SchemaProps: spec.SchemaProps{ - Description: "jenkinsPipelineConfig holds information about the default Jenkins template used for JenkinsPipeline build strategy.", - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.JenkinsPipelineConfig{}.OpenAPIModelName()), - }, - }, - "cloudProviderFile": { - SchemaProps: spec.SchemaProps{ - Description: "cloudProviderFile points to the cloud config file", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "apiServerArguments": { - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - "apiServers": { - SchemaProps: spec.SchemaProps{ - Description: "apiServers holds information about enabled/disabled API servers", - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.APIServers{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"servingInfo", "corsAllowedOrigins", "auditConfig", "storageConfig", "admission", "kubeClientConfig", "aggregatorConfig", "imagePolicyConfig", "projectConfig", "routingConfig", "serviceAccountOAuthGrantMethod", "jenkinsPipelineConfig", "cloudProviderFile", "apiServerArguments", "apiServers"}, - }, - }, - Dependencies: []string{ - configv1.AdmissionConfig{}.OpenAPIModelName(), configv1.AuditConfig{}.OpenAPIModelName(), configv1.EtcdStorageConfig{}.OpenAPIModelName(), configv1.HTTPServingInfo{}.OpenAPIModelName(), configv1.KubeClientConfig{}.OpenAPIModelName(), openshiftcontrolplanev1.APIServers{}.OpenAPIModelName(), openshiftcontrolplanev1.FrontProxyConfig{}.OpenAPIModelName(), openshiftcontrolplanev1.ImagePolicyConfig{}.OpenAPIModelName(), openshiftcontrolplanev1.JenkinsPipelineConfig{}.OpenAPIModelName(), openshiftcontrolplanev1.ProjectConfig{}.OpenAPIModelName(), openshiftcontrolplanev1.RoutingConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_OpenShiftControllerManagerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "servingInfo": { - SchemaProps: spec.SchemaProps{ - Description: "servingInfo describes how to start serving", - Ref: ref(configv1.HTTPServingInfo{}.OpenAPIModelName()), - }, - }, - "leaderElection": { - SchemaProps: spec.SchemaProps{ - Description: "leaderElection defines the configuration for electing a controller instance to make changes to the cluster. If unspecified, the ControllerTTL value is checked to determine whether the legacy direct etcd election code will be used.", - Default: map[string]interface{}{}, - Ref: ref(configv1.LeaderElection{}.OpenAPIModelName()), - }, - }, - "controllers": { - SchemaProps: spec.SchemaProps{ - Description: "controllers is a list of controllers to enable. '*' enables all on-by-default controllers, 'foo' enables the controller \"+ named 'foo', '-foo' disables the controller named 'foo'. Defaults to \"*\".", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "resourceQuota": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.ResourceQuotaControllerConfig{}.OpenAPIModelName()), - }, - }, - "serviceServingCert": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.ServiceServingCert{}.OpenAPIModelName()), - }, - }, - "deployer": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.DeployerControllerConfig{}.OpenAPIModelName()), - }, - }, - "build": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.BuildControllerConfig{}.OpenAPIModelName()), - }, - }, - "serviceAccount": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.ServiceAccountControllerConfig{}.OpenAPIModelName()), - }, - }, - "dockerPullSecret": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.DockerPullSecretControllerConfig{}.OpenAPIModelName()), - }, - }, - "network": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.NetworkControllerConfig{}.OpenAPIModelName()), - }, - }, - "ingress": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.IngressControllerConfig{}.OpenAPIModelName()), - }, - }, - "imageImport": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.ImageImportControllerConfig{}.OpenAPIModelName()), - }, - }, - "securityAllocator": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(openshiftcontrolplanev1.SecurityAllocator{}.OpenAPIModelName()), - }, - }, - "featureGates": { - SchemaProps: spec.SchemaProps{ - Description: "featureGates are the set of extra OpenShift feature gates for openshift-controller-manager. These feature gates can be used to enable features that are tech preview or otherwise not available on OpenShift by default.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"servingInfo", "leaderElection", "controllers", "resourceQuota", "serviceServingCert", "deployer", "build", "serviceAccount", "dockerPullSecret", "network", "ingress", "imageImport", "securityAllocator", "featureGates"}, - }, - }, - Dependencies: []string{ - configv1.HTTPServingInfo{}.OpenAPIModelName(), configv1.LeaderElection{}.OpenAPIModelName(), openshiftcontrolplanev1.BuildControllerConfig{}.OpenAPIModelName(), openshiftcontrolplanev1.DeployerControllerConfig{}.OpenAPIModelName(), openshiftcontrolplanev1.DockerPullSecretControllerConfig{}.OpenAPIModelName(), openshiftcontrolplanev1.ImageImportControllerConfig{}.OpenAPIModelName(), openshiftcontrolplanev1.IngressControllerConfig{}.OpenAPIModelName(), openshiftcontrolplanev1.NetworkControllerConfig{}.OpenAPIModelName(), openshiftcontrolplanev1.ResourceQuotaControllerConfig{}.OpenAPIModelName(), openshiftcontrolplanev1.SecurityAllocator{}.OpenAPIModelName(), openshiftcontrolplanev1.ServiceAccountControllerConfig{}.OpenAPIModelName(), openshiftcontrolplanev1.ServiceServingCert{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_PerGroupOptions(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is an API server name (see OpenShiftAPIserverName typed constants for a complete list of available API servers).", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "enabledVersions": { - SchemaProps: spec.SchemaProps{ - Description: "enabledVersions is a list of versions that must be enabled in addition to the defaults. Must not collide with the list of disabled versions", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "disabledVersions": { - SchemaProps: spec.SchemaProps{ - Description: "disabledVersions is a list of versions that must be disabled in addition to the defaults. Must not collide with the list of enabled versions", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"name", "enabledVersions", "disabledVersions"}, - }, - }, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_ProjectConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "defaultNodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "defaultNodeSelector holds default project node label selector", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "projectRequestMessage": { - SchemaProps: spec.SchemaProps{ - Description: "projectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "projectRequestTemplate": { - SchemaProps: spec.SchemaProps{ - Description: "projectRequestTemplate is the template to use for creating projects in response to projectrequest. It is in the format namespace/template and it is optional. If it is not specified, a default template is used.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"defaultNodeSelector", "projectRequestMessage", "projectRequestTemplate"}, - }, - }, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_RegistryLocation(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "domainName": { - SchemaProps: spec.SchemaProps{ - Description: "domainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "insecure": { - SchemaProps: spec.SchemaProps{ - Description: "insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"domainName"}, - }, - }, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_ResourceQuotaControllerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "concurrentSyncs": { - SchemaProps: spec.SchemaProps{ - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "syncPeriod": { - SchemaProps: spec.SchemaProps{ - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - "minResyncPeriod": { - SchemaProps: spec.SchemaProps{ - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"concurrentSyncs", "syncPeriod", "minResyncPeriod"}, - }, - }, - Dependencies: []string{ - metav1.Duration{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_RoutingConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RoutingConfig holds the necessary configuration options for routing to subdomains", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "subdomain": { - SchemaProps: spec.SchemaProps{ - Description: "subdomain is the suffix appended to $service.$namespace. to form the default route hostname DEPRECATED: This field is being replaced by routers setting their own defaults. This is the \"default\" route.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"subdomain"}, - }, - }, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_SecurityAllocator(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SecurityAllocator controls the automatic allocation of UIDs and MCS labels to a project. If nil, allocation is disabled.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "uidAllocatorRange": { - SchemaProps: spec.SchemaProps{ - Description: "uidAllocatorRange defines the total set of Unix user IDs (UIDs) that will be allocated to projects automatically, and the size of the block each namespace gets. For example, 1000-1999/10 will allocate ten UIDs per namespace, and will be able to allocate up to 100 blocks before running out of space. The default is to allocate from 1 billion to 2 billion in 10k blocks (which is the expected size of the ranges container images will use once user namespaces are started).", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "mcsAllocatorRange": { - SchemaProps: spec.SchemaProps{ - Description: "mcsAllocatorRange defines the range of MCS categories that will be assigned to namespaces. The format is \"/[,]\". The default is \"s0/2\" and will allocate from c0 -> c1023, which means a total of 535k labels are available (1024 choose 2 ~ 535k). If this value is changed after startup, new projects may receive labels that are already allocated to other projects. Prefix may be any valid SELinux set of terms (including user, role, and type), although leaving them as the default will allow the server to set them automatically.\n\nExamples: * s0:/2 - Allocate labels from s0:c0,c0 to s0:c511,c511 * s0:/2,512 - Allocate labels from s0:c0,c0,c0 to s0:c511,c511,511", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "mcsLabelsPerProject": { - SchemaProps: spec.SchemaProps{ - Description: "mcsLabelsPerProject defines the number of labels that should be reserved per project. The default is 5 to match the default UID and MCS ranges (100k namespaces, 535k/5 labels).", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"uidAllocatorRange", "mcsAllocatorRange", "mcsLabelsPerProject"}, - }, - }, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_ServiceAccountControllerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managedNames": { - SchemaProps: spec.SchemaProps{ - Description: "managedNames is a list of service account names that will be auto-created in every namespace. If no names are specified, the ServiceAccountsController will not be started.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"managedNames"}, - }, - }, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_ServiceServingCert(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "signer": { - SchemaProps: spec.SchemaProps{ - Description: "signer holds the signing information used to automatically sign serving certificates. If this value is nil, then certs are not signed automatically.", - Ref: ref(configv1.CertInfo{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"signer"}, - }, - }, - Dependencies: []string{ - configv1.CertInfo{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_openshiftcontrolplane_v1_SourceStrategyDefaultsConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SourceStrategyDefaultsConfig contains values that apply to builds using the source strategy.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "incremental": { - SchemaProps: spec.SchemaProps{ - Description: "incremental indicates if s2i build strategies should perform an incremental build or not", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_AWSCSIDriverConfigSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSCSIDriverConfigSpec defines properties that can be configured for the AWS CSI driver.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kmsKeyARN": { - SchemaProps: spec.SchemaProps{ - Description: "kmsKeyARN sets the cluster default storage class to encrypt volumes with a user-defined KMS key, rather than the default KMS key used by AWS. The value may be either the ARN or Alias ARN of a KMS key.\n\nThe ARN must follow the format: arn::kms:::(key|alias)/, where: is the AWS partition (aws, aws-cn, aws-us-gov, aws-iso, aws-iso-b, aws-iso-e, aws-iso-f, or aws-eusc), is the AWS region, is a 12-digit numeric identifier for the AWS account, is the KMS key ID or alias name.", - Type: []string{"string"}, - Format: "", - }, - }, - "efsVolumeMetrics": { - SchemaProps: spec.SchemaProps{ - Description: "efsVolumeMetrics sets the configuration for collecting metrics from EFS volumes used by the EFS CSI Driver.", - Ref: ref(operatorv1.AWSEFSVolumeMetrics{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.AWSEFSVolumeMetrics{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_AWSClassicLoadBalancerParameters(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSClassicLoadBalancerParameters holds configuration parameters for an AWS Classic load balancer.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "connectionIdleTimeout": { - SchemaProps: spec.SchemaProps{ - Description: "connectionIdleTimeout specifies the maximum time period that a connection may be idle before the load balancer closes the connection. The value must be parseable as a time duration value; see . A nil or zero value means no opinion, in which case a default value is used. The default value for this field is 60s. This default is subject to change.", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - "subnets": { - SchemaProps: spec.SchemaProps{ - Description: "subnets specifies the subnets to which the load balancer will attach. The subnets may be specified by either their ID or name. The total number of subnets is limited to 10.\n\nIn order for the load balancer to be provisioned with subnets, each subnet must exist, each subnet must be from a different availability zone, and the load balancer service must be recreated to pick up new values.\n\nWhen omitted from the spec, the subnets will be auto-discovered for each availability zone. Auto-discovered subnets are not reported in the status of the IngressController object.", - Ref: ref(operatorv1.AWSSubnets{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.AWSSubnets{}.OpenAPIModelName(), metav1.Duration{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_AWSEFSVolumeMetrics(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSEFSVolumeMetrics defines the configuration for volume metrics in the EFS CSI Driver.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "state": { - SchemaProps: spec.SchemaProps{ - Description: "state defines the state of metric collection in the AWS EFS CSI Driver. This field is required and must be set to one of the following values: Disabled or RecursiveWalk. Disabled means no metrics collection will be performed. This is the default value. RecursiveWalk means the AWS EFS CSI Driver will recursively scan volumes to collect metrics. This process may result in high CPU and memory usage, depending on the volume size.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "recursiveWalk": { - SchemaProps: spec.SchemaProps{ - Description: "recursiveWalk provides additional configuration for collecting volume metrics in the AWS EFS CSI Driver when the state is set to RecursiveWalk.", - Ref: ref(operatorv1.AWSEFSVolumeMetricsRecursiveWalkConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"state"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "state", - "fields-to-discriminateBy": map[string]interface{}{ - "recursiveWalk": "RecursiveWalk", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.AWSEFSVolumeMetricsRecursiveWalkConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_AWSEFSVolumeMetricsRecursiveWalkConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSEFSVolumeMetricsRecursiveWalkConfig defines options for volume metrics in the EFS CSI Driver.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "refreshPeriodMinutes": { - SchemaProps: spec.SchemaProps{ - Description: "refreshPeriodMinutes specifies the frequency, in minutes, at which volume metrics are refreshed. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 240. The valid range is from 1 to 43200 minutes (30 days).", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "fsRateLimit": { - SchemaProps: spec.SchemaProps{ - Description: "fsRateLimit defines the rate limit, in goroutines per file system, for processing volume metrics. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 5. The valid range is from 1 to 100 goroutines.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_AWSLoadBalancerParameters(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSLoadBalancerParameters provides configuration settings that are specific to AWS load balancers.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the type of AWS load balancer to instantiate for an ingresscontroller.\n\nValid values are:\n\n* \"Classic\": A Classic Load Balancer that makes routing decisions at either\n the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See\n the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb\n\n* \"NLB\": A Network Load Balancer that makes routing decisions at the\n transport layer (TCP/SSL). See the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "classicLoadBalancer": { - SchemaProps: spec.SchemaProps{ - Description: "classicLoadBalancerParameters holds configuration parameters for an AWS classic load balancer. Present only if type is Classic.", - Ref: ref(operatorv1.AWSClassicLoadBalancerParameters{}.OpenAPIModelName()), - }, - }, - "networkLoadBalancer": { - SchemaProps: spec.SchemaProps{ - Description: "networkLoadBalancerParameters holds configuration parameters for an AWS network load balancer. Present only if type is NLB.", - Ref: ref(operatorv1.AWSNetworkLoadBalancerParameters{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "classicLoadBalancer": "ClassicLoadBalancerParameters", - "networkLoadBalancer": "NetworkLoadBalancerParameters", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.AWSClassicLoadBalancerParameters{}.OpenAPIModelName(), operatorv1.AWSNetworkLoadBalancerParameters{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_AWSNetworkLoadBalancerParameters(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSNetworkLoadBalancerParameters holds configuration parameters for an AWS Network load balancer. For Example: Setting AWS EIPs https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "subnets": { - SchemaProps: spec.SchemaProps{ - Description: "subnets specifies the subnets to which the load balancer will attach. The subnets may be specified by either their ID or name. The total number of subnets is limited to 10.\n\nIn order for the load balancer to be provisioned with subnets, each subnet must exist, each subnet must be from a different availability zone, and the load balancer service must be recreated to pick up new values.\n\nWhen omitted from the spec, the subnets will be auto-discovered for each availability zone. Auto-discovered subnets are not reported in the status of the IngressController object.", - Ref: ref(operatorv1.AWSSubnets{}.OpenAPIModelName()), - }, - }, - "eipAllocations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "eipAllocations is a list of IDs for Elastic IP (EIP) addresses that are assigned to the Network Load Balancer. The following restrictions apply:\n\neipAllocations can only be used with external scope, not internal. An EIP can be allocated to only a single IngressController. The number of EIP allocations must match the number of subnets that are used for the load balancer. Each EIP allocation must be unique. A maximum of 10 EIP allocations are permitted.\n\nSee https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html for general information about configuration, characteristics, and limitations of Elastic IP addresses.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "protocol": { - SchemaProps: spec.SchemaProps{ - Description: "protocol specifies whether the Network Load Balancer uses PROXY protocol to forward connections to the IngressController.\n\nWhen set to \"TCP\", the NLB uses AWS's native client IP preservation. This may cause hairpin connection failures for internal load balancers when connections are made from pods to router pods on the same node.\n\nWhen set to \"PROXY\", the NLB disables native client IP preservation and uses PROXY protocol v2. The IngressController enables PROXY protocol on HAProxy so that it can parse PROXY protocol headers to obtain the original client IP. This avoids hairpin connection failures.\n\nThe following values are valid for this field:\n\n* \"TCP\". * \"PROXY\".\n\nWhen omitted, this means the user has no opinion and the value is left to the platform to choose a reasonable default, which is subject to change over time. The current default is \"PROXY\".\n\nNote that changing this field may cause brief connection failures during the transition as the NLB attribute change and router rollout occur independently.\n\n\nPossible enum values:\n - `\"PROXY\"` instructs the NLB to forward connections using PROXY protocol v2.\n - `\"TCP\"` instructs the NLB to forward connections using TCP without PROXY protocol.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"PROXY", "TCP"}, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.AWSSubnets{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_AWSSubnets(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AWSSubnets contains a list of references to AWS subnets by ID or name.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "ids": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "ids specifies a list of AWS subnets by subnet ID. Subnet IDs must start with \"subnet-\", consist only of alphanumeric characters, must be exactly 24 characters long, must be unique, and the total number of subnets specified by ids and names must not exceed 10.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "names": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "names specifies a list of AWS subnets by subnet name. Subnet names must not start with \"subnet-\", must not include commas, must be under 256 characters in length, must be unique, and the total number of subnets specified by ids and names must not exceed 10.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_AccessLogging(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AccessLogging describes how client requests should be logged.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "destination": { - SchemaProps: spec.SchemaProps{ - Description: "destination is where access logs go.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.LoggingDestination{}.OpenAPIModelName()), - }, - }, - "httpLogFormat": { - SchemaProps: spec.SchemaProps{ - Description: "httpLogFormat specifies the format of the log message for an HTTP request.\n\nIf this field is empty, log messages use the implementation's default HTTP log format. For HAProxy's default HTTP log format, see the HAProxy documentation: http://cbonte.github.io/haproxy-dconv/2.0/configuration.html#8.2.3\n\nNote that this format only applies to cleartext HTTP connections and to secure HTTP connections for which the ingress controller terminates encryption (that is, edge-terminated or reencrypt connections). It does not affect the log format for TLS passthrough connections.", - Type: []string{"string"}, - Format: "", - }, - }, - "httpCaptureHeaders": { - SchemaProps: spec.SchemaProps{ - Description: "httpCaptureHeaders defines HTTP headers that should be captured in access logs. If this field is empty, no headers are captured.\n\nNote that this option only applies to cleartext HTTP connections and to secure HTTP connections for which the ingress controller terminates encryption (that is, edge-terminated or reencrypt connections). Headers cannot be captured for TLS passthrough connections.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.IngressControllerCaptureHTTPHeaders{}.OpenAPIModelName()), - }, - }, - "httpCaptureCookies": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "httpCaptureCookies specifies HTTP cookies that should be captured in access logs. If this field is empty, no cookies are captured.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.IngressControllerCaptureHTTPCookie{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "logEmptyRequests": { - SchemaProps: spec.SchemaProps{ - Description: "logEmptyRequests specifies how connections on which no request is received should be logged. Typically, these empty requests come from load balancers' health probes or Web browsers' speculative connections (\"preconnect\"), in which case logging these requests may be undesirable. However, these requests may also be caused by network errors, in which case logging empty requests may be useful for diagnosing the errors. In addition, these requests may be caused by port scans, in which case logging empty requests may aid in detecting intrusion attempts. Allowed values for this field are \"Log\" and \"Ignore\". The default value is \"Log\".", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"destination"}, - }, - }, - Dependencies: []string{ - operatorv1.IngressControllerCaptureHTTPCookie{}.OpenAPIModelName(), operatorv1.IngressControllerCaptureHTTPHeaders{}.OpenAPIModelName(), operatorv1.LoggingDestination{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_AddPage(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AddPage allows customizing actions on the Add page in developer perspective.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "disabledActions": { - SchemaProps: spec.SchemaProps{ - Description: "disabledActions is a list of actions that are not shown to users. Each action in the list is represented by its ID.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_AdditionalNetworkDefinition(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AdditionalNetworkDefinition configures an extra network that is available but not created by default. Instead, pods must request them by name. type must be specified, along with exactly one \"Config\" that matches the type.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the type of network The supported values are NetworkTypeRaw, NetworkTypeSimpleMacvlan", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the network. This will be populated in the resulting CRD This must be unique.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace is the namespace of the network. This will be populated in the resulting CRD If not given the network will be created in the default namespace.", - Type: []string{"string"}, - Format: "", - }, - }, - "rawCNIConfig": { - SchemaProps: spec.SchemaProps{ - Description: "rawCNIConfig is the raw CNI configuration json to create in the NetworkAttachmentDefinition CRD", - Type: []string{"string"}, - Format: "", - }, - }, - "simpleMacvlanConfig": { - SchemaProps: spec.SchemaProps{ - Description: "simpleMacvlanConfig configures the macvlan interface in case of type:NetworkTypeSimpleMacvlan", - Ref: ref(operatorv1.SimpleMacvlanConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type", "name"}, - }, - }, - Dependencies: []string{ - operatorv1.SimpleMacvlanConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_AdditionalRoutingCapabilities(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AdditionalRoutingCapabilities describes components and relevant configuration providing advanced routing capabilities.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "providers": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "providers is a set of enabled components that provide additional routing capabilities. Entries on this list must be unique. The only valid value is currrently \"FRR\" which provides FRR routing capabilities through the deployment of FRR.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"providers"}, - }, - }, - } -} - -func schema_openshift_api_operator_v1_Authentication(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Authentication provides information to configure an operator to manage authentication.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.AuthenticationSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.AuthenticationStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - operatorv1.AuthenticationSpec{}.OpenAPIModelName(), operatorv1.AuthenticationStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_AuthenticationConfigMapReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AuthenticationConfigMapReference references a ConfigMap in the openshift-config namespace.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the metadata.name of the referenced ConfigMap. Must be a valid DNS subdomain name (RFC 1123): at most 253 characters, only lowercase alphanumeric characters, '-' or '.', starting and ending with an alphanumeric character.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name"}, - }, - }, - } -} - -func schema_openshift_api_operator_v1_AuthenticationList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AuthenticationList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.Authentication{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - operatorv1.Authentication{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_AuthenticationProxyConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AuthenticationProxyConfig holds proxy configuration scoped to authentication components (the OAuth server and the cluster authentication operator).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "httpProxy": { - SchemaProps: spec.SchemaProps{ - Description: "httpProxy is the URL of the proxy for HTTP requests. Must be a valid URL with http or https scheme, a non-empty hostname, and no path, query parameters, or fragment. Userinfo (e.g. user:password@host) is allowed for proxy authentication. Maximum length is 2048 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "httpsProxy": { - SchemaProps: spec.SchemaProps{ - Description: "httpsProxy is the URL of the proxy for HTTPS requests. Must be a valid URL with http or https scheme, a non-empty hostname, and no path, query parameters, or fragment. Userinfo (e.g. user:password@host) is allowed for proxy authentication. Maximum length is 2048 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "noProxy": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "noProxy is a list of hostnames and/or CIDRs and/or IPs for which the proxy should not be used. Must contain at least one entry when set. Each entry must be between 1 and 253 characters long and at most 64 entries are allowed. Duplicate entries are not permitted. Entries that are not valid hostnames, CIDRs, or IPs are silently ignored. Cluster-internal defaults (.cluster.local, .svc, 127.0.0.1, localhost) are always appended automatically and do not need to be included.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "trustedCA": { - SchemaProps: spec.SchemaProps{ - Description: "trustedCA is a reference to a ConfigMap in the openshift-config namespace containing a CA certificate bundle under the key \"ca-bundle.crt\". This bundle is appended to the system trust store used by authentication components for proxy TLS connections. When omitted, only the system trust store is used.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.AuthenticationConfigMapReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.AuthenticationConfigMapReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_AuthenticationSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "proxy": { - SchemaProps: spec.SchemaProps{ - Description: "proxy configures proxy settings for outbound connections made by the authentication stack. When set, it replaces the cluster-wide proxy (proxy.config.openshift.io/cluster) entirely for authentication — individual fields are not inherited from the cluster-wide configuration. When omitted, the cluster-wide proxy is used if configured; otherwise no proxy is used.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.AuthenticationProxyConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"managementState"}, - }, - }, - Dependencies: []string{ - operatorv1.AuthenticationProxyConfig{}.OpenAPIModelName(), runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_AuthenticationStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "oauthAPIServer": { - SchemaProps: spec.SchemaProps{ - Description: "oauthAPIServer holds status specific only to oauth-apiserver", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OAuthAPIServerStatus{}.OpenAPIModelName()), - }, - }, - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.OAuthAPIServerStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_AzureCSIDriverConfigSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AzureCSIDriverConfigSpec defines properties that can be configured for the Azure CSI driver.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "diskEncryptionSet": { - SchemaProps: spec.SchemaProps{ - Description: "diskEncryptionSet sets the cluster default storage class to encrypt volumes with a customer-managed encryption set, rather than the default platform-managed keys.", - Ref: ref(operatorv1.AzureDiskEncryptionSet{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.AzureDiskEncryptionSet{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_AzureDiskEncryptionSet(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "AzureDiskEncryptionSet defines the configuration for a disk encryption set.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "subscriptionID": { - SchemaProps: spec.SchemaProps{ - Description: "subscriptionID defines the Azure subscription that contains the disk encryption set. The value should meet the following conditions: 1. It should be a 128-bit number. 2. It should be 36 characters (32 hexadecimal characters and 4 hyphens) long. 3. It should be displayed in five groups separated by hyphens (-). 4. The first group should be 8 characters long. 5. The second, third, and fourth groups should be 4 characters long. 6. The fifth group should be 12 characters long. An Example SubscrionID: f2007bbf-f802-4a47-9336-cf7c6b89b378", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resourceGroup": { - SchemaProps: spec.SchemaProps{ - Description: "resourceGroup defines the Azure resource group that contains the disk encryption set. The value should consist of only alphanumberic characters, underscores (_), parentheses, hyphens and periods. The value should not end in a period and be at most 90 characters in length.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the disk encryption set that will be set on the default storage class. The value should consist of only alphanumberic characters, underscores (_), hyphens, and be at most 80 characters in length.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"subscriptionID", "resourceGroup", "name"}, - }, - }, - } -} - -func schema_openshift_api_operator_v1_BGPManagedConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BGPManagedConfig contains configuration options for BGP when routing is \"Managed\".", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "asNumber": { - SchemaProps: spec.SchemaProps{ - Description: "asNumber is the 2-byte or 4-byte Autonomous System Number (ASN) to be used in the generated FRR configuration. Valid values are 1 to 4294967295. When omitted, this defaults to 64512.", - Default: 64512, - Type: []string{"integer"}, - Format: "int64", - }, - }, - "bgpTopology": { - SchemaProps: spec.SchemaProps{ - Description: "bgpTopology defines the BGP topology to be used. Allowed values are \"FullMesh\". When set to \"FullMesh\", every node peers directly with every other node via BGP. This field is required when BGPManagedConfig is specified.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"bgpTopology"}, - }, - }, - } -} - -func schema_openshift_api_operator_v1_BootImageSkewEnforcementConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BootImageSkewEnforcementConfig is used to configure how boot image version skew is enforced on the cluster.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "mode": { - SchemaProps: spec.SchemaProps{ - Description: "mode determines the underlying behavior of skew enforcement mechanism. Valid values are Manual and None. Manual means that the cluster admin is expected to perform manual boot image updates and store the OCP & RHCOS version associated with the last boot image update in the manual field. In Manual mode, the MCO will prevent upgrades when the boot image skew exceeds the skew limit described by the release image. None means that the MCO will no longer monitor the boot image skew. This may affect the cluster's ability to scale. This field is required.", - Type: []string{"string"}, - Format: "", - }, - }, - "manual": { - SchemaProps: spec.SchemaProps{ - Description: "manual describes the current boot image of the cluster. This should be set to the oldest boot image used amongst all machine resources in the cluster. This must include either the RHCOS version of the boot image or the OCP release version which shipped with that RHCOS boot image. Required when mode is set to \"Manual\" and forbidden otherwise.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ClusterBootImageManual{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"mode"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "mode", - "fields-to-discriminateBy": map[string]interface{}{ - "manual": "Manual", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.ClusterBootImageManual{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_BootImageSkewEnforcementStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "BootImageSkewEnforcementStatus is the type for the status object. It represents the cluster defaults when the boot image skew enforcement configuration is undefined and reflects the actual configuration when it is defined.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "mode": { - SchemaProps: spec.SchemaProps{ - Description: "mode determines the underlying behavior of skew enforcement mechanism. Valid values are Automatic, Manual and None. Automatic means that the MCO will perform boot image updates and store the OCP & RHCOS version associated with the last boot image update in the automatic field. Manual means that the cluster admin is expected to perform manual boot image updates and store the OCP & RHCOS version associated with the last boot image update in the manual field. In Automatic and Manual mode, the MCO will prevent upgrades when the boot image skew exceeds the skew limit described by the release image. None means that the MCO will no longer monitor the boot image skew. This may affect the cluster's ability to scale. This field is required.", - Type: []string{"string"}, - Format: "", - }, - }, - "automatic": { - SchemaProps: spec.SchemaProps{ - Description: "automatic describes the current boot image of the cluster. This will be populated by the MCO when performing boot image updates. This value will be compared against the cluster's skew limit to determine skew compliance. Required when mode is set to \"Automatic\" and forbidden otherwise.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ClusterBootImageAutomatic{}.OpenAPIModelName()), - }, - }, - "manual": { - SchemaProps: spec.SchemaProps{ - Description: "manual describes the current boot image of the cluster. This will be populated by the MCO using the values provided in the spec.bootImageSkewEnforcement.manual field. This value will be compared against the cluster's skew limit to determine skew compliance. Required when mode is set to \"Manual\" and forbidden otherwise.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ClusterBootImageManual{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"mode"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "mode", - "fields-to-discriminateBy": map[string]interface{}{ - "automatic": "Automatic", - "manual": "Manual", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.ClusterBootImageAutomatic{}.OpenAPIModelName(), operatorv1.ClusterBootImageManual{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_CSIDriverConfigSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CSIDriverConfigSpec defines configuration spec that can be used to optionally configure a specific CSI Driver.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "driverType": { - SchemaProps: spec.SchemaProps{ - Description: "driverType indicates type of CSI driver for which the driverConfig is being applied to. Valid values are: AWS, Azure, GCP, IBMCloud, vSphere, SecretsStore and omitted. Consumers should treat unknown values as a NO-OP.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "aws": { - SchemaProps: spec.SchemaProps{ - Description: "aws is used to configure the AWS CSI driver.", - Ref: ref(operatorv1.AWSCSIDriverConfigSpec{}.OpenAPIModelName()), - }, - }, - "azure": { - SchemaProps: spec.SchemaProps{ - Description: "azure is used to configure the Azure CSI driver.", - Ref: ref(operatorv1.AzureCSIDriverConfigSpec{}.OpenAPIModelName()), - }, - }, - "gcp": { - SchemaProps: spec.SchemaProps{ - Description: "gcp is used to configure the GCP CSI driver.", - Ref: ref(operatorv1.GCPCSIDriverConfigSpec{}.OpenAPIModelName()), - }, - }, - "ibmcloud": { - SchemaProps: spec.SchemaProps{ - Description: "ibmcloud is used to configure the IBM Cloud CSI driver.", - Ref: ref(operatorv1.IBMCloudCSIDriverConfigSpec{}.OpenAPIModelName()), - }, - }, - "vSphere": { - SchemaProps: spec.SchemaProps{ - Description: "vSphere is used to configure the vsphere CSI driver.", - Ref: ref(operatorv1.VSphereCSIDriverConfigSpec{}.OpenAPIModelName()), - }, - }, - "secretsStore": { - SchemaProps: spec.SchemaProps{ - Description: "secretsStore is used to configure the Secrets Store CSI driver.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.SecretsStoreCSIDriverConfigSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"driverType"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "driverType", - "fields-to-discriminateBy": map[string]interface{}{ - "aws": "AWS", - "azure": "Azure", - "gcp": "GCP", - "ibmcloud": "IBMCloud", - "secretsStore": "SecretsStore", - "vSphere": "VSphere", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.AWSCSIDriverConfigSpec{}.OpenAPIModelName(), operatorv1.AzureCSIDriverConfigSpec{}.OpenAPIModelName(), operatorv1.GCPCSIDriverConfigSpec{}.OpenAPIModelName(), operatorv1.IBMCloudCSIDriverConfigSpec{}.OpenAPIModelName(), operatorv1.SecretsStoreCSIDriverConfigSpec{}.OpenAPIModelName(), operatorv1.VSphereCSIDriverConfigSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_CSISnapshotController(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CSISnapshotController provides a means to configure an operator to manage the CSI snapshots. `cluster` is the canonical name.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.CSISnapshotControllerSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.CSISnapshotControllerStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - operatorv1.CSISnapshotControllerSpec{}.OpenAPIModelName(), operatorv1.CSISnapshotControllerStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_CSISnapshotControllerList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CSISnapshotControllerList contains a list of CSISnapshotControllers.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.CSISnapshotController{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - operatorv1.CSISnapshotController{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_CSISnapshotControllerSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CSISnapshotControllerSpec is the specification of the desired behavior of the CSISnapshotController operator.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"managementState"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_CSISnapshotControllerStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CSISnapshotControllerStatus defines the observed status of the CSISnapshotController operator.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_Capability(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Capabilities contains set of UI capabilities and their state in the console UI.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the unique name of a capability. Available capabilities are LightspeedButton, GettingStartedBanner, and GuidedTour.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "visibility": { - SchemaProps: spec.SchemaProps{ - Description: "visibility defines the visibility state of the capability.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.CapabilityVisibility{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"name", "visibility"}, - }, - }, - Dependencies: []string{ - operatorv1.CapabilityVisibility{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_CapabilityVisibility(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CapabilityVisibility defines the criteria to enable/disable a capability.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "state": { - SchemaProps: spec.SchemaProps{ - Description: "state defines if the capability is enabled or disabled in the console UI. Enabling the capability in the console UI is represented by the \"Enabled\" value. Disabling the capability in the console UI is represented by the \"Disabled\" value.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"state"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "state", - "fields-to-discriminateBy": map[string]interface{}{}, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_ClientTLS(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClientTLS specifies TLS configuration to enable client-to-server authentication, which can be used for mutual TLS.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "clientCertificatePolicy": { - SchemaProps: spec.SchemaProps{ - Description: "clientCertificatePolicy specifies whether the ingress controller requires clients to provide certificates. This field accepts the values \"Required\" or \"Optional\".\n\nNote that the ingress controller only checks client certificates for edge-terminated and reencrypt TLS routes; it cannot check certificates for cleartext HTTP or passthrough TLS routes.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientCA": { - SchemaProps: spec.SchemaProps{ - Description: "clientCA specifies a configmap containing the PEM-encoded CA certificate bundle that should be used to verify a client's certificate. The administrator must create this configmap in the openshift-config namespace.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - "allowedSubjectPatterns": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "allowedSubjectPatterns specifies a list of regular expressions that should be matched against the distinguished name on a valid client certificate to filter requests. The regular expressions must use PCRE syntax. If this list is empty, no filtering is performed. If the list is nonempty, then at least one pattern must match a client certificate's distinguished name or else the ingress controller rejects the certificate and denies the connection.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"clientCertificatePolicy", "clientCA"}, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_CloudCredential(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CloudCredential provides a means to configure an operator to manage CredentialsRequests.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.CloudCredentialSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.CloudCredentialStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - operatorv1.CloudCredentialSpec{}.OpenAPIModelName(), operatorv1.CloudCredentialStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_CloudCredentialList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.CloudCredential{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - operatorv1.CloudCredential{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_CloudCredentialSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CloudCredentialSpec is the specification of the desired behavior of the cloud-credential-operator.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "credentialsMode": { - SchemaProps: spec.SchemaProps{ - Description: "credentialsMode allows informing CCO that it should not attempt to dynamically determine the root cloud credentials capabilities, and it should just run in the specified mode. It also allows putting the operator into \"manual\" mode if desired. Leaving the field in default mode runs CCO so that the cluster's cloud credentials will be dynamically probed for capabilities (on supported clouds/platforms). Supported modes:\n AWS/Azure/GCP: \"\" (Default), \"Mint\", \"Passthrough\", \"Manual\"\n Others: Do not set value as other platforms only support running in \"Passthrough\"", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"managementState"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_CloudCredentialStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CloudCredentialStatus defines the observed status of the cloud-credential-operator.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ClusterBootImageAutomatic(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterBootImageAutomatic is used to describe the cluster boot image in Automatic mode. It stores the RHCOS version of the boot image and the OCP release version which shipped with that RHCOS boot image. At least one of these values are required. If ocpVersion and rhcosVersion are defined, both values will be used for checking skew compliance. If only ocpVersion is defined, only that value will be used for checking skew compliance. If only rhcosVersion is defined, only that value will be used for checking skew compliance.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "ocpVersion": { - SchemaProps: spec.SchemaProps{ - Description: "ocpVersion provides a string which represents the OCP version of the boot image. This field must match the OCP semver compatible format of x.y.z. This field must be between 5 and 10 characters long.", - Type: []string{"string"}, - Format: "", - }, - }, - "rhcosVersion": { - SchemaProps: spec.SchemaProps{ - Description: "rhcosVersion provides a string which represents the RHCOS version of the boot image This field must match rhcosVersion formatting of [major].[minor].[datestamp(YYYYMMDD)]-[buildnumber] or the legacy format of [major].[minor].[timestamp(YYYYMMDDHHmm)]-[buildnumber]. This field must be between 14 and 21 characters long.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_ClusterBootImageManual(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterBootImageManual is used to describe the cluster boot image in Manual mode.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "mode": { - SchemaProps: spec.SchemaProps{ - Description: "mode is used to configure which boot image field is defined in Manual mode. Valid values are OCPVersion and RHCOSVersion. OCPVersion means that the cluster admin is expected to set the OCP version associated with the last boot image update in the OCPVersion field. RHCOSVersion means that the cluster admin is expected to set the RHCOS version associated with the last boot image update in the RHCOSVersion field. This field is required.", - Type: []string{"string"}, - Format: "", - }, - }, - "ocpVersion": { - SchemaProps: spec.SchemaProps{ - Description: "ocpVersion provides a string which represents the OCP version of the boot image. This field must match the OCP semver compatible format of x.y.z. This field must be between 5 and 10 characters long. Required when mode is set to \"OCPVersion\" and forbidden otherwise.", - Type: []string{"string"}, - Format: "", - }, - }, - "rhcosVersion": { - SchemaProps: spec.SchemaProps{ - Description: "rhcosVersion provides a string which represents the RHCOS version of the boot image This field must match rhcosVersion formatting of [major].[minor].[datestamp(YYYYMMDD)]-[buildnumber] or the legacy format of [major].[minor].[timestamp(YYYYMMDDHHmm)]-[buildnumber]. This field must be between 14 and 21 characters long. Required when mode is set to \"RHCOSVersion\" and forbidden otherwise.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"mode"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "mode", - "fields-to-discriminateBy": map[string]interface{}{ - "ocpVersion": "OCPVersion", - "rhcosVersion": "RHCOSVersion", - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_ClusterCSIDriver(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterCSIDriver object allows management and configuration of a CSI driver operator installed by default in OpenShift. Name of the object must be name of the CSI driver it operates. See CSIDriverName type for list of allowed values.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ClusterCSIDriverSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ClusterCSIDriverStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - operatorv1.ClusterCSIDriverSpec{}.OpenAPIModelName(), operatorv1.ClusterCSIDriverStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ClusterCSIDriverList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterCSIDriverList contains a list of ClusterCSIDriver\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ClusterCSIDriver{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - operatorv1.ClusterCSIDriver{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ClusterCSIDriverSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterCSIDriverSpec is the desired behavior of CSI driver operator", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "storageClassState": { - SchemaProps: spec.SchemaProps{ - Description: "storageClassState determines if CSI operator should create and manage storage classes. If this field value is empty or Managed - CSI operator will continuously reconcile storage class and create if necessary. If this field value is Unmanaged - CSI operator will not reconcile any previously created storage class. If this field value is Removed - CSI operator will delete the storage class it created previously. When omitted, this means the user has no opinion and the platform chooses a reasonable default, which is subject to change over time. The current default behaviour is Managed.", - Type: []string{"string"}, - Format: "", - }, - }, - "driverConfig": { - SchemaProps: spec.SchemaProps{ - Description: "driverConfig can be used to specify platform specific driver configuration. When omitted, this means no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.CSIDriverConfigSpec{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"managementState"}, - }, - }, - Dependencies: []string{ - operatorv1.CSIDriverConfigSpec{}.OpenAPIModelName(), runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ClusterCSIDriverStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterCSIDriverStatus is the observed status of CSI driver operator", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ClusterNetworkEntry(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterNetworkEntry is a subnet from which to allocate PodIPs. A network of size HostPrefix (in CIDR notation) will be allocated when nodes join the cluster. If the HostPrefix field is not used by the plugin, it can be left unset. Not all network providers support multiple ClusterNetworks", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "cidr": { - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "hostPrefix": { - SchemaProps: spec.SchemaProps{ - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - Required: []string{"cidr"}, - }, - }, - } -} - -func schema_openshift_api_operator_v1_Config(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Config specifies the behavior of the config operator which is responsible for creating the initial configuration of other components on the cluster. The operator also handles installation, migration or synchronization of cloud configurations for AWS and Azure cloud based clusters\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the desired behavior of the Config Operator.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ConfigSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status defines the observed status of the Config Operator.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ConfigStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - operatorv1.ConfigSpec{}.OpenAPIModelName(), operatorv1.ConfigStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ConfigList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConfigList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items contains the items", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.Config{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - operatorv1.Config{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ConfigMapFileReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConfigMapFileReference references a specific file within a ConfigMap.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the ConfigMap. name is a required field. Must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character. Must be at most 253 characters in length.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "key": { - SchemaProps: spec.SchemaProps{ - Description: "key is the logo key inside the referenced ConfigMap. Must consist only of alphanumeric characters, dashes (-), underscores (_), and periods (.). Must be at most 253 characters in length. Must end in a valid file extension. A valid file extension must consist of a period followed by 2 to 5 alpha characters.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "key"}, - }, - }, - } -} - -func schema_openshift_api_operator_v1_ConfigSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"managementState"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ConfigStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_Console(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Console provides a means to configure an operator to manage the console.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ConsoleSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ConsoleStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - operatorv1.ConsoleSpec{}.OpenAPIModelName(), operatorv1.ConsoleStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ConsoleConfigRoute(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleConfigRoute holds information on external route access to console. DEPRECATED", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "hostname": { - SchemaProps: spec.SchemaProps{ - Description: "hostname is the desired custom domain under which console will be available.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "secret": { - SchemaProps: spec.SchemaProps{ - Description: "secret points to secret in the openshift-config namespace that contains custom certificate and key and needs to be created manually by the cluster admin. Referenced Secret is required to contain following key value pairs: - \"tls.crt\" - to specifies custom certificate - \"tls.key\" - to specifies private key of the custom certificate If the custom hostname uses the default routing suffix of the cluster, the Secret specification for a serving certificate will not be needed.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"hostname"}, - }, - }, - Dependencies: []string{ - configv1.SecretNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ConsoleCustomization(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleCustomization defines a list of optional configuration for the console UI. Ensure that Logos and CustomLogoFile cannot be set at the same time.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "logos": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "logos is used to replace the OpenShift Masthead and Favicon logos in the console UI with custom logos. logos is an optional field that allows a list of logos. Only one of logos or customLogoFile can be set at a time. If logos is set, customLogoFile must be unset. When specified, there must be at least one entry and no more than 2 entries. Each type must appear only once in the list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.Logo{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "capabilities": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "capabilities defines an array of capabilities that can be interacted with in the console UI. Each capability defines a visual state that can be interacted with the console to render in the UI. Available capabilities are LightspeedButton, GettingStartedBanner, and GuidedTour. Each of the available capabilities may appear only once in the list.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.Capability{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "brand": { - SchemaProps: spec.SchemaProps{ - Description: "brand is the default branding of the web console which can be overridden by providing the brand field. There is a limited set of specific brand options. This field controls elements of the console such as the logo. Invalid value will prevent a console rollout.", - Type: []string{"string"}, - Format: "", - }, - }, - "documentationBaseURL": { - SchemaProps: spec.SchemaProps{ - Description: "documentationBaseURL links to external documentation are shown in various sections of the web console. Providing documentationBaseURL will override the default documentation URL. Invalid value will prevent a console rollout.", - Type: []string{"string"}, - Format: "", - }, - }, - "customProductName": { - SchemaProps: spec.SchemaProps{ - Description: "customProductName is the name that will be displayed in page titles, logo alt text, and the about dialog instead of the normal OpenShift product name.", - Type: []string{"string"}, - Format: "", - }, - }, - "customLogoFile": { - SchemaProps: spec.SchemaProps{ - Description: "customLogoFile replaces the default OpenShift logo in the masthead and about dialog. It is a reference to a Only one of customLogoFile or logos can be set at a time. ConfigMap in the openshift-config namespace. This can be created with a command like 'oc create configmap custom-logo --from-file=/path/to/file -n openshift-config'. Image size must be less than 1 MB due to constraints on the ConfigMap size. The ConfigMap key should include a file extension so that the console serves the file with the correct MIME type. The recommended file format for the logo is SVG, but other file formats are allowed if supported by the browser. Deprecated: Use logos instead.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapFileReference{}.OpenAPIModelName()), - }, - }, - "developerCatalog": { - SchemaProps: spec.SchemaProps{ - Description: "developerCatalog allows to configure the shown developer catalog categories (filters) and types (sub-catalogs).", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.DeveloperConsoleCatalogCustomization{}.OpenAPIModelName()), - }, - }, - "projectAccess": { - SchemaProps: spec.SchemaProps{ - Description: "projectAccess allows customizing the available list of ClusterRoles in the Developer perspective Project access page which can be used by a project admin to specify roles to other users and restrict access within the project. If set, the list will replace the default ClusterRole options.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ProjectAccess{}.OpenAPIModelName()), - }, - }, - "quickStarts": { - SchemaProps: spec.SchemaProps{ - Description: "quickStarts allows customization of available ConsoleQuickStart resources in console.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.QuickStarts{}.OpenAPIModelName()), - }, - }, - "addPage": { - SchemaProps: spec.SchemaProps{ - Description: "addPage allows customizing actions on the Add page in developer perspective.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.AddPage{}.OpenAPIModelName()), - }, - }, - "perspectives": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "id", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "perspectives allows enabling/disabling of perspective(s) that user can see in the Perspective switcher dropdown.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.Perspective{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.ConfigMapFileReference{}.OpenAPIModelName(), operatorv1.AddPage{}.OpenAPIModelName(), operatorv1.Capability{}.OpenAPIModelName(), operatorv1.DeveloperConsoleCatalogCustomization{}.OpenAPIModelName(), operatorv1.Logo{}.OpenAPIModelName(), operatorv1.Perspective{}.OpenAPIModelName(), operatorv1.ProjectAccess{}.OpenAPIModelName(), operatorv1.QuickStarts{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ConsoleList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.Console{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - operatorv1.Console{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ConsoleProviders(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleProviders defines a list of optional additional providers of functionality to the console.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "statuspage": { - SchemaProps: spec.SchemaProps{ - Description: "statuspage contains ID for statuspage.io page that provides status info about.", - Ref: ref(operatorv1.StatuspageProvider{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.StatuspageProvider{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ConsoleSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleSpec is the specification of the desired behavior of the Console.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "customization": { - SchemaProps: spec.SchemaProps{ - Description: "customization is used to optionally provide a small set of customization options to the web console.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ConsoleCustomization{}.OpenAPIModelName()), - }, - }, - "providers": { - SchemaProps: spec.SchemaProps{ - Description: "providers contains configuration for using specific service providers.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ConsoleProviders{}.OpenAPIModelName()), - }, - }, - "route": { - SchemaProps: spec.SchemaProps{ - Description: "route contains hostname and secret reference that contains the serving certificate. If a custom route is specified, a new route will be created with the provided hostname, under which console will be available. In case of custom hostname uses the default routing suffix of the cluster, the Secret specification for a serving certificate will not be needed. In case of custom hostname points to an arbitrary domain, manual DNS configurations steps are necessary. The default console route will be maintained to reserve the default hostname for console if the custom route is removed. If not specified, default route will be used. DEPRECATED", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ConsoleConfigRoute{}.OpenAPIModelName()), - }, - }, - "plugins": { - SchemaProps: spec.SchemaProps{ - Description: "plugins defines a list of enabled console plugin names.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "ingress": { - SchemaProps: spec.SchemaProps{ - Description: "ingress allows to configure the alternative ingress for the console. This field is intended for clusters without ingress capability, where access to routes is not possible.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.Ingress{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"managementState", "providers"}, - }, - }, - Dependencies: []string{ - operatorv1.ConsoleConfigRoute{}.OpenAPIModelName(), operatorv1.ConsoleCustomization{}.OpenAPIModelName(), operatorv1.ConsoleProviders{}.OpenAPIModelName(), operatorv1.Ingress{}.OpenAPIModelName(), runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ConsoleStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ConsoleStatus defines the observed status of the Console.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ContainerLoggingDestinationParameters(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ContainerLoggingDestinationParameters describes parameters for the Container logging destination type.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "maxLength": { - SchemaProps: spec.SchemaProps{ - Description: "maxLength is the maximum length of the log message.\n\nValid values are integers in the range 480 to 8192, inclusive.\n\nWhen omitted, the default value is 1024.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_CustomSecretRotation(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "CustomSecretRotation holds configuration for custom secret rotation behavior.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "minimumRefreshAge": { - SchemaProps: spec.SchemaProps{ - Description: "minimumRefreshAge is the minimum time in seconds between secret rotation attempts. Each time kubelet calls NodePublishVolume, the driver checks whether this interval has elapsed since the last successful provider call. If it has, the driver contacts the secret provider to fetch the latest secret values and updates the mounted volume. Setting this value below the kubelet syncFrequency (default: 1 minute) has no additional effect on the actual rotation cadence. Must be at least 1 second and no more than 31560000 seconds (~1 year). When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_DNS(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNS manages the CoreDNS component to provide a name resolution service for pods and services in the cluster.\n\nThis supports the DNS-based service discovery specification: https://github.com/kubernetes/dns/blob/master/docs/specification.md\n\nMore details: https://kubernetes.io/docs/tasks/administer-cluster/coredns\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the desired behavior of the DNS.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.DNSSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status is the most recently observed status of the DNS.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.DNSStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.DNSSpec{}.OpenAPIModelName(), operatorv1.DNSStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_DNSCache(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNSCache defines the fields for configuring DNS caching.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "positiveTTL": { - SchemaProps: spec.SchemaProps{ - Description: "positiveTTL is optional and specifies the amount of time that a positive response should be cached.\n\nIf configured, it must be a value of 1s (1 second) or greater up to a theoretical maximum of several years. This field expects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, e.g. \"100s\", \"1m30s\", \"12h30m10s\". Values that are fractions of a second are rounded down to the nearest second. If the configured value is less than 1s, the default value will be used. If not configured, the value will be 0s and OpenShift will use a default value of 900 seconds unless noted otherwise in the respective Corefile for your version of OpenShift. The default value of 900 seconds is subject to change.", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - "negativeTTL": { - SchemaProps: spec.SchemaProps{ - Description: "negativeTTL is optional and specifies the amount of time that a negative response should be cached.\n\nIf configured, it must be a value of 1s (1 second) or greater up to a theoretical maximum of several years. This field expects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, e.g. \"100s\", \"1m30s\", \"12h30m10s\". Values that are fractions of a second are rounded down to the nearest second. If the configured value is less than 1s, the default value will be used. If not configured, the value will be 0s and OpenShift will use a default value of 30 seconds unless noted otherwise in the respective Corefile for your version of OpenShift. The default value of 30 seconds is subject to change.", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Duration{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_DNSList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNSList contains a list of DNS\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.DNS{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - operatorv1.DNS{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_DNSNodePlacement(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNSNodePlacement describes the node scheduling configuration for DNS pods.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector is the node selector applied to DNS pods.\n\nIf empty, the default is used, which is currently the following:\n\n kubernetes.io/os: linux\n\nThis default is subject to change.\n\nIf set, the specified selector is used and replaces the default.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "tolerations": { - SchemaProps: spec.SchemaProps{ - Description: "tolerations is a list of tolerations applied to DNS pods.\n\nIf empty, the DNS operator sets a toleration for the \"node-role.kubernetes.io/master\" taint. This default is subject to change. Specifying tolerations without including a toleration for the \"node-role.kubernetes.io/master\" taint may be risky as it could lead to an outage if all worker nodes become unavailable.\n\nNote that the daemon controller adds some tolerations as well. See https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.Toleration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - corev1.Toleration{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_DNSOverTLSConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNSOverTLSConfig describes optional DNSTransportConfig fields that should be captured.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "serverName": { - SchemaProps: spec.SchemaProps{ - Description: "serverName is the upstream server to connect to when forwarding DNS queries. This is required when Transport is set to \"TLS\". ServerName will be validated against the DNS naming conventions in RFC 1123 and should match the TLS certificate installed in the upstream resolver(s).", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "caBundle": { - SchemaProps: spec.SchemaProps{ - Description: "caBundle references a ConfigMap that must contain either a single CA Certificate or a CA Bundle. This allows cluster administrators to provide their own CA or CA bundle for validating the certificate of upstream resolvers.\n\n1. The configmap must contain a `ca-bundle.crt` key. 2. The value must be a PEM encoded CA certificate or CA bundle. 3. The administrator must create this configmap in the openshift-config namespace. 4. The upstream server certificate must contain a Subject Alternative Name (SAN) that matches ServerName.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"serverName"}, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_DNSSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNSSpec is the specification of the desired behavior of the DNS.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "servers": { - SchemaProps: spec.SchemaProps{ - Description: "servers is a list of DNS resolvers that provide name query delegation for one or more subdomains outside the scope of the cluster domain. If servers consists of more than one Server, longest suffix match will be used to determine the Server.\n\nFor example, if there are two Servers, one for \"foo.com\" and another for \"a.foo.com\", and the name query is for \"www.a.foo.com\", it will be routed to the Server with Zone \"a.foo.com\".\n\nIf this field is nil, no servers are created.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.Server{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "upstreamResolvers": { - SchemaProps: spec.SchemaProps{ - Description: "upstreamResolvers defines a schema for configuring CoreDNS to proxy DNS messages to upstream resolvers for the case of the default (\".\") server\n\nIf this field is not specified, the upstream used will default to /etc/resolv.conf, with policy \"sequential\"", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.UpstreamResolvers{}.OpenAPIModelName()), - }, - }, - "nodePlacement": { - SchemaProps: spec.SchemaProps{ - Description: "nodePlacement provides explicit control over the scheduling of DNS pods.\n\nGenerally, it is useful to run a DNS pod on every node so that DNS queries are always handled by a local DNS pod instead of going over the network to a DNS pod on another node. However, security policies may require restricting the placement of DNS pods to specific nodes. For example, if a security policy prohibits pods on arbitrary nodes from communicating with the API, a node selector can be specified to restrict DNS pods to nodes that are permitted to communicate with the API. Conversely, if running DNS pods on nodes with a particular taint is desired, a toleration can be specified for that taint.\n\nIf unset, defaults are used. See nodePlacement for more details.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.DNSNodePlacement{}.OpenAPIModelName()), - }, - }, - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether the DNS operator should manage cluster DNS", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel controls the logging level of the DNS Operator. Valid values are: \"Normal\", \"Debug\", \"Trace\". Defaults to \"Normal\". setting operatorLogLevel: Trace will produce extremely verbose logs.", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel describes the desired logging verbosity for CoreDNS. Any one of the following values may be specified: * Normal logs errors from upstream resolvers. * Debug logs errors, NXDOMAIN responses, and NODATA responses. * Trace logs errors and all responses.\n Setting logLevel: Trace will produce extremely verbose logs.\nValid values are: \"Normal\", \"Debug\", \"Trace\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "cache": { - SchemaProps: spec.SchemaProps{ - Description: "cache describes the caching configuration that applies to all server blocks listed in the Corefile. This field allows a cluster admin to optionally configure: * positiveTTL which is a duration for which positive responses should be cached. * negativeTTL which is a duration for which negative responses should be cached. If this is not configured, OpenShift will configure positive and negative caching with a default value that is subject to change. At the time of writing, the default positiveTTL is 900 seconds and the default negativeTTL is 30 seconds or as noted in the respective Corefile for your version of OpenShift.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.DNSCache{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.DNSCache{}.OpenAPIModelName(), operatorv1.DNSNodePlacement{}.OpenAPIModelName(), operatorv1.Server{}.OpenAPIModelName(), operatorv1.UpstreamResolvers{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_DNSStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNSStatus defines the observed status of the DNS.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "clusterIP": { - SchemaProps: spec.SchemaProps{ - Description: "clusterIP is the service IP through which this DNS is made available.\n\nIn the case of the default DNS, this will be a well known IP that is used as the default nameserver for pods that are using the default ClusterFirst DNS policy.\n\nIn general, this IP can be specified in a pod's spec.dnsConfig.nameservers list or used explicitly when performing name resolution from within the cluster. Example: dig foo.com @\n\nMore info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clusterDomain": { - SchemaProps: spec.SchemaProps{ - Description: "clusterDomain is the local cluster DNS domain suffix for DNS services. This will be a subdomain as defined in RFC 1034, section 3.5: https://tools.ietf.org/html/rfc1034#section-3.5 Example: \"cluster.local\"\n\nMore info: https://kubernetes.io/docs/concepts/services-networking/dns-pod-service", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions provide information about the state of the DNS on the cluster.\n\nThese are the supported DNS conditions:\n\n * Available\n - True if the following conditions are met:\n * DNS controller daemonset is available.\n - False if any of those conditions are unsatisfied.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"clusterIP", "clusterDomain"}, - }, - }, - Dependencies: []string{ - operatorv1.OperatorCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_DNSTransportConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNSTransportConfig groups related configuration parameters used for configuring forwarding to upstream resolvers that support DNS-over-TLS.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "transport": { - SchemaProps: spec.SchemaProps{ - Description: "transport allows cluster administrators to opt-in to using a DNS-over-TLS connection between cluster DNS and an upstream resolver(s). Configuring TLS as the transport at this level without configuring a CABundle will result in the system certificates being used to verify the serving certificate of the upstream resolver(s).\n\nPossible values: \"\" (empty) - This means no explicit choice has been made and the platform chooses the default which is subject to change over time. The current default is \"Cleartext\". \"Cleartext\" - Cluster admin specified cleartext option. This results in the same functionality as an empty value but may be useful when a cluster admin wants to be more explicit about the transport, or wants to switch from \"TLS\" to \"Cleartext\" explicitly. \"TLS\" - This indicates that DNS queries should be sent over a TLS connection. If Transport is set to TLS, you MUST also set ServerName. If a port is not included with the upstream IP, port 853 will be tried by default per RFC 7858 section 3.1; https://datatracker.ietf.org/doc/html/rfc7858#section-3.1.", - Type: []string{"string"}, - Format: "", - }, - }, - "tls": { - SchemaProps: spec.SchemaProps{ - Description: "tls contains the additional configuration options to use when Transport is set to \"TLS\".", - Ref: ref(operatorv1.DNSOverTLSConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "transport", - "fields-to-discriminateBy": map[string]interface{}{ - "tls": "TLS", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.DNSOverTLSConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_DefaultNetworkDefinition(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DefaultNetworkDefinition represents a single network plugin's configuration. type must be specified, along with exactly one \"Config\" that matches the type.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the type of network All NetworkTypes are supported except for NetworkTypeRaw", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "openshiftSDNConfig": { - SchemaProps: spec.SchemaProps{ - Description: "openshiftSDNConfig was previously used to configure the openshift-sdn plugin. DEPRECATED: OpenShift SDN is no longer supported.", - Ref: ref(operatorv1.OpenShiftSDNConfig{}.OpenAPIModelName()), - }, - }, - "ovnKubernetesConfig": { - SchemaProps: spec.SchemaProps{ - Description: "ovnKubernetesConfig configures the ovn-kubernetes plugin.", - Ref: ref(operatorv1.OVNKubernetesConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - }, - Dependencies: []string{ - operatorv1.OVNKubernetesConfig{}.OpenAPIModelName(), operatorv1.OpenShiftSDNConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_DeveloperConsoleCatalogCategory(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DeveloperConsoleCatalogCategory for the developer console catalog.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "id": { - SchemaProps: spec.SchemaProps{ - Description: "id is an identifier used in the URL to enable deep linking in console. ID is required and must have 1-32 URL safe (A-Z, a-z, 0-9, - and _) characters.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "label": { - SchemaProps: spec.SchemaProps{ - Description: "label defines a category display label. It is required and must have 1-64 characters.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "tags": { - SchemaProps: spec.SchemaProps{ - Description: "tags is a list of strings that will match the category. A selected category show all items which has at least one overlapping tag between category and item.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "subcategories": { - SchemaProps: spec.SchemaProps{ - Description: "subcategories defines a list of child categories.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.DeveloperConsoleCatalogCategoryMeta{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"id", "label"}, - }, - }, - Dependencies: []string{ - operatorv1.DeveloperConsoleCatalogCategoryMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_DeveloperConsoleCatalogCategoryMeta(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DeveloperConsoleCatalogCategoryMeta are the key identifiers of a developer catalog category.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "id": { - SchemaProps: spec.SchemaProps{ - Description: "id is an identifier used in the URL to enable deep linking in console. ID is required and must have 1-32 URL safe (A-Z, a-z, 0-9, - and _) characters.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "label": { - SchemaProps: spec.SchemaProps{ - Description: "label defines a category display label. It is required and must have 1-64 characters.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "tags": { - SchemaProps: spec.SchemaProps{ - Description: "tags is a list of strings that will match the category. A selected category show all items which has at least one overlapping tag between category and item.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"id", "label"}, - }, - }, - } -} - -func schema_openshift_api_operator_v1_DeveloperConsoleCatalogCustomization(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DeveloperConsoleCatalogCustomization allow cluster admin to configure developer catalog.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "categories": { - SchemaProps: spec.SchemaProps{ - Description: "categories which are shown in the developer catalog.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.DeveloperConsoleCatalogCategory{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "types": { - SchemaProps: spec.SchemaProps{ - Description: "types allows enabling or disabling of sub-catalog types that user can see in the Developer catalog. When omitted, all the sub-catalog types will be shown.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.DeveloperConsoleCatalogTypes{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.DeveloperConsoleCatalogCategory{}.OpenAPIModelName(), operatorv1.DeveloperConsoleCatalogTypes{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_DeveloperConsoleCatalogTypes(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DeveloperConsoleCatalogTypes defines the state of the sub-catalog types.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "state": { - SchemaProps: spec.SchemaProps{ - Description: "state defines if a list of catalog types should be enabled or disabled.", - Default: "Enabled", - Type: []string{"string"}, - Format: "", - }, - }, - "enabled": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "enabled is a list of developer catalog types (sub-catalogs IDs) that will be shown to users. Types (sub-catalogs) are added via console plugins, the available types (sub-catalog IDs) are available in the console on the cluster configuration page, or when editing the YAML in the console. Example: \"Devfile\", \"HelmChart\", \"BuilderImage\" If the list is non-empty, a new type will not be shown to the user until it is added to list. If the list is empty the complete developer catalog will be shown.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "disabled": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "disabled is a list of developer catalog types (sub-catalogs IDs) that are not shown to users. Types (sub-catalogs) are added via console plugins, the available types (sub-catalog IDs) are available in the console on the cluster configuration page, or when editing the YAML in the console. Example: \"Devfile\", \"HelmChart\", \"BuilderImage\" If the list is empty or all the available sub-catalog types are added, then the complete developer catalog should be hidden.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"state"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "state", - "fields-to-discriminateBy": map[string]interface{}{ - "disabled": "Disabled", - "enabled": "Enabled", - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_EgressIPConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "EgressIPConfig defines the configuration knobs for egressip", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "reachabilityTotalTimeoutSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "reachabilityTotalTimeout configures the EgressIP node reachability check total timeout in seconds. If the EgressIP node cannot be reached within this timeout, the node is declared down. Setting a large value may cause the EgressIP feature to react slowly to node changes. In particular, it may react slowly for EgressIP nodes that really have a genuine problem and are unreachable. When omitted, this means the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 1 second. A value of 0 disables the EgressIP node's reachability check.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_EndpointPublishingStrategy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "EndpointPublishingStrategy is a way to publish the endpoints of an IngressController, and represents the type and any additional configuration for a specific type.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the publishing strategy to use. Valid values are:\n\n* LoadBalancerService\n\nPublishes the ingress controller using a Kubernetes LoadBalancer Service.\n\nIn this configuration, the ingress controller deployment uses container networking. A LoadBalancer Service is created to publish the deployment.\n\nSee: https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer\n\nIf domain is set, a wildcard DNS record will be managed to point at the LoadBalancer Service's external name. DNS records are managed only in DNS zones defined by dns.config.openshift.io/cluster .spec.publicZone and .spec.privateZone.\n\nWildcard DNS management is currently supported only on the AWS, Azure, and GCP platforms.\n\n* HostNetwork\n\nPublishes the ingress controller on node ports where the ingress controller is deployed.\n\nIn this configuration, the ingress controller deployment uses host networking, bound to node ports 80 and 443. The user is responsible for configuring an external load balancer to publish the ingress controller via the node ports.\n\n* Private\n\nDoes not publish the ingress controller.\n\nIn this configuration, the ingress controller deployment uses container networking, and is not explicitly published. The user must manually publish the ingress controller.\n\n* NodePortService\n\nPublishes the ingress controller using a Kubernetes NodePort Service.\n\nIn this configuration, the ingress controller deployment uses container networking. A NodePort Service is created to publish the deployment. The specific node ports are dynamically allocated by OpenShift; however, to support static port allocations, user changes to the node port field of the managed NodePort Service will preserved.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "loadBalancer": { - SchemaProps: spec.SchemaProps{ - Description: "loadBalancer holds parameters for the load balancer. Present only if type is LoadBalancerService.", - Ref: ref(operatorv1.LoadBalancerStrategy{}.OpenAPIModelName()), - }, - }, - "hostNetwork": { - SchemaProps: spec.SchemaProps{ - Description: "hostNetwork holds parameters for the HostNetwork endpoint publishing strategy. Present only if type is HostNetwork.", - Ref: ref(operatorv1.HostNetworkStrategy{}.OpenAPIModelName()), - }, - }, - "private": { - SchemaProps: spec.SchemaProps{ - Description: "private holds parameters for the Private endpoint publishing strategy. Present only if type is Private.", - Ref: ref(operatorv1.PrivateStrategy{}.OpenAPIModelName()), - }, - }, - "nodePort": { - SchemaProps: spec.SchemaProps{ - Description: "nodePort holds parameters for the NodePortService endpoint publishing strategy. Present only if type is NodePortService.", - Ref: ref(operatorv1.NodePortStrategy{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "hostNetwork": "HostNetwork", - "loadBalancer": "LoadBalancer", - "nodePort": "NodePort", - "private": "Private", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.HostNetworkStrategy{}.OpenAPIModelName(), operatorv1.LoadBalancerStrategy{}.OpenAPIModelName(), operatorv1.NodePortStrategy{}.OpenAPIModelName(), operatorv1.PrivateStrategy{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_Etcd(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Etcd provides information to configure an operator to manage etcd.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.EtcdSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.EtcdStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - operatorv1.EtcdSpec{}.OpenAPIModelName(), operatorv1.EtcdStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_EtcdList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KubeAPISOperatorConfigList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items contains the items", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.Etcd{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - operatorv1.Etcd{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_EtcdSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "forceRedeploymentReason": { - SchemaProps: spec.SchemaProps{ - Description: "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "failedRevisionLimit": { - SchemaProps: spec.SchemaProps{ - Description: "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "succeededRevisionLimit": { - SchemaProps: spec.SchemaProps{ - Description: "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "controlPlaneHardwareSpeed": { - SchemaProps: spec.SchemaProps{ - Description: "HardwareSpeed allows user to change the etcd tuning profile which configures the latency parameters for heartbeat interval and leader election timeouts allowing the cluster to tolerate longer round-trip-times between etcd members. Valid values are \"\", \"Standard\" and \"Slower\".\n\t\"\" means no opinion and the platform is left to choose a reasonable default\n\twhich is subject to change without notice.\n\nPossible enum values:\n - `\"Slower\"` provides more tolerance for slower hardware and/or higher latency networks. Sets (values subject to change): ETCD_HEARTBEAT_INTERVAL: 5x Standard ETCD_LEADER_ELECTION_TIMEOUT: 2.5x Standard\n - `\"Standard\"` provides the normal tolerances for hardware speed and latency. Currently sets (values subject to change at any time): ETCD_HEARTBEAT_INTERVAL: 100ms ETCD_LEADER_ELECTION_TIMEOUT: 1000ms", - Default: "", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Slower", "Standard"}, - }, - }, - "backendQuotaGiB": { - SchemaProps: spec.SchemaProps{ - Description: "backendQuotaGiB sets the etcd backend storage size limit in gibibytes. The value should be an integer not less than 8 and not more than 16. When not specified, the default value is 8.", - Default: 8, - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"managementState", "forceRedeploymentReason"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_EtcdStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "latestAvailableRevisionReason": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevisionReason describe the detailed reason for the most recent deployment", - Type: []string{"string"}, - Format: "", - }, - }, - "nodeStatuses": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "nodeName", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "nodeStatuses track the deployment values and errors across individual nodes", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "controlPlaneHardwareSpeed": { - SchemaProps: spec.SchemaProps{ - Description: "Possible enum values:\n - `\"Slower\"` provides more tolerance for slower hardware and/or higher latency networks. Sets (values subject to change): ETCD_HEARTBEAT_INTERVAL: 5x Standard ETCD_LEADER_ELECTION_TIMEOUT: 2.5x Standard\n - `\"Standard\"` provides the normal tolerances for hardware speed and latency. Currently sets (values subject to change at any time): ETCD_HEARTBEAT_INTERVAL: 100ms ETCD_LEADER_ELECTION_TIMEOUT: 1000ms", - Default: "", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Slower", "Standard"}, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.NodeStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ExportNetworkFlows(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "netFlow": { - SchemaProps: spec.SchemaProps{ - Description: "netFlow defines the NetFlow configuration.", - Ref: ref(operatorv1.NetFlowConfig{}.OpenAPIModelName()), - }, - }, - "sFlow": { - SchemaProps: spec.SchemaProps{ - Description: "sFlow defines the SFlow configuration.", - Ref: ref(operatorv1.SFlowConfig{}.OpenAPIModelName()), - }, - }, - "ipfix": { - SchemaProps: spec.SchemaProps{ - Description: "ipfix defines IPFIX configuration.", - Ref: ref(operatorv1.IPFIXConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.IPFIXConfig{}.OpenAPIModelName(), operatorv1.NetFlowConfig{}.OpenAPIModelName(), operatorv1.SFlowConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_FeaturesMigration(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "egressIP": { - SchemaProps: spec.SchemaProps{ - Description: "egressIP specified whether or not the Egress IP configuration was migrated. DEPRECATED: network type migration is no longer supported.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "egressFirewall": { - SchemaProps: spec.SchemaProps{ - Description: "egressFirewall specified whether or not the Egress Firewall configuration was migrated. DEPRECATED: network type migration is no longer supported.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "multicast": { - SchemaProps: spec.SchemaProps{ - Description: "multicast specified whether or not the multicast configuration was migrated. DEPRECATED: network type migration is no longer supported.", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_FileReferenceSource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "FileReferenceSource is used by the console to locate the specified file containing a custom logo.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "from": { - SchemaProps: spec.SchemaProps{ - Description: "from is a required field to specify the source type of the file reference. Allowed values are ConfigMap. When set to ConfigMap, the file will be sourced from a ConfigMap in the openshift-config namespace. The configMap field must be set when from is set to ConfigMap.\n\nPossible enum values:\n - `\"ConfigMap\"` represents a ConfigMap source.", - Default: "", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"ConfigMap"}, - }, - }, - "configMap": { - SchemaProps: spec.SchemaProps{ - Description: "configMap specifies the ConfigMap sourcing details such as the name of the ConfigMap and the key for the file. The ConfigMap must exist in the openshift-config namespace. Required when from is \"ConfigMap\", and forbidden otherwise.", - Ref: ref(operatorv1.ConfigMapFileReference{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"from"}, - }, - }, - Dependencies: []string{ - operatorv1.ConfigMapFileReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ForwardPlugin(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ForwardPlugin defines a schema for configuring the CoreDNS forward plugin.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "upstreams": { - SchemaProps: spec.SchemaProps{ - Description: "upstreams is a list of resolvers to forward name queries for subdomains of Zones. Each instance of CoreDNS performs health checking of Upstreams. When a healthy upstream returns an error during the exchange, another resolver is tried from Upstreams. The Upstreams are selected in the order specified in Policy. Each upstream is represented by an IP address or IP:port if the upstream listens on a port other than 53.\n\nA maximum of 15 upstreams is allowed per ForwardPlugin.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "policy": { - SchemaProps: spec.SchemaProps{ - Description: "policy is used to determine the order in which upstream servers are selected for querying. Any one of the following values may be specified:\n\n* \"Random\" picks a random upstream server for each query. * \"RoundRobin\" picks upstream servers in a round-robin order, moving to the next server for each new query. * \"Sequential\" tries querying upstream servers in a sequential order until one responds, starting with the first server for each new query.\n\nThe default value is \"Random\"", - Type: []string{"string"}, - Format: "", - }, - }, - "transportConfig": { - SchemaProps: spec.SchemaProps{ - Description: "transportConfig is used to configure the transport type, server name, and optional custom CA or CA bundle to use when forwarding DNS requests to an upstream resolver.\n\nThe default value is \"\" (empty) which results in a standard cleartext connection being used when forwarding DNS requests to an upstream resolver.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.DNSTransportConfig{}.OpenAPIModelName()), - }, - }, - "protocolStrategy": { - SchemaProps: spec.SchemaProps{ - Description: "protocolStrategy specifies the protocol to use for upstream DNS requests. Valid values for protocolStrategy are \"TCP\" and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is to use the protocol of the original client request. \"TCP\" specifies that the platform should use TCP for all upstream DNS requests, even if the client request uses UDP. \"TCP\" is useful for UDP-specific issues such as those created by non-compliant upstream resolvers, but may consume more bandwidth or increase DNS response time. Note that protocolStrategy only affects the protocol of DNS requests that CoreDNS makes to upstream resolvers. It does not affect the protocol of DNS requests between clients and CoreDNS.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"upstreams"}, - }, - }, - Dependencies: []string{ - operatorv1.DNSTransportConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_GCPCSIDriverConfigSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GCPCSIDriverConfigSpec defines properties that can be configured for the GCP CSI driver.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kmsKey": { - SchemaProps: spec.SchemaProps{ - Description: "kmsKey sets the cluster default storage class to encrypt volumes with customer-supplied encryption keys, rather than the default keys managed by GCP.", - Ref: ref(operatorv1.GCPKMSKeyReference{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GCPKMSKeyReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_GCPKMSKeyReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GCPKMSKeyReference gathers required fields for looking up a GCP KMS Key", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the customer-managed encryption key to be used for disk encryption. The value should correspond to an existing KMS key and should consist of only alphanumeric characters, hyphens (-) and underscores (_), and be at most 63 characters in length.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyRing": { - SchemaProps: spec.SchemaProps{ - Description: "keyRing is the name of the KMS Key Ring which the KMS Key belongs to. The value should correspond to an existing KMS key ring and should consist of only alphanumeric characters, hyphens (-) and underscores (_), and be at most 63 characters in length.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "projectID": { - SchemaProps: spec.SchemaProps{ - Description: "projectID is the ID of the Project in which the KMS Key Ring exists. It must be 6 to 30 lowercase letters, digits, or hyphens. It must start with a letter. Trailing hyphens are prohibited.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "location": { - SchemaProps: spec.SchemaProps{ - Description: "location is the GCP location in which the Key Ring exists. The value must match an existing GCP location, or \"global\". Defaults to global, if not set.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"name", "keyRing", "projectID"}, - }, - }, - } -} - -func schema_openshift_api_operator_v1_GCPLoadBalancerParameters(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GCPLoadBalancerParameters provides configuration settings that are specific to GCP load balancers.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "clientAccess": { - SchemaProps: spec.SchemaProps{ - Description: "clientAccess describes how client access is restricted for internal load balancers.\n\nValid values are: * \"Global\": Specifying an internal load balancer with Global client access\n allows clients from any region within the VPC to communicate with the load\n balancer.\n\n https://cloud.google.com/kubernetes-engine/docs/how-to/internal-load-balancing#global_access\n\n* \"Local\": Specifying an internal load balancer with Local client access\n means only clients within the same region (and VPC) as the GCP load balancer\n can communicate with the load balancer. Note that this is the default behavior.\n\n https://cloud.google.com/load-balancing/docs/internal#client_access", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_GatewayConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GatewayConfig holds node gateway-related parsed config file parameters and command-line overrides", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "routingViaHost": { - SchemaProps: spec.SchemaProps{ - Description: "routingViaHost allows pod egress traffic to exit via the ovn-k8s-mp0 management port into the host before sending it out. If this is not set, traffic will always egress directly from OVN to outside without touching the host stack. Setting this to true means hardware offload will not be supported. Default is false if GatewayConfig is specified.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "ipForwarding": { - SchemaProps: spec.SchemaProps{ - Description: "ipForwarding controls IP forwarding for all traffic on OVN-Kubernetes managed interfaces (such as br-ex). By default this is set to Restricted, and Kubernetes related traffic is still forwarded appropriately, but other IP traffic will not be routed by the OCP node. If there is a desire to allow the host to forward traffic across OVN-Kubernetes managed interfaces, then set this field to \"Global\". The supported values are \"Restricted\" and \"Global\".", - Type: []string{"string"}, - Format: "", - }, - }, - "ipv4": { - SchemaProps: spec.SchemaProps{ - Description: "ipv4 allows users to configure IP settings for IPv4 connections. When omitted, this means no opinion and the default configuration is used. Check individual members fields within ipv4 for details of default values.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.IPv4GatewayConfig{}.OpenAPIModelName()), - }, - }, - "ipv6": { - SchemaProps: spec.SchemaProps{ - Description: "ipv6 allows users to configure IP settings for IPv6 connections. When omitted, this means no opinion and the default configuration is used. Check individual members fields within ipv6 for details of default values.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.IPv6GatewayConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.IPv4GatewayConfig{}.OpenAPIModelName(), operatorv1.IPv6GatewayConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_GatherStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "gatherStatus provides information about the last known gather event.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "lastGatherTime": { - SchemaProps: spec.SchemaProps{ - Description: "lastGatherTime is the last time when Insights data gathering finished. An empty value means that no data has been gathered yet.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "lastGatherDuration": { - SchemaProps: spec.SchemaProps{ - Description: "lastGatherDuration is the total time taken to process all gatherers during the last gather event.", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - "gatherers": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "gatherers is a list of active gatherers (and their statuses) in the last gathering.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GathererStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GathererStatus{}.OpenAPIModelName(), metav1.Duration{}.OpenAPIModelName(), metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_GathererStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "gathererStatus represents information about a particular data gatherer.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions provide details on the status of each gatherer.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the gatherer.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "lastGatherDuration": { - SchemaProps: spec.SchemaProps{ - Description: "lastGatherDuration represents the time spent gathering.", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"conditions", "name", "lastGatherDuration"}, - }, - }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName(), metav1.Duration{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_GenerationStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GenerationStatus keeps track of the generation for a given resource so that decisions about forced updates can be made.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "group": { - SchemaProps: spec.SchemaProps{ - Description: "group is the group of the thing you're tracking", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "resource": { - SchemaProps: spec.SchemaProps{ - Description: "resource is the resource type of the thing you're tracking", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "namespace": { - SchemaProps: spec.SchemaProps{ - Description: "namespace is where the thing you're tracking is", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of the thing you're tracking", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "lastGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "lastGeneration is the last generation of the workload controller involved", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - "hash": { - SchemaProps: spec.SchemaProps{ - Description: "hash is an optional field set for resources without generation that are content sensitive like secrets and configmaps", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"group", "resource", "namespace", "name", "lastGeneration", "hash"}, - }, - }, - } -} - -func schema_openshift_api_operator_v1_HTTPCompressionPolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "httpCompressionPolicy turns on compression for the specified MIME types.\n\nThis field is optional, and its absence implies that compression should not be enabled globally in HAProxy.\n\nIf httpCompressionPolicy exists, compression should be enabled only for the specified MIME types.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "mimeTypes": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "mimeTypes is a list of MIME types that should have compression applied. This list can be empty, in which case the ingress controller does not apply compression.\n\nNote: Not all MIME types benefit from compression, but HAProxy will still use resources to try to compress if instructed to. Generally speaking, text (html, css, js, etc.) formats benefit from compression, but formats that are already compressed (image, audio, video, etc.) benefit little in exchange for the time and cpu spent on compressing again. See https://joehonton.medium.com/the-gzip-penalty-d31bd697f1a2", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_HealthCheck(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "healthCheck represents an Insights health check attributes.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "description": { - SchemaProps: spec.SchemaProps{ - Description: "description provides basic description of the healtcheck.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "totalRisk": { - SchemaProps: spec.SchemaProps{ - Description: "totalRisk of the healthcheck. Indicator of the total risk posed by the detected issue; combination of impact and likelihood. The values can be from 1 to 4, and the higher the number, the more important the issue.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "advisorURI": { - SchemaProps: spec.SchemaProps{ - Description: "advisorURI provides the URL link to the Insights Advisor.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "state": { - SchemaProps: spec.SchemaProps{ - Description: "state determines what the current state of the health check is. Health check is enabled by default and can be disabled by the user in the Insights advisor user interface.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"description", "totalRisk", "advisorURI", "state"}, - }, - }, - } -} - -func schema_openshift_api_operator_v1_HostNetworkStrategy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "HostNetworkStrategy holds parameters for the HostNetwork endpoint publishing strategy.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "protocol": { - SchemaProps: spec.SchemaProps{ - Description: "protocol specifies whether the IngressController expects incoming connections to use plain TCP or whether the IngressController expects PROXY protocol.\n\nPROXY protocol can be used with load balancers that support it to communicate the source addresses of client connections when forwarding those connections to the IngressController. Using PROXY protocol enables the IngressController to report those source addresses instead of reporting the load balancer's address in HTTP headers and logs. Note that enabling PROXY protocol on the IngressController will cause connections to fail if you are not using a load balancer that uses PROXY protocol to forward connections to the IngressController. See http://www.haproxy.org/download/2.2/doc/proxy-protocol.txt for information about PROXY protocol.\n\nThe following values are valid for this field:\n\n* The empty string. * \"TCP\". * \"PROXY\".\n\nThe empty string specifies the default, which is TCP without PROXY protocol. Note that the default is subject to change.", - Type: []string{"string"}, - Format: "", - }, - }, - "httpPort": { - SchemaProps: spec.SchemaProps{ - Description: "httpPort is the port on the host which should be used to listen for HTTP requests. This field should be set when port 80 is already in use. The value should not coincide with the NodePort range of the cluster. When the value is 0 or is not specified it defaults to 80.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "httpsPort": { - SchemaProps: spec.SchemaProps{ - Description: "httpsPort is the port on the host which should be used to listen for HTTPS requests. This field should be set when port 443 is already in use. The value should not coincide with the NodePort range of the cluster. When the value is 0 or is not specified it defaults to 443.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "statsPort": { - SchemaProps: spec.SchemaProps{ - Description: "statsPort is the port on the host where the stats from the router are published. The value should not coincide with the NodePort range of the cluster. If an external load balancer is configured to forward connections to this IngressController, the load balancer should use this port for health checks. The load balancer can send HTTP probes on this port on a given node, with the path /healthz/ready to determine if the ingress controller is ready to receive traffic on the node. For proper operation the load balancer must not forward traffic to a node until the health check reports ready. The load balancer should also stop forwarding requests within a maximum of 45 seconds after /healthz/ready starts reporting not-ready. Probing every 5 to 10 seconds, with a 5-second timeout and with a threshold of two successful or failed requests to become healthy or unhealthy respectively, are well-tested values. When the value is 0 or is not specified it defaults to 1936.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_HybridOverlayConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "hybridClusterNetwork": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "hybridClusterNetwork defines a network space given to nodes on an additional overlay network.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ClusterNetworkEntry{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "hybridOverlayVXLANPort": { - SchemaProps: spec.SchemaProps{ - Description: "hybridOverlayVXLANPort defines the VXLAN port number to be used by the additional overlay network. Default is 4789", - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - Required: []string{"hybridClusterNetwork"}, - }, - }, - Dependencies: []string{ - operatorv1.ClusterNetworkEntry{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_IBMCloudCSIDriverConfigSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IBMCloudCSIDriverConfigSpec defines the properties that can be configured for the IBM Cloud CSI driver.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "encryptionKeyCRN": { - SchemaProps: spec.SchemaProps{ - Description: "encryptionKeyCRN is the IBM Cloud CRN of the customer-managed root key to use for disk encryption of volumes for the default storage classes.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"encryptionKeyCRN"}, - }, - }, - } -} - -func schema_openshift_api_operator_v1_IBMLoadBalancerParameters(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IBMLoadBalancerParameters provides configuration settings that are specific to IBM Cloud load balancers.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "protocol": { - SchemaProps: spec.SchemaProps{ - Description: "protocol specifies whether the load balancer uses PROXY protocol to forward connections to the IngressController. See \"service.kubernetes.io/ibm-load-balancer-cloud-provider-enable-features: \"proxy-protocol\"\" at https://cloud.ibm.com/docs/containers?topic=containers-vpc-lbaas\"\n\nPROXY protocol can be used with load balancers that support it to communicate the source addresses of client connections when forwarding those connections to the IngressController. Using PROXY protocol enables the IngressController to report those source addresses instead of reporting the load balancer's address in HTTP headers and logs. Note that enabling PROXY protocol on the IngressController will cause connections to fail if you are not using a load balancer that uses PROXY protocol to forward connections to the IngressController. See http://www.haproxy.org/download/2.2/doc/proxy-protocol.txt for information about PROXY protocol.\n\nValid values for protocol are TCP, PROXY and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is TCP, without the proxy protocol enabled.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_IPAMConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IPAMConfig contains configurations for IPAM (IP Address Management)", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the type of IPAM module will be used for IP Address Management(IPAM). The supported values are IPAMTypeDHCP, IPAMTypeStatic", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "staticIPAMConfig": { - SchemaProps: spec.SchemaProps{ - Description: "staticIPAMConfig configures the static IP address in case of type:IPAMTypeStatic", - Ref: ref(operatorv1.StaticIPAMConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - }, - Dependencies: []string{ - operatorv1.StaticIPAMConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_IPFIXConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "collectors": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "ipfixCollectors is list of strings formatted as ip:port with a maximum of ten items", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_IPsecConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "mode": { - SchemaProps: spec.SchemaProps{ - Description: "mode defines the behaviour of the ipsec configuration within the platform. Valid values are `Disabled`, `External` and `Full`. When 'Disabled', ipsec will not be enabled at the node level. When 'External', ipsec is enabled on the node level but requires the user to configure the secure communication parameters. This mode is for external secure communications and the configuration can be done using the k8s-nmstate operator. When 'Full', ipsec is configured on the node level and inter-pod secure communication within the cluster is configured. Note with `Full`, if ipsec is desired for communication with external (to the cluster) entities (such as storage arrays), this is left to the user to configure.", - Type: []string{"string"}, - Format: "", - }, - }, - "full": { - SchemaProps: spec.SchemaProps{ - Description: "full defines configuration parameters for the IPsec `Full` mode. This is permitted only when mode is configured with `Full`, and forbidden otherwise.", - Ref: ref(operatorv1.IPsecFullModeConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "mode", - "fields-to-discriminateBy": map[string]interface{}{ - "full": "Full", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.IPsecFullModeConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_IPsecFullModeConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IPsecFullModeConfig defines configuration parameters for the IPsec `Full` mode.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "encapsulation": { - SchemaProps: spec.SchemaProps{ - Description: "encapsulation option to configure libreswan on how inter-pod traffic across nodes are encapsulated to handle NAT traversal. When configured it uses UDP port 4500 for the encapsulation. Valid values are Always, Auto and omitted. Always means enable UDP encapsulation regardless of whether NAT is detected. Auto means enable UDP encapsulation based on the detection of NAT. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is Auto.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_IPv4GatewayConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IPV4GatewayConfig holds the configuration paramaters for IPV4 connections in the GatewayConfig for OVN-Kubernetes", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "internalMasqueradeSubnet": { - SchemaProps: spec.SchemaProps{ - Description: "internalMasqueradeSubnet contains the masquerade addresses in IPV4 CIDR format used internally by ovn-kubernetes to enable host to service traffic. Each host in the cluster is configured with these addresses, as well as the shared gateway bridge interface. The values can be changed after installation. The subnet chosen should not overlap with other networks specified for OVN-Kubernetes as well as other networks used on the host. Additionally the subnet must be large enough to accommodate 6 IPs (maximum prefix length /29). When omitted, this means no opinion and the platform is left to choose a reasonable default which is subject to change over time. The current default subnet is 169.254.0.0/17 The value must be in proper IPV4 CIDR format", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_IPv4OVNKubernetesConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "internalTransitSwitchSubnet": { - SchemaProps: spec.SchemaProps{ - Description: "internalTransitSwitchSubnet is a v4 subnet in IPV4 CIDR format used internally by OVN-Kubernetes for the distributed transit switch in the OVN Interconnect architecture that connects the cluster routers on each node together to enable east west traffic. The subnet chosen should not overlap with other networks specified for OVN-Kubernetes as well as other networks used on the host. When ommitted, this means no opinion and the platform is left to choose a reasonable default which is subject to change over time. The current default subnet is 100.88.0.0/16 The subnet must be large enough to accommodate one IP per node in your cluster The value must be in proper IPV4 CIDR format", - Type: []string{"string"}, - Format: "", - }, - }, - "internalJoinSubnet": { - SchemaProps: spec.SchemaProps{ - Description: "internalJoinSubnet is a v4 subnet used internally by ovn-kubernetes in case the default one is being already used by something else. It must not overlap with any other subnet being used by OpenShift or by the node network. The size of the subnet must be larger than the number of nodes. The current default value is 100.64.0.0/16 The subnet must be large enough to accommodate one IP per node in your cluster The value must be in proper IPV4 CIDR format", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_IPv6GatewayConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IPV6GatewayConfig holds the configuration paramaters for IPV6 connections in the GatewayConfig for OVN-Kubernetes", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "internalMasqueradeSubnet": { - SchemaProps: spec.SchemaProps{ - Description: "internalMasqueradeSubnet contains the masquerade addresses in IPV6 CIDR format used internally by ovn-kubernetes to enable host to service traffic. Each host in the cluster is configured with these addresses, as well as the shared gateway bridge interface. The values can be changed after installation. The subnet chosen should not overlap with other networks specified for OVN-Kubernetes as well as other networks used on the host. Additionally the subnet must be large enough to accommodate 6 IPs (maximum prefix length /125). When omitted, this means no opinion and the platform is left to choose a reasonable default which is subject to change over time. The current default subnet is fd69::/112 Note that IPV6 dual addresses are not permitted", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_IPv6OVNKubernetesConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "internalTransitSwitchSubnet": { - SchemaProps: spec.SchemaProps{ - Description: "internalTransitSwitchSubnet is a v4 subnet in IPV4 CIDR format used internally by OVN-Kubernetes for the distributed transit switch in the OVN Interconnect architecture that connects the cluster routers on each node together to enable east west traffic. The subnet chosen should not overlap with other networks specified for OVN-Kubernetes as well as other networks used on the host. When ommitted, this means no opinion and the platform is left to choose a reasonable default which is subject to change over time. The subnet must be large enough to accommodate one IP per node in your cluster The current default subnet is fd97::/64 The value must be in proper IPV6 CIDR format Note that IPV6 dual addresses are not permitted", - Type: []string{"string"}, - Format: "", - }, - }, - "internalJoinSubnet": { - SchemaProps: spec.SchemaProps{ - Description: "internalJoinSubnet is a v6 subnet used internally by ovn-kubernetes in case the default one is being already used by something else. It must not overlap with any other subnet being used by OpenShift or by the node network. The size of the subnet must be larger than the number of nodes. The subnet must be large enough to accommodate one IP per node in your cluster The current default value is fd98::/64 The value must be in proper IPV6 CIDR format Note that IPV6 dual addresses are not permitted", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_Ingress(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Ingress allows cluster admin to configure alternative ingress for the console.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "consoleURL": { - SchemaProps: spec.SchemaProps{ - Description: "consoleURL is a URL to be used as the base console address. If not specified, the console route hostname will be used. This field is required for clusters without ingress capability, where access to routes is not possible. Make sure that appropriate ingress is set up at this URL. The console operator will monitor the URL and may go degraded if it's unreachable for an extended period. Must use the HTTPS scheme.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientDownloadsURL": { - SchemaProps: spec.SchemaProps{ - Description: "clientDownloadsURL is a URL to be used as the address to download client binaries. If not specified, the downloads route hostname will be used. This field is required for clusters without ingress capability, where access to routes is not possible. The console operator will monitor the URL and may go degraded if it's unreachable for an extended period. Must use the HTTPS scheme.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_IngressController(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IngressController describes a managed ingress controller for the cluster. The controller can service OpenShift Route and Kubernetes Ingress resources.\n\nWhen an IngressController is created, a new ingress controller deployment is created to allow external traffic to reach the services that expose Ingress or Route resources. Updating this resource may lead to disruption for public facing network connections as a new ingress controller revision may be rolled out.\n\nhttps://kubernetes.io/docs/concepts/services-networking/ingress-controllers\n\nWhenever possible, sensible defaults for the platform are used. See each field for more details.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the desired behavior of the IngressController.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.IngressControllerSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status is the most recently observed status of the IngressController.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.IngressControllerStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.IngressControllerSpec{}.OpenAPIModelName(), operatorv1.IngressControllerStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_IngressControllerCaptureHTTPCookie(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IngressControllerCaptureHTTPCookie describes an HTTP cookie that should be captured.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "matchType": { - SchemaProps: spec.SchemaProps{ - Description: "matchType specifies the type of match to be performed on the cookie name. Allowed values are \"Exact\" for an exact string match and \"Prefix\" for a string prefix match. If \"Exact\" is specified, a name must be specified in the name field. If \"Prefix\" is provided, a prefix must be specified in the namePrefix field. For example, specifying matchType \"Prefix\" and namePrefix \"foo\" will capture a cookie named \"foo\" or \"foobar\" but not one named \"bar\". The first matching cookie is captured.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name specifies a cookie name. Its value must be a valid HTTP cookie name as defined in RFC 6265 section 4.1.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "namePrefix": { - SchemaProps: spec.SchemaProps{ - Description: "namePrefix specifies a cookie name prefix. Its value must be a valid HTTP cookie name as defined in RFC 6265 section 4.1.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "maxLength": { - SchemaProps: spec.SchemaProps{ - Description: "maxLength specifies a maximum length of the string that will be logged, which includes the cookie name, cookie value, and one-character delimiter. If the log entry exceeds this length, the value will be truncated in the log message. Note that the ingress controller may impose a separate bound on the total length of HTTP headers in a request.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"matchType", "maxLength"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "matchType", - "fields-to-discriminateBy": map[string]interface{}{ - "name": "Name", - "namePrefix": "NamePrefix", - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_IngressControllerCaptureHTTPCookieUnion(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IngressControllerCaptureHTTPCookieUnion describes optional fields of an HTTP cookie that should be captured.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "matchType": { - SchemaProps: spec.SchemaProps{ - Description: "matchType specifies the type of match to be performed on the cookie name. Allowed values are \"Exact\" for an exact string match and \"Prefix\" for a string prefix match. If \"Exact\" is specified, a name must be specified in the name field. If \"Prefix\" is provided, a prefix must be specified in the namePrefix field. For example, specifying matchType \"Prefix\" and namePrefix \"foo\" will capture a cookie named \"foo\" or \"foobar\" but not one named \"bar\". The first matching cookie is captured.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name specifies a cookie name. Its value must be a valid HTTP cookie name as defined in RFC 6265 section 4.1.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "namePrefix": { - SchemaProps: spec.SchemaProps{ - Description: "namePrefix specifies a cookie name prefix. Its value must be a valid HTTP cookie name as defined in RFC 6265 section 4.1.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"matchType"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "matchType", - "fields-to-discriminateBy": map[string]interface{}{ - "name": "Name", - "namePrefix": "NamePrefix", - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_IngressControllerCaptureHTTPHeader(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IngressControllerCaptureHTTPHeader describes an HTTP header that should be captured.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name specifies a header name. Its value must be a valid HTTP header name as defined in RFC 2616 section 4.2.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "maxLength": { - SchemaProps: spec.SchemaProps{ - Description: "maxLength specifies a maximum length for the header value. If a header value exceeds this length, the value will be truncated in the log message. Note that the ingress controller may impose a separate bound on the total length of HTTP headers in a request.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"name", "maxLength"}, - }, - }, - } -} - -func schema_openshift_api_operator_v1_IngressControllerCaptureHTTPHeaders(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IngressControllerCaptureHTTPHeaders specifies which HTTP headers the IngressController captures.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "request": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "request specifies which HTTP request headers to capture.\n\nIf this field is empty, no request headers are captured.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.IngressControllerCaptureHTTPHeader{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "response": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "response specifies which HTTP response headers to capture.\n\nIf this field is empty, no response headers are captured.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.IngressControllerCaptureHTTPHeader{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.IngressControllerCaptureHTTPHeader{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_IngressControllerHTTPHeader(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IngressControllerHTTPHeader specifies configuration for setting or deleting an HTTP header.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name specifies the name of a header on which to perform an action. Its value must be a valid HTTP header name as defined in RFC 2616 section 4.2. The name must consist only of alphanumeric and the following special characters, \"-!#$%&'*+.^_`\". The following header names are reserved and may not be modified via this API: Strict-Transport-Security, Proxy, Host, Cookie, Set-Cookie. It must be no more than 255 characters in length. Header name must be unique.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "action": { - SchemaProps: spec.SchemaProps{ - Description: "action specifies actions to perform on headers, such as setting or deleting headers.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.IngressControllerHTTPHeaderActionUnion{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"name", "action"}, - }, - }, - Dependencies: []string{ - operatorv1.IngressControllerHTTPHeaderActionUnion{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_IngressControllerHTTPHeaderActionUnion(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IngressControllerHTTPHeaderActionUnion specifies an action to take on an HTTP header.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type defines the type of the action to be applied on the header. Possible values are Set or Delete. Set allows you to set HTTP request and response headers. Delete allows you to delete HTTP request and response headers.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "set": { - SchemaProps: spec.SchemaProps{ - Description: "set specifies how the HTTP header should be set. This field is required when type is Set and forbidden otherwise.", - Ref: ref(operatorv1.IngressControllerSetHTTPHeader{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "set": "Set", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.IngressControllerSetHTTPHeader{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_IngressControllerHTTPHeaderActions(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IngressControllerHTTPHeaderActions defines configuration for actions on HTTP request and response headers.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "response": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "response is a list of HTTP response headers to modify. Actions defined here will modify the response headers of all requests passing through an ingress controller. These actions are applied to all Routes i.e. for all connections handled by the ingress controller defined within a cluster. IngressController actions for response headers will be executed after Route actions. Currently, actions may define to either `Set` or `Delete` headers values. Actions are applied in sequence as defined in this list. A maximum of 20 response header actions may be configured. Sample fetchers allowed are \"res.hdr\" and \"ssl_c_der\". Converters allowed are \"lower\" and \"base64\". Example header values: \"%[res.hdr(X-target),lower]\", \"%{+Q}[ssl_c_der,base64]\".", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.IngressControllerHTTPHeader{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "request": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "request is a list of HTTP request headers to modify. Actions defined here will modify the request headers of all requests passing through an ingress controller. These actions are applied to all Routes i.e. for all connections handled by the ingress controller defined within a cluster. IngressController actions for request headers will be executed before Route actions. Currently, actions may define to either `Set` or `Delete` headers values. Actions are applied in sequence as defined in this list. A maximum of 20 request header actions may be configured. Sample fetchers allowed are \"req.hdr\" and \"ssl_c_der\". Converters allowed are \"lower\" and \"base64\". Example header values: \"%[req.hdr(X-target),lower]\", \"%{+Q}[ssl_c_der,base64]\".", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.IngressControllerHTTPHeader{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.IngressControllerHTTPHeader{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_IngressControllerHTTPHeaders(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IngressControllerHTTPHeaders specifies how the IngressController handles certain HTTP headers.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "forwardedHeaderPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "forwardedHeaderPolicy specifies when and how the IngressController sets the Forwarded, X-Forwarded-For, X-Forwarded-Host, X-Forwarded-Port, X-Forwarded-Proto, and X-Forwarded-Proto-Version HTTP headers. The value may be one of the following:\n\n* \"Append\", which specifies that the IngressController appends the\n headers, preserving existing headers.\n\n* \"Replace\", which specifies that the IngressController sets the\n headers, replacing any existing Forwarded or X-Forwarded-* headers.\n\n* \"IfNone\", which specifies that the IngressController sets the\n headers if they are not already set.\n\n* \"Never\", which specifies that the IngressController never sets the\n headers, preserving any existing headers.\n\nBy default, the policy is \"Append\".", - Type: []string{"string"}, - Format: "", - }, - }, - "uniqueId": { - SchemaProps: spec.SchemaProps{ - Description: "uniqueId describes configuration for a custom HTTP header that the ingress controller should inject into incoming HTTP requests. Typically, this header is configured to have a value that is unique to the HTTP request. The header can be used by applications or included in access logs to facilitate tracing individual HTTP requests.\n\nIf this field is empty, no such header is injected into requests.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.IngressControllerHTTPUniqueIdHeaderPolicy{}.OpenAPIModelName()), - }, - }, - "headerNameCaseAdjustments": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "headerNameCaseAdjustments specifies case adjustments that can be applied to HTTP header names. Each adjustment is specified as an HTTP header name with the desired capitalization. For example, specifying \"X-Forwarded-For\" indicates that the \"x-forwarded-for\" HTTP header should be adjusted to have the specified capitalization.\n\nThese adjustments are only applied to cleartext, edge-terminated, and re-encrypt routes, and only when using HTTP/1.\n\nFor request headers, these adjustments are applied only for routes that have the haproxy.router.openshift.io/h1-adjust-case=true annotation. For response headers, these adjustments are applied to all HTTP responses.\n\nIf this field is empty, no request headers are adjusted.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "actions": { - SchemaProps: spec.SchemaProps{ - Description: "actions specifies options for modifying headers and their values. Note that this option only applies to cleartext HTTP connections and to secure HTTP connections for which the ingress controller terminates encryption (that is, edge-terminated or reencrypt connections). Headers cannot be modified for TLS passthrough connections. Setting the HSTS (`Strict-Transport-Security`) header is not supported via actions. `Strict-Transport-Security` may only be configured using the \"haproxy.router.openshift.io/hsts_header\" route annotation, and only in accordance with the policy specified in Ingress.Spec.RequiredHSTSPolicies. Any actions defined here are applied after any actions related to the following other fields: cache-control, spec.clientTLS, spec.httpHeaders.forwardedHeaderPolicy, spec.httpHeaders.uniqueId, and spec.httpHeaders.headerNameCaseAdjustments. In case of HTTP request headers, the actions specified in spec.httpHeaders.actions on the Route will be executed after the actions specified in the IngressController's spec.httpHeaders.actions field. In case of HTTP response headers, the actions specified in spec.httpHeaders.actions on the IngressController will be executed after the actions specified in the Route's spec.httpHeaders.actions field. Headers set using this API cannot be captured for use in access logs. The following header names are reserved and may not be modified via this API: Strict-Transport-Security, Proxy, Host, Cookie, Set-Cookie. Note that the total size of all net added headers *after* interpolating dynamic values must not exceed the value of spec.tuningOptions.headerBufferMaxRewriteBytes on the IngressController. Please refer to the documentation for that API field for more details.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.IngressControllerHTTPHeaderActions{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.IngressControllerHTTPHeaderActions{}.OpenAPIModelName(), operatorv1.IngressControllerHTTPUniqueIdHeaderPolicy{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_IngressControllerHTTPUniqueIdHeaderPolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IngressControllerHTTPUniqueIdHeaderPolicy describes configuration for a unique id header.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name specifies the name of the HTTP header (for example, \"unique-id\") that the ingress controller should inject into HTTP requests. The field's value must be a valid HTTP header name as defined in RFC 2616 section 4.2. If the field is empty, no header is injected.", - Type: []string{"string"}, - Format: "", - }, - }, - "format": { - SchemaProps: spec.SchemaProps{ - Description: "format specifies the format for the injected HTTP header's value. This field has no effect unless name is specified. For the HAProxy-based ingress controller implementation, this format uses the same syntax as the HTTP log format. If the field is empty, the default value is \"%{+X}o\\\\ %ci:%cp_%fi:%fp_%Ts_%rt:%pid\"; see the corresponding HAProxy documentation: http://cbonte.github.io/haproxy-dconv/2.0/configuration.html#8.2.3", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_IngressControllerList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IngressControllerList contains a list of IngressControllers.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.IngressController{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - operatorv1.IngressController{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_IngressControllerLogging(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IngressControllerLogging describes what should be logged where.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "access": { - SchemaProps: spec.SchemaProps{ - Description: "access describes how the client requests should be logged.\n\nIf this field is empty, access logging is disabled.", - Ref: ref(operatorv1.AccessLogging{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.AccessLogging{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_IngressControllerSetHTTPHeader(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IngressControllerSetHTTPHeader defines the value which needs to be set on an HTTP header.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value specifies a header value. Dynamic values can be added. The value will be interpreted as an HAProxy format string as defined in http://cbonte.github.io/haproxy-dconv/2.6/configuration.html#8.2.6 and may use HAProxy's %[] syntax and otherwise must be a valid HTTP header value as defined in https://datatracker.ietf.org/doc/html/rfc7230#section-3.2. The value of this field must be no more than 16384 characters in length. Note that the total size of all net added headers *after* interpolating dynamic values must not exceed the value of spec.tuningOptions.headerBufferMaxRewriteBytes on the IngressController.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"value"}, - }, - }, - } -} - -func schema_openshift_api_operator_v1_IngressControllerSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IngressControllerSpec is the specification of the desired behavior of the IngressController.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "domain": { - SchemaProps: spec.SchemaProps{ - Description: "domain is a DNS name serviced by the ingress controller and is used to configure multiple features:\n\n* For the LoadBalancerService endpoint publishing strategy, domain is\n used to configure DNS records. See endpointPublishingStrategy.\n\n* When using a generated default certificate, the certificate will be valid\n for domain and its subdomains. See defaultCertificate.\n\n* The value is published to individual Route statuses so that end-users\n know where to target external DNS records.\n\ndomain must be unique among all IngressControllers, and cannot be updated.\n\nIf empty, defaults to ingress.config.openshift.io/cluster .spec.domain.\n\nThe domain value must be a valid DNS name. It must consist of lowercase alphanumeric characters, '-' or '.', and each label must start and end with an alphanumeric character and not exceed 63 characters. Maximum length of a valid DNS domain is 253 characters.\n\nThe implementation may add a prefix such as \"router-default.\" to the domain when constructing the router canonical hostname. To ensure the resulting hostname does not exceed the DNS maximum length of 253 characters, the domain length is additionally validated at the IngressController object level. For the maximum length of the domain value itself, the shortest possible variant of the prefix and the ingress controller name was considered for example \"router-a.\"", - Type: []string{"string"}, - Format: "", - }, - }, - "httpErrorCodePages": { - SchemaProps: spec.SchemaProps{ - Description: "httpErrorCodePages specifies a configmap with custom error pages. The administrator must create this configmap in the openshift-config namespace. This configmap should have keys in the format \"error-page-.http\", where is an HTTP error code. For example, \"error-page-503.http\" defines an error page for HTTP 503 responses. Currently only error pages for 503 and 404 responses can be customized. Each value in the configmap should be the full response, including HTTP headers. Eg- https://raw.githubusercontent.com/openshift/router/fadab45747a9b30cc3f0a4b41ad2871f95827a93/images/router/haproxy/conf/error-page-503.http If this field is empty, the ingress controller uses the default error pages.", - Default: map[string]interface{}{}, - Ref: ref(configv1.ConfigMapNameReference{}.OpenAPIModelName()), - }, - }, - "replicas": { - SchemaProps: spec.SchemaProps{ - Description: "replicas is the desired number of ingress controller replicas. If unset, the default depends on the value of the defaultPlacement field in the cluster config.openshift.io/v1/ingresses status.\n\nThe value of replicas is set based on the value of a chosen field in the Infrastructure CR. If defaultPlacement is set to ControlPlane, the chosen field will be controlPlaneTopology. If it is set to Workers the chosen field will be infrastructureTopology. Replicas will then be set to 1 or 2 based whether the chosen field's value is SingleReplica or HighlyAvailable, respectively.\n\nThese defaults are subject to change.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "endpointPublishingStrategy": { - SchemaProps: spec.SchemaProps{ - Description: "endpointPublishingStrategy is used to publish the ingress controller endpoints to other networks, enable load balancer integrations, etc.\n\nIf unset, the default is based on infrastructure.config.openshift.io/cluster .status.platform:\n\n AWS: LoadBalancerService (with External scope)\n Azure: LoadBalancerService (with External scope)\n GCP: LoadBalancerService (with External scope)\n IBMCloud: LoadBalancerService (with External scope)\n AlibabaCloud: LoadBalancerService (with External scope)\n Libvirt: HostNetwork\n\nAny other platform types (including None) default to HostNetwork.\n\nendpointPublishingStrategy cannot be updated.", - Ref: ref(operatorv1.EndpointPublishingStrategy{}.OpenAPIModelName()), - }, - }, - "defaultCertificate": { - SchemaProps: spec.SchemaProps{ - Description: "defaultCertificate is a reference to a secret containing the default certificate served by the ingress controller. When Routes don't specify their own certificate, defaultCertificate is used.\n\nThe secret must contain the following keys and data:\n\n tls.crt: certificate file contents\n tls.key: key file contents\n\nIf unset, a wildcard certificate is automatically generated and used. The certificate is valid for the ingress controller domain (and subdomains) and the generated certificate's CA will be automatically integrated with the cluster's trust store.\n\nIf a wildcard certificate is used and shared by multiple HTTP/2 enabled routes (which implies ALPN) then clients (i.e., notably browsers) are at liberty to reuse open connections. This means a client can reuse a connection to another route and that is likely to fail. This behaviour is generally known as connection coalescing.\n\nThe in-use certificate (whether generated or user-specified) will be automatically integrated with OpenShift's built-in OAuth server.", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), - }, - }, - "namespaceSelector": { - SchemaProps: spec.SchemaProps{ - Description: "namespaceSelector is used to filter the set of namespaces serviced by the ingress controller. This is useful for implementing shards.\n\nIf unset, the default is no filtering.", - Ref: ref(metav1.LabelSelector{}.OpenAPIModelName()), - }, - }, - "routeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "routeSelector is used to filter the set of Routes serviced by the ingress controller. This is useful for implementing shards.\n\nIf unset, the default is no filtering.", - Ref: ref(metav1.LabelSelector{}.OpenAPIModelName()), - }, - }, - "nodePlacement": { - SchemaProps: spec.SchemaProps{ - Description: "nodePlacement enables explicit control over the scheduling of the ingress controller.\n\nIf unset, defaults are used. See NodePlacement for more details.", - Ref: ref(operatorv1.NodePlacement{}.OpenAPIModelName()), - }, - }, - "tlsSecurityProfile": { - SchemaProps: spec.SchemaProps{ - Description: "tlsSecurityProfile specifies settings for TLS connections for ingresscontrollers.\n\nIf unset, the default is based on the apiservers.config.openshift.io/cluster resource.\n\nNote that when using the Old, Intermediate, and Modern profile types, the effective profile configuration is subject to change between releases. For example, given a specification to use the Intermediate profile deployed on release X.Y.Z, an upgrade to release X.Y.Z+1 may cause a new profile configuration to be applied to the ingress controller, resulting in a rollout.", - Ref: ref(configv1.TLSSecurityProfile{}.OpenAPIModelName()), - }, - }, - "clientTLS": { - SchemaProps: spec.SchemaProps{ - Description: "clientTLS specifies settings for requesting and verifying client certificates, which can be used to enable mutual TLS for edge-terminated and reencrypt routes.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ClientTLS{}.OpenAPIModelName()), - }, - }, - "routeAdmission": { - SchemaProps: spec.SchemaProps{ - Description: "routeAdmission defines a policy for handling new route claims (for example, to allow or deny claims across namespaces).\n\nIf empty, defaults will be applied. See specific routeAdmission fields for details about their defaults.", - Ref: ref(operatorv1.RouteAdmissionPolicy{}.OpenAPIModelName()), - }, - }, - "logging": { - SchemaProps: spec.SchemaProps{ - Description: "logging defines parameters for what should be logged where. If this field is empty, operational logs are enabled but access logs are disabled.", - Ref: ref(operatorv1.IngressControllerLogging{}.OpenAPIModelName()), - }, - }, - "httpHeaders": { - SchemaProps: spec.SchemaProps{ - Description: "httpHeaders defines policy for HTTP headers.\n\nIf this field is empty, the default values are used.", - Ref: ref(operatorv1.IngressControllerHTTPHeaders{}.OpenAPIModelName()), - }, - }, - "httpEmptyRequestsPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "httpEmptyRequestsPolicy describes how HTTP connections should be handled if the connection times out before a request is received. Allowed values for this field are \"Respond\" and \"Ignore\". If the field is set to \"Respond\", the ingress controller sends an HTTP 400 or 408 response, logs the connection (if access logging is enabled), and counts the connection in the appropriate metrics. If the field is set to \"Ignore\", the ingress controller closes the connection without sending a response, logging the connection, or incrementing metrics. The default value is \"Respond\".\n\nTypically, these connections come from load balancers' health probes or Web browsers' speculative connections (\"preconnect\") and can be safely ignored. However, these requests may also be caused by network errors, and so setting this field to \"Ignore\" may impede detection and diagnosis of problems. In addition, these requests may be caused by port scans, in which case logging empty requests may aid in detecting intrusion attempts.", - Type: []string{"string"}, - Format: "", - }, - }, - "tuningOptions": { - SchemaProps: spec.SchemaProps{ - Description: "tuningOptions defines parameters for adjusting the performance of ingress controller pods. All fields are optional and will use their respective defaults if not set. See specific tuningOptions fields for more details.\n\nSetting fields within tuningOptions is generally not recommended. The default values are suitable for most configurations.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.IngressControllerTuningOptions{}.OpenAPIModelName()), - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides allows specifying unsupported configuration options. Its use is unsupported.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "httpCompression": { - SchemaProps: spec.SchemaProps{ - Description: "httpCompression defines a policy for HTTP traffic compression. By default, there is no HTTP compression.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.HTTPCompressionPolicy{}.OpenAPIModelName()), - }, - }, - "idleConnectionTerminationPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "idleConnectionTerminationPolicy maps directly to HAProxy's idle-close-on-response option and controls whether HAProxy keeps idle frontend connections open during a soft stop (router reload).\n\nAllowed values for this field are \"Immediate\" and \"Deferred\". The default value is \"Immediate\".\n\nWhen set to \"Immediate\", idle connections are closed immediately during router reloads. This ensures immediate propagation of route changes but may impact clients sensitive to connection resets.\n\nWhen set to \"Deferred\", HAProxy will maintain idle connections during a soft reload instead of closing them immediately. These connections remain open until any of the following occurs:\n\n - A new request is received on the connection, in which\n case HAProxy handles it in the old process and closes\n the connection after sending the response.\n\n - HAProxy's `timeout http-keep-alive` duration expires.\n By default this is 300 seconds, but it can be changed\n using httpKeepAliveTimeout tuning option.\n\n - The client's keep-alive timeout expires, causing the\n client to close the connection.\n\nSetting Deferred can help prevent errors in clients or load balancers that do not properly handle connection resets. Additionally, this option allows you to retain the pre-2.4 HAProxy behaviour: in HAProxy version 2.2 (OpenShift versions < 4.14), maintaining idle connections during a soft reload was the default behaviour, but starting with HAProxy 2.4, the default changed to closing idle connections immediately.\n\nImportant Consideration:\n\n - Using Deferred will result in temporary inconsistencies\n for the first request on each persistent connection\n after a route update and router reload. This request\n will be processed by the old HAProxy process using its\n old configuration. Subsequent requests will use the\n updated configuration.\n\nOperational Considerations:\n\n - Keeping idle connections open during reloads may lead\n to an accumulation of old HAProxy processes if\n connections remain idle for extended periods,\n especially in environments where frequent reloads\n occur.\n\n - Consider monitoring the number of HAProxy processes in\n the router pods when Deferred is set.\n\n - You may need to enable or adjust the\n `ingress.operator.openshift.io/hard-stop-after`\n duration (configured via an annotation on the\n IngressController resource) in environments with\n frequent reloads to prevent resource exhaustion.", - Default: "Immediate", - Type: []string{"string"}, - Format: "", - }, - }, - "closedClientConnectionPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "closedClientConnectionPolicy controls how the IngressController behaves when the client closes the TCP connection while the TLS handshake or HTTP request is in progress. This option maps directly to HAProxy’s \"abortonclose\" option.\n\nValid values are: \"Abort\" and \"Continue\". The default value is \"Continue\".\n\nWhen set to \"Abort\", the router will stop processing the TLS handshake if it is in progress, and it will not send an HTTP request to the backend server if the request has not yet been sent when the client closes the connection.\n\nWhen set to \"Continue\", the router will complete the TLS handshake if it is in progress, or send an HTTP request to the backend server and wait for the backend server's response, regardless of whether the client has closed the connection.\n\nSetting \"Abort\" can help free CPU resources otherwise spent on TLS computation for connections the client has already closed, and can reduce request queue size, thereby reducing the load on saturated backend servers.\n\nImportant Considerations:\n\n - The default policy (\"Continue\") is HTTP-compliant, and requests\n for aborted client connections will still be served.\n Use the \"Continue\" policy to allow a client to send a request\n and then immediately close its side of the connection while\n still receiving a response on the half-closed connection.\n\n - When clients use keep-alive connections, the most common case for premature\n closure is when the user wants to cancel the transfer or when a timeout\n occurs. In that case, the \"Abort\" policy may be used to reduce resource consumption.\n\n - Using RSA keys larger than 2048 bits can significantly slow down\n TLS computations. Consider using the \"Abort\" policy to reduce CPU usage.", - Default: "Continue", - Type: []string{"string"}, - Format: "", - }, - }, - "haproxyVersion": { - SchemaProps: spec.SchemaProps{ - Description: "haproxyVersion specifies the HAProxy version to use for this IngressController.\n\nOpenShift 5.0 introduces HAProxy 3.2 as its default version and supports HAProxy 2.8 from OpenShift 4.22 for migration purposes. When an OpenShift release introduces a new default HAProxy version, that HAProxy version becomes available as a pinnable value in subsequent OpenShift releases, providing a smooth migration path for administrators who want to defer HAProxy upgrades.\n\nValid values for OpenShift 5.0: - Unset (default): Uses HAProxy 3.2 (the default for OpenShift 5.0) - \"3.2\": Explicitly pins HAProxy 3.2 for preservation during cluster\n upgrades to future OpenShift releases\n- \"2.8\": Uses HAProxy 2.8 from OpenShift 4.22 (migration support, will\n be dropped in the next OpenShift release)\n\nIf a specific HAProxy version is set and would become unsupported in a target cluster upgrade, a preflight check will block the cluster upgrade until this field is updated to unset or a supported version.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.ConfigMapNameReference{}.OpenAPIModelName(), configv1.TLSSecurityProfile{}.OpenAPIModelName(), operatorv1.ClientTLS{}.OpenAPIModelName(), operatorv1.EndpointPublishingStrategy{}.OpenAPIModelName(), operatorv1.HTTPCompressionPolicy{}.OpenAPIModelName(), operatorv1.IngressControllerHTTPHeaders{}.OpenAPIModelName(), operatorv1.IngressControllerLogging{}.OpenAPIModelName(), operatorv1.IngressControllerTuningOptions{}.OpenAPIModelName(), operatorv1.NodePlacement{}.OpenAPIModelName(), operatorv1.RouteAdmissionPolicy{}.OpenAPIModelName(), corev1.LocalObjectReference{}.OpenAPIModelName(), metav1.LabelSelector{}.OpenAPIModelName(), runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_IngressControllerStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IngressControllerStatus defines the observed status of the IngressController.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "availableReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "availableReplicas is number of observed available replicas according to the ingress controller deployment.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "selector": { - SchemaProps: spec.SchemaProps{ - Description: "selector is a label selector, in string format, for ingress controller pods corresponding to the IngressController. The number of matching pods should equal the value of availableReplicas.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "domain": { - SchemaProps: spec.SchemaProps{ - Description: "domain is the actual domain in use.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "endpointPublishingStrategy": { - SchemaProps: spec.SchemaProps{ - Description: "endpointPublishingStrategy is the actual strategy in use.", - Ref: ref(operatorv1.EndpointPublishingStrategy{}.OpenAPIModelName()), - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status.\n\nAvailable means the ingress controller deployment is available and servicing route and ingress resources (i.e, .status.availableReplicas equals .spec.replicas)\n\nThere are additional conditions which indicate the status of other ingress controller features and capabilities.\n\n * LoadBalancerManaged\n - True if the following conditions are met:\n * The endpoint publishing strategy requires a service load balancer.\n - False if any of those conditions are unsatisfied.\n\n * LoadBalancerReady\n - True if the following conditions are met:\n * A load balancer is managed.\n * The load balancer is ready.\n - False if any of those conditions are unsatisfied.\n\n * DNSManaged\n - True if the following conditions are met:\n * The endpoint publishing strategy and platform support DNS.\n * The ingress controller domain is set.\n * dns.config.openshift.io/cluster configures DNS zones.\n - False if any of those conditions are unsatisfied.\n\n * DNSReady\n - True if the following conditions are met:\n * DNS is managed.\n * DNS records have been successfully created.\n - False if any of those conditions are unsatisfied.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "tlsProfile": { - SchemaProps: spec.SchemaProps{ - Description: "tlsProfile is the TLS connection configuration that is in effect.", - Ref: ref(configv1.TLSProfileSpec{}.OpenAPIModelName()), - }, - }, - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the most recent generation observed.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "namespaceSelector": { - SchemaProps: spec.SchemaProps{ - Description: "namespaceSelector is the actual namespaceSelector in use.", - Ref: ref(metav1.LabelSelector{}.OpenAPIModelName()), - }, - }, - "routeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "routeSelector is the actual routeSelector in use.", - Ref: ref(metav1.LabelSelector{}.OpenAPIModelName()), - }, - }, - "effectiveHAProxyVersion": { - SchemaProps: spec.SchemaProps{ - Description: "effectiveHAProxyVersion reports the HAProxy version currently in use by this IngressController. This reflects the resolved value of the spec.haproxyVersion field. When omitted, the effective value has not yet been resolved by the operator or the feature is not enabled for this cluster.\n\nExamples for OpenShift 5.0: - \"3.2\": Using HAProxy 3.2 - \"2.8\": Using HAProxy 2.8", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - configv1.TLSProfileSpec{}.OpenAPIModelName(), operatorv1.EndpointPublishingStrategy{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName(), metav1.LabelSelector{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_IngressControllerTuningOptions(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IngressControllerTuningOptions specifies options for tuning the performance of ingress controller pods", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "headerBufferBytes": { - SchemaProps: spec.SchemaProps{ - Description: "headerBufferBytes describes how much memory should be reserved (in bytes) for IngressController connection sessions. Note that this value must be at least 16384 if HTTP/2 is enabled for the IngressController (https://tools.ietf.org/html/rfc7540). If this field is empty, the IngressController will use a default value of 32768 bytes.\n\nSetting this field is generally not recommended as headerBufferBytes values that are too small may break the IngressController and headerBufferBytes values that are too large could cause the IngressController to use significantly more memory than necessary.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "headerBufferMaxRewriteBytes": { - SchemaProps: spec.SchemaProps{ - Description: "headerBufferMaxRewriteBytes describes how much memory should be reserved (in bytes) from headerBufferBytes for HTTP header rewriting and appending for IngressController connection sessions. Note that incoming HTTP requests will be limited to (headerBufferBytes - headerBufferMaxRewriteBytes) bytes, meaning headerBufferBytes must be greater than headerBufferMaxRewriteBytes. If this field is empty, the IngressController will use a default value of 8192 bytes.\n\nSetting this field is generally not recommended as headerBufferMaxRewriteBytes values that are too small may break the IngressController and headerBufferMaxRewriteBytes values that are too large could cause the IngressController to use significantly more memory than necessary.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "threadCount": { - SchemaProps: spec.SchemaProps{ - Description: "threadCount defines the number of threads created per HAProxy process. Creating more threads allows each ingress controller pod to handle more connections, at the cost of more system resources being used. HAProxy currently supports up to 64 threads. If this field is empty, the IngressController will use the default value. The current default is 4 threads, but this may change in future releases.\n\nSetting this field is generally not recommended. Increasing the number of HAProxy threads allows ingress controller pods to utilize more CPU time under load, potentially starving other pods if set too high. Reducing the number of threads may cause the ingress controller to perform poorly.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "clientTimeout": { - SchemaProps: spec.SchemaProps{ - Description: "clientTimeout defines how long a connection will be held open while waiting for a client response.\n\nIf unset, the default timeout is 30s", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - "clientFinTimeout": { - SchemaProps: spec.SchemaProps{ - Description: "clientFinTimeout defines how long a connection will be held open while waiting for the client response to the server/backend closing the connection.\n\nIf unset, the default timeout is 1s", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - "serverTimeout": { - SchemaProps: spec.SchemaProps{ - Description: "serverTimeout defines how long a connection will be held open while waiting for a server/backend response.\n\nIf unset, the default timeout is 30s", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - "serverFinTimeout": { - SchemaProps: spec.SchemaProps{ - Description: "serverFinTimeout defines how long a connection will be held open while waiting for the server/backend response to the client closing the connection.\n\nIf unset, the default timeout is 1s", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - "tunnelTimeout": { - SchemaProps: spec.SchemaProps{ - Description: "tunnelTimeout defines how long a tunnel connection (including websockets) will be held open while the tunnel is idle.\n\nIf unset, the default timeout is 1h", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - "connectTimeout": { - SchemaProps: spec.SchemaProps{ - Description: "connectTimeout defines the maximum time to wait for a connection attempt to a server/backend to succeed.\n\nThis field expects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, e.g. \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\" U+00B5 or \"μs\" U+03BC), \"ms\", \"s\", \"m\", \"h\".\n\nWhen omitted, this means the user has no opinion and the platform is left to choose a reasonable default. This default is subject to change over time. The current default is 5s.", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - "httpKeepAliveTimeout": { - SchemaProps: spec.SchemaProps{ - Description: "httpKeepAliveTimeout defines the maximum allowed time to wait for a new HTTP request to appear on a connection from the client to the router.\n\nThis field expects an unsigned duration string of a decimal number, with optional fraction and a unit suffix, e.g. \"300ms\", \"1.5s\" or \"2m45s\". Valid time units are \"ms\", \"s\", \"m\". The allowed range is from 1 millisecond to 15 minutes.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose a reasonable default. This default is subject to change over time. The current default is 300s.\n\nLow values (tens of milliseconds or less) can cause clients to close and reopen connections for each request, leading to reduced connection sharing. For HTTP/2, special care should be taken with low values. A few seconds is a reasonable starting point to avoid holding idle connections open while still allowing subsequent requests to reuse the connection.\n\nHigh values (minutes or more) favor connection reuse but may cause idle connections to linger longer.", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - "tlsInspectDelay": { - SchemaProps: spec.SchemaProps{ - Description: "tlsInspectDelay defines how long the router can hold data to find a matching route.\n\nSetting this too short can cause the router to fall back to the default certificate for edge-terminated or reencrypt routes even when a better matching certificate could be used.\n\nIf unset, the default inspect delay is 5s", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - "healthCheckInterval": { - SchemaProps: spec.SchemaProps{ - Description: "healthCheckInterval defines how long the router waits between two consecutive health checks on its configured backends. This value is applied globally as a default for all routes, but may be overridden per-route by the route annotation \"router.openshift.io/haproxy.health.check.interval\".\n\nExpects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, eg \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\" U+00B5 or \"μs\" U+03BC), \"ms\", \"s\", \"m\", \"h\".\n\nSetting this to less than 5s can cause excess traffic due to too frequent TCP health checks and accompanying SYN packet storms. Alternatively, setting this too high can result in increased latency, due to backend servers that are no longer available, but haven't yet been detected as such.\n\nAn empty or zero healthCheckInterval means no opinion and IngressController chooses a default, which is subject to change over time. Currently the default healthCheckInterval value is 5s.\n\nCurrently the minimum allowed value is 1s and the maximum allowed value is 2147483647ms (24.85 days). Both are subject to change over time.", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - "maxConnections": { - SchemaProps: spec.SchemaProps{ - Description: "maxConnections defines the maximum number of simultaneous connections that can be established per HAProxy process. Increasing this value allows each ingress controller pod to handle more connections but at the cost of additional system resources being consumed.\n\nPermitted values are: empty, 0, -1, and the range 2000-2000000.\n\nIf this field is empty or 0, the IngressController will use the default value of 50000, but the default is subject to change in future releases.\n\nIf the value is -1 then HAProxy will dynamically compute a maximum value based on the available ulimits in the running container. Selecting -1 (i.e., auto) will result in a large value being computed (~520000 on OpenShift >=4.10 clusters) and therefore each HAProxy process will incur significant memory usage compared to the current default of 50000.\n\nSetting a value that is greater than the current operating system limit will prevent the HAProxy process from starting.\n\nIf you choose a discrete value (e.g., 750000) and the router pod is migrated to a new node, there's no guarantee that that new node has identical ulimits configured. In such a scenario the pod would fail to start. If you have nodes with different ulimits configured (e.g., different tuned profiles) and you choose a discrete value then the guidance is to use -1 and let the value be computed dynamically at runtime.\n\nYou can monitor memory usage for router containers with the following metric: 'container_memory_working_set_bytes{container=\"router\",namespace=\"openshift-ingress\"}'.\n\nYou can monitor memory usage of individual HAProxy processes in router containers with the following metric: 'container_memory_working_set_bytes{container=\"router\",namespace=\"openshift-ingress\"}/container_processes{container=\"router\",namespace=\"openshift-ingress\"}'.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "reloadInterval": { - SchemaProps: spec.SchemaProps{ - Description: "reloadInterval defines the minimum interval at which the router is allowed to reload to accept new changes. Increasing this value can prevent the accumulation of HAProxy processes, depending on the scenario. Increasing this interval can also lessen load imbalance on a backend's servers when using the roundrobin balancing algorithm. Alternatively, decreasing this value may decrease latency since updates to HAProxy's configuration can take effect more quickly.\n\nThe value must be a time duration value; see . Currently, the minimum value allowed is 1s, and the maximum allowed value is 120s. Minimum and maximum allowed values may change in future versions of OpenShift. Note that if a duration outside of these bounds is provided, the value of reloadInterval will be capped/floored and not rejected (e.g. a duration of over 120s will be capped to 120s; the IngressController will not reject and replace this disallowed value with the default).\n\nA zero value for reloadInterval tells the IngressController to choose the default, which is currently 5s and subject to change without notice.\n\nThis field expects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, e.g. \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\" U+00B5 or \"μs\" U+03BC), \"ms\", \"s\", \"m\", \"h\".\n\nNote: Setting a value significantly larger than the default of 5s can cause latency in observing updates to routes and their endpoints. HAProxy's configuration will be reloaded less frequently, and newly created routes will not be served until the subsequent reload.", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), - }, - }, - "configurationManagement": { - SchemaProps: spec.SchemaProps{ - Description: "configurationManagement specifies how OpenShift router should update the HAProxy configuration. The following values are valid for this field:\n\n* \"ForkAndReload\". * \"Dynamic\".\n\nOmitting this field means that the user has no opinion and the platform may choose a reasonable default. This default is subject to change over time. The current default is \"ForkAndReload\".\n\n\"ForkAndReload\" means that OpenShift router should rewrite the HAProxy configuration file and instruct HAProxy to fork and reload. This is OpenShift router's traditional approach.\n\n\"Dynamic\" means that OpenShift router may use HAProxy's control socket for some configuration updates and fall back to fork and reload for other configuration updates. This is a newer approach, which may be less mature than ForkAndReload. This setting can improve load-balancing fairness and metrics accuracy and reduce CPU and memory usage if HAProxy has frequent configuration updates for route and endpoints updates.\n\nNote: The \"Dynamic\" option is currently experimental and should not be enabled on production clusters.\n\n\nPossible enum values:\n - `\"Dynamic\"`\n - `\"ForkAndReload\"`", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Dynamic", "ForkAndReload"}, - }, - }, - }, - }, - }, - Dependencies: []string{ - metav1.Duration{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_InsightsOperator(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "InsightsOperator holds cluster-wide information about the Insights Operator.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the desired behavior of the Insights.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.InsightsOperatorSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status is the most recently observed status of the Insights operator.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.InsightsOperatorStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - operatorv1.InsightsOperatorSpec{}.OpenAPIModelName(), operatorv1.InsightsOperatorStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_InsightsOperatorList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "InsightsOperatorList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.InsightsOperator{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - operatorv1.InsightsOperator{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_InsightsOperatorSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"managementState"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_InsightsOperatorStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "gatherStatus": { - SchemaProps: spec.SchemaProps{ - Description: "gatherStatus provides basic information about the last Insights data gathering. When omitted, this means no data gathering has taken place yet.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GatherStatus{}.OpenAPIModelName()), - }, - }, - "insightsReport": { - SchemaProps: spec.SchemaProps{ - Description: "insightsReport provides general Insights analysis results. When omitted, this means no data gathering has taken place yet.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.InsightsReport{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GatherStatus{}.OpenAPIModelName(), operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.InsightsReport{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_InsightsReport(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "insightsReport provides Insights health check report based on the most recently sent Insights data.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "downloadedAt": { - SchemaProps: spec.SchemaProps{ - Description: "downloadedAt is the time when the last Insights report was downloaded. An empty value means that there has not been any Insights report downloaded yet and it usually appears in disconnected clusters (or clusters when the Insights data gathering is disabled).", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "healthChecks": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "healthChecks provides basic information about active Insights health checks in a cluster.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.HealthCheck{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.HealthCheck{}.OpenAPIModelName(), metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_IrreconcilableValidationOverrides(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IrreconcilableValidationOverrides holds the irreconcilable validations overrides to be applied on each rendered MachineConfig generation.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "storage": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "storage can be used to allow making irreconcilable changes to the selected sections under the `spec.config.storage` field of MachineConfig CRs It must have at least one item, may not exceed 3 items and must not contain duplicates. Allowed element values are \"Disks\", \"FileSystems\", \"Raid\" and omitted. When contains \"Disks\" changes to the `spec.config.storage.disks` section of MachineConfig CRs are allowed. When contains \"FileSystems\" changes to the `spec.config.storage.filesystems` section of MachineConfig CRs are allowed. When contains \"Raid\" changes to the `spec.config.storage.raid` section of MachineConfig CRs are allowed. When omitted changes to the `spec.config.storage` section are forbidden.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_KMSEncryptionStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "healthReports": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "nodeName", - "keyID", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "healthReports contains all KMS plugin health reports. When omitted, no health reports are available. Each entry must have a unique combination of nodeName and keyID.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.KMSPluginHealthReport{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "preflight": { - SchemaProps: spec.SchemaProps{ - Description: "preflight contains the state of KMS preflight validation for this operator. The preflight validates the KMS provider configuration before it is used to create a new encryption key, catching configuration issues early such as incorrect login credentials or an unreachable Vault service. When omitted, no preflight validation is in progress.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.KMSPreflightCheck{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.KMSPluginHealthReport{}.OpenAPIModelName(), operatorv1.KMSPreflightCheck{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_KMSPluginHealthReport(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "nodeName": { - SchemaProps: spec.SchemaProps{ - Description: "nodeName is the name of the node this instance of the plugin runs on. The combination of nodeName and keyID makes this health report unique. The value must be a valid Kubernetes node name: a lowercase RFC 1123 subdomain consisting of lowercase alphanumeric characters, '-' or '.', starting and ending with an alphanumeric character, and be at most 253 characters in length.", - Type: []string{"string"}, - Format: "", - }, - }, - "keyID": { - SchemaProps: spec.SchemaProps{ - Description: "keyID is the encryption-key-secret id (kms-{keyID}.sock), a unique identifier of the plugin on that node. This is not a cryptographic key used to encrypt/decrypt any resources. The value must be between 1 and 512 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status contains a health indicator for the respective KMS plugin The field can have three states: healthy, unhealthy, error. With error and unhealthy containing additional information in Detail.", - Type: []string{"string"}, - Format: "", - }, - }, - "lastCheckedTime": { - SchemaProps: spec.SchemaProps{ - Description: "lastCheckedTime is a timestamp of when the probe was last checked.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "remoteKeyID": { - SchemaProps: spec.SchemaProps{ - Description: "remoteKeyID refers to the remote key identifier from KMS v2 StatusResponse.key_id. This is not a cryptographic key, but a unique representation of the KEK. The value must be between 1 and 1024 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "detail": { - SchemaProps: spec.SchemaProps{ - Description: "detail contains additional error/health information for the respective KMS plugin. When omitted, no additional error or health information is provided. When set, the value must be between 1 and 1024 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"nodeName", "keyID", "status", "lastCheckedTime", "remoteKeyID"}, - }, - }, - Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_KMSPreflightCheck(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KMSPreflightCheck describes a preflight validation request and its result.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedConfigHash": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfigHash is a hash of the KMS provider configuration and its referenced resources that has been observed and requires preflight validation before a new encryption key can be created. The value must be exactly 8 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "result": { - SchemaProps: spec.SchemaProps{ - Description: "result contains the outcome of the most recent preflight check. Preflight is considered passed when result.status is Succeeded and result.configHash matches observedConfigHash. When omitted, no preflight check result has been reported yet.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.KMSPreflightResult{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"observedConfigHash"}, - }, - }, - Dependencies: []string{ - operatorv1.KMSPreflightResult{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_KMSPreflightResult(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KMSPreflightResult contains the outcome of a preflight validation.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status indicates the outcome of the preflight check. Succeeded means the KMS plugin responded to Status, Encrypt, and Decrypt calls successfully. Failed means the validation did not pass.", - Type: []string{"string"}, - Format: "", - }, - }, - "configHash": { - SchemaProps: spec.SchemaProps{ - Description: "configHash is the hash of the configuration that was validated. This is compared against observedConfigHash to confirm the result corresponds to the current configuration. The value must be exactly 8 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - "remoteKeyID": { - SchemaProps: spec.SchemaProps{ - Description: "remoteKeyID is the remote key encryption key identifier from KMS v2 StatusResponse.key_id. This is not a cryptographic key, but a unique representation of the remote key used to encrypt data. The value must be between 1 and 1024 characters.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"status", "configHash", "remoteKeyID"}, - }, - }, - } -} - -func schema_openshift_api_operator_v1_KubeAPIServer(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KubeAPIServer provides information to configure an operator to manage kube-apiserver.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the desired behavior of the Kubernetes API Server", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.KubeAPIServerSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status is the most recently observed status of the Kubernetes API Server", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.KubeAPIServerStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - operatorv1.KubeAPIServerSpec{}.OpenAPIModelName(), operatorv1.KubeAPIServerStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_KubeAPIServerList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KubeAPIServerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items contains the items", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.KubeAPIServer{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - operatorv1.KubeAPIServer{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_KubeAPIServerSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "forceRedeploymentReason": { - SchemaProps: spec.SchemaProps{ - Description: "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "failedRevisionLimit": { - SchemaProps: spec.SchemaProps{ - Description: "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "succeededRevisionLimit": { - SchemaProps: spec.SchemaProps{ - Description: "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "eventTTLMinutes": { - SchemaProps: spec.SchemaProps{ - Description: "eventTTLMinutes specifies the amount of time that the events are stored before being deleted. The TTL is allowed between 5 minutes minimum up to a maximum of 180 minutes (3 hours).\n\nLowering this value will reduce the storage required in etcd. Note that this setting will only apply to new events being created and will not update existing events.\n\nWhen omitted this means no opinion, and the platform is left to choose a reasonable default, which is subject to change over time. The current default value is 3h (180 minutes).", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"managementState", "forceRedeploymentReason"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_KubeAPIServerStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "latestAvailableRevisionReason": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevisionReason describe the detailed reason for the most recent deployment", - Type: []string{"string"}, - Format: "", - }, - }, - "nodeStatuses": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "nodeName", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "nodeStatuses track the deployment values and errors across individual nodes", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "serviceAccountIssuers": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "serviceAccountIssuers tracks history of used service account issuers. The item without expiration time represents the currently used service account issuer. The other items represents service account issuers that were used previously and are still being trusted. The default expiration for the items is set by the platform and it defaults to 24h. see: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ServiceAccountIssuerStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "encryptionStatus": { - SchemaProps: spec.SchemaProps{ - Description: "encryptionStatus contains status reports for the KMS plugin health and its key rotation.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.KMSEncryptionStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.KMSEncryptionStatus{}.OpenAPIModelName(), operatorv1.NodeStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName(), operatorv1.ServiceAccountIssuerStatus{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_KubeControllerManager(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KubeControllerManager provides information to configure an operator to manage kube-controller-manager.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the desired behavior of the Kubernetes Controller Manager", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.KubeControllerManagerSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status is the most recently observed status of the Kubernetes Controller Manager", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.KubeControllerManagerStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - operatorv1.KubeControllerManagerSpec{}.OpenAPIModelName(), operatorv1.KubeControllerManagerStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_KubeControllerManagerList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KubeControllerManagerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items contains the items", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.KubeControllerManager{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - operatorv1.KubeControllerManager{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_KubeControllerManagerSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "forceRedeploymentReason": { - SchemaProps: spec.SchemaProps{ - Description: "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "failedRevisionLimit": { - SchemaProps: spec.SchemaProps{ - Description: "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "succeededRevisionLimit": { - SchemaProps: spec.SchemaProps{ - Description: "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "useMoreSecureServiceCA": { - SchemaProps: spec.SchemaProps{ - Description: "useMoreSecureServiceCA indicates that the service-ca.crt provided in SA token volumes should include only enough certificates to validate service serving certificates. Once set to true, it cannot be set to false. Even if someone finds a way to set it back to false, the service-ca.crt files that previously existed will only have the more secure content.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"managementState", "forceRedeploymentReason", "useMoreSecureServiceCA"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_KubeControllerManagerStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "latestAvailableRevisionReason": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevisionReason describe the detailed reason for the most recent deployment", - Type: []string{"string"}, - Format: "", - }, - }, - "nodeStatuses": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "nodeName", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "nodeStatuses track the deployment values and errors across individual nodes", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.NodeStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_KubeScheduler(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KubeScheduler provides information to configure an operator to manage scheduler.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the desired behavior of the Kubernetes Scheduler", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.KubeSchedulerSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status is the most recently observed status of the Kubernetes Scheduler", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.KubeSchedulerStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - operatorv1.KubeSchedulerSpec{}.OpenAPIModelName(), operatorv1.KubeSchedulerStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_KubeSchedulerList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KubeSchedulerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items contains the items", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.KubeScheduler{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - operatorv1.KubeScheduler{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_KubeSchedulerSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "forceRedeploymentReason": { - SchemaProps: spec.SchemaProps{ - Description: "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "failedRevisionLimit": { - SchemaProps: spec.SchemaProps{ - Description: "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "succeededRevisionLimit": { - SchemaProps: spec.SchemaProps{ - Description: "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - Type: []string{"integer"}, - Format: "int32", - }, - }, - }, - Required: []string{"managementState", "forceRedeploymentReason"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_KubeSchedulerStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "latestAvailableRevisionReason": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevisionReason describe the detailed reason for the most recent deployment", - Type: []string{"string"}, - Format: "", - }, - }, - "nodeStatuses": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "nodeName", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "nodeStatuses track the deployment values and errors across individual nodes", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.NodeStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_KubeStorageVersionMigrator(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KubeStorageVersionMigrator provides information to configure an operator to manage kube-storage-version-migrator.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.KubeStorageVersionMigratorSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.KubeStorageVersionMigratorStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - operatorv1.KubeStorageVersionMigratorSpec{}.OpenAPIModelName(), operatorv1.KubeStorageVersionMigratorStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_KubeStorageVersionMigratorList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "KubeStorageVersionMigratorList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items contains the items", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.KubeStorageVersionMigrator{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - operatorv1.KubeStorageVersionMigrator{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_KubeStorageVersionMigratorSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"managementState"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_KubeStorageVersionMigratorStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_LoadBalancerStrategy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LoadBalancerStrategy holds parameters for a load balancer.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "scope": { - SchemaProps: spec.SchemaProps{ - Description: "scope indicates the scope at which the load balancer is exposed. Possible values are \"External\" and \"Internal\".", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "allowedSourceRanges": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "allowedSourceRanges specifies an allowlist of IP address ranges to which access to the load balancer should be restricted. Each range must be specified using CIDR notation (e.g. \"10.0.0.0/8\" or \"fd00::/8\"). If no range is specified, \"0.0.0.0/0\" for IPv4 and \"::/0\" for IPv6 are used by default, which allows all source addresses.\n\nTo facilitate migration from earlier versions of OpenShift that did not have the allowedSourceRanges field, you may set the service.beta.kubernetes.io/load-balancer-source-ranges annotation on the \"router-\" service in the \"openshift-ingress\" namespace, and this annotation will take effect if allowedSourceRanges is empty on OpenShift 4.12.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "providerParameters": { - SchemaProps: spec.SchemaProps{ - Description: "providerParameters holds desired load balancer information specific to the underlying infrastructure provider.\n\nIf empty, defaults will be applied. See specific providerParameters fields for details about their defaults.", - Ref: ref(operatorv1.ProviderLoadBalancerParameters{}.OpenAPIModelName()), - }, - }, - "dnsManagementPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "dnsManagementPolicy indicates if the lifecycle of the wildcard DNS record associated with the load balancer service will be managed by the ingress operator. It defaults to Managed. Valid values are: Managed and Unmanaged.", - Default: "Managed", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"scope", "dnsManagementPolicy"}, - }, - }, - Dependencies: []string{ - operatorv1.ProviderLoadBalancerParameters{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_LoggingDestination(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LoggingDestination describes a destination for log messages.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the type of destination for logs. It must be one of the following:\n\n* Container\n\nThe ingress operator configures the sidecar container named \"logs\" on the ingress controller pod and configures the ingress controller to write logs to the sidecar. The logs are then available as container logs. The expectation is that the administrator configures a custom logging solution that reads logs from this sidecar. Note that using container logs means that logs may be dropped if the rate of logs exceeds the container runtime's or the custom logging solution's capacity.\n\n* Syslog\n\nLogs are sent to a syslog endpoint. The administrator must specify an endpoint that can receive syslog messages. The expectation is that the administrator has configured a custom syslog instance.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "syslog": { - SchemaProps: spec.SchemaProps{ - Description: "syslog holds parameters for a syslog endpoint. Present only if type is Syslog.", - Ref: ref(operatorv1.SyslogLoggingDestinationParameters{}.OpenAPIModelName()), - }, - }, - "container": { - SchemaProps: spec.SchemaProps{ - Description: "container holds parameters for the Container logging destination. Present only if type is Container.", - Ref: ref(operatorv1.ContainerLoggingDestinationParameters{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "container": "Container", - "syslog": "Syslog", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.ContainerLoggingDestinationParameters{}.OpenAPIModelName(), operatorv1.SyslogLoggingDestinationParameters{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_Logo(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Logo defines a configuration based on theme modes for the console UI logo.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type specifies the type of the logo for the console UI. It determines whether the logo is for the masthead or favicon. type is a required field that allows values of Masthead and Favicon. When set to \"Masthead\", the logo will be used in the masthead and about modal of the console UI. When set to \"Favicon\", the logo will be used as the favicon of the console UI.\n\nPossible enum values:\n - `\"Favicon\"` Favicon represents the favicon logo.\n - `\"Masthead\"` Masthead represents the logo in the masthead.", - Default: "", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Favicon", "Masthead"}, - }, - }, - "themes": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "mode", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "themes specifies the themes for the console UI logo. themes is a required field that allows a list of themes. Each item in the themes list must have a unique mode and a source field. Each mode determines whether the logo is for the dark or light mode of the console UI. If a theme is not specified, the default OpenShift logo will be displayed for that theme. There must be at least one entry and no more than 2 entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.Theme{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"type", "themes"}, - }, - }, - Dependencies: []string{ - operatorv1.Theme{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_MTUMigration(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MTUMigration contains infomation about MTU migration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "network": { - SchemaProps: spec.SchemaProps{ - Description: "network contains information about MTU migration for the default network. Migrations are only allowed to MTU values lower than the machine's uplink MTU by the minimum appropriate offset.", - Ref: ref(operatorv1.MTUMigrationValues{}.OpenAPIModelName()), - }, - }, - "machine": { - SchemaProps: spec.SchemaProps{ - Description: "machine contains MTU migration configuration for the machine's uplink. Needs to be migrated along with the default network MTU unless the current uplink MTU already accommodates the default network MTU.", - Ref: ref(operatorv1.MTUMigrationValues{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.MTUMigrationValues{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_MTUMigrationValues(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MTUMigrationValues contains the values for a MTU migration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "to": { - SchemaProps: spec.SchemaProps{ - Description: "to is the MTU to migrate to.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "from": { - SchemaProps: spec.SchemaProps{ - Description: "from is the MTU to migrate from.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - Required: []string{"to"}, - }, - }, - } -} - -func schema_openshift_api_operator_v1_MachineConfiguration(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MachineConfiguration provides information to configure an operator to manage Machine Configuration.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the desired behavior of the Machine Config Operator", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.MachineConfigurationSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status is the most recently observed status of the Machine Config Operator", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.MachineConfigurationStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - operatorv1.MachineConfigurationSpec{}.OpenAPIModelName(), operatorv1.MachineConfigurationStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_MachineConfigurationList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MachineConfigurationList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items contains the items", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.MachineConfiguration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - operatorv1.MachineConfiguration{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_MachineConfigurationSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "forceRedeploymentReason": { - SchemaProps: spec.SchemaProps{ - Description: "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "failedRevisionLimit": { - SchemaProps: spec.SchemaProps{ - Description: "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "succeededRevisionLimit": { - SchemaProps: spec.SchemaProps{ - Description: "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "managedBootImages": { - SchemaProps: spec.SchemaProps{ - Description: "managedBootImages allows configuration for the management of boot images for machine resources within the cluster. This configuration allows users to select resources that should be updated to the latest boot images during cluster upgrades, ensuring that new machines always boot with the current cluster version's boot image. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default for each machine manager mode is All for GCP and AWS platforms, and None for all other platforms.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ManagedBootImages{}.OpenAPIModelName()), - }, - }, - "nodeDisruptionPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "nodeDisruptionPolicy allows an admin to set granular node disruption actions for MachineConfig-based updates, such as drains, service reloads, etc. Specifying this will allow for less downtime when doing small configuration updates to the cluster. This configuration has no effect on cluster upgrades which will still incur node disruption where required.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeDisruptionPolicyConfig{}.OpenAPIModelName()), - }, - }, - "irreconcilableValidationOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "irreconcilableValidationOverrides is an optional field that can used to make changes to a MachineConfig that cannot be applied to existing nodes. When specified, the fields configured with validation overrides will no longer reject changes to those respective fields due to them not being able to be applied to existing nodes. Only newly provisioned nodes will have these configurations applied. Existing nodes will report observed configuration differences in their MachineConfigNode status.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.IrreconcilableValidationOverrides{}.OpenAPIModelName()), - }, - }, - "bootImageSkewEnforcement": { - SchemaProps: spec.SchemaProps{ - Description: "bootImageSkewEnforcement allows an admin to configure how boot image version skew is enforced on the cluster. When omitted, this will default to Automatic for clusters that support automatic boot image updates. For clusters that do not support automatic boot image updates, cluster upgrades will be disabled until a skew enforcement mode has been specified. When version skew is being enforced, cluster upgrades will be disabled until the version skew is deemed acceptable for the current release payload.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.BootImageSkewEnforcementConfig{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"managementState", "forceRedeploymentReason"}, - }, - }, - Dependencies: []string{ - operatorv1.BootImageSkewEnforcementConfig{}.OpenAPIModelName(), operatorv1.IrreconcilableValidationOverrides{}.OpenAPIModelName(), operatorv1.ManagedBootImages{}.OpenAPIModelName(), operatorv1.NodeDisruptionPolicyConfig{}.OpenAPIModelName(), runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_MachineConfigurationStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "nodeDisruptionPolicyStatus": { - SchemaProps: spec.SchemaProps{ - Description: "nodeDisruptionPolicyStatus status reflects what the latest cluster-validated policies are, and will be used by the Machine Config Daemon during future node updates.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeDisruptionPolicyStatus{}.OpenAPIModelName()), - }, - }, - "managedBootImagesStatus": { - SchemaProps: spec.SchemaProps{ - Description: "managedBootImagesStatus reflects what the latest cluster-validated boot image configuration is and will be used by Machine Config Controller while performing boot image updates.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ManagedBootImages{}.OpenAPIModelName()), - }, - }, - "bootImageSkewEnforcementStatus": { - SchemaProps: spec.SchemaProps{ - Description: "bootImageSkewEnforcementStatus reflects what the latest cluster-validated boot image skew enforcement configuration is and will be used by Machine Config Controller while performing boot image skew enforcement. When omitted, the MCO has no knowledge of how to enforce boot image skew. When the MCO does not know how boot image skew should be enforced, cluster upgrades will be blocked until it can either automatically determine skew enforcement or there is an explicit skew enforcement configuration provided in the spec.bootImageSkewEnforcement field.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.BootImageSkewEnforcementStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.BootImageSkewEnforcementStatus{}.OpenAPIModelName(), operatorv1.ManagedBootImages{}.OpenAPIModelName(), operatorv1.NodeDisruptionPolicyStatus{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_MachineManager(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MachineManager describes a target machine resource that is registered for boot image updates. It stores identifying information such as the resource type and the API Group of the resource. It also provides granular control via the selection field.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "resource": { - SchemaProps: spec.SchemaProps{ - Description: "resource is the machine management resource's type. Valid values are machinesets and controlplanemachinesets. machinesets means that the machine manager will only register resources of the kind MachineSet. controlplanemachinesets means that the machine manager will only register resources of the kind ControlPlaneMachineSet.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "apiGroup": { - SchemaProps: spec.SchemaProps{ - Description: "apiGroup is name of the APIGroup that the machine management resource belongs to. The only current valid value is machine.openshift.io. machine.openshift.io means that the machine manager will only register resources that belong to OpenShift machine API group.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "selection": { - SchemaProps: spec.SchemaProps{ - Description: "selection allows granular control of the machine management resources that will be registered for boot image updates.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.MachineManagerSelector{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"resource", "apiGroup", "selection"}, - }, - }, - Dependencies: []string{ - operatorv1.MachineManagerSelector{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_MachineManagerSelector(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "mode": { - SchemaProps: spec.SchemaProps{ - Description: "mode determines how machine managers will be selected for updates. Valid values are All, Partial and None. All means that every resource matched by the machine manager will be updated. Partial requires specified selector(s) and allows customisation of which resources matched by the machine manager will be updated. Partial is not permitted for the controlplanemachinesets resource type as they are a singleton within the cluster. None means that every resource matched by the machine manager will not be updated.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "partial": { - SchemaProps: spec.SchemaProps{ - Description: "partial provides label selector(s) that can be used to match machine management resources. Only permitted when mode is set to \"Partial\".", - Ref: ref(operatorv1.PartialSelector{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"mode"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "mode", - "fields-to-discriminateBy": map[string]interface{}{ - "partial": "Partial", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.PartialSelector{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ManagedBootImages(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "machineManagers": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "resource", - "apiGroup", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "machineManagers can be used to register machine management resources for boot image updates. The Machine Config Operator will watch for changes to this list. Only one entry is permitted per type of machine management resource.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.MachineManager{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.MachineManager{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_ManagedTokenRequests(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ManagedTokenRequests holds the configuration for operator-managed service account token requests.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "audiences": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "audience", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "audiences specifies service account token audiences that kubelet will provide to the CSI driver during NodePublishVolume calls. These tokens enable workload identity federation (WIF) with cloud providers such as AWS, Azure, and GCP. When empty, the operator clears all tokenRequests from the CSIDriver object.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.SecretsStoreTokenRequest{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.SecretsStoreTokenRequest{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_MyOperatorResource(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "MyOperatorResource is an example operator configuration type\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.MyOperatorResourceSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.MyOperatorResourceStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec", "status"}, - }, - }, - Dependencies: []string{ - operatorv1.MyOperatorResourceSpec{}.OpenAPIModelName(), operatorv1.MyOperatorResourceStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_MyOperatorResourceSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"managementState"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_MyOperatorResourceStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_NetFlowConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "collectors": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "netFlow defines the NetFlow collectors that will consume the flow data exported from OVS. It is a list of strings formatted as ip:port with a maximum of ten items", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_Network(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Network describes the cluster's desired network configuration. It is consumed by the cluster-network-operator.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NetworkSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NetworkStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.NetworkSpec{}.OpenAPIModelName(), operatorv1.NetworkStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_NetworkList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NetworkList contains a list of Network configurations\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.Network{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - operatorv1.Network{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_NetworkMigration(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NetworkMigration represents the cluster network migration configuration.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "mtu": { - SchemaProps: spec.SchemaProps{ - Description: "mtu contains the MTU migration configuration. Set this to allow changing the MTU values for the default network. If unset, the operation of changing the MTU for the default network will be rejected.", - Ref: ref(operatorv1.MTUMigration{}.OpenAPIModelName()), - }, - }, - "networkType": { - SchemaProps: spec.SchemaProps{ - Description: "networkType was previously used when changing the default network type. DEPRECATED: network type migration is no longer supported, and setting this to a non-empty value will result in the network operator rejecting the configuration.", - Type: []string{"string"}, - Format: "", - }, - }, - "features": { - SchemaProps: spec.SchemaProps{ - Description: "features was previously used to configure which network plugin features would be migrated in a network type migration. DEPRECATED: network type migration is no longer supported, and setting this to a non-empty value will result in the network operator rejecting the configuration.", - Ref: ref(operatorv1.FeaturesMigration{}.OpenAPIModelName()), - }, - }, - "mode": { - SchemaProps: spec.SchemaProps{ - Description: "mode indicates the mode of network type migration. DEPRECATED: network type migration is no longer supported, and setting this to a non-empty value will result in the network operator rejecting the configuration.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.FeaturesMigration{}.OpenAPIModelName(), operatorv1.MTUMigration{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_NetworkSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NetworkSpec is the top-level network configuration object.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "clusterNetwork": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "clusterNetwork is the IP address pool to use for pod IPs. Some network providers support multiple ClusterNetworks. Others only support one. This is equivalent to the cluster-cidr.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ClusterNetworkEntry{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "serviceNetwork": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "serviceNetwork is the ip address pool to use for Service IPs Currently, all existing network providers only support a single value here, but this is an array to allow for growth.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "defaultNetwork": { - SchemaProps: spec.SchemaProps{ - Description: "defaultNetwork is the \"default\" network that all pods will receive", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.DefaultNetworkDefinition{}.OpenAPIModelName()), - }, - }, - "additionalNetworks": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "additionalNetworks is a list of extra networks to make available to pods when multiple networks are enabled.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.AdditionalNetworkDefinition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "disableMultiNetwork": { - SchemaProps: spec.SchemaProps{ - Description: "disableMultiNetwork defaults to 'false' and this setting enables the pod multi-networking capability. disableMultiNetwork when set to 'true' at cluster install time does not install the components, typically the Multus CNI and the network-attachment-definition CRD, that enable the pod multi-networking capability. Setting the parameter to 'true' might be useful when you need install third-party CNI plugins, but these plugins are not supported by Red Hat. Changing the parameter value as a postinstallation cluster task has no effect.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "useMultiNetworkPolicy": { - SchemaProps: spec.SchemaProps{ - Description: "useMultiNetworkPolicy enables a controller which allows for MultiNetworkPolicy objects to be used on additional networks as created by Multus CNI. MultiNetworkPolicy are similar to NetworkPolicy objects, but NetworkPolicy objects only apply to the primary interface. With MultiNetworkPolicy, you can control the traffic that a pod can receive over the secondary interfaces. If unset, this property defaults to 'false' and MultiNetworkPolicy objects are ignored. If 'disableMultiNetwork' is 'true' then the value of this field is ignored.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "deployKubeProxy": { - SchemaProps: spec.SchemaProps{ - Description: "deployKubeProxy specifies whether or not a standalone kube-proxy should be deployed by the operator. Some network providers include kube-proxy or similar functionality. If unset, the plugin will attempt to select the correct value, which is false when ovn-kubernetes is used and true otherwise.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "disableNetworkDiagnostics": { - SchemaProps: spec.SchemaProps{ - Description: "disableNetworkDiagnostics specifies whether or not PodNetworkConnectivityCheck CRs from a test pod to every node, apiserver and LB should be disabled or not. If unset, this property defaults to 'false' and network diagnostics is enabled. Setting this to 'true' would reduce the additional load of the pods performing the checks.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "kubeProxyConfig": { - SchemaProps: spec.SchemaProps{ - Description: "kubeProxyConfig lets us configure desired proxy configuration, if deployKubeProxy is true. If not specified, sensible defaults will be chosen by OpenShift directly.", - Ref: ref(operatorv1.ProxyConfig{}.OpenAPIModelName()), - }, - }, - "exportNetworkFlows": { - SchemaProps: spec.SchemaProps{ - Description: "exportNetworkFlows enables and configures the export of network flow metadata from the pod network by using protocols NetFlow, SFlow or IPFIX. Currently only supported on OVN-Kubernetes plugin. If unset, flows will not be exported to any collector.", - Ref: ref(operatorv1.ExportNetworkFlows{}.OpenAPIModelName()), - }, - }, - "migration": { - SchemaProps: spec.SchemaProps{ - Description: "migration enables and configures cluster network migration, for network changes that cannot be made instantly.", - Ref: ref(operatorv1.NetworkMigration{}.OpenAPIModelName()), - }, - }, - "additionalRoutingCapabilities": { - SchemaProps: spec.SchemaProps{ - Description: "additionalRoutingCapabilities describes components and relevant configuration providing additional routing capabilities. When set, it enables such components and the usage of the routing capabilities they provide for the machine network. Upstream operators, like MetalLB operator, requiring these capabilities may rely on, or automatically set this attribute. Network plugins may leverage advanced routing capabilities acquired through the enablement of these components but may require specific configuration on their side to do so; refer to their respective documentation and configuration options.", - Ref: ref(operatorv1.AdditionalRoutingCapabilities{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"managementState", "clusterNetwork", "serviceNetwork", "defaultNetwork"}, - }, - }, - Dependencies: []string{ - operatorv1.AdditionalNetworkDefinition{}.OpenAPIModelName(), operatorv1.AdditionalRoutingCapabilities{}.OpenAPIModelName(), operatorv1.ClusterNetworkEntry{}.OpenAPIModelName(), operatorv1.DefaultNetworkDefinition{}.OpenAPIModelName(), operatorv1.ExportNetworkFlows{}.OpenAPIModelName(), operatorv1.NetworkMigration{}.OpenAPIModelName(), operatorv1.ProxyConfig{}.OpenAPIModelName(), runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_NetworkStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NetworkStatus is detailed operator status, which is distilled up to the Network clusteroperator object.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_NoOverlayConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NoOverlayConfig contains configuration options for networks operating in no-overlay mode.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "outboundSNAT": { - SchemaProps: spec.SchemaProps{ - Description: "outboundSNAT defines the SNAT behavior for outbound traffic from pods. Allowed values are \"Enabled\" and \"Disabled\". When set to \"Enabled\", SNAT is performed on outbound traffic from pods. When set to \"Disabled\", SNAT is not performed and pod IPs are preserved in outbound traffic. This field is required when the network operates in no-overlay mode. This field can be set to any value at installation time and can be changed afterwards.", - Type: []string{"string"}, - Format: "", - }, - }, - "routing": { - SchemaProps: spec.SchemaProps{ - Description: "routing specifies whether the pod network routing is managed by OVN-Kubernetes or users. Allowed values are \"Managed\" and \"Unmanaged\". When set to \"Managed\", OVN-Kubernetes manages the pod network routing configuration through BGP. When set to \"Unmanaged\", users are responsible for configuring the pod network routing. This field is required when the network operates in no-overlay mode. This field is immutable once set.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"outboundSNAT", "routing"}, - }, - }, - } -} - -func schema_openshift_api_operator_v1_NodeDisruptionPolicyClusterStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeDisruptionPolicyClusterStatus is the type for the status object, rendered by the controller as a merge of cluster defaults and user provided policies", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "files": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "path", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "files is a list of MachineConfig file definitions and actions to take to changes on those paths", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeDisruptionPolicyStatusFile{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "units": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "units is a list MachineConfig unit definitions and actions to take on changes to those services", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeDisruptionPolicyStatusUnit{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "sshkey": { - SchemaProps: spec.SchemaProps{ - Description: "sshkey is the overall sshkey MachineConfig definition", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeDisruptionPolicyStatusSSHKey{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.NodeDisruptionPolicyStatusFile{}.OpenAPIModelName(), operatorv1.NodeDisruptionPolicyStatusSSHKey{}.OpenAPIModelName(), operatorv1.NodeDisruptionPolicyStatusUnit{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_NodeDisruptionPolicyConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeDisruptionPolicyConfig is the overall spec definition for files/units/sshkeys", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "files": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "path", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "files is a list of MachineConfig file definitions and actions to take to changes on those paths This list supports a maximum of 50 entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeDisruptionPolicySpecFile{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "units": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "units is a list MachineConfig unit definitions and actions to take on changes to those services This list supports a maximum of 50 entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeDisruptionPolicySpecUnit{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "sshkey": { - SchemaProps: spec.SchemaProps{ - Description: "sshkey maps to the ignition.sshkeys field in the MachineConfig object, definition an action for this will apply to all sshkey changes in the cluster", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeDisruptionPolicySpecSSHKey{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.NodeDisruptionPolicySpecFile{}.OpenAPIModelName(), operatorv1.NodeDisruptionPolicySpecSSHKey{}.OpenAPIModelName(), operatorv1.NodeDisruptionPolicySpecUnit{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_NodeDisruptionPolicySpecAction(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type represents the commands that will be carried out if this NodeDisruptionPolicySpecActionType is executed Valid values are Reboot, Drain, Reload, Restart, DaemonReload and None. reload/restart requires a corresponding service target specified in the reload/restart field. Other values require no further configuration", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "reload": { - SchemaProps: spec.SchemaProps{ - Description: "reload specifies the service to reload, only valid if type is reload", - Ref: ref(operatorv1.ReloadService{}.OpenAPIModelName()), - }, - }, - "restart": { - SchemaProps: spec.SchemaProps{ - Description: "restart specifies the service to restart, only valid if type is restart", - Ref: ref(operatorv1.RestartService{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "reload": "Reload", - "restart": "Restart", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.ReloadService{}.OpenAPIModelName(), operatorv1.RestartService{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_NodeDisruptionPolicySpecFile(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeDisruptionPolicySpecFile is a file entry and corresponding actions to take and is used in the NodeDisruptionPolicyConfig object", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "path": { - SchemaProps: spec.SchemaProps{ - Description: "path is the location of a file being managed through a MachineConfig. The Actions in the policy will apply to changes to the file at this path.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "actions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeDisruptionPolicySpecAction{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"path", "actions"}, - }, - }, - Dependencies: []string{ - operatorv1.NodeDisruptionPolicySpecAction{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_NodeDisruptionPolicySpecSSHKey(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeDisruptionPolicySpecSSHKey is actions to take for any SSHKey change and is used in the NodeDisruptionPolicyConfig object", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "actions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeDisruptionPolicySpecAction{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"actions"}, - }, - }, - Dependencies: []string{ - operatorv1.NodeDisruptionPolicySpecAction{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_NodeDisruptionPolicySpecUnit(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeDisruptionPolicySpecUnit is a systemd unit name and corresponding actions to take and is used in the NodeDisruptionPolicyConfig object", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name represents the service name of a systemd service managed through a MachineConfig Actions specified will be applied for changes to the named service. Service names should be of the format ${NAME}${SERVICETYPE} and can up to 255 characters long. ${NAME} must be atleast 1 character long and can only consist of alphabets, digits, \":\", \"-\", \"_\", \".\", and \"\\\". ${SERVICETYPE} must be one of \".service\", \".socket\", \".device\", \".mount\", \".automount\", \".swap\", \".target\", \".path\", \".timer\", \".snapshot\", \".slice\" or \".scope\".", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "actions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeDisruptionPolicySpecAction{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"name", "actions"}, - }, - }, - Dependencies: []string{ - operatorv1.NodeDisruptionPolicySpecAction{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_NodeDisruptionPolicyStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "clusterPolicies": { - SchemaProps: spec.SchemaProps{ - Description: "clusterPolicies is a merge of cluster default and user provided node disruption policies.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeDisruptionPolicyClusterStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.NodeDisruptionPolicyClusterStatus{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_NodeDisruptionPolicyStatusAction(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type represents the commands that will be carried out if this NodeDisruptionPolicyStatusActionType is executed Valid values are Reboot, Drain, Reload, Restart, DaemonReload, None and Special. reload/restart requires a corresponding service target specified in the reload/restart field. Other values require no further configuration", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "reload": { - SchemaProps: spec.SchemaProps{ - Description: "reload specifies the service to reload, only valid if type is reload", - Ref: ref(operatorv1.ReloadService{}.OpenAPIModelName()), - }, - }, - "restart": { - SchemaProps: spec.SchemaProps{ - Description: "restart specifies the service to restart, only valid if type is restart", - Ref: ref(operatorv1.RestartService{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "reload": "Reload", - "restart": "Restart", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.ReloadService{}.OpenAPIModelName(), operatorv1.RestartService{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_NodeDisruptionPolicyStatusFile(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeDisruptionPolicyStatusFile is a file entry and corresponding actions to take and is used in the NodeDisruptionPolicyClusterStatus object", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "path": { - SchemaProps: spec.SchemaProps{ - Description: "path is the location of a file being managed through a MachineConfig. The Actions in the policy will apply to changes to the file at this path.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "actions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeDisruptionPolicyStatusAction{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"path", "actions"}, - }, - }, - Dependencies: []string{ - operatorv1.NodeDisruptionPolicyStatusAction{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_NodeDisruptionPolicyStatusSSHKey(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeDisruptionPolicyStatusSSHKey is actions to take for any SSHKey change and is used in the NodeDisruptionPolicyClusterStatus object", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "actions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeDisruptionPolicyStatusAction{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"actions"}, - }, - }, - Dependencies: []string{ - operatorv1.NodeDisruptionPolicyStatusAction{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_NodeDisruptionPolicyStatusUnit(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeDisruptionPolicyStatusUnit is a systemd unit name and corresponding actions to take and is used in the NodeDisruptionPolicyClusterStatus object", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name represents the service name of a systemd service managed through a MachineConfig Actions specified will be applied for changes to the named service. Service names should be of the format ${NAME}${SERVICETYPE} and can up to 255 characters long. ${NAME} must be atleast 1 character long and can only consist of alphabets, digits, \":\", \"-\", \"_\", \".\", and \"\\\". ${SERVICETYPE} must be one of \".service\", \".socket\", \".device\", \".mount\", \".automount\", \".swap\", \".target\", \".path\", \".timer\", \".snapshot\", \".slice\" or \".scope\".", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "actions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeDisruptionPolicyStatusAction{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"name", "actions"}, - }, - }, - Dependencies: []string{ - operatorv1.NodeDisruptionPolicyStatusAction{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_NodePlacement(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodePlacement describes node scheduling configuration for an ingress controller.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "nodeSelector": { - SchemaProps: spec.SchemaProps{ - Description: "nodeSelector is the node selector applied to ingress controller deployments.\n\nIf set, the specified selector is used and replaces the default.\n\nIf unset, the default depends on the value of the defaultPlacement field in the cluster config.openshift.io/v1/ingresses status.\n\nWhen defaultPlacement is Workers, the default is:\n\n kubernetes.io/os: linux\n node-role.kubernetes.io/worker: ''\n\nWhen defaultPlacement is ControlPlane, the default is:\n\n kubernetes.io/os: linux\n node-role.kubernetes.io/master: ''\n\nThese defaults are subject to change.\n\nNote that using nodeSelector.matchExpressions is not supported. Only nodeSelector.matchLabels may be used. This is a limitation of the Kubernetes API: the pod spec does not allow complex expressions for node selectors.", - Ref: ref(metav1.LabelSelector{}.OpenAPIModelName()), - }, - }, - "tolerations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "tolerations is a list of tolerations applied to ingress controller deployments.\n\nThe default is an empty list.\n\nSee https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.Toleration{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - corev1.Toleration{}.OpenAPIModelName(), metav1.LabelSelector{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_NodePortStrategy(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodePortStrategy holds parameters for the NodePortService endpoint publishing strategy.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "protocol": { - SchemaProps: spec.SchemaProps{ - Description: "protocol specifies whether the IngressController expects incoming connections to use plain TCP or whether the IngressController expects PROXY protocol.\n\nPROXY protocol can be used with load balancers that support it to communicate the source addresses of client connections when forwarding those connections to the IngressController. Using PROXY protocol enables the IngressController to report those source addresses instead of reporting the load balancer's address in HTTP headers and logs. Note that enabling PROXY protocol on the IngressController will cause connections to fail if you are not using a load balancer that uses PROXY protocol to forward connections to the IngressController. See http://www.haproxy.org/download/2.2/doc/proxy-protocol.txt for information about PROXY protocol.\n\nThe following values are valid for this field:\n\n* The empty string. * \"TCP\". * \"PROXY\".\n\nThe empty string specifies the default, which is TCP without PROXY protocol. Note that the default is subject to change.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_NodeStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "NodeStatus provides information about the current state of a particular node managed by this operator.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "nodeName": { - SchemaProps: spec.SchemaProps{ - Description: "nodeName is the name of the node", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "nodeUID": { - SchemaProps: spec.SchemaProps{ - Description: "nodeUID is the UID of the node. This field is used to detect that a node has been deleted and recreated with the same name. When the UID changes, it indicates the node is a new instance and the controller should treat this status entry as stale. When omitted, UID-based node replacement detection is not available for this entry.", - Type: []string{"string"}, - Format: "", - }, - }, - "currentRevision": { - SchemaProps: spec.SchemaProps{ - Description: "currentRevision is the generation of the most recently successful deployment. Can not be set on creation of a nodeStatus. Updates must only increase the value.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "targetRevision": { - SchemaProps: spec.SchemaProps{ - Description: "targetRevision is the generation of the deployment we're trying to apply. Can not be set on creation of a nodeStatus.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "lastFailedRevision": { - SchemaProps: spec.SchemaProps{ - Description: "lastFailedRevision is the generation of the deployment we tried and failed to deploy.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "lastFailedTime": { - SchemaProps: spec.SchemaProps{ - Description: "lastFailedTime is the time the last failed revision failed the last time.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "lastFailedReason": { - SchemaProps: spec.SchemaProps{ - Description: "lastFailedReason is a machine readable failure reason string.", - Type: []string{"string"}, - Format: "", - }, - }, - "lastFailedCount": { - SchemaProps: spec.SchemaProps{ - Description: "lastFailedCount is how often the installer pod of the last failed revision failed.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "lastFallbackCount": { - SchemaProps: spec.SchemaProps{ - Description: "lastFallbackCount is how often a fallback to a previous revision happened.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "lastFailedRevisionErrors": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "lastFailedRevisionErrors is a list of human readable errors during the failed deployment referenced in lastFailedRevision.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - Required: []string{"nodeName"}, - }, - }, - Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_OAuthAPIServerStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the latest revision used as suffix of revisioned secrets like encryption-config. A new revision causes a new deployment of pods.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "encryptionStatus": { - SchemaProps: spec.SchemaProps{ - Description: "encryptionStatus contains status reports for the KMS plugin health and its key rotation.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.KMSEncryptionStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.KMSEncryptionStatus{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_OLM(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OLM provides information to configure an operator to manage the OLM controllers\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OLMSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OLMStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - operatorv1.OLMSpec{}.OpenAPIModelName(), operatorv1.OLMStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_OLMList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OLMList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items contains the items", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OLM{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - operatorv1.OLM{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_OLMSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"managementState"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_OLMStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_OVNKubernetesConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ovnKubernetesConfig contains the configuration parameters for networks using the ovn-kubernetes network project", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "mtu": { - SchemaProps: spec.SchemaProps{ - Description: "mtu is the MTU to use for the tunnel interface. This must be 100 bytes smaller than the uplink mtu. Default is 1400", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "genevePort": { - SchemaProps: spec.SchemaProps{ - Description: "geneve port is the UDP port to be used by geneve encapulation. Default is 6081", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "hybridOverlayConfig": { - SchemaProps: spec.SchemaProps{ - Description: "hybridOverlayConfig configures an additional overlay network for peers that are not using OVN.", - Ref: ref(operatorv1.HybridOverlayConfig{}.OpenAPIModelName()), - }, - }, - "ipsecConfig": { - SchemaProps: spec.SchemaProps{ - Description: "ipsecConfig enables and configures IPsec for pods on the pod network within the cluster.", - Default: map[string]interface{}{"mode": "Disabled"}, - Ref: ref(operatorv1.IPsecConfig{}.OpenAPIModelName()), - }, - }, - "policyAuditConfig": { - SchemaProps: spec.SchemaProps{ - Description: "policyAuditConfig is the configuration for network policy audit events. If unset, reported defaults are used.", - Ref: ref(operatorv1.PolicyAuditConfig{}.OpenAPIModelName()), - }, - }, - "gatewayConfig": { - SchemaProps: spec.SchemaProps{ - Description: "gatewayConfig holds the configuration for node gateway options.", - Ref: ref(operatorv1.GatewayConfig{}.OpenAPIModelName()), - }, - }, - "v4InternalSubnet": { - SchemaProps: spec.SchemaProps{ - Description: "v4InternalSubnet is a v4 subnet used internally by ovn-kubernetes in case the default one is being already used by something else. It must not overlap with any other subnet being used by OpenShift or by the node network. The size of the subnet must be larger than the number of nodes. Default is 100.64.0.0/16", - Type: []string{"string"}, - Format: "", - }, - }, - "v6InternalSubnet": { - SchemaProps: spec.SchemaProps{ - Description: "v6InternalSubnet is a v6 subnet used internally by ovn-kubernetes in case the default one is being already used by something else. It must not overlap with any other subnet being used by OpenShift or by the node network. The size of the subnet must be larger than the number of nodes. Default is fd98::/64", - Type: []string{"string"}, - Format: "", - }, - }, - "egressIPConfig": { - SchemaProps: spec.SchemaProps{ - Description: "egressIPConfig holds the configuration for EgressIP options.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.EgressIPConfig{}.OpenAPIModelName()), - }, - }, - "ipv4": { - SchemaProps: spec.SchemaProps{ - Description: "ipv4 allows users to configure IP settings for IPv4 connections. When ommitted, this means no opinions and the default configuration is used. Check individual fields within ipv4 for details of default values.", - Ref: ref(operatorv1.IPv4OVNKubernetesConfig{}.OpenAPIModelName()), - }, - }, - "ipv6": { - SchemaProps: spec.SchemaProps{ - Description: "ipv6 allows users to configure IP settings for IPv6 connections. When ommitted, this means no opinions and the default configuration is used. Check individual fields within ipv4 for details of default values.", - Ref: ref(operatorv1.IPv6OVNKubernetesConfig{}.OpenAPIModelName()), - }, - }, - "routeAdvertisements": { - SchemaProps: spec.SchemaProps{ - Description: "routeAdvertisements determines if the functionality to advertise cluster network routes through a dynamic routing protocol, such as BGP, is enabled or not. This functionality is configured through the ovn-kubernetes RouteAdvertisements CRD. Requires the 'FRR' routing capability provider to be enabled as an additional routing capability. Allowed values are \"Enabled\", \"Disabled\" and ommited. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is \"Disabled\".", - Type: []string{"string"}, - Format: "", - }, - }, - "transport": { - SchemaProps: spec.SchemaProps{ - Description: "transport sets the transport mode for pods on the default network. Allowed values are \"NoOverlay\" and \"Geneve\". \"NoOverlay\" avoids tunnel encapsulation, routing pod traffic directly between nodes. \"Geneve\" encapsulates pod traffic using Geneve tunnels between nodes. When omitted, this means the user has no opinion and the platform chooses a reasonable default which is subject to change over time. The current default is \"Geneve\". \"NoOverlay\" can only be set at installation time and cannot be changed afterwards. \"Geneve\" may be set explicitly at any time to lock in the current default.", - Type: []string{"string"}, - Format: "", - }, - }, - "noOverlayConfig": { - SchemaProps: spec.SchemaProps{ - Description: "noOverlayConfig contains configuration for no-overlay mode. This configuration applies to the default network only. It is required when transport is \"NoOverlay\". When omitted, this means the user does not configure no-overlay mode options.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NoOverlayConfig{}.OpenAPIModelName()), - }, - }, - "bgpManagedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "bgpManagedConfig configures the BGP properties for networks (default network or CUDNs) in no-overlay mode that specify routing=\"Managed\" in their noOverlayConfig. It is required when noOverlayConfig.routing is set to \"Managed\". When omitted, this means the user does not configure BGP for managed routing. This field can be set at installation time or on day 2, and can be modified at any time.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.BGPManagedConfig{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.BGPManagedConfig{}.OpenAPIModelName(), operatorv1.EgressIPConfig{}.OpenAPIModelName(), operatorv1.GatewayConfig{}.OpenAPIModelName(), operatorv1.HybridOverlayConfig{}.OpenAPIModelName(), operatorv1.IPsecConfig{}.OpenAPIModelName(), operatorv1.IPv4OVNKubernetesConfig{}.OpenAPIModelName(), operatorv1.IPv6OVNKubernetesConfig{}.OpenAPIModelName(), operatorv1.NoOverlayConfig{}.OpenAPIModelName(), operatorv1.PolicyAuditConfig{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_OpenShiftAPIServer(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OpenShiftAPIServer provides information to configure an operator to manage openshift-apiserver.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the desired behavior of the OpenShift API Server.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OpenShiftAPIServerSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status defines the observed status of the OpenShift API Server.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OpenShiftAPIServerStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - operatorv1.OpenShiftAPIServerSpec{}.OpenAPIModelName(), operatorv1.OpenShiftAPIServerStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_OpenShiftAPIServerList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OpenShiftAPIServerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items contains the items", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OpenShiftAPIServer{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - operatorv1.OpenShiftAPIServer{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_OpenShiftAPIServerSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"managementState"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_OpenShiftAPIServerStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "encryptionStatus": { - SchemaProps: spec.SchemaProps{ - Description: "encryptionStatus contains status reports for the KMS plugin health and its key rotation.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.KMSEncryptionStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.KMSEncryptionStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_OpenShiftControllerManager(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OpenShiftControllerManager provides information to configure an operator to manage openshift-controller-manager.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OpenShiftControllerManagerSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OpenShiftControllerManagerStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - operatorv1.OpenShiftControllerManagerSpec{}.OpenAPIModelName(), operatorv1.OpenShiftControllerManagerStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_OpenShiftControllerManagerList(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OpenShiftControllerManagerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items contains the items", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OpenShiftControllerManager{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - Required: []string{"metadata", "items"}, - }, - }, - Dependencies: []string{ - operatorv1.OpenShiftControllerManager{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_OpenShiftControllerManagerSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"managementState"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_OpenShiftControllerManagerStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_OpenShiftSDNConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OpenShiftSDNConfig was used to configure the OpenShift SDN plugin. It is no longer used.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "mode": { - SchemaProps: spec.SchemaProps{ - Description: "mode is one of \"Multitenant\", \"Subnet\", or \"NetworkPolicy\"", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "vxlanPort": { - SchemaProps: spec.SchemaProps{ - Description: "vxlanPort is the port to use for all vxlan packets. The default is 4789.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "mtu": { - SchemaProps: spec.SchemaProps{ - Description: "mtu is the mtu to use for the tunnel interface. Defaults to 1450 if unset. This must be 50 bytes smaller than the machine's uplink.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "useExternalOpenvswitch": { - SchemaProps: spec.SchemaProps{ - Description: "useExternalOpenvswitch used to control whether the operator would deploy an OVS DaemonSet itself or expect someone else to start OVS. As of 4.6, OVS is always run as a system service, and this flag is ignored.", - Type: []string{"boolean"}, - Format: "", - }, - }, - "enableUnidling": { - SchemaProps: spec.SchemaProps{ - Description: "enableUnidling controls whether or not the service proxy will support idling and unidling of services. By default, unidling is enabled.", - Type: []string{"boolean"}, - Format: "", - }, - }, - }, - Required: []string{"mode"}, - }, - }, - } -} - -func schema_openshift_api_operator_v1_OpenStackLoadBalancerParameters(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OpenStackLoadBalancerParameters provides configuration settings that are specific to OpenStack load balancers.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "floatingIP": { - SchemaProps: spec.SchemaProps{ - Description: "floatingIP specifies the IP address that the load balancer will use. When not specified, an IP address will be assigned randomly by the OpenStack cloud provider. When specified, the floating IP has to be pre-created. If the specified value is not a floating IP or is already claimed, the OpenStack cloud provider won't be able to provision the load balancer. This field may only be used if the IngressController has External scope. This value must be a valid IPv4 or IPv6 address.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_OperatorCondition(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "OperatorCondition is just the standard condition fields.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type of condition in CamelCase or in foo.example.com/CamelCase.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status of the condition, one of True, False, Unknown.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "lastTransitionTime": { - SchemaProps: spec.SchemaProps{ - Description: "lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "reason": { - SchemaProps: spec.SchemaProps{ - Type: []string{"string"}, - Format: "", - }, - }, - "message": { - SchemaProps: spec.SchemaProps{ - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"type", "status", "lastTransitionTime"}, - }, - }, - Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_OperatorSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_CustomTLSProfile(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "OperatorSpec contains common fields operators need. It is intended to be anonymous included inside of the Spec struct for your particular operator.", + Description: "CustomTLSProfile is a user-defined TLS security profile. Be extremely careful using a custom TLS profile as invalid configurations can be catastrophic.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { - SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"managementState"}, - }, - }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1_OperatorStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { + "ciphers": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", + "x-kubernetes-list-type": "atomic", }, }, SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", + Description: "ciphers is used to specify the cipher algorithms that are negotiated during the TLS handshake. Operators may remove entries that their operands do not support. For example, to use only ECDHE-RSA-AES128-GCM-SHA256 (yaml):\n\n ciphers:\n - ECDHE-RSA-AES128-GCM-SHA256\n\nTLS 1.3 cipher suites (e.g. TLS_AES_128_GCM_SHA256) are not configurable and are always enabled when TLS 1.3 is negotiated.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, - "version": { - SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", - }, - }, - "readyReplicas": { - SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", - }, - }, - "latestAvailableRevision": { - SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "generations": { + "groups": { VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "set", }, }, SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", + Description: "groups is an optional, ordered field used to specify the supported groups (formerly known as elliptic curves) that are used during the TLS handshake. The order of the groups represents a suggested preference, with the most preferred group first. Note that not all platform components honor the ordering: Go-based components use Go's internal preference order and treat this list as a filter of allowed groups rather than an ordered preference. Operators may remove entries their operands do not support.\n\nWhen omitted, this means no opinion and the platform is left to choose reasonable defaults which are subject to change over time and may be different per platform component depending on the underlying TLS libraries they use. If specified, the list must contain at least one and at most 7 groups, and each group must be unique.\n\nFor example, to use X25519 and secp256r1 (yaml):\n\n groups:\n - X25519\n - secp256r1", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, + "minTLSVersion": { + SchemaProps: spec.SchemaProps{ + Description: "minTLSVersion is used to specify the minimal version of the TLS protocol that is negotiated during the TLS handshake. For example, to use TLS versions 1.1, 1.2 and 1.3 (yaml):\n\n minTLSVersion: VersionTLS11", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, }, + Required: []string{"ciphers", "minTLSVersion"}, }, }, - Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_PartialSelector(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_DNS(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "PartialSelector provides label selector(s) that can be used to match machine management resources.", + Description: "DNS holds cluster-wide information about DNS. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "machineResourceSelector": { + "kind": { SchemaProps: spec.SchemaProps{ - Description: "machineResourceSelector is a label selector that can be used to select machine resources like MachineSets.", - Ref: ref(metav1.LabelSelector{}.OpenAPIModelName()), + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Type: []string{"string"}, + Format: "", + }, + }, + "apiVersion": { + SchemaProps: spec.SchemaProps{ + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Type: []string{"string"}, + Format: "", + }, + }, + "metadata": { + SchemaProps: spec.SchemaProps{ + Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + }, + }, + "spec": { + SchemaProps: spec.SchemaProps{ + Description: "spec holds user settable values for configuration", + Default: map[string]interface{}{}, + Ref: ref(v1.DNSSpec{}.OpenAPIModelName()), + }, + }, + "status": { + SchemaProps: spec.SchemaProps{ + Description: "status holds observed values from the cluster. They may not be overridden.", + Default: map[string]interface{}{}, + Ref: ref(v1.DNSStatus{}.OpenAPIModelName()), }, }, }, - Required: []string{"machineResourceSelector"}, + Required: []string{"spec"}, }, }, Dependencies: []string{ - metav1.LabelSelector{}.OpenAPIModelName()}, + v1.DNSSpec{}.OpenAPIModelName(), v1.DNSStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_Perspective(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_DNSList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "Perspective defines a perspective that cluster admins want to show/hide in the perspective switcher dropdown", + Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "id": { + "kind": { SchemaProps: spec.SchemaProps{ - Description: "id defines the id of the perspective. Example: \"dev\", \"admin\". The available perspective ids can be found in the code snippet section next to the yaml editor. Incorrect or unknown ids will be ignored.", - Default: "", + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Type: []string{"string"}, + Format: "", + }, + }, + "apiVersion": { + SchemaProps: spec.SchemaProps{ + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", Type: []string{"string"}, Format: "", }, }, - "visibility": { + "metadata": { SchemaProps: spec.SchemaProps{ - Description: "visibility defines the state of perspective along with access review checks if needed for that perspective.", + Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", Default: map[string]interface{}{}, - Ref: ref(operatorv1.PerspectiveVisibility{}.OpenAPIModelName()), + Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), }, }, - "pinnedResources": { + "items": { SchemaProps: spec.SchemaProps{ - Description: "pinnedResources defines the list of default pinned resources that users will see on the perspective navigation if they have not customized these pinned resources themselves. The list of available Kubernetes resources could be read via `kubectl api-resources`. The console will also provide a configuration UI and a YAML snippet that will list the available resources that can be pinned to the navigation. Incorrect or unknown resources will be ignored.", - Type: []string{"array"}, + Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorv1.PinnedResourceReference{}.OpenAPIModelName()), + Ref: ref(v1.DNS{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"id", "visibility"}, + Required: []string{"metadata", "items"}, }, }, Dependencies: []string{ - operatorv1.PerspectiveVisibility{}.OpenAPIModelName(), operatorv1.PinnedResourceReference{}.OpenAPIModelName()}, + v1.DNS{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_PerspectiveVisibility(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_DNSPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "PerspectiveVisibility defines the criteria to show/hide a perspective", + Description: "DNSPlatformSpec holds cloud-provider-specific configuration for DNS administration.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "state": { + "type": { SchemaProps: spec.SchemaProps{ - Description: "state defines the perspective is enabled or disabled or access review check is required.", + Description: "type is the underlying infrastructure provider for the cluster. Allowed values: \"\", \"AWS\".\n\nIndividual components may not support all platforms, and must handle unrecognized platforms with best-effort defaults.", Default: "", Type: []string{"string"}, Format: "", }, }, - "accessReview": { + "aws": { SchemaProps: spec.SchemaProps{ - Description: "accessReview defines required and missing access review checks.", - Ref: ref(operatorv1.ResourceAttributesAccessReview{}.OpenAPIModelName()), + Description: "aws contains DNS configuration specific to the Amazon Web Services cloud provider.", + Ref: ref(v1.AWSDNSSpec{}.OpenAPIModelName()), }, }, }, - Required: []string{"state"}, + Required: []string{"type"}, }, VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ "x-kubernetes-unions": []interface{}{ map[string]interface{}{ - "discriminator": "state", + "discriminator": "type", "fields-to-discriminateBy": map[string]interface{}{ - "accessReview": "AccessReview", + "aws": "AWS", }, }, }, @@ -63177,87 +4738,90 @@ func schema_openshift_api_operator_v1_PerspectiveVisibility(ref common.Reference }, }, Dependencies: []string{ - operatorv1.ResourceAttributesAccessReview{}.OpenAPIModelName()}, + v1.AWSDNSSpec{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_PinnedResourceReference(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_DNSSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "PinnedResourceReference includes the group, version and type of resource", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "group": { + "baseDomain": { SchemaProps: spec.SchemaProps{ - Description: "group is the API Group of the Resource. Enter empty string for the core group. This value should consist of only lowercase alphanumeric characters, hyphens and periods. Example: \"\", \"apps\", \"build.openshift.io\", etc.", + Description: "baseDomain is the base domain of the cluster. All managed DNS records will be sub-domains of this base.\n\nFor example, given the base domain `openshift.example.com`, an API server DNS record may be created for `cluster-api.openshift.example.com`.\n\nOnce set, this field cannot be changed.", Default: "", Type: []string{"string"}, Format: "", }, }, - "version": { + "publicZone": { SchemaProps: spec.SchemaProps{ - Description: "version is the API Version of the Resource. This value should consist of only lowercase alphanumeric characters. Example: \"v1\", \"v1beta1\", etc.", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "publicZone is the location where all the DNS records that are publicly accessible to the internet exist.\n\nIf this field is nil, no public records should be created.\n\nOnce set, this field cannot be changed.", + Ref: ref(v1.DNSZone{}.OpenAPIModelName()), }, }, - "resource": { + "privateZone": { SchemaProps: spec.SchemaProps{ - Description: "resource is the type that is being referenced. It is normally the plural form of the resource kind in lowercase. This value should consist of only lowercase alphanumeric characters and hyphens. Example: \"deployments\", \"deploymentconfigs\", \"pods\", etc.", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "privateZone is the location where all the DNS records that are only available internally to the cluster exist.\n\nIf this field is nil, no private records should be created.\n\nOnce set, this field cannot be changed.", + Ref: ref(v1.DNSZone{}.OpenAPIModelName()), + }, + }, + "platform": { + SchemaProps: spec.SchemaProps{ + Description: "platform holds configuration specific to the underlying infrastructure provider for DNS. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.", + Default: map[string]interface{}{}, + Ref: ref(v1.DNSPlatformSpec{}.OpenAPIModelName()), }, }, }, - Required: []string{"group", "version", "resource"}, + Required: []string{"baseDomain"}, }, }, + Dependencies: []string{ + v1.DNSPlatformSpec{}.OpenAPIModelName(), v1.DNSZone{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_PolicyAuditConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_DNSStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ Type: []string{"object"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_DNSZone(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "DNSZone is used to define a DNS hosted zone. A zone can be identified by an ID or tags.", + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "rateLimit": { - SchemaProps: spec.SchemaProps{ - Description: "rateLimit is the approximate maximum number of messages to generate per-second per-node. If unset the default of 20 msg/sec is used.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "maxFileSize": { - SchemaProps: spec.SchemaProps{ - Description: "maxFilesSize is the max size an ACL_audit log file is allowed to reach before rotation occurs Units are in MB and the Default is 50MB", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "maxLogFiles": { - SchemaProps: spec.SchemaProps{ - Description: "maxLogFiles specifies the maximum number of ACL_audit log files that can be present.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "destination": { + "id": { SchemaProps: spec.SchemaProps{ - Description: "destination is the location for policy log messages. Regardless of this config, persistent logs will always be dumped to the host at /var/log/ovn/ however Additionally syslog output may be configured as follows. Valid values are: - \"libc\" -> to use the libc syslog() function of the host node's journdald process - \"udp:host:port\" -> for sending syslog over UDP - \"unix:file\" -> for using the UNIX domain socket directly - \"null\" -> to discard all messages logged to syslog The default is \"null\"", + Description: "id is the identifier that can be used to find the DNS hosted zone.\n\non AWS zone can be fetched using `ID` as id in [1] on Azure zone can be fetched using `ID` as a pre-determined name in [2], on GCP zone can be fetched using `ID` as a pre-determined name in [3].\n\n[1]: https://docs.aws.amazon.com/cli/latest/reference/route53/get-hosted-zone.html#options [2]: https://docs.microsoft.com/en-us/cli/azure/network/dns/zone?view=azure-cli-latest#az-network-dns-zone-show [3]: https://cloud.google.com/dns/docs/reference/v1/managedZones/get", Type: []string{"string"}, Format: "", }, }, - "syslogFacility": { + "tags": { SchemaProps: spec.SchemaProps{ - Description: "syslogFacility the RFC5424 facility for generated messages, e.g. \"kern\". Default is \"local0\"", - Type: []string{"string"}, - Format: "", + Description: "tags can be used to query the DNS hosted zone.\n\non AWS, resourcegroupstaggingapi [1] can be used to fetch a zone using `Tags` as tag-filters,\n\n[1]: https://docs.aws.amazon.com/cli/latest/reference/resourcegroupstaggingapi/get-resources.html#options", + Type: []string{"object"}, + AdditionalProperties: &spec.SchemaOrBool{ + Allows: true, + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, }, @@ -63266,17 +4830,17 @@ func schema_openshift_api_operator_v1_PolicyAuditConfig(ref common.ReferenceCall } } -func schema_openshift_api_operator_v1_PrivateStrategy(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_DelegatedAuthentication(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "PrivateStrategy holds parameters for the Private endpoint publishing strategy.", + Description: "DelegatedAuthentication allows authentication to be disabled.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "protocol": { + "disabled": { SchemaProps: spec.SchemaProps{ - Description: "protocol specifies whether the IngressController expects incoming connections to use plain TCP or whether the IngressController expects PROXY protocol.\n\nPROXY protocol can be used with load balancers that support it to communicate the source addresses of client connections when forwarding those connections to the IngressController. Using PROXY protocol enables the IngressController to report those source addresses instead of reporting the load balancer's address in HTTP headers and logs. Note that enabling PROXY protocol on the IngressController will cause connections to fail if you are not using a load balancer that uses PROXY protocol to forward connections to the IngressController. See http://www.haproxy.org/download/2.2/doc/proxy-protocol.txt for information about PROXY protocol.\n\nThe following values are valid for this field:\n\n* The empty string. * \"TCP\". * \"PROXY\".\n\nThe empty string specifies the default, which is TCP without PROXY protocol. Note that the default is subject to change.", - Type: []string{"string"}, + Description: "disabled indicates that authentication should be disabled. By default it will use delegated authentication.", + Type: []string{"boolean"}, Format: "", }, }, @@ -63286,26 +4850,18 @@ func schema_openshift_api_operator_v1_PrivateStrategy(ref common.ReferenceCallba } } -func schema_openshift_api_operator_v1_ProjectAccess(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_DelegatedAuthorization(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ProjectAccess contains options for project access roles", + Description: "DelegatedAuthorization allows authorization to be disabled.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "availableClusterRoles": { + "disabled": { SchemaProps: spec.SchemaProps{ - Description: "availableClusterRoles is the list of ClusterRole names that are assignable to users through the project access tab.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "disabled indicates that authorization should be disabled. By default it will use delegated authorization.", + Type: []string{"boolean"}, + Format: "", }, }, }, @@ -63314,129 +4870,77 @@ func schema_openshift_api_operator_v1_ProjectAccess(ref common.ReferenceCallback } } -func schema_openshift_api_operator_v1_ProviderLoadBalancerParameters(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_DeprecatedWebhookTokenAuthenticator(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ProviderLoadBalancerParameters holds desired load balancer information specific to the underlying infrastructure provider.", + Description: "deprecatedWebhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator. It's the same as WebhookTokenAuthenticator but it's missing the 'required' validation on KubeConfig field.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type is the underlying infrastructure provider for the load balancer. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"IBM\", \"Nutanix\", \"OpenStack\", and \"VSphere\".", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "aws": { - SchemaProps: spec.SchemaProps{ - Description: "aws provides configuration settings that are specific to AWS load balancers.\n\nIf empty, defaults will be applied. See specific aws fields for details about their defaults.", - Ref: ref(operatorv1.AWSLoadBalancerParameters{}.OpenAPIModelName()), - }, - }, - "gcp": { - SchemaProps: spec.SchemaProps{ - Description: "gcp provides configuration settings that are specific to GCP load balancers.\n\nIf empty, defaults will be applied. See specific gcp fields for details about their defaults.", - Ref: ref(operatorv1.GCPLoadBalancerParameters{}.OpenAPIModelName()), - }, - }, - "ibm": { - SchemaProps: spec.SchemaProps{ - Description: "ibm provides configuration settings that are specific to IBM Cloud load balancers.\n\nIf empty, defaults will be applied. See specific ibm fields for details about their defaults.", - Ref: ref(operatorv1.IBMLoadBalancerParameters{}.OpenAPIModelName()), - }, - }, - "openstack": { + "kubeConfig": { SchemaProps: spec.SchemaProps{ - Description: "openstack provides configuration settings that are specific to OpenStack load balancers.\n\nIf empty, defaults will be applied. See specific openstack fields for details about their defaults.", - Ref: ref(operatorv1.OpenStackLoadBalancerParameters{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "aws": "AWS", - "gcp": "GCP", - "ibm": "IBM", - "openstack": "OpenStack", - }, + Description: "kubeConfig contains kube config file data which describes how to access the remote webhook service. For further details, see: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication The key \"kubeConfig\" is used to locate the data. If the secret or expected key is not found, the webhook is not honored. If the specified kube config data is not valid, the webhook is not honored. The namespace for this secret is determined by the point of use.", + Default: map[string]interface{}{}, + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), }, }, }, + Required: []string{"kubeConfig"}, }, }, Dependencies: []string{ - operatorv1.AWSLoadBalancerParameters{}.OpenAPIModelName(), operatorv1.GCPLoadBalancerParameters{}.OpenAPIModelName(), operatorv1.IBMLoadBalancerParameters{}.OpenAPIModelName(), operatorv1.OpenStackLoadBalancerParameters{}.OpenAPIModelName()}, + v1.SecretNameReference{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_EquinixMetalPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "EquinixMetalPlatformSpec holds the desired state of the Equinix Metal infrastructure provider. This only includes fields that can be modified in the cluster.", + Type: []string{"object"}, + }, + }, } } -func schema_openshift_api_operator_v1_ProxyConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_EquinixMetalPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ProxyConfig defines the configuration knobs for kubeproxy All of these are optional and have sensible defaults", + Description: "EquinixMetalPlatformStatus holds the current status of the Equinix Metal infrastructure provider.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "iptablesSyncPeriod": { + "apiServerInternalIP": { SchemaProps: spec.SchemaProps{ - Description: "An internal kube-proxy parameter. In older releases of OCP, this sometimes needed to be adjusted in large clusters for performance reasons, but this is no longer necessary, and there is no reason to change this from the default value. Default: 30s", + Description: "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.", Type: []string{"string"}, Format: "", }, }, - "bindAddress": { + "ingressIP": { SchemaProps: spec.SchemaProps{ - Description: "The address to \"bind\" on Defaults to 0.0.0.0", + Description: "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.", Type: []string{"string"}, Format: "", }, }, - "proxyArguments": { - SchemaProps: spec.SchemaProps{ - Description: "Any additional arguments to pass to the kubeproxy process", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - }, - }, - }, }, }, }, } } -func schema_openshift_api_operator_v1_QuickStarts(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_EtcdConnectionInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "QuickStarts allow cluster admins to customize available ConsoleQuickStart resources.", + Description: "EtcdConnectionInfo holds information necessary for connecting to an etcd server", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "disabled": { + "urls": { SchemaProps: spec.SchemaProps{ - Description: "disabled is a list of ConsoleQuickStart resource names that are not shown to users.", + Description: "urls are the URLs for etcd", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -63449,140 +4953,254 @@ func schema_openshift_api_operator_v1_QuickStarts(ref common.ReferenceCallback) }, }, }, + "ca": { + SchemaProps: spec.SchemaProps{ + Description: "ca is a file containing trusted roots for the etcd server certificates", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "certFile": { + SchemaProps: spec.SchemaProps{ + Description: "certFile is a file containing a PEM-encoded certificate", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "keyFile": { + SchemaProps: spec.SchemaProps{ + Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, }, + Required: []string{"ca", "certFile", "keyFile"}, }, }, } } -func schema_openshift_api_operator_v1_ReloadService(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_EtcdStorageConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ReloadService allows the user to specify the services to be reloaded", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "serviceName": { + "urls": { + SchemaProps: spec.SchemaProps{ + Description: "urls are the URLs for etcd", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, + }, + }, + "ca": { + SchemaProps: spec.SchemaProps{ + Description: "ca is a file containing trusted roots for the etcd server certificates", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "certFile": { + SchemaProps: spec.SchemaProps{ + Description: "certFile is a file containing a PEM-encoded certificate", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "keyFile": { + SchemaProps: spec.SchemaProps{ + Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "storagePrefix": { SchemaProps: spec.SchemaProps{ - Description: "serviceName is the full name (e.g. crio.service) of the service to be reloaded Service names should be of the format ${NAME}${SERVICETYPE} and can up to 255 characters long. ${NAME} must be atleast 1 character long and can only consist of alphabets, digits, \":\", \"-\", \"_\", \".\", and \"\\\". ${SERVICETYPE} must be one of \".service\", \".socket\", \".device\", \".mount\", \".automount\", \".swap\", \".target\", \".path\", \".timer\", \".snapshot\", \".slice\" or \".scope\".", + Description: "storagePrefix is the path within etcd that the OpenShift resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located.", Default: "", Type: []string{"string"}, Format: "", }, }, }, - Required: []string{"serviceName"}, + Required: []string{"ca", "certFile", "keyFile", "storagePrefix"}, }, }, } } -func schema_openshift_api_operator_v1_ResourceAttributesAccessReview(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ExternalClaimsSource(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ResourceAttributesAccessReview defines the visibility of the perspective depending on the access review checks. `required` and `missing` can work together esp. in the case where the cluster admin wants to show another perspective to users without specific permissions. Out of `required` and `missing` atleast one property should be non-empty.", + Description: "ExternalClaimsSource provides the configuration for a single external claim source.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "required": { + "authentication": { + SchemaProps: spec.SchemaProps{ + Description: "authentication is an optional field that configures how the apiserver authenticates with an external claims source. When not specified, anonymous authentication is used which means no 'Authorization' header is sent in the HTTP request to fetch the external claims.", + Default: map[string]interface{}{}, + Ref: ref(v1.ExternalSourceAuthentication{}.OpenAPIModelName()), + }, + }, + "tls": { + SchemaProps: spec.SchemaProps{ + Description: "tls is an optional field that configures the http client TLS settings when fetching external claims from this source.\n\nWhen omitted, system default TLS settings will be used for fetching claims from the external source.", + Default: map[string]interface{}{}, + Ref: ref(v1.ExternalSourceTLS{}.OpenAPIModelName()), + }, + }, + "url": { + SchemaProps: spec.SchemaProps{ + Description: "url is a required configuration of the URL for which the external claims are located.", + Default: map[string]interface{}{}, + Ref: ref(v1.SourceURL{}.OpenAPIModelName()), + }, + }, + "mappings": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "name", + }, + "x-kubernetes-list-type": "map", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "required defines a list of permission checks. The perspective will only be shown when all checks are successful. When omitted, the access review is skipped and the perspective will not be shown unless it is required to do so based on the configuration of the missing access review list.", + Description: "mappings is a required list of the claim and response handling expression pairs that produces the claims from the external source. mappings must have at least 1 entry and must not exceed 16 entries. Entries must have a unique name across all external claim sources.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(apiauthorizationv1.ResourceAttributes{}.OpenAPIModelName()), + Ref: ref(v1.SourcedClaimMapping{}.OpenAPIModelName()), }, }, }, }, }, - "missing": { + "predicates": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "expression", + }, + "x-kubernetes-list-type": "map", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "missing defines a list of permission checks. The perspective will only be shown when at least one check fails. When omitted, the access review is skipped and the perspective will not be shown unless it is required to do so based on the configuration of the required access review list.", + Description: "predicates is an optional list of constraints in which claims should attempt to be fetched from this external source.\n\nWhen omitted, claims are always fetched from this external source.\n\nWhen specified, all predicates must evaluate to 'true' before claims are attempted to be fetched from this external source. predicates must have at least 1 entry and must not exceed 16 entries. Entries must have unique expressions.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(apiauthorizationv1.ResourceAttributes{}.OpenAPIModelName()), + Ref: ref(v1.ExternalSourcePredicate{}.OpenAPIModelName()), }, }, }, }, }, }, + Required: []string{"url", "mappings"}, }, }, Dependencies: []string{ - apiauthorizationv1.ResourceAttributes{}.OpenAPIModelName()}, + v1.ExternalSourceAuthentication{}.OpenAPIModelName(), v1.ExternalSourcePredicate{}.OpenAPIModelName(), v1.ExternalSourceTLS{}.OpenAPIModelName(), v1.SourceURL{}.OpenAPIModelName(), v1.SourcedClaimMapping{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_RestartService(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ExternalIPConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RestartService allows the user to specify the services to be restarted", + Description: "ExternalIPConfig specifies some IP blocks relevant for the ExternalIP field of a Service resource.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "serviceName": { + "policy": { SchemaProps: spec.SchemaProps{ - Description: "serviceName is the full name (e.g. crio.service) of the service to be restarted Service names should be of the format ${NAME}${SERVICETYPE} and can up to 255 characters long. ${NAME} must be atleast 1 character long and can only consist of alphabets, digits, \":\", \"-\", \"_\", \".\", and \"\\\". ${SERVICETYPE} must be one of \".service\", \".socket\", \".device\", \".mount\", \".automount\", \".swap\", \".target\", \".path\", \".timer\", \".snapshot\", \".slice\" or \".scope\".", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "policy is a set of restrictions applied to the ExternalIP field. If nil or empty, then ExternalIP is not allowed to be set.", + Ref: ref(v1.ExternalIPPolicy{}.OpenAPIModelName()), + }, + }, + "autoAssignCIDRs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, + SchemaProps: spec.SchemaProps{ + Description: "autoAssignCIDRs is a list of CIDRs from which to automatically assign Service.ExternalIP. These are assigned when the service is of type LoadBalancer. In general, this is only useful for bare-metal clusters. In Openshift 3.x, this was misleadingly called \"IngressIPs\". Automatically assigned External IPs are not affected by any ExternalIPPolicy rules. Currently, only one entry may be provided.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, }, - Required: []string{"serviceName"}, }, }, + Dependencies: []string{ + v1.ExternalIPPolicy{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_RouteAdmissionPolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ExternalIPPolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RouteAdmissionPolicy is an admission policy for allowing new route claims.", + Description: "ExternalIPPolicy configures exactly which IPs are allowed for the ExternalIP field in a Service. If the zero struct is supplied, then none are permitted. The policy controller always allows automatically assigned external IPs.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "namespaceOwnership": { - SchemaProps: spec.SchemaProps{ - Description: "namespaceOwnership describes how host name claims across namespaces should be handled.\n\nValue must be one of:\n\n- Strict: Do not allow routes in different namespaces to claim the same host.\n\n- InterNamespaceAllowed: Allow routes to claim different paths of the same\n host name across namespaces.\n\nIf empty, the default is Strict.", - Type: []string{"string"}, - Format: "", + "allowedCIDRs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, }, - }, - "wildcardPolicy": { SchemaProps: spec.SchemaProps{ - Description: "wildcardPolicy describes how routes with wildcard policies should be handled for the ingress controller. WildcardPolicy controls use of routes [1] exposed by the ingress controller based on the route's wildcard policy.\n\n[1] https://github.com/openshift/api/blob/master/route/v1/types.go\n\nNote: Updating WildcardPolicy from WildcardsAllowed to WildcardsDisallowed will cause admitted routes with a wildcard policy of Subdomain to stop working. These routes must be updated to a wildcard policy of None to be readmitted by the ingress controller.\n\nWildcardPolicy supports WildcardsAllowed and WildcardsDisallowed values.\n\nIf empty, defaults to \"WildcardsDisallowed\".", - Type: []string{"string"}, - Format: "", + Description: "allowedCIDRs is the list of allowed CIDRs.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1_SFlowConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "collectors": { + "rejectedCIDRs": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ "x-kubernetes-list-type": "atomic", }, }, SchemaProps: spec.SchemaProps{ - Description: "sFlowCollectors is list of strings formatted as ip:port with a maximum of ten items", + Description: "rejectedCIDRs is the list of disallowed CIDRs. These take precedence over allowedCIDRs.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -63601,194 +5219,227 @@ func schema_openshift_api_operator_v1_SFlowConfig(ref common.ReferenceCallback) } } -func schema_openshift_api_operator_v1_SecretsStoreCSIDriverConfigSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ExternalPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SecretsStoreCSIDriverConfigSpec defines properties that can be configured for the Secrets Store CSI driver.", + Description: "ExternalPlatformSpec holds the desired state for the generic External infrastructure provider.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "secretRotation": { + "platformName": { SchemaProps: spec.SchemaProps{ - Description: "secretRotation controls automatic secret rotation behavior. When omitted, secret rotation is enabled with a default poll interval of 2 minutes.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.SecretsStoreSecretRotation{}.OpenAPIModelName()), + Description: "platformName holds the arbitrary string representing the infrastructure provider name, expected to be set at the installation time. This field is solely for informational and reporting purposes and is not expected to be used for decision-making.", + Default: "Unknown", + Type: []string{"string"}, + Format: "", }, }, - "tokenRequests": { + }, + }, + }, + } +} + +func schema_openshift_api_config_v1_ExternalPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "ExternalPlatformStatus holds the current status of the generic External infrastructure provider.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "cloudControllerManager": { SchemaProps: spec.SchemaProps{ - Description: "tokenRequests controls service account token configuration for workload identity federation (WIF) with cloud providers. When omitted, the operator preserves any existing tokenRequests already configured on the CSIDriver object without modification.", + Description: "cloudControllerManager contains settings specific to the external Cloud Controller Manager (a.k.a. CCM or CPI). When omitted, new nodes will be not tainted and no extra initialization from the cloud controller manager is expected.", Default: map[string]interface{}{}, - Ref: ref(operatorv1.SecretsStoreTokenRequests{}.OpenAPIModelName()), + Ref: ref(v1.CloudControllerManagerStatus{}.OpenAPIModelName()), }, }, }, }, }, Dependencies: []string{ - operatorv1.SecretsStoreSecretRotation{}.OpenAPIModelName(), operatorv1.SecretsStoreTokenRequests{}.OpenAPIModelName()}, + v1.CloudControllerManagerStatus{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_SecretsStoreSecretRotation(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ExternalSourceAuthentication(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SecretsStoreSecretRotation configures the automatic secret rotation behavior for the Secrets Store CSI driver.", + Description: "ExternalSourceAuthentication configures how the apiserver should attempt to authenticate with an external claims source.", Type: []string{"object"}, Properties: map[string]spec.Schema{ "type": { SchemaProps: spec.SchemaProps{ - Description: "type determines the secret rotation behavior. When \"None\", secret rotation is disabled and secrets are only fetched at initial pod mount time. When \"Custom\", secret rotation is enabled with the configuration specified in the custom field.", + Description: "type is a required field that sets the type of authentication method used by the authenticator when fetching external claims.\n\nAllowed values are 'RequestProvidedToken' and 'ClientCredential'.\n\nWhen set to 'RequestProvidedToken', the authenticator will use the token provided to the kube-apiserver as part of the request to authenticate with the external claims source.\n\nWhen set to 'ClientCredential', the authenticator will use the configured client-id, client-secret, and token endpoint to fetch an access token using the OAuth2 client credentials grant flow. The fetched access token will then be used to authenticate with the external claims source.\n\n\nPossible enum values:\n - `\"ClientCredential\"` is an ExternalSourceAuthenticationType that represents that the authenticator should use the OAuth2 client credentials grant flow to obtain an access token for authenticating with the external claims source. This is useful for scenarios such as fetching user information from Microsoft's Graph API where a separate client credential is needed to access the API.\n - `\"RequestProvidedToken\"` is an ExternalSourceAuthenticationType that represents that the token being evaluated for authentication should be used for authenticating with the external claims source. This is useful for scenarios where a token has multiple audiences and scopes so that it can be used to access both the cluster and the UserInfo endpoint that contains additional information about the user not present in the token.", Type: []string{"string"}, Format: "", + Enum: []interface{}{"ClientCredential", "RequestProvidedToken"}, }, }, - "custom": { + "clientCredential": { SchemaProps: spec.SchemaProps{ - Description: "custom holds the custom rotation configuration. Only valid when type is \"Custom\".", + Description: "clientCredential configures the client credentials and token endpoint to use to get an access token. clientCredential is required when type is 'ClientCredential', and forbidden otherwise.", Default: map[string]interface{}{}, - Ref: ref(operatorv1.CustomSecretRotation{}.OpenAPIModelName()), + Ref: ref(v1.ClientCredentialConfig{}.OpenAPIModelName()), }, }, }, Required: []string{"type"}, }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "custom": "Custom", - }, + }, + Dependencies: []string{ + v1.ClientCredentialConfig{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_ExternalSourceCertificateAuthorityConfigMapReference(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "ExternalSourceCertificateAuthorityConfigMapReference is a reference to a ConfigMap in the openshift-config namespace that should be used for configuring the certificate authority to be used when sourcing claims from external sources.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "name": { + SchemaProps: spec.SchemaProps{ + Description: "name is the required name of the ConfigMap that exists in the openshift-config namespace. The key \"ca-bundle.crt\" must be present and must contain the CA certificate to be used to verify the external source's TLS certificate.\n\nIt must be at least 1 character in length, must not exceed 253 characters in length, must start and end with a lowercase alphanumeric character, and must only contain lowercase alphanumeric characters, '-' or '.'.", + Type: []string{"string"}, + Format: "", }, }, }, + Required: []string{"name"}, }, }, - Dependencies: []string{ - operatorv1.CustomSecretRotation{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_SecretsStoreTokenRequest(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ExternalSourcePredicate(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SecretsStoreTokenRequest specifies a service account token audience configuration for workload identity federation (WIF) with the Secrets Store CSI driver.", + Description: "ExternalSourcePredicate configures a singular condition that must return true before the external source is queried to retrieve external claims.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "audience": { + "expression": { SchemaProps: spec.SchemaProps{ - Description: "audience is the intended audience of the service account token. An empty string means the issued token will use the kube-apiserver's default APIAudiences.", + Description: "expression is a required CEL expression that is used to determine whether or not an external source should be used to fetch external claims.\n\nThe expression must return a boolean value, where true means that the source should be consulted and false means that it should not.\n\nClaims from the token used for the request to the kube-apiserver are made available via the `claims` variable.\n\nThe contents of the `claims` variable varies based on the claims that are present in the token being validated. It is the responsibility of those configuring this field to understand what claims the identity provider includes when issuing tokens.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length.", Type: []string{"string"}, Format: "", }, }, - "expirationSeconds": { + }, + Required: []string{"expression"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_ExternalSourceTLS(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "ExternalSourceTLS configures the TLS options that the apiserver uses as a client when making a request to the external claim source.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "certificateAuthority": { SchemaProps: spec.SchemaProps{ - Description: "expirationSeconds is the requested duration of validity of the service account token. The token issuer may return a token with a different validity duration. When omitted, the token expiration is determined by the kube-apiserver. Must be at least 600 seconds (10 minutes) and no more than 315360000 seconds (~10 years).", - Type: []string{"integer"}, - Format: "int32", + Description: "certificateAuthority is a required reference to a ConfigMap in the openshift-config namespace that contains the CA certificate to use to validate TLS connections with the external claims source. The key \"ca-bundle.crt\" must be present in the referenced ConfigMap and must contain the CA certificate to be used to verify the external source's TLS certificate.", + Default: map[string]interface{}{}, + Ref: ref(v1.ExternalSourceCertificateAuthorityConfigMapReference{}.OpenAPIModelName()), }, }, }, - Required: []string{"audience"}, + Required: []string{"certificateAuthority"}, }, }, + Dependencies: []string{ + v1.ExternalSourceCertificateAuthorityConfigMapReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_SecretsStoreTokenRequests(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ExtraMapping(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SecretsStoreTokenRequests configures how service account tokens are provided to the Secrets Store CSI driver for workload identity federation.", + Description: "ExtraMapping allows specifying a key and CEL expression to evaluate the keys' value. It is used to create additional mappings and attributes added to a cluster identity from a provided authentication token.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "type": { + "key": { SchemaProps: spec.SchemaProps{ - Description: "type determines how the operator manages tokenRequests on the CSIDriver object. When \"Unmanaged\", existing tokenRequests on the CSIDriver are preserved and the managed field is not used. When \"Managed\", the operator sets tokenRequests from the audiences specified in the managed field, replacing any previously configured values. Once set to \"Managed\", type cannot be reverted back to \"Unmanaged\".", + Description: "key is a required field that specifies the string to use as the extra attribute key.\n\nkey must be a domain-prefix path (e.g 'example.org/foo'). key must not exceed 510 characters in length. key must contain the '/' character, separating the domain and path characters. key must not be empty.\n\nThe domain portion of the key (string of characters prior to the '/') must be a valid RFC1123 subdomain. It must not exceed 253 characters in length. It must start and end with an alphanumeric character. It must only contain lower case alphanumeric characters and '-' or '.'. It must not use the reserved domains, or be subdomains of, \"kubernetes.io\", \"k8s.io\", and \"openshift.io\".\n\nThe path portion of the key (string of characters after the '/') must not be empty and must consist of at least one alphanumeric character, percent-encoded octets, '-', '.', '_', '~', '!', '$', '&', ''', '(', ')', '*', '+', ',', ';', '=', and ':'. It must not exceed 256 characters in length.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "managed": { + "valueExpression": { SchemaProps: spec.SchemaProps{ - Description: "managed holds configuration for operator-managed tokenRequests. Only valid when type is \"Managed\".", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ManagedTokenRequests{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "managed": "Managed", - }, + Description: "valueExpression is a required field to specify the CEL expression to extract the extra attribute value from a JWT token's claims. valueExpression must produce a string or string array value. \"\", [], and null are treated as the extra mapping not being present. Empty string values within an array are filtered out.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'. 'claims' is a map of claim names to claim values. For example, the 'sub' claim value can be accessed as 'claims.sub'. Nested claims can be accessed using dot notation ('claims.foo.bar').\n\nvalueExpression must not exceed 1024 characters in length. valueExpression must not be empty.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, + Required: []string{"key", "valueExpression"}, }, }, - Dependencies: []string{ - operatorv1.ManagedTokenRequests{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_Server(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_FeatureGate(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "Server defines the schema for a server that runs per instance of CoreDNS.", + Description: "Feature holds cluster-wide information about feature gates. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "name": { + "kind": { SchemaProps: spec.SchemaProps{ - Description: "name is required and specifies a unique name for the server. Name must comply with the Service Name Syntax of rfc6335.", - Default: "", + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", Type: []string{"string"}, Format: "", }, }, - "zones": { + "apiVersion": { SchemaProps: spec.SchemaProps{ - Description: "zones is required and specifies the subdomains that Server is authoritative for. Zones must conform to the rfc1123 definition of a subdomain. Specifying the cluster domain (i.e., \"cluster.local\") is invalid.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Type: []string{"string"}, + Format: "", + }, + }, + "metadata": { + SchemaProps: spec.SchemaProps{ + Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + }, + }, + "spec": { + SchemaProps: spec.SchemaProps{ + Description: "spec holds user settable values for configuration", + Default: map[string]interface{}{}, + Ref: ref(v1.FeatureGateSpec{}.OpenAPIModelName()), }, }, - "forwardPlugin": { + "status": { SchemaProps: spec.SchemaProps{ - Description: "forwardPlugin defines a schema for configuring CoreDNS to proxy DNS messages to upstream resolvers.", + Description: "status holds observed values from the cluster. They may not be overridden.", Default: map[string]interface{}{}, - Ref: ref(operatorv1.ForwardPlugin{}.OpenAPIModelName()), + Ref: ref(v1.FeatureGateStatus{}.OpenAPIModelName()), }, }, }, - Required: []string{"name", "zones", "forwardPlugin"}, + Required: []string{"spec"}, }, }, Dependencies: []string{ - operatorv1.ForwardPlugin{}.OpenAPIModelName()}, + v1.FeatureGateSpec{}.OpenAPIModelName(), v1.FeatureGateStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_ServiceAccountIssuerStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_FeatureGateAttributes(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ @@ -63796,83 +5447,75 @@ func schema_openshift_api_operator_v1_ServiceAccountIssuerStatus(ref common.Refe Properties: map[string]spec.Schema{ "name": { SchemaProps: spec.SchemaProps{ - Description: "name is the name of the service account issuer", + Description: "name is the name of the FeatureGate.", Default: "", Type: []string{"string"}, Format: "", }, }, - "expirationTime": { - SchemaProps: spec.SchemaProps{ - Description: "expirationTime is the time after which this service account issuer will be pruned and removed from the trusted list of service account issuers.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, }, Required: []string{"name"}, }, }, - Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_ServiceCA(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_FeatureGateDetails(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ServiceCA provides information to configure an operator to manage the service cert controllers\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { + "version": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "version matches the version provided by the ClusterVersion and in the ClusterOperator.Status.Versions field.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { + "enabled": { SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ServiceCASpec{}.OpenAPIModelName()), + Description: "enabled is a list of all feature gates that are enabled in the cluster for the named version.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.FeatureGateAttributes{}.OpenAPIModelName()), + }, + }, + }, }, }, - "status": { + "disabled": { SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ServiceCAStatus{}.OpenAPIModelName()), + Description: "disabled is a list of all feature gates that are disabled in the cluster for the named version.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.FeatureGateAttributes{}.OpenAPIModelName()), + }, + }, + }, }, }, }, - Required: []string{"metadata", "spec"}, + Required: []string{"version"}, }, }, Dependencies: []string{ - operatorv1.ServiceCASpec{}.OpenAPIModelName(), operatorv1.ServiceCAStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.FeatureGateAttributes{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_ServiceCAList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_FeatureGateList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ServiceCAList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -63898,13 +5541,12 @@ func schema_openshift_api_operator_v1_ServiceCAList(ref common.ReferenceCallback }, "items": { SchemaProps: spec.SchemaProps{ - Description: "items contains the items", - Type: []string{"array"}, + Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorv1.ServiceCA{}.OpenAPIModelName()), + Ref: ref(v1.FeatureGate{}.OpenAPIModelName()), }, }, }, @@ -63915,393 +5557,542 @@ func schema_openshift_api_operator_v1_ServiceCAList(ref common.ReferenceCallback }, }, Dependencies: []string{ - operatorv1.ServiceCA{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.FeatureGate{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_ServiceCASpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_FeatureGateSelection(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ Type: []string{"object"}, Properties: map[string]spec.Schema{ - "managementState": { + "featureSet": { SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", + Description: "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting. Turning on or off features may cause irreversible changes in your cluster which cannot be undone.", Type: []string{"string"}, Format: "", }, }, - "logLevel": { + "customNoUpgrade": { SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", + Description: "customNoUpgrade allows the enabling or disabling of any feature. Turning this feature set on IS NOT SUPPORTED, CANNOT BE UNDONE, and PREVENTS UPGRADES. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations your cluster may fail in an unrecoverable way. featureSet must equal \"CustomNoUpgrade\" must be set to use this field.", + Ref: ref(v1.CustomFeatureGates{}.OpenAPIModelName()), + }, + }, + }, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "featureSet", + "fields-to-discriminateBy": map[string]interface{}{ + "customNoUpgrade": "CustomNoUpgrade", + }, }, }, - "operatorLogLevel": { + }, + }, + }, + Dependencies: []string{ + v1.CustomFeatureGates{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_FeatureGateSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "featureSet": { SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", + Description: "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting. Turning on or off features may cause irreversible changes in your cluster which cannot be undone.", Type: []string{"string"}, Format: "", }, }, - "unsupportedConfigOverrides": { + "customNoUpgrade": { SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), + Description: "customNoUpgrade allows the enabling or disabling of any feature. Turning this feature set on IS NOT SUPPORTED, CANNOT BE UNDONE, and PREVENTS UPGRADES. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations your cluster may fail in an unrecoverable way. featureSet must equal \"CustomNoUpgrade\" must be set to use this field.", + Ref: ref(v1.CustomFeatureGates{}.OpenAPIModelName()), }, }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), + }, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "featureSet", + "fields-to-discriminateBy": map[string]interface{}{ + "customNoUpgrade": "CustomNoUpgrade", + }, }, }, }, - Required: []string{"managementState"}, }, }, Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, + v1.CustomFeatureGates{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_ServiceCAStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_FeatureGateStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ Type: []string{"object"}, Properties: map[string]spec.Schema{ - "observedGeneration": { + "conditions": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "type", + }, + "x-kubernetes-list-type": "map", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", + Description: "conditions represent the observations of the current state. Known .status.conditions.type are: \"DeterminationDegraded\"", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(metav1.Condition{}.OpenAPIModelName()), + }, + }, + }, }, }, - "conditions": { + "featureGates": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ "x-kubernetes-list-map-keys": []interface{}{ - "type", + "version", }, "x-kubernetes-list-type": "map", }, }, SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", + Description: "featureGates contains a list of enabled and disabled featureGates that are keyed by payloadVersion. Operators other than the CVO and cluster-config-operator, must read the .status.featureGates, locate the version they are managing, find the enabled/disabled featuregates and make the operand and operator match. The enabled/disabled values for a particular version may change during the life of the cluster as various .spec.featureSet values are selected. Operators may choose to restart their processes to pick up these changes, but remembering past enable/disable lists is beyond the scope of this API and is the responsibility of individual operators. Only featureGates with .version in the ClusterVersion.status will be present in this list.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), + Ref: ref(v1.FeatureGateDetails{}.OpenAPIModelName()), }, }, }, }, }, - "version": { + }, + }, + }, + Dependencies: []string{ + v1.FeatureGateDetails{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_FeatureGateTests(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "featureGate": { SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", + Description: "featureGate is the name of the FeatureGate as it appears in The FeatureGate CR instance.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "readyReplicas": { + "tests": { SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", + Description: "tests contains an item for every TestName", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.TestDetails{}.OpenAPIModelName()), + }, + }, + }, + }, + }, + }, + Required: []string{"featureGate", "tests"}, + }, + }, + Dependencies: []string{ + v1.TestDetails{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_GCPPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "GCPPlatformSpec holds the desired state of the Google Cloud Platform infrastructure provider. This only includes fields that can be modified in the cluster.", + Type: []string{"object"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_GCPPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "GCPPlatformStatus holds the current status of the Google Cloud Platform infrastructure provider.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "projectID": { + SchemaProps: spec.SchemaProps{ + Description: "resourceGroupName is the Project ID for new GCP resources created for the cluster.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "latestAvailableRevision": { + "region": { SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", + Description: "region holds the region for new GCP resources created for the cluster.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "generations": { + "resourceLabels": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", + "key", + }, + "x-kubernetes-list-type": "map", + }, + }, + SchemaProps: spec.SchemaProps{ + Description: "resourceLabels is a list of additional labels to apply to GCP resources created for the cluster. See https://cloud.google.com/compute/docs/labeling-resources for information on labeling GCP resources. GCP supports a maximum of 64 labels per resource. OpenShift reserves 32 labels for internal use, allowing 32 labels for user configuration.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.GCPResourceLabel{}.OpenAPIModelName()), + }, + }, + }, + }, + }, + "resourceTags": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "key", }, "x-kubernetes-list-type": "map", }, }, SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", + Description: "resourceTags is a list of additional tags to apply to GCP resources created for the cluster. See https://cloud.google.com/resource-manager/docs/tags/tags-overview for information on tagging GCP resources. GCP supports a maximum of 50 tags per resource.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), + Ref: ref(v1.GCPResourceTag{}.OpenAPIModelName()), }, }, }, }, }, + "cloudLoadBalancerConfig": { + SchemaProps: spec.SchemaProps{ + Description: "cloudLoadBalancerConfig holds configuration related to DNS and cloud load balancers. It allows configuration of in-cluster DNS as an alternative to the platform default DNS implementation. When using the ClusterHosted DNS type, Load Balancer IP addresses must be provided for the API and internal API load balancers as well as the ingress load balancer.", + Default: map[string]interface{}{"dnsType": "PlatformDefault"}, + Ref: ref(v1.CloudLoadBalancerConfig{}.OpenAPIModelName()), + }, + }, + "universeDomain": { + SchemaProps: spec.SchemaProps{ + Description: "universeDomain is the GCP universe domain for the cluster, detected from the installer credentials. Components with their own GCP credentials should read the universe domain from those credentials, as they are the authoritative source. This field is provided for components that do not have GCP credentials and for general observability.\n\nWhen omitted, standard public GCP (googleapis.com) is assumed.\n\nuniverseDomain is an optional field that, when specified, must be non-empty and at most 253 characters. It must be a valid DNS subdomain: containing only lowercase alphanumeric characters, '-' or '.', and starting and ending with an alphanumeric character.", + Type: []string{"string"}, + Format: "", + }, + }, }, + Required: []string{"projectID", "region"}, }, }, Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, + v1.CloudLoadBalancerConfig{}.OpenAPIModelName(), v1.GCPResourceLabel{}.OpenAPIModelName(), v1.GCPResourceTag{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_ServiceCatalogAPIServer(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_GCPResourceLabel(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ServiceCatalogAPIServer provides information to configure an operator to manage Service Catalog API Server DEPRECATED: will be removed in 4.6\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "GCPResourceLabel is a label to apply to GCP resources created for the cluster.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "key": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "key is the key part of the label. A label key can have a maximum of 63 characters and cannot be empty. Label key must begin with a lowercase letter, and must contain only lowercase letters, numeric characters, and the following special characters `_-`. Label key must not have the reserved prefixes `kubernetes-io` and `openshift-io`.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "value": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "value is the value part of the label. A label value can have a maximum of 63 characters and cannot be empty. Value must contain only lowercase letters, numeric characters, and the following special characters `_-`.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ServiceCatalogAPIServerSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ServiceCatalogAPIServerStatus{}.OpenAPIModelName()), - }, - }, }, - Required: []string{"spec"}, + Required: []string{"key", "value"}, }, }, - Dependencies: []string{ - operatorv1.ServiceCatalogAPIServerSpec{}.OpenAPIModelName(), operatorv1.ServiceCatalogAPIServerStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_ServiceCatalogAPIServerList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_GCPResourceTag(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ServiceCatalogAPIServerList is a collection of items DEPRECATED: will be removed in 4.6\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "GCPResourceTag is a tag to apply to GCP resources created for the cluster.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "parentID": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "parentID is the ID of the hierarchical resource where the tags are defined, e.g. at the Organization or the Project level. To find the Organization or Project ID refer to the following pages: https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id, https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects. An OrganizationID must consist of decimal numbers, and cannot have leading zeroes. A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters, numbers, and hyphens, and must start with a letter, and cannot end with a hyphen.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "key": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "key is the key part of the tag. A tag key can have a maximum of 63 characters and cannot be empty. Tag key must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `._-`.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { + "value": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + Description: "value is the value part of the tag. A tag value can have a maximum of 63 characters and cannot be empty. Tag value must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `_-.@%=+:,*#&(){}[]` and spaces.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "items": { + }, + Required: []string{"parentID", "key", "value"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_GatherConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "GatherConfig provides data gathering configuration options.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "dataPolicy": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "items contains the items", + Description: "dataPolicy is an optional list of DataPolicyOptions that allows user to enable additional obfuscation of the Insights archive data. It may not exceed 2 items and must not contain duplicates. Valid values are ObfuscateNetworking and WorkloadNames. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When set to WorkloadNames, the gathered data about cluster resources will not contain the workload names for your deployments. Resources UIDs will be used instead. When omitted no obfuscation is applied.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ServiceCatalogAPIServer{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, + "gatherers": { + SchemaProps: spec.SchemaProps{ + Description: "gatherers is a required field that specifies the configuration of the gatherers.", + Default: map[string]interface{}{}, + Ref: ref(v1.Gatherers{}.OpenAPIModelName()), + }, + }, + "storage": { + SchemaProps: spec.SchemaProps{ + Description: "storage is an optional field that allows user to define persistent storage for gathering jobs to store the Insights data archive. If omitted, the gathering job will use ephemeral storage.", + Default: map[string]interface{}{}, + Ref: ref(v1.Storage{}.OpenAPIModelName()), + }, + }, }, - Required: []string{"metadata", "items"}, + Required: []string{"gatherers"}, }, }, Dependencies: []string{ - operatorv1.ServiceCatalogAPIServer{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.Gatherers{}.OpenAPIModelName(), v1.Storage{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_ServiceCatalogAPIServerSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_GathererConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, + Description: "GathererConfig allows to configure specific gatherers", + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "managementState": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", + Description: "name is the required name of a specific gatherer. It may not exceed 256 characters. The format for a gatherer name is: {gatherer}/{function} where the function is optional. Gatherer consists of a lowercase letters only that may include underscores (_). Function consists of a lowercase letters only that may include underscores (_) and is separated from the gatherer by a forward slash (/). The particular gatherers can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", Type: []string{"string"}, Format: "", }, }, - "logLevel": { + "state": { SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", + Description: "state is a required field that allows you to configure specific gatherer. Valid values are \"Enabled\" and \"Disabled\". When set to Enabled the gatherer will run. When set to Disabled the gatherer will not run.", Type: []string{"string"}, Format: "", }, }, - "operatorLogLevel": { + }, + Required: []string{"name", "state"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_Gatherers(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "Gatherers specifies the configuration of the gatherers", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "mode": { SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", + Description: "mode is a required field that specifies the mode for gatherers. Allowed values are All, None, and Custom. When set to All, all gatherers will run and gather data. When set to None, all gatherers will be disabled and no data will be gathered. When set to Custom, the custom configuration from the custom field will be applied.", Type: []string{"string"}, Format: "", }, }, - "unsupportedConfigOverrides": { + "custom": { SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), + Description: "custom provides gathering configuration. It is required when mode is Custom, and forbidden otherwise. Custom configuration allows user to disable only a subset of gatherers. Gatherers that are not explicitly disabled in custom configuration will run.", + Default: map[string]interface{}{}, + Ref: ref(v1.Custom{}.OpenAPIModelName()), }, }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), + }, + Required: []string{"mode"}, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "mode", + "fields-to-discriminateBy": map[string]interface{}{ + "custom": "Custom", + }, }, }, }, - Required: []string{"managementState"}, }, }, Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, + v1.Custom{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_ServiceCatalogAPIServerStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_GenericAPIServerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, + Description: "GenericAPIServerConfig is an inline-able struct for aggregated apiservers that need to store data in etcd", + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "observedGeneration": { + "servingInfo": { SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", + Description: "servingInfo describes how to start serving", + Default: map[string]interface{}{}, + Ref: ref(v1.HTTPServingInfo{}.OpenAPIModelName()), }, }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, + "corsAllowedOrigins": { SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", + Description: "corsAllowedOrigins", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, - "version": { + "auditConfig": { SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", + Description: "auditConfig describes how to configure audit information", + Default: map[string]interface{}{}, + Ref: ref(v1.AuditConfig{}.OpenAPIModelName()), }, }, - "readyReplicas": { + "storageConfig": { SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", + Description: "storageConfig contains information about how to use", + Default: map[string]interface{}{}, + Ref: ref(v1.EtcdStorageConfig{}.OpenAPIModelName()), }, }, - "latestAvailableRevision": { + "admission": { SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", + Description: "admissionConfig holds information about how to configure admission.", + Default: map[string]interface{}{}, + Ref: ref(v1.AdmissionConfig{}.OpenAPIModelName()), }, }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, + "kubeClientConfig": { SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, + Default: map[string]interface{}{}, + Ref: ref(v1.KubeClientConfig{}.OpenAPIModelName()), }, }, }, + Required: []string{"servingInfo", "corsAllowedOrigins", "auditConfig", "storageConfig", "admission", "kubeClientConfig"}, }, }, Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, + v1.AdmissionConfig{}.OpenAPIModelName(), v1.AuditConfig{}.OpenAPIModelName(), v1.EtcdStorageConfig{}.OpenAPIModelName(), v1.HTTPServingInfo{}.OpenAPIModelName(), v1.KubeClientConfig{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_ServiceCatalogControllerManager(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_GenericControllerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ServiceCatalogControllerManager provides information to configure an operator to manage Service Catalog Controller Manager DEPRECATED: will be removed in 4.6\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "GenericControllerConfig provides information to configure a controller\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -64318,402 +6109,504 @@ func schema_openshift_api_operator_v1_ServiceCatalogControllerManager(ref common Format: "", }, }, - "metadata": { + "servingInfo": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Description: "servingInfo is the HTTP serving information for the controller's endpoints", Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + Ref: ref(v1.HTTPServingInfo{}.OpenAPIModelName()), }, }, - "spec": { + "leaderElection": { SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ServiceCatalogControllerManagerSpec{}.OpenAPIModelName()), + Description: "leaderElection provides information to elect a leader. Only override this if you have a specific need", + Default: map[string]interface{}{}, + Ref: ref(v1.LeaderElection{}.OpenAPIModelName()), }, }, - "status": { + "authentication": { SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ServiceCatalogControllerManagerStatus{}.OpenAPIModelName()), + Description: "authentication allows configuration of authentication for the endpoints", + Default: map[string]interface{}{}, + Ref: ref(v1.DelegatedAuthentication{}.OpenAPIModelName()), + }, + }, + "authorization": { + SchemaProps: spec.SchemaProps{ + Description: "authorization allows configuration of authentication for the endpoints", + Default: map[string]interface{}{}, + Ref: ref(v1.DelegatedAuthorization{}.OpenAPIModelName()), }, }, }, - Required: []string{"metadata", "spec"}, + Required: []string{"servingInfo", "leaderElection", "authentication", "authorization"}, }, }, Dependencies: []string{ - operatorv1.ServiceCatalogControllerManagerSpec{}.OpenAPIModelName(), operatorv1.ServiceCatalogControllerManagerStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.DelegatedAuthentication{}.OpenAPIModelName(), v1.DelegatedAuthorization{}.OpenAPIModelName(), v1.HTTPServingInfo{}.OpenAPIModelName(), v1.LeaderElection{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_ServiceCatalogControllerManagerList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_GitHubIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ServiceCatalogControllerManagerList is a collection of items DEPRECATED: will be removed in 4.6\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "clientID": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "clientID is the oauth client ID", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "clientSecret": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + Description: "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), }, }, - "metadata": { + "organizations": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + Description: "organizations optionally restricts which organizations are allowed to log in", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "items": { + "teams": { SchemaProps: spec.SchemaProps{ - Description: "items contains the items", + Description: "teams optionally restricts which teams are allowed to log in. Format is /.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.ServiceCatalogControllerManager{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, + "hostname": { + SchemaProps: spec.SchemaProps{ + Description: "hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value configured at /setup/settings#hostname.", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "ca": { + SchemaProps: spec.SchemaProps{ + Description: "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value. The namespace for this config map is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.ConfigMapNameReference{}.OpenAPIModelName()), + }, + }, }, - Required: []string{"metadata", "items"}, + Required: []string{"clientID", "clientSecret"}, }, }, Dependencies: []string{ - operatorv1.ServiceCatalogControllerManager{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.ConfigMapNameReference{}.OpenAPIModelName(), v1.SecretNameReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_ServiceCatalogControllerManagerSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_GitLabIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, + Description: "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials", + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "managementState": { + "clientID": { SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", + Description: "clientID is the oauth client ID", Default: "", Type: []string{"string"}, Format: "", }, }, - "logLevel": { + "clientSecret": { + SchemaProps: spec.SchemaProps{ + Description: "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), + }, + }, + "url": { SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", + Description: "url is the oauth server base URL", + Default: "", Type: []string{"string"}, Format: "", }, }, - "operatorLogLevel": { + "ca": { + SchemaProps: spec.SchemaProps{ + Description: "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.ConfigMapNameReference{}.OpenAPIModelName()), + }, + }, + }, + Required: []string{"clientID", "clientSecret", "url"}, + }, + }, + Dependencies: []string{ + v1.ConfigMapNameReference{}.OpenAPIModelName(), v1.SecretNameReference{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_GoogleIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "GoogleIdentityProvider provides identities for users authenticating using Google credentials", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "clientID": { SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", + Description: "clientID is the oauth client ID", + Default: "", Type: []string{"string"}, Format: "", }, }, - "unsupportedConfigOverrides": { + "clientSecret": { SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), + Description: "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), }, }, - "observedConfig": { + "hostedDomain": { SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), + Description: "hostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to", + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, - Required: []string{"managementState"}, + Required: []string{"clientID", "clientSecret"}, }, }, Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, + v1.SecretNameReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_ServiceCatalogControllerManagerStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_HTPasswdIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, + Description: "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials", + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "observedGeneration": { + "fileData": { SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", + Description: "fileData is a required reference to a secret by name containing the data to use as the htpasswd file. The key \"htpasswd\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. If the specified htpasswd data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), }, }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, + }, + Required: []string{"fileData"}, + }, + }, + Dependencies: []string{ + v1.SecretNameReference{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_HTTPServingInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "HTTPServingInfo holds configuration for serving HTTP", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "bindAddress": { + SchemaProps: spec.SchemaProps{ + Description: "bindAddress is the ip:port to serve on", + Default: "", + Type: []string{"string"}, + Format: "", }, + }, + "bindNetwork": { SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, + Description: "bindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "version": { + "certFile": { SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", + Description: "certFile is a file containing a PEM-encoded certificate", + Default: "", Type: []string{"string"}, Format: "", }, }, - "readyReplicas": { + "keyFile": { SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", + Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "latestAvailableRevision": { + "clientCA": { SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", + Description: "clientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", + Type: []string{"string"}, + Format: "", }, }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", + "namedCertificates": { + SchemaProps: spec.SchemaProps{ + Description: "namedCertificates is a list of certificates to use to secure requests to specific hostnames", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.NamedCertificate{}.OpenAPIModelName()), + }, }, - "x-kubernetes-list-type": "map", }, }, + }, + "minTLSVersion": { + SchemaProps: spec.SchemaProps{ + Description: "minTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", + Type: []string{"string"}, + Format: "", + }, + }, + "cipherSuites": { SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", + Description: "cipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, + "maxRequestsInFlight": { + SchemaProps: spec.SchemaProps{ + Description: "maxRequestsInFlight is the number of concurrent requests allowed to the server. If zero, no limit.", + Default: 0, + Type: []string{"integer"}, + Format: "int64", + }, + }, + "requestTimeoutSeconds": { + SchemaProps: spec.SchemaProps{ + Description: "requestTimeoutSeconds is the number of seconds before requests are timed out. The default is 60 minutes, if -1 there is no limit on requests.", + Default: 0, + Type: []string{"integer"}, + Format: "int64", + }, + }, }, + Required: []string{"bindAddress", "bindNetwork", "certFile", "keyFile", "maxRequestsInFlight", "requestTimeoutSeconds"}, }, }, Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, + v1.NamedCertificate{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_SimpleMacvlanConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_HubSource(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SimpleMacvlanConfig contains configurations for macvlan interface.", + Description: "HubSource is used to specify the hub source and its configuration", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "master": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "master is the host interface to create the macvlan interface from. If not specified, it will be default route interface", + Description: "name is the name of one of the default hub sources", + Default: "", Type: []string{"string"}, Format: "", }, }, - "ipamConfig": { - SchemaProps: spec.SchemaProps{ - Description: "ipamConfig configures IPAM module will be used for IP Address Management (IPAM).", - Ref: ref(operatorv1.IPAMConfig{}.OpenAPIModelName()), - }, - }, - "mode": { + "disabled": { SchemaProps: spec.SchemaProps{ - Description: "mode is the macvlan mode: bridge, private, vepa, passthru. The default is bridge", - Type: []string{"string"}, + Description: "disabled is used to disable a default hub source on cluster", + Default: false, + Type: []string{"boolean"}, Format: "", }, }, - "mtu": { - SchemaProps: spec.SchemaProps{ - Description: "mtu is the mtu to use for the macvlan interface. if unset, host's kernel will select the value.", - Type: []string{"integer"}, - Format: "int64", - }, - }, }, + Required: []string{"name", "disabled"}, }, }, - Dependencies: []string{ - operatorv1.IPAMConfig{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_StaticIPAMAddresses(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_HubSourceStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "StaticIPAMAddresses provides IP address and Gateway for static IPAM addresses", + Description: "HubSourceStatus is used to reflect the current state of applying the configuration to a default source", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "address": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "address is the IP address in CIDR format", + Description: "name is the name of one of the default hub sources", Default: "", Type: []string{"string"}, Format: "", }, }, - "gateway": { + "disabled": { + SchemaProps: spec.SchemaProps{ + Description: "disabled is used to disable a default hub source on cluster", + Default: false, + Type: []string{"boolean"}, + Format: "", + }, + }, + "status": { + SchemaProps: spec.SchemaProps{ + Description: "status indicates success or failure in applying the configuration", + Type: []string{"string"}, + Format: "", + }, + }, + "message": { SchemaProps: spec.SchemaProps{ - Description: "gateway is IP inside of subnet to designate as the gateway", + Description: "message provides more information regarding failures", Type: []string{"string"}, Format: "", }, }, }, + Required: []string{"name", "disabled"}, }, }, } } -func schema_openshift_api_operator_v1_StaticIPAMConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_IBMCloudPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "StaticIPAMConfig contains configurations for static IPAM (IP Address Management)", + Description: "IBMCloudPlatformSpec holds the desired state of the IBMCloud infrastructure provider. This only includes fields that can be modified in the cluster.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "addresses": { + "serviceEndpoints": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "addresses configures IP address for the interface", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.StaticIPAMAddresses{}.OpenAPIModelName()), - }, + "x-kubernetes-list-map-keys": []interface{}{ + "name", }, - }, - }, - }, - "routes": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", + "x-kubernetes-list-type": "map", }, }, SchemaProps: spec.SchemaProps{ - Description: "routes configures IP routes for the interface", + Description: "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of an IBM service. These endpoints are used by components within the cluster when trying to reach the IBM Cloud Services that have been overridden. The CCCMO reads in the IBMCloudPlatformSpec and validates each endpoint is resolvable. Once validated, the cloud config and IBMCloudPlatformStatus are updated to reflect the same custom endpoints. A maximum of 13 service endpoints overrides are supported.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorv1.StaticIPAMRoutes{}.OpenAPIModelName()), + Ref: ref(v1.IBMCloudServiceEndpoint{}.OpenAPIModelName()), }, }, }, }, }, - "dns": { - SchemaProps: spec.SchemaProps{ - Description: "dns configures DNS for the interface", - Ref: ref(operatorv1.StaticIPAMDNS{}.OpenAPIModelName()), - }, - }, }, }, }, Dependencies: []string{ - operatorv1.StaticIPAMAddresses{}.OpenAPIModelName(), operatorv1.StaticIPAMDNS{}.OpenAPIModelName(), operatorv1.StaticIPAMRoutes{}.OpenAPIModelName()}, + v1.IBMCloudServiceEndpoint{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_StaticIPAMDNS(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_IBMCloudPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "StaticIPAMDNS provides DNS related information for static IPAM", + Description: "IBMCloudPlatformStatus holds the current status of the IBMCloud infrastructure provider.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "nameservers": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, + "location": { + SchemaProps: spec.SchemaProps{ + Description: "location is where the cluster has been deployed", + Type: []string{"string"}, + Format: "", }, + }, + "resourceGroupName": { SchemaProps: spec.SchemaProps{ - Description: "nameservers points DNS servers for IP lookup", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "resourceGroupName is the Resource Group for new IBMCloud resources created for the cluster.", + Type: []string{"string"}, + Format: "", }, }, - "domain": { + "providerType": { + SchemaProps: spec.SchemaProps{ + Description: "providerType indicates the type of cluster that was created", + Type: []string{"string"}, + Format: "", + }, + }, + "cisInstanceCRN": { + SchemaProps: spec.SchemaProps{ + Description: "cisInstanceCRN is the CRN of the Cloud Internet Services instance managing the DNS zone for the cluster's base domain", + Type: []string{"string"}, + Format: "", + }, + }, + "dnsInstanceCRN": { SchemaProps: spec.SchemaProps{ - Description: "domain configures the domainname the local domain used for short hostname lookups", + Description: "dnsInstanceCRN is the CRN of the DNS Services instance managing the DNS zone for the cluster's base domain", Type: []string{"string"}, Format: "", }, }, - "search": { + "serviceEndpoints": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", + "x-kubernetes-list-map-keys": []interface{}{ + "name", + }, + "x-kubernetes-list-type": "map", }, }, SchemaProps: spec.SchemaProps{ - Description: "search configures priority ordered search domains for short hostname lookups", + Description: "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of an IBM service. These endpoints are used by components within the cluster when trying to reach the IBM Cloud Services that have been overridden. The CCCMO reads in the IBMCloudPlatformSpec and validates each endpoint is resolvable. Once validated, the cloud config and IBMCloudPlatformStatus are updated to reflect the same custom endpoints.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.IBMCloudServiceEndpoint{}.OpenAPIModelName()), }, }, }, @@ -64722,257 +6615,268 @@ func schema_openshift_api_operator_v1_StaticIPAMDNS(ref common.ReferenceCallback }, }, }, + Dependencies: []string{ + v1.IBMCloudServiceEndpoint{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_StaticIPAMRoutes(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_IBMCloudServiceEndpoint(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "StaticIPAMRoutes provides Destination/Gateway pairs for static IPAM routes", + Description: "IBMCloudServiceEndpoint stores the configuration of a custom url to override existing defaults of IBM Cloud Services.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "destination": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "destination points the IP route destination", + Description: "name is the name of the IBM Cloud service. Possible values are: CIS, COS, COSConfig, DNSServices, GlobalCatalog, GlobalSearch, GlobalTagging, HyperProtect, IAM, KeyProtect, ResourceController, ResourceManager, or VPC. For example, the IBM Cloud Private IAM service could be configured with the service `name` of `IAM` and `url` of `https://private.iam.cloud.ibm.com` Whereas the IBM Cloud Private VPC service for US South (Dallas) could be configured with the service `name` of `VPC` and `url` of `https://us.south.private.iaas.cloud.ibm.com`", Default: "", Type: []string{"string"}, Format: "", }, }, - "gateway": { + "url": { SchemaProps: spec.SchemaProps{ - Description: "gateway is the route's next-hop IP address If unset, a default gateway is assumed (as determined by the CNI plugin).", + Description: "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty. The path must follow the pattern /v[0,9]+ or /api/v[0,9]+", + Default: "", Type: []string{"string"}, Format: "", }, }, }, - Required: []string{"destination"}, + Required: []string{"name", "url"}, }, }, } } -func schema_openshift_api_operator_v1_StaticPodOperatorSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_IdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "StaticPodOperatorSpec is spec for controllers that manage static pods.", + Description: "IdentityProvider provides identities for users authenticating using credentials", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "managementState": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", + Description: "name is used to qualify the identities returned by this provider. - It MUST be unique and not shared by any other identity provider used - It MUST be a valid path segment: name cannot equal \".\" or \"..\" or contain \"/\" or \"%\" or \":\"\n Ref: https://godoc.org/github.com/openshift/origin/pkg/user/apis/user/validation#ValidateIdentityProviderName", Default: "", Type: []string{"string"}, Format: "", }, }, - "logLevel": { + "mappingMethod": { SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", + Description: "mappingMethod determines how identities from this provider are mapped to users Defaults to \"claim\"", Type: []string{"string"}, Format: "", }, }, - "operatorLogLevel": { + "type": { SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", + Description: "type identifies the identity provider type for this entry.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "unsupportedConfigOverrides": { + "basicAuth": { SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), + Description: "basicAuth contains configuration options for the BasicAuth IdP", + Ref: ref(v1.BasicAuthIdentityProvider{}.OpenAPIModelName()), }, }, - "observedConfig": { + "github": { SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), + Description: "github enables user authentication using GitHub credentials", + Ref: ref(v1.GitHubIdentityProvider{}.OpenAPIModelName()), }, }, - "forceRedeploymentReason": { + "gitlab": { SchemaProps: spec.SchemaProps{ - Description: "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "gitlab enables user authentication using GitLab credentials", + Ref: ref(v1.GitLabIdentityProvider{}.OpenAPIModelName()), }, }, - "failedRevisionLimit": { + "google": { SchemaProps: spec.SchemaProps{ - Description: "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - Type: []string{"integer"}, - Format: "int32", + Description: "google enables user authentication using Google credentials", + Ref: ref(v1.GoogleIdentityProvider{}.OpenAPIModelName()), }, }, - "succeededRevisionLimit": { + "htpasswd": { SchemaProps: spec.SchemaProps{ - Description: "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - Type: []string{"integer"}, - Format: "int32", + Description: "htpasswd enables user authentication using an HTPasswd file to validate credentials", + Ref: ref(v1.HTPasswdIdentityProvider{}.OpenAPIModelName()), + }, + }, + "keystone": { + SchemaProps: spec.SchemaProps{ + Description: "keystone enables user authentication using keystone password credentials", + Ref: ref(v1.KeystoneIdentityProvider{}.OpenAPIModelName()), + }, + }, + "ldap": { + SchemaProps: spec.SchemaProps{ + Description: "ldap enables user authentication using LDAP credentials", + Ref: ref(v1.LDAPIdentityProvider{}.OpenAPIModelName()), + }, + }, + "openID": { + SchemaProps: spec.SchemaProps{ + Description: "openID enables user authentication using OpenID credentials", + Ref: ref(v1.OpenIDIdentityProvider{}.OpenAPIModelName()), + }, + }, + "requestHeader": { + SchemaProps: spec.SchemaProps{ + Description: "requestHeader enables user authentication using request header credentials", + Ref: ref(v1.RequestHeaderIdentityProvider{}.OpenAPIModelName()), }, }, }, - Required: []string{"managementState", "forceRedeploymentReason"}, + Required: []string{"name", "type"}, }, }, Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, + v1.BasicAuthIdentityProvider{}.OpenAPIModelName(), v1.GitHubIdentityProvider{}.OpenAPIModelName(), v1.GitLabIdentityProvider{}.OpenAPIModelName(), v1.GoogleIdentityProvider{}.OpenAPIModelName(), v1.HTPasswdIdentityProvider{}.OpenAPIModelName(), v1.KeystoneIdentityProvider{}.OpenAPIModelName(), v1.LDAPIdentityProvider{}.OpenAPIModelName(), v1.OpenIDIdentityProvider{}.OpenAPIModelName(), v1.RequestHeaderIdentityProvider{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_StaticPodOperatorStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_IdentityProviderConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "StaticPodOperatorStatus is status for controllers that manage static pods. There are different needs because individual node status must be tracked.", + Description: "IdentityProviderConfig contains configuration for using a specific identity provider", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "observedGeneration": { + "type": { SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", + Description: "type identifies the identity provider type for this entry.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, + "basicAuth": { SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, + Description: "basicAuth contains configuration options for the BasicAuth IdP", + Ref: ref(v1.BasicAuthIdentityProvider{}.OpenAPIModelName()), }, }, - "version": { + "github": { SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", + Description: "github enables user authentication using GitHub credentials", + Ref: ref(v1.GitHubIdentityProvider{}.OpenAPIModelName()), }, }, - "readyReplicas": { + "gitlab": { SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", + Description: "gitlab enables user authentication using GitLab credentials", + Ref: ref(v1.GitLabIdentityProvider{}.OpenAPIModelName()), }, }, - "latestAvailableRevision": { + "google": { SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", + Description: "google enables user authentication using Google credentials", + Ref: ref(v1.GoogleIdentityProvider{}.OpenAPIModelName()), }, }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, + "htpasswd": { + SchemaProps: spec.SchemaProps{ + Description: "htpasswd enables user authentication using an HTPasswd file to validate credentials", + Ref: ref(v1.HTPasswdIdentityProvider{}.OpenAPIModelName()), }, + }, + "keystone": { SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, + Description: "keystone enables user authentication using keystone password credentials", + Ref: ref(v1.KeystoneIdentityProvider{}.OpenAPIModelName()), }, }, - "latestAvailableRevisionReason": { + "ldap": { SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevisionReason describe the detailed reason for the most recent deployment", - Type: []string{"string"}, - Format: "", + Description: "ldap enables user authentication using LDAP credentials", + Ref: ref(v1.LDAPIdentityProvider{}.OpenAPIModelName()), }, }, - "nodeStatuses": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "nodeName", - }, - "x-kubernetes-list-type": "map", - }, + "openID": { + SchemaProps: spec.SchemaProps{ + Description: "openID enables user authentication using OpenID credentials", + Ref: ref(v1.OpenIDIdentityProvider{}.OpenAPIModelName()), }, + }, + "requestHeader": { SchemaProps: spec.SchemaProps{ - Description: "nodeStatuses track the deployment values and errors across individual nodes", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.NodeStatus{}.OpenAPIModelName()), - }, - }, - }, + Description: "requestHeader enables user authentication using request header credentials", + Ref: ref(v1.RequestHeaderIdentityProvider{}.OpenAPIModelName()), }, }, }, + Required: []string{"type"}, }, }, Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.NodeStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, + v1.BasicAuthIdentityProvider{}.OpenAPIModelName(), v1.GitHubIdentityProvider{}.OpenAPIModelName(), v1.GitLabIdentityProvider{}.OpenAPIModelName(), v1.GoogleIdentityProvider{}.OpenAPIModelName(), v1.HTPasswdIdentityProvider{}.OpenAPIModelName(), v1.KeystoneIdentityProvider{}.OpenAPIModelName(), v1.LDAPIdentityProvider{}.OpenAPIModelName(), v1.OpenIDIdentityProvider{}.OpenAPIModelName(), v1.RequestHeaderIdentityProvider{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_StatuspageProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_Image(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "StatuspageProvider provides identity for statuspage account.", + Description: "Image governs policies related to imagestream imports and runtime configuration for external registries. It allows cluster admins to configure which registries OpenShift is allowed to import images from, extra CA trust bundles for external registries, and policies to block or allow registry hostnames. When exposing OpenShift's image registry to the public, this also lets cluster admins specify the external hostname.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "pageID": { + "kind": { SchemaProps: spec.SchemaProps{ - Description: "pageID is the unique ID assigned by Statuspage for your page. This must be a public page.", - Default: "", + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Type: []string{"string"}, + Format: "", + }, + }, + "apiVersion": { + SchemaProps: spec.SchemaProps{ + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", Type: []string{"string"}, Format: "", }, }, + "metadata": { + SchemaProps: spec.SchemaProps{ + Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + }, + }, + "spec": { + SchemaProps: spec.SchemaProps{ + Description: "spec holds user settable values for configuration", + Default: map[string]interface{}{}, + Ref: ref(v1.ImageSpec{}.OpenAPIModelName()), + }, + }, + "status": { + SchemaProps: spec.SchemaProps{ + Description: "status holds observed values from the cluster. They may not be overridden.", + Default: map[string]interface{}{}, + Ref: ref(v1.ImageStatus{}.OpenAPIModelName()), + }, + }, }, - Required: []string{"pageID"}, + Required: []string{"spec"}, }, }, + Dependencies: []string{ + v1.ImageSpec{}.OpenAPIModelName(), v1.ImageStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_Storage(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ImageContentPolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "Storage provides a means to configure an operator to manage the cluster storage operator. `cluster` is the canonical name.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "ImageContentPolicy holds cluster-wide information about how to handle registry mirror rules. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -65000,14 +6904,7 @@ func schema_openshift_api_operator_v1_Storage(ref common.ReferenceCallback) comm SchemaProps: spec.SchemaProps{ Description: "spec holds user settable values for configuration", Default: map[string]interface{}{}, - Ref: ref(operatorv1.StorageSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.StorageStatus{}.OpenAPIModelName()), + Ref: ref(v1.ImageContentPolicySpec{}.OpenAPIModelName()), }, }, }, @@ -65015,15 +6912,15 @@ func schema_openshift_api_operator_v1_Storage(ref common.ReferenceCallback) comm }, }, Dependencies: []string{ - operatorv1.StorageSpec{}.OpenAPIModelName(), operatorv1.StorageStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.ImageContentPolicySpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_StorageList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ImageContentPolicyList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "StorageList contains a list of Storages.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "ImageContentPolicyList lists the items in the ImageContentPolicy CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -65054,157 +6951,180 @@ func schema_openshift_api_operator_v1_StorageList(ref common.ReferenceCallback) Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorv1.Storage{}.OpenAPIModelName()), + Ref: ref(v1.ImageContentPolicy{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"items"}, + Required: []string{"metadata", "items"}, }, }, Dependencies: []string{ - operatorv1.Storage{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.ImageContentPolicy{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_StorageSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ImageContentPolicySpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "StorageSpec is the specification of the desired behavior of the cluster storage operator.", + Description: "ImageContentPolicySpec is the specification of the ImageContentPolicy CRD.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "managementState": { + "repositoryDigestMirrors": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "source", + }, + "x-kubernetes-list-type": "map", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "repositoryDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in RepositoryDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To pull image from mirrors by tags, should set the \"allowMirrorByTags\".\n\nEach “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.RepositoryDigestMirrors{}.OpenAPIModelName()), + }, + }, + }, }, }, - "logLevel": { + }, + }, + }, + Dependencies: []string{ + v1.RepositoryDigestMirrors{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_ImageDigestMirrorSet(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "ImageDigestMirrorSet holds cluster-wide information about how to handle registry mirror rules on using digest pull specification. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "kind": { SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", Type: []string{"string"}, Format: "", }, }, - "operatorLogLevel": { + "apiVersion": { SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", Type: []string{"string"}, Format: "", }, }, - "unsupportedConfigOverrides": { + "metadata": { SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), + Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), }, }, - "observedConfig": { + "spec": { SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), + Description: "spec holds user settable values for configuration", + Default: map[string]interface{}{}, + Ref: ref(v1.ImageDigestMirrorSetSpec{}.OpenAPIModelName()), }, }, - "vsphereStorageDriver": { + "status": { SchemaProps: spec.SchemaProps{ - Description: "vsphereStorageDriver indicates the storage driver to use on VSphere clusters. Once this field is set to CSIWithMigrationDriver, it can not be changed. If this is empty, the platform will choose a good default, which may change over time without notice. The current default is CSIWithMigrationDriver and may not be changed. DEPRECATED: This field will be removed in a future release.", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "status contains the observed state of the resource.", + Default: map[string]interface{}{}, + Ref: ref(v1.ImageDigestMirrorSetStatus{}.OpenAPIModelName()), }, }, }, - Required: []string{"managementState"}, + Required: []string{"spec"}, }, }, Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, + v1.ImageDigestMirrorSetSpec{}.OpenAPIModelName(), v1.ImageDigestMirrorSetStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_StorageStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ImageDigestMirrorSetList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "StorageStatus defines the observed status of the cluster storage operator.", + Description: "ImageDigestMirrorSetList lists the items in the ImageDigestMirrorSet CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, + "kind": { SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Type: []string{"string"}, + Format: "", }, }, - "version": { + "apiVersion": { SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", Type: []string{"string"}, Format: "", }, }, - "readyReplicas": { + "metadata": { SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", + Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), }, }, - "latestAvailableRevision": { + "items": { SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.ImageDigestMirrorSet{}.OpenAPIModelName()), + }, + }, + }, }, }, - "generations": { + }, + Required: []string{"metadata", "items"}, + }, + }, + Dependencies: []string{ + v1.ImageDigestMirrorSet{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_ImageDigestMirrorSetSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "ImageDigestMirrorSetSpec is the specification of the ImageDigestMirrorSet CRD.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "imageDigestMirrors": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", + "x-kubernetes-list-type": "atomic", }, }, SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", + Description: "imageDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in imageDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To use mirrors to pull images using tag specification, users should configure a list of mirrors using \"ImageTagMirrorSet\" CRD.\n\nIf the image pull specification matches the repository of \"source\" in multiple imagedigestmirrorset objects, only the objects which define the most specific namespace match will be used. For example, if there are objects using quay.io/libpod and quay.io/libpod/busybox as the \"source\", only the objects using quay.io/libpod/busybox are going to apply for pull specification quay.io/libpod/busybox. Each “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified. Users who want to use a specific order of mirrors, should configure them into one list of mirrors using the expected order.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), + Ref: ref(v1.ImageDigestMirrors{}.OpenAPIModelName()), }, }, }, @@ -65214,269 +7134,240 @@ func schema_openshift_api_operator_v1_StorageStatus(ref common.ReferenceCallback }, }, Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, + v1.ImageDigestMirrors{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_ImageDigestMirrorSetStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Type: []string{"object"}, + }, + }, } } -func schema_openshift_api_operator_v1_SyslogLoggingDestinationParameters(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ImageDigestMirrors(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SyslogLoggingDestinationParameters describes parameters for the Syslog logging destination type.", + Description: "ImageDigestMirrors holds cluster-wide information about how to handle mirrors in the registries config.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "address": { + "source": { SchemaProps: spec.SchemaProps{ - Description: "address is the IP address of the syslog endpoint that receives log messages.", + Description: "source matches the repository that users refer to, e.g. in image pull specifications. Setting source to a registry hostname e.g. docker.io. quay.io, or registry.redhat.io, will match the image pull specification of corressponding registry. \"source\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo [*.]host for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", Default: "", Type: []string{"string"}, Format: "", }, }, - "port": { + "mirrors": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "set", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "port is the UDP port number of the syslog endpoint that receives log messages.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", + Description: "mirrors is zero or more locations that may also contain the same images. No mirror will be configured if not specified. Images can be pulled from these mirrors only if they are referenced by their digests. The mirrored location is obtained by replacing the part of the input reference that matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo reference, a (source, mirror) pair *.redhat.io, mirror.local/redhat causes a mirror.local/redhat/product/repo repository to be used. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. If no mirror is specified or all image pulls from the mirror list fail, the image will continue to be pulled from the repository in the pull spec unless explicitly prohibited by \"mirrorSourcePolicy\" Other cluster configuration, including (but not limited to) other imageDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering. \"mirrors\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "facility": { + "mirrorSourcePolicy": { SchemaProps: spec.SchemaProps{ - Description: "facility specifies the syslog facility of log messages.\n\nIf this field is empty, the facility is \"local1\".", + Description: "mirrorSourcePolicy defines the fallback policy if fails to pull image from the mirrors. If unset, the image will continue to be pulled from the the repository in the pull spec. sourcePolicy is valid configuration only when one or more mirrors are in the mirror list.", Type: []string{"string"}, Format: "", }, }, - "maxLength": { - SchemaProps: spec.SchemaProps{ - Description: "maxLength is the maximum length of the log message.\n\nValid values are integers in the range 480 to 4096, inclusive.\n\nWhen omitted, the default value is 1024.", - Type: []string{"integer"}, - Format: "int64", - }, - }, }, - Required: []string{"address", "port"}, + Required: []string{"source"}, }, }, } } -func schema_openshift_api_operator_v1_Theme(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ImageLabel(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "Theme defines a theme mode for the console UI.", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "mode": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "mode is used to specify what theme mode a logo will apply to in the console UI. mode is a required field that allows values of Dark and Light. When set to Dark, the logo file referenced in the 'file' field will be used when an end-user of the console UI enables the Dark mode. When set to Light, the logo file referenced in the 'file' field will be used when an end-user of the console UI enables the Light mode.\n\nPossible enum values:\n - `\"Dark\"` represents the dark mode for a console theme.\n - `\"Light\"` represents the light mode for a console theme.", + Description: "name defines the name of the label. It must have non-zero length.", Default: "", Type: []string{"string"}, Format: "", - Enum: []interface{}{"Dark", "Light"}, }, }, - "source": { + "value": { SchemaProps: spec.SchemaProps{ - Description: "source is used by the console to locate the specified file containing a custom logo. source is a required field that references a ConfigMap name and key that contains the custom logo file in the openshift-config namespace. You can create it with a command like: - 'oc create configmap custom-logos-config --namespace=openshift-config --from-file=/path/to/file' The ConfigMap key must include the file extension so that the console serves the file with the correct MIME type. The recommended file format for the Masthead and Favicon logos is SVG, but other file formats are allowed if supported by the browser. The logo image size must be less than 1 MB due to constraints on the ConfigMap size. For more information, see the documentation: https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/web_console/customizing-web-console#customizing-web-console", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.FileReferenceSource{}.OpenAPIModelName()), + Description: "value defines the literal value of the label.", + Type: []string{"string"}, + Format: "", }, }, }, - Required: []string{"mode", "source"}, + Required: []string{"name"}, }, }, - Dependencies: []string{ - operatorv1.FileReferenceSource{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_Upstream(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ImageList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "Upstream can either be of type SystemResolvConf, or of type Network.\n\n - For an Upstream of type SystemResolvConf, no further fields are necessary:\n The upstream will be configured to use /etc/resolv.conf.\n - For an Upstream of type Network, a NetworkResolver field needs to be defined\n with an IP address or IP:port if the upstream listens on a port other than 53.", + Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "type": { + "kind": { SchemaProps: spec.SchemaProps{ - Description: "type defines whether this upstream contains an IP/IP:port resolver or the local /etc/resolv.conf. Type accepts 2 possible values: SystemResolvConf or Network.\n\n* When SystemResolvConf is used, the Upstream structure does not require any further fields to be defined:\n /etc/resolv.conf will be used\n* When Network is used, the Upstream structure must contain at least an Address", - Default: "", + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", Type: []string{"string"}, Format: "", }, }, - "address": { + "apiVersion": { SchemaProps: spec.SchemaProps{ - Description: "address must be defined when Type is set to Network. It will be ignored otherwise. It must be a valid ipv4 or ipv6 address.", + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", Type: []string{"string"}, Format: "", }, }, - "port": { + "metadata": { SchemaProps: spec.SchemaProps{ - Description: "port may be defined when Type is set to Network. It will be ignored otherwise. Port must be between 65535", - Type: []string{"integer"}, - Format: "int64", + Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), }, }, - }, - Required: []string{"type"}, - }, - }, - } -} - -func schema_openshift_api_operator_v1_UpstreamResolvers(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "UpstreamResolvers defines a schema for configuring the CoreDNS forward plugin in the specific case of the default (\".\") server. It defers from ForwardPlugin in the default values it accepts: * At least one upstream should be specified. * the default policy is Sequential", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "upstreams": { + "items": { SchemaProps: spec.SchemaProps{ - Description: "upstreams is a list of resolvers to forward name queries for the \".\" domain. Each instance of CoreDNS performs health checking of Upstreams. When a healthy upstream returns an error during the exchange, another resolver is tried from Upstreams. The Upstreams are selected in the order specified in Policy.\n\nA maximum of 15 upstreams is allowed per ForwardPlugin. If no Upstreams are specified, /etc/resolv.conf is used by default", - Type: []string{"array"}, + Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorv1.Upstream{}.OpenAPIModelName()), + Ref: ref(v1.Image{}.OpenAPIModelName()), }, }, }, }, }, - "policy": { - SchemaProps: spec.SchemaProps{ - Description: "policy is used to determine the order in which upstream servers are selected for querying. Any one of the following values may be specified:\n\n* \"Random\" picks a random upstream server for each query. * \"RoundRobin\" picks upstream servers in a round-robin order, moving to the next server for each new query. * \"Sequential\" tries querying upstream servers in a sequential order until one responds, starting with the first server for each new query.\n\nThe default value is \"Sequential\"", - Type: []string{"string"}, - Format: "", - }, - }, - "transportConfig": { - SchemaProps: spec.SchemaProps{ - Description: "transportConfig is used to configure the transport type, server name, and optional custom CA or CA bundle to use when forwarding DNS requests to an upstream resolver.\n\nThe default value is \"\" (empty) which results in a standard cleartext connection being used when forwarding DNS requests to an upstream resolver.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1.DNSTransportConfig{}.OpenAPIModelName()), - }, - }, - "protocolStrategy": { - SchemaProps: spec.SchemaProps{ - Description: "protocolStrategy specifies the protocol to use for upstream DNS requests. Valid values for protocolStrategy are \"TCP\" and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is to use the protocol of the original client request. \"TCP\" specifies that the platform should use TCP for all upstream DNS requests, even if the client request uses UDP. \"TCP\" is useful for UDP-specific issues such as those created by non-compliant upstream resolvers, but may consume more bandwidth or increase DNS response time. Note that protocolStrategy only affects the protocol of DNS requests that CoreDNS makes to upstream resolvers. It does not affect the protocol of DNS requests between clients and CoreDNS.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, }, + Required: []string{"metadata", "items"}, }, }, Dependencies: []string{ - operatorv1.DNSTransportConfig{}.OpenAPIModelName(), operatorv1.Upstream{}.OpenAPIModelName()}, + v1.Image{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1_VSphereCSIDriverConfigSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ImagePolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "VSphereCSIDriverConfigSpec defines properties that can be configured for vsphere CSI driver.", + Description: "ImagePolicy holds namespace-wide configuration for image signature verification\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "topologyCategories": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, + "kind": { SchemaProps: spec.SchemaProps{ - Description: "topologyCategories indicates tag categories with which vcenter resources such as hostcluster or datacenter were tagged with. If cluster Infrastructure object has a topology, values specified in Infrastructure object will be used and modifications to topologyCategories will be rejected.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Type: []string{"string"}, + Format: "", }, }, - "globalMaxSnapshotsPerBlockVolume": { + "apiVersion": { SchemaProps: spec.SchemaProps{ - Description: "globalMaxSnapshotsPerBlockVolume is a global configuration parameter that applies to volumes on all kinds of datastores. If omitted, the platform chooses a default, which is subject to change over time, currently that default is 3. Snapshots can not be disabled using this parameter. Increasing number of snapshots above 3 can have negative impact on performance, for more details see: https://kb.vmware.com/s/article/1025279 Volume snapshot documentation: https://docs.vmware.com/en/VMware-vSphere-Container-Storage-Plug-in/3.0/vmware-vsphere-csp-getting-started/GUID-E0B41C69-7EEB-450F-A73D-5FD2FF39E891.html", - Type: []string{"integer"}, - Format: "int64", + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Type: []string{"string"}, + Format: "", }, }, - "granularMaxSnapshotsPerBlockVolumeInVSAN": { + "metadata": { SchemaProps: spec.SchemaProps{ - Description: "granularMaxSnapshotsPerBlockVolumeInVSAN is a granular configuration parameter on vSAN datastore only. It overrides GlobalMaxSnapshotsPerBlockVolume if set, while it falls back to the global constraint if unset. Snapshots for VSAN can not be disabled using this parameter.", - Type: []string{"integer"}, - Format: "int64", + Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), }, }, - "granularMaxSnapshotsPerBlockVolumeInVVOL": { + "spec": { SchemaProps: spec.SchemaProps{ - Description: "granularMaxSnapshotsPerBlockVolumeInVVOL is a granular configuration parameter on Virtual Volumes datastore only. It overrides GlobalMaxSnapshotsPerBlockVolume if set, while it falls back to the global constraint if unset. Snapshots for VVOL can not be disabled using this parameter.", - Type: []string{"integer"}, - Format: "int64", + Description: "spec holds user settable values for configuration", + Default: map[string]interface{}{}, + Ref: ref(v1.ImagePolicySpec{}.OpenAPIModelName()), }, }, - "maxAllowedBlockVolumesPerNode": { + "status": { SchemaProps: spec.SchemaProps{ - Description: "maxAllowedBlockVolumesPerNode is an optional configuration parameter that allows setting a custom value for the limit of the number of PersistentVolumes attached to a node. In vSphere version 7 this limit was set to 59 by default, however in vSphere version 8 this limit was increased to 255. Before increasing this value above 59 the cluster administrator needs to ensure that every node forming the cluster is updated to ESXi version 8 or higher and that all nodes are running the same version. The limit must be between 1 and 255, which matches the vSphere version 8 maximum. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 59, which matches the limit for vSphere version 7.", - Type: []string{"integer"}, - Format: "int32", + Description: "status contains the observed state of the resource.", + Default: map[string]interface{}{}, + Ref: ref(v1.ImagePolicyStatus{}.OpenAPIModelName()), }, }, }, + Required: []string{"spec"}, }, }, + Dependencies: []string{ + v1.ImagePolicySpec{}.OpenAPIModelName(), v1.ImagePolicyStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_BackupJobReference(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ImagePolicyFulcioCAWithRekorRootOfTrust(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "BackupJobReference holds a reference to the batch/v1 Job created to run the etcd backup", + Description: "ImagePolicyFulcioCAWithRekorRootOfTrust defines the root of trust based on the Fulcio certificate and the Rekor public key.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "namespace": { + "fulcioCAData": { SchemaProps: spec.SchemaProps{ - Description: "namespace is the namespace of the Job. this is always expected to be \"openshift-etcd\" since the user provided PVC is also required to be in \"openshift-etcd\" Required", - Default: "", + Description: "fulcioCAData is a required field contains inline base64-encoded data for the PEM format fulcio CA. fulcioCAData must be at most 8192 characters.", Type: []string{"string"}, - Format: "", + Format: "byte", }, }, - "name": { + "rekorKeyData": { SchemaProps: spec.SchemaProps{ - Description: "name is the name of the Job. Required", - Default: "", + Description: "rekorKeyData is a required field contains inline base64-encoded data for the PEM format from the Rekor public key. rekorKeyData must be at most 8192 characters.", Type: []string{"string"}, - Format: "", + Format: "byte", + }, + }, + "fulcioSubject": { + SchemaProps: spec.SchemaProps{ + Description: "fulcioSubject is a required field specifies OIDC issuer and the email of the Fulcio authentication configuration.", + Default: map[string]interface{}{}, + Ref: ref(v1.PolicyFulcioSubject{}.OpenAPIModelName()), }, }, }, - Required: []string{"namespace", "name"}, + Required: []string{"fulcioCAData", "rekorKeyData", "fulcioSubject"}, }, }, + Dependencies: []string{ + v1.PolicyFulcioSubject{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_ClusterAPI(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ImagePolicyList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterAPI provides configuration for the capi-operator.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "ImagePolicyList is a list of ImagePolicy resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -65495,72 +7386,167 @@ func schema_openshift_api_operator_v1alpha1_ClusterAPI(ref common.ReferenceCallb }, "metadata": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), }, }, - "spec": { + "items": { SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the desired behavior of the capi-operator.", - Ref: ref(operatorv1alpha1.ClusterAPISpec{}.OpenAPIModelName()), + Description: "items is a list of ImagePolicies", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.ImagePolicy{}.OpenAPIModelName()), + }, + }, + }, }, }, - "status": { + }, + Required: []string{"metadata", "items"}, + }, + }, + Dependencies: []string{ + v1.ImagePolicy{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_ImagePolicyPKIRootOfTrust(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "ImagePolicyPKIRootOfTrust defines the root of trust based on Root CA(s) and corresponding intermediate certificates.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "caRootsData": { + SchemaProps: spec.SchemaProps{ + Description: "caRootsData contains base64-encoded data of a certificate bundle PEM file, which contains one or more CA roots in the PEM format. The total length of the data must not exceed 8192 characters.", + Type: []string{"string"}, + Format: "byte", + }, + }, + "caIntermediatesData": { + SchemaProps: spec.SchemaProps{ + Description: "caIntermediatesData contains base64-encoded data of a certificate bundle PEM file, which contains one or more intermediate certificates in the PEM format. The total length of the data must not exceed 8192 characters. caIntermediatesData requires caRootsData to be set.", + Type: []string{"string"}, + Format: "byte", + }, + }, + "pkiCertificateSubject": { SchemaProps: spec.SchemaProps{ - Description: "status defines the observed status of the capi-operator.", + Description: "pkiCertificateSubject defines the requirements imposed on the subject to which the certificate was issued.", Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.ClusterAPIStatus{}.OpenAPIModelName()), + Ref: ref(v1.PKICertificateSubject{}.OpenAPIModelName()), }, }, }, - Required: []string{"metadata", "spec"}, + Required: []string{"caRootsData", "pkiCertificateSubject"}, }, }, Dependencies: []string{ - operatorv1alpha1.ClusterAPISpec{}.OpenAPIModelName(), operatorv1alpha1.ClusterAPIStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.PKICertificateSubject{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_ClusterAPIInstallerComponent(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ImagePolicyPublicKeyRootOfTrust(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterAPIInstallerComponent defines a component which will be installed by this revision.", + Description: "ImagePolicyPublicKeyRootOfTrust defines the root of trust based on a sigstore public key.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "name": { + "keyData": { SchemaProps: spec.SchemaProps{ - Description: "name is the human-readable name of the component. The value has no effect, and will not be set if the component does not define a name in its manifests. If set it must consist of alphanumeric characters, or '-', and may not exceed 255 characters.", + Description: "keyData is a required field contains inline base64-encoded data for the PEM format public key. keyData must be at most 8192 characters.", Type: []string{"string"}, - Format: "", + Format: "byte", }, }, - "type": { + "rekorKeyData": { SchemaProps: spec.SchemaProps{ - Description: "type is the source type of the component. The only valid value is Image. When set to Image, the image field must be set and will define an image source for the component.\n\nPossible enum values:\n - `\"Image\"` is an image source for a component.", + Description: "rekorKeyData is an optional field contains inline base64-encoded data for the PEM format from the Rekor public key. rekorKeyData must be at most 8192 characters.", Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Image"}, + Format: "byte", }, }, - "image": { + }, + Required: []string{"keyData"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_ImagePolicySpec(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "ImagePolicySpec is the specification of the ImagePolicy CRD.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "scopes": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "set", + }, + }, + SchemaProps: spec.SchemaProps{ + Description: "scopes is a required field that defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. This support no more than 256 scopes in one object. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. If a scope is configured in both the ClusterImagePolicy and the ImagePolicy, or if the scope in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy, only the policy from the ClusterImagePolicy will be applied. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, + }, + }, + "policy": { SchemaProps: spec.SchemaProps{ - Description: "image defines an image source for a component. The image must contain a /capi-operator-installer directory containing the component manifests.", + Description: "policy is a required field that contains configuration to allow scopes to be verified, and defines how images not matching the verification policy will be treated.", Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.ClusterAPIInstallerComponentImage{}.OpenAPIModelName()), + Ref: ref(v1.ImageSigstoreVerificationPolicy{}.OpenAPIModelName()), }, }, }, - Required: []string{"type"}, + Required: []string{"scopes", "policy"}, }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "image": "Image", + }, + Dependencies: []string{ + v1.ImageSigstoreVerificationPolicy{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_ImagePolicyStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "conditions": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "type", + }, + "x-kubernetes-list-type": "map", + }, + }, + SchemaProps: spec.SchemaProps{ + Description: "conditions provide details on the status of this API Resource. condition type 'Pending' indicates that the customer resource contains a policy that cannot take effect. It is either overwritten by a global policy or the image scope is not valid.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(metav1.Condition{}.OpenAPIModelName()), + }, + }, }, }, }, @@ -65568,116 +7554,136 @@ func schema_openshift_api_operator_v1alpha1_ClusterAPIInstallerComponent(ref com }, }, Dependencies: []string{ - operatorv1alpha1.ClusterAPIInstallerComponentImage{}.OpenAPIModelName()}, + metav1.Condition{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_ClusterAPIInstallerComponentImage(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ImageSigstoreVerificationPolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterAPIInstallerComponentImage defines an image source for a component.", + Description: "ImageSigstoreVerificationPolicy defines the verification policy for the items in the scopes list.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "ref": { + "rootOfTrust": { SchemaProps: spec.SchemaProps{ - Description: "ref is an image reference to the image containing the component manifests. The reference must be a valid image digest reference in the format host[:port][/namespace]/name@sha256:. The digest must be 64 characters long, and consist only of lowercase hexadecimal characters, a-f and 0-9. The length of the field must be between 1 to 447 characters.", - Type: []string{"string"}, - Format: "", + Description: "rootOfTrust is a required field that defines the root of trust for verifying image signatures during retrieval. This allows image consumers to specify policyType and corresponding configuration of the policy, matching how the policy was generated.", + Default: map[string]interface{}{}, + Ref: ref(v1.PolicyRootOfTrust{}.OpenAPIModelName()), }, }, - "profile": { + "signedIdentity": { SchemaProps: spec.SchemaProps{ - Description: "profile is the name of a profile to use from the image.\n\nA profile name may be up to 255 characters long. It must consist of alphanumeric characters, '-', or '_'.", - Type: []string{"string"}, - Format: "", + Description: "signedIdentity is an optional field specifies what image identity the signature claims about the image. This is useful when the image identity in the signature differs from the original image spec, such as when mirror registry is configured for the image scope, the signature from the mirror registry contains the image identity of the mirror instead of the original scope. The required matchPolicy field specifies the approach used in the verification process to verify the identity in the signature and the actual image identity, the default matchPolicy is \"MatchRepoDigestOrExact\".", + Ref: ref(v1.PolicyIdentity{}.OpenAPIModelName()), }, }, }, - Required: []string{"ref", "profile"}, + Required: []string{"rootOfTrust"}, }, }, + Dependencies: []string{ + v1.PolicyIdentity{}.OpenAPIModelName(), v1.PolicyRootOfTrust{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_ClusterAPIInstallerComponentSource(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ImageSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterAPIInstallerComponentSource defines the source of a component which will be installed by this revision.", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "type": { + "allowedRegistriesForImport": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "type is the source type of the component. The only valid value is Image. When set to Image, the image field must be set and will define an image source for the component.\n\nPossible enum values:\n - `\"Image\"` is an image source for a component.", - Type: []string{"string"}, - Format: "", - Enum: []interface{}{"Image"}, + Description: "allowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.RegistryLocation{}.OpenAPIModelName()), + }, + }, + }, }, }, - "image": { + "externalRegistryHostnames": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, + SchemaProps: spec.SchemaProps{ + Description: "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, + }, + }, + "additionalTrustedCA": { + SchemaProps: spec.SchemaProps{ + Description: "additionalTrustedCA is a reference to a ConfigMap containing additional CAs that should be trusted during imagestream import, pod image pull, build image pull, and imageregistry pullthrough. The namespace for this config map is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.ConfigMapNameReference{}.OpenAPIModelName()), + }, + }, + "registrySources": { SchemaProps: spec.SchemaProps{ - Description: "image defines an image source for a component. The image must contain a /capi-operator-installer directory containing the component manifests.", + Description: "registrySources contains configuration that determines how the container runtime should treat individual registries when accessing images for builds+pods. (e.g. whether or not to allow insecure access). It does not contain configuration for the internal cluster registry.", Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.ClusterAPIInstallerComponentImage{}.OpenAPIModelName()), + Ref: ref(v1.RegistrySources{}.OpenAPIModelName()), }, }, - }, - Required: []string{"type"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-unions": []interface{}{ - map[string]interface{}{ - "discriminator": "type", - "fields-to-discriminateBy": map[string]interface{}{ - "image": "Image", - }, + "imageStreamImportMode": { + SchemaProps: spec.SchemaProps{ + Description: "imageStreamImportMode controls the import mode behaviour of imagestreams. It can be set to `Legacy` or `PreserveOriginal` or the empty string. If this value is specified, this setting is applied to all newly created imagestreams which do not have the value set. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported. When empty, the behaviour will be decided based on the payload type advertised by the ClusterVersion status, i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.", + Default: "", + Type: []string{"string"}, + Format: "", + Enum: []interface{}{"Legacy", "PreserveOriginal"}, }, }, }, }, }, Dependencies: []string{ - operatorv1alpha1.ClusterAPIInstallerComponentImage{}.OpenAPIModelName()}, + v1.ConfigMapNameReference{}.OpenAPIModelName(), v1.RegistryLocation{}.OpenAPIModelName(), v1.RegistrySources{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_ClusterAPIInstallerRevision(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ImageStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ Type: []string{"object"}, Properties: map[string]spec.Schema{ - "name": { - SchemaProps: spec.SchemaProps{ - Description: "name is the name of a revision.", - Type: []string{"string"}, - Format: "", - }, - }, - "revision": { - SchemaProps: spec.SchemaProps{ - Description: "revision is a monotonically increasing number that is assigned to a revision.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "contentID": { + "internalRegistryHostname": { SchemaProps: spec.SchemaProps{ - Description: "contentID uniquely identifies the content of this revision. The contentID must be between 1 and 255 characters long.", + Description: "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format. This value is set by the image registry operator which controls the internal registry hostname.", Type: []string{"string"}, Format: "", }, }, - "unmanagedCustomResourceDefinitions": { + "externalRegistryHostnames": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ "x-kubernetes-list-type": "atomic", }, }, SchemaProps: spec.SchemaProps{ - Description: "unmanagedCustomResourceDefinitions is a list of the names of ClusterResourceDefinition (CRD) objects which are included in this revision, but which should not be installed or updated. If not set, all CRDs in the revision will be managed by the CAPI operator.", + Description: "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -65690,94 +7696,76 @@ func schema_openshift_api_operator_v1alpha1_ClusterAPIInstallerRevision(ref comm }, }, }, - "manifestSubstitutions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "key", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "manifestSubstitutions is a list of envsubst style substitutions which will be applied to manifests in the revision during rendering. If defined it must not be empty, and may not contain more than 32 items. Each manifest substitution must have a unique key.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.ClusterAPIInstallerRevisionManifestSubstitution{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "components": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, + "imageStreamImportMode": { SchemaProps: spec.SchemaProps{ - Description: "components is a list of components which will be installed by this revision. Components will be installed in the order they are listed. If omitted no components will be installed.\n\nThe maximum number of components is 32.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.ClusterAPIInstallerComponent{}.OpenAPIModelName()), - }, - }, - }, + Description: "imageStreamImportMode controls the import mode behaviour of imagestreams. It can be `Legacy` or `PreserveOriginal`. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported. This value will be reconciled based on either the spec value or if no spec value is specified, the image registry operator would look at the ClusterVersion status to determine the payload type and set the import mode accordingly, i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.", + Type: []string{"string"}, + Format: "", + Enum: []interface{}{"Legacy", "PreserveOriginal"}, }, }, }, - Required: []string{"name", "revision", "contentID"}, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-map-type": "atomic", - }, }, }, - Dependencies: []string{ - operatorv1alpha1.ClusterAPIInstallerComponent{}.OpenAPIModelName(), operatorv1alpha1.ClusterAPIInstallerRevisionManifestSubstitution{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_ClusterAPIInstallerRevisionManifestSubstitution(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ImageTagMirrorSet(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterAPIInstallerRevisionManifestSubstitution defines an envsubst style substitution which will be applied to manifests in a revision during rendering.", + Description: "ImageTagMirrorSet holds cluster-wide information about how to handle registry mirror rules on using tag pull specification. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "key": { + "kind": { SchemaProps: spec.SchemaProps{ - Description: "key is the name of the envsubst variable to substitute. It must be a valid envsubst variable name, consisting of letters, digits, and underscores, and must start with a letter or underscore. The key must not be empty, and must not exceed 255 characters.", + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", Type: []string{"string"}, Format: "", }, }, - "value": { + "apiVersion": { SchemaProps: spec.SchemaProps{ - Description: "value is the value to substitute for the envsubst variable. It may be empty, in which case the variable will be substituted with an empty string. The value must not exceed 4096 characters.", + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", Type: []string{"string"}, Format: "", }, }, + "metadata": { + SchemaProps: spec.SchemaProps{ + Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + }, + }, + "spec": { + SchemaProps: spec.SchemaProps{ + Description: "spec holds user settable values for configuration", + Default: map[string]interface{}{}, + Ref: ref(v1.ImageTagMirrorSetSpec{}.OpenAPIModelName()), + }, + }, + "status": { + SchemaProps: spec.SchemaProps{ + Description: "status contains the observed state of the resource.", + Default: map[string]interface{}{}, + Ref: ref(v1.ImageTagMirrorSetStatus{}.OpenAPIModelName()), + }, + }, }, - Required: []string{"key", "value"}, + Required: []string{"spec"}, }, }, + Dependencies: []string{ + v1.ImageTagMirrorSetSpec{}.OpenAPIModelName(), v1.ImageTagMirrorSetStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_ClusterAPIList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ImageTagMirrorSetList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterAPIList contains a list of ClusterAPI configurations\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "ImageTagMirrorSetList lists the items in the ImageTagMirrorSet CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -65803,13 +7791,12 @@ func schema_openshift_api_operator_v1alpha1_ClusterAPIList(ref common.ReferenceC }, "items": { SchemaProps: spec.SchemaProps{ - Description: "items contains the items", - Type: []string{"array"}, + Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.ClusterAPI{}.OpenAPIModelName()), + Ref: ref(v1.ImageTagMirrorSet{}.OpenAPIModelName()), }, }, }, @@ -65820,32 +7807,31 @@ func schema_openshift_api_operator_v1alpha1_ClusterAPIList(ref common.ReferenceC }, }, Dependencies: []string{ - operatorv1alpha1.ClusterAPI{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.ImageTagMirrorSet{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_ClusterAPISpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ImageTagMirrorSetSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterAPISpec defines the desired configuration of the capi-operator. The spec is required but we deliberately allow it to be empty.", + Description: "ImageTagMirrorSetSpec is the specification of the ImageTagMirrorSet CRD.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "unmanagedCustomResourceDefinitions": { + "imageTagMirrors": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", + "x-kubernetes-list-type": "atomic", }, }, SchemaProps: spec.SchemaProps{ - Description: "unmanagedCustomResourceDefinitions is a list of ClusterResourceDefinition (CRD) names that should not be managed by the capi-operator installer controller. This allows external actors to own specific CRDs while capi-operator manages others.\n\nEach CRD name must be a valid DNS-1123 subdomain consisting of lowercase alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character, with a maximum length of 253 characters. CRD names must contain at least two '.' characters. Example: \"clusters.cluster.x-k8s.io\"\n\nItems cannot be removed from this list once added.\n\nThe maximum number of unmanagedCustomResourceDefinitions is 128.", + Description: "imageTagMirrors allows images referenced by image tags in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in imageTagMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To use mirrors to pull images using digest specification only, users should configure a list of mirrors using \"ImageDigestMirrorSet\" CRD.\n\nIf the image pull specification matches the repository of \"source\" in multiple imagetagmirrorset objects, only the objects which define the most specific namespace match will be used. For example, if there are objects using quay.io/libpod and quay.io/libpod/busybox as the \"source\", only the objects using quay.io/libpod/busybox are going to apply for pull specification quay.io/libpod/busybox. Each “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified. Users who want to use a deterministic order of mirrors, should configure them into one list of mirrors using the expected order.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.ImageTagMirrors{}.OpenAPIModelName()), }, }, }, @@ -65854,70 +7840,75 @@ func schema_openshift_api_operator_v1alpha1_ClusterAPISpec(ref common.ReferenceC }, }, }, + Dependencies: []string{ + v1.ImageTagMirrors{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_ImageTagMirrorSetStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Type: []string{"object"}, + }, + }, } } -func schema_openshift_api_operator_v1alpha1_ClusterAPIStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ImageTagMirrors(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterAPIStatus describes the current state of the capi-operator.", + Description: "ImageTagMirrors holds cluster-wide information about how to handle mirrors in the registries config.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "currentRevision": { - SchemaProps: spec.SchemaProps{ - Description: "currentRevision is the name of the most recently fully applied revision. It is written by the installer controller. If it is absent, it indicates that no revision has been fully applied yet. If set, currentRevision must correspond to an entry in the revisions list.", - Type: []string{"string"}, - Format: "", - }, - }, - "desiredRevision": { + "source": { SchemaProps: spec.SchemaProps{ - Description: "desiredRevision is the name of the desired revision. It is written by the revision controller. It must be set to the name of the entry in the revisions list with the highest revision number.", + Description: "source matches the repository that users refer to, e.g. in image pull specifications. Setting source to a registry hostname e.g. docker.io. quay.io, or registry.redhat.io, will match the image pull specification of corressponding registry. \"source\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo [*.]host for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", + Default: "", Type: []string{"string"}, Format: "", }, }, - "revisions": { + "mirrors": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", + "x-kubernetes-list-type": "set", }, }, SchemaProps: spec.SchemaProps{ - Description: "revisions is a list of all currently active revisions. A revision is active until the installer controller updates currentRevision to a later revision. It is written by the revision controller.\n\nThe maximum number of revisions is 16. All revisions must have a unique name. All revisions must have a unique revision number. When adding a revision, the revision number must be greater than the highest revision number in the list. Revisions are immutable, although they can be deleted.", + Description: "mirrors is zero or more locations that may also contain the same images. No mirror will be configured if not specified. Images can be pulled from these mirrors only if they are referenced by their tags. The mirrored location is obtained by replacing the part of the input reference that matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo reference, a (source, mirror) pair *.redhat.io, mirror.local/redhat causes a mirror.local/redhat/product/repo repository to be used. Pulling images by tag can potentially yield different images, depending on which endpoint we pull from. Configuring a list of mirrors using \"ImageDigestMirrorSet\" CRD and forcing digest-pulls for mirrors avoids that issue. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. If no mirror is specified or all image pulls from the mirror list fail, the image will continue to be pulled from the repository in the pull spec unless explicitly prohibited by \"mirrorSourcePolicy\". Other cluster configuration, including (but not limited to) other imageTagMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering. \"mirrors\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.ClusterAPIInstallerRevision{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, - "observedRevisionGeneration": { + "mirrorSourcePolicy": { SchemaProps: spec.SchemaProps{ - Description: "observedRevisionGeneration is the generation of the ClusterAPI object that was last observed by the revision controller. If specified it must be greater than or equal to 1, and less than 2^53. It may not decrease or be unset once set.", - Type: []string{"integer"}, - Format: "int64", + Description: "mirrorSourcePolicy defines the fallback policy if fails to pull image from the mirrors. If unset, the image will continue to be pulled from the repository in the pull spec. sourcePolicy is valid configuration only when one or more mirrors are in the mirror list.", + Type: []string{"string"}, + Format: "", }, }, }, - Required: []string{"desiredRevision", "revisions"}, + Required: []string{"source"}, }, }, - Dependencies: []string{ - operatorv1alpha1.ClusterAPIInstallerRevision{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_ClusterVersionOperator(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_Infrastructure(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterVersionOperator holds cluster-wide information about the Cluster Version Operator.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "Infrastructure holds cluster-wide information about Infrastructure. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -65943,32 +7934,32 @@ func schema_openshift_api_operator_v1alpha1_ClusterVersionOperator(ref common.Re }, "spec": { SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the desired behavior of the Cluster Version Operator.", + Description: "spec holds user settable values for configuration", Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.ClusterVersionOperatorSpec{}.OpenAPIModelName()), + Ref: ref(v1.InfrastructureSpec{}.OpenAPIModelName()), }, }, "status": { SchemaProps: spec.SchemaProps{ - Description: "status is the most recently observed status of the Cluster Version Operator.", + Description: "status holds observed values from the cluster. They may not be overridden.", Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.ClusterVersionOperatorStatus{}.OpenAPIModelName()), + Ref: ref(v1.InfrastructureStatus{}.OpenAPIModelName()), }, }, }, - Required: []string{"metadata", "spec"}, + Required: []string{"spec"}, }, }, Dependencies: []string{ - operatorv1alpha1.ClusterVersionOperatorSpec{}.OpenAPIModelName(), operatorv1alpha1.ClusterVersionOperatorStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.InfrastructureSpec{}.OpenAPIModelName(), v1.InfrastructureStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_ClusterVersionOperatorList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_InfrastructureList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterVersionOperatorList is a collection of ClusterVersionOperators.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "InfrastructureList is\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -65994,37 +7985,50 @@ func schema_openshift_api_operator_v1alpha1_ClusterVersionOperatorList(ref commo }, "items": { SchemaProps: spec.SchemaProps{ - Description: "items is a list of ClusterVersionOperators.", - Type: []string{"array"}, + Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.ClusterVersionOperator{}.OpenAPIModelName()), + Ref: ref(v1.Infrastructure{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"metadata"}, + Required: []string{"metadata", "items"}, }, }, Dependencies: []string{ - operatorv1alpha1.ClusterVersionOperator{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.Infrastructure{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_ClusterVersionOperatorSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_InfrastructureSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterVersionOperatorSpec is the specification of the desired behavior of the Cluster Version Operator.", + Description: "InfrastructureSpec contains settings that apply to the cluster infrastructure.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "operatorLogLevel": { + "cloudConfig": { + SchemaProps: spec.SchemaProps{ + Description: "cloudConfig is a reference to a ConfigMap containing the cloud provider configuration file. This configuration file is used to configure the Kubernetes cloud provider integration when using the built-in cloud provider integration or the external cloud controller manager. The namespace for this config map is openshift-config.\n\ncloudConfig should only be consumed by the kube_cloud_config controller. The controller is responsible for using the user configuration in the spec for various platforms and combining that with the user provided ConfigMap in this field to create a stitched kube cloud config. The controller generates a ConfigMap `kube-cloud-config` in `openshift-config-managed` namespace with the kube cloud config is stored in `cloud.conf` key. All the clients are expected to use the generated ConfigMap only.", + Default: map[string]interface{}{}, + Ref: ref(v1.ConfigMapFileReference{}.OpenAPIModelName()), + }, + }, + "platformSpec": { SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", + Description: "platformSpec holds desired information specific to the underlying infrastructure provider.", + Default: map[string]interface{}{}, + Ref: ref(v1.PlatformSpec{}.OpenAPIModelName()), + }, + }, + "controlPlaneTopology": { + SchemaProps: spec.SchemaProps{ + Description: "controlPlaneTopology expresses the desired topology configuration for control nodes.\n\nWhen status.controlPlaneTopology is 'SingleReplica' and spec.controlPlaneTopology is set to 'HighlyAvailable', a transition will be triggered to reconfigure the cluster from SingleReplica to HighlyAvailable.\n\nWhen left blank or status.controlPlaneTopology and spec.controlPlaneTopology are the same value, no changes are required and no transitions will be triggered.\n\nThis value may be set to match status.controlPlaneTopology regardless of the current value.", Type: []string{"string"}, Format: "", }, @@ -66032,74 +8036,99 @@ func schema_openshift_api_operator_v1alpha1_ClusterVersionOperatorSpec(ref commo }, }, }, + Dependencies: []string{ + v1.ConfigMapFileReference{}.OpenAPIModelName(), v1.PlatformSpec{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_ClusterVersionOperatorStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_InfrastructureStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterVersionOperatorStatus defines the observed status of the Cluster Version Operator.", + Description: "InfrastructureStatus describes the infrastructure the cluster is leveraging.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "observedGeneration": { + "infrastructureName": { SchemaProps: spec.SchemaProps{ - Description: "observedGeneration represents the most recent generation observed by the operator and specifies the version of the spec field currently being synced.", - Type: []string{"integer"}, - Format: "int64", + Description: "infrastructureName uniquely identifies a cluster with a human friendly name. Once set it should not be changed. Must be of max length 27 and must have only alphanumeric or hyphen characters.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1alpha1_DelegatedAuthentication(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DelegatedAuthentication allows authentication to be disabled.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "disabled": { + "platform": { SchemaProps: spec.SchemaProps{ - Description: "disabled indicates that authentication should be disabled. By default it will use delegated authentication.", - Type: []string{"boolean"}, + Description: "platform is the underlying infrastructure provider for the cluster.\n\nDeprecated: Use platformStatus.type instead.", + Type: []string{"string"}, Format: "", }, }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1alpha1_DelegatedAuthorization(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DelegatedAuthorization allows authorization to be disabled.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "disabled": { + "platformStatus": { SchemaProps: spec.SchemaProps{ - Description: "disabled indicates that authorization should be disabled. By default it will use delegated authorization.", - Type: []string{"boolean"}, + Description: "platformStatus holds status information specific to the underlying infrastructure provider.", + Ref: ref(v1.PlatformStatus{}.OpenAPIModelName()), + }, + }, + "etcdDiscoveryDomain": { + SchemaProps: spec.SchemaProps{ + Description: "etcdDiscoveryDomain is the domain used to fetch the SRV records for discovering etcd servers and clients. For more info: https://github.com/etcd-io/etcd/blob/329be66e8b3f9e2e6af83c123ff89297e49ebd15/Documentation/op-guide/clustering.md#dns-discovery deprecated: as of 4.7, this field is no longer set or honored. It will be removed in a future release.", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "apiServerURL": { + SchemaProps: spec.SchemaProps{ + Description: "apiServerURL is a valid URI with scheme 'https', address and optionally a port (defaulting to 443). apiServerURL can be used by components like the web console to tell users where to find the Kubernetes API.", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "apiServerInternalURI": { + SchemaProps: spec.SchemaProps{ + Description: "apiServerInternalURL is a valid URI with scheme 'https', address and optionally a port (defaulting to 443). apiServerInternalURL can be used by components like kubelets, to contact the Kubernetes API server using the infrastructure provider rather than Kubernetes networking.", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "controlPlaneTopology": { + SchemaProps: spec.SchemaProps{ + Description: "controlPlaneTopology expresses the expectations for operands that normally run on control nodes. The default is 'HighlyAvailable', which represents the behavior operators have in a \"normal\" cluster. The 'SingleReplica' mode will be used in single-node deployments and the operators should not configure the operand for highly-available operation The 'External' mode indicates that the control plane is hosted externally to the cluster and that its components are not visible within the cluster. The 'HighlyAvailableArbiter' mode indicates that the control plane will consist of 2 control-plane nodes that run conventional services and 1 smaller sized arbiter node that runs a bare minimum of services to maintain quorum.", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "infrastructureTopology": { + SchemaProps: spec.SchemaProps{ + Description: "infrastructureTopology expresses the expectations for infrastructure services that do not run on control plane nodes, usually indicated by a node selector for a `role` value other than `master`. The default is 'HighlyAvailable', which represents the behavior operators have in a \"normal\" cluster. The 'SingleReplica' mode will be used in single-node deployments and the operators should not configure the operand for highly-available operation NOTE: External topology mode is not applicable for this field.", + Type: []string{"string"}, + Format: "", + }, + }, + "cpuPartitioning": { + SchemaProps: spec.SchemaProps{ + Description: "cpuPartitioning expresses if CPU partitioning is a currently enabled feature in the cluster. CPU Partitioning means that this cluster can support partitioning workloads to specific CPU Sets. Valid values are \"None\" and \"AllNodes\". When omitted, the default value is \"None\". The default value of \"None\" indicates that no nodes will be setup with CPU partitioning. The \"AllNodes\" value indicates that all nodes have been setup with CPU partitioning, and can then be further configured via the PerformanceProfile API.", + Default: "None", + Type: []string{"string"}, Format: "", }, }, }, }, }, + Dependencies: []string{ + v1.PlatformStatus{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_EtcdBackup(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_Ingress(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "# EtcdBackup provides configuration options and status for a one-time backup attempt of the etcd cluster\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "Ingress holds cluster-wide information about ingress, including the default ingress domain used for routes. The canonical name is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -66118,22 +8147,23 @@ func schema_openshift_api_operator_v1alpha1_EtcdBackup(ref common.ReferenceCallb }, "metadata": { SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), }, }, "spec": { SchemaProps: spec.SchemaProps{ Description: "spec holds user settable values for configuration", Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.EtcdBackupSpec{}.OpenAPIModelName()), + Ref: ref(v1.IngressSpec{}.OpenAPIModelName()), }, }, "status": { SchemaProps: spec.SchemaProps{ Description: "status holds observed values from the cluster. They may not be overridden.", Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.EtcdBackupStatus{}.OpenAPIModelName()), + Ref: ref(v1.IngressStatus{}.OpenAPIModelName()), }, }, }, @@ -66141,15 +8171,15 @@ func schema_openshift_api_operator_v1alpha1_EtcdBackup(ref common.ReferenceCallb }, }, Dependencies: []string{ - operatorv1alpha1.EtcdBackupSpec{}.OpenAPIModelName(), operatorv1alpha1.EtcdBackupStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.IngressSpec{}.OpenAPIModelName(), v1.IngressStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_EtcdBackupList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_IngressList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "EtcdBackupList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -66168,8 +8198,9 @@ func schema_openshift_api_operator_v1alpha1_EtcdBackupList(ref common.ReferenceC }, "metadata": { SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), }, }, "items": { @@ -66179,7 +8210,7 @@ func schema_openshift_api_operator_v1alpha1_EtcdBackupList(ref common.ReferenceC Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.EtcdBackup{}.OpenAPIModelName()), + Ref: ref(v1.Ingress{}.OpenAPIModelName()), }, }, }, @@ -66190,208 +8221,176 @@ func schema_openshift_api_operator_v1alpha1_EtcdBackupList(ref common.ReferenceC }, }, Dependencies: []string{ - operatorv1alpha1.EtcdBackup{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.Ingress{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_EtcdBackupSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_IngressPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, + Description: "IngressPlatformSpec holds the desired state of Ingress specific to the underlying infrastructure provider of the current cluster. Since these are used at spec-level for the underlying cluster, it is supposed that only one of the spec structs is set.", + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "pvcName": { + "type": { SchemaProps: spec.SchemaProps{ - Description: "pvcName specifies the name of the PersistentVolumeClaim (PVC) which binds a PersistentVolume where the etcd backup file would be saved The PVC itself must always be created in the \"openshift-etcd\" namespace If the PVC is left unspecified \"\" then the platform will choose a reasonable default location to save the backup. In the future this would be backups saved across the control-plane master nodes.", + Description: "type is the underlying infrastructure provider for the cluster. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"KubeVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.", Default: "", Type: []string{"string"}, Format: "", }, }, - }, - }, - }, - } -} - -func schema_openshift_api_operator_v1alpha1_EtcdBackupStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions provide details on the status of the etcd backup job.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "backupJob": { + "aws": { SchemaProps: spec.SchemaProps{ - Description: "backupJob is the reference to the Job that executes the backup. Optional", - Ref: ref(operatorv1alpha1.BackupJobReference{}.OpenAPIModelName()), + Description: "aws contains settings specific to the Amazon Web Services infrastructure provider.", + Ref: ref(v1.AWSIngressSpec{}.OpenAPIModelName()), }, }, }, + Required: []string{"type"}, }, - }, - Dependencies: []string{ - operatorv1alpha1.BackupJobReference{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operator_v1alpha1_GatewayAPIIngressConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "GatewayAPIIngressConfig holds configuration for Gateway API integration in the Cluster Ingress Operator.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "managementMode": { - SchemaProps: spec.SchemaProps{ - Description: "managementMode specifies how the Cluster Ingress Operator manages Gateway API Custom Resource Definitions (CRDs), the OpenShift Gateway API implementation, and its Gateway API controllers.\n\nAllowed values are \"Managed\" and \"Unmanaged\".\n\nWhen omitted or set to \"Managed\", the ingress operator installs, owns, and upgrades the Gateway API CRDs, protects them with a Validating Admission Policy, and deploys the OpenShift Gateway API implementation and its Gateway API controllers.\n\nWhen set to \"Unmanaged\", the ingress operator does not install or manage Gateway API CRDs and does not deploy the OpenShift Gateway API implementation or its Gateway API controllers. The cluster administrator or a third-party product is responsible for providing their own CRDs and Gateway controller. The ingress operator reports observational status only.", - Type: []string{"string"}, - Format: "", + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "type", + "fields-to-discriminateBy": map[string]interface{}{ + "aws": "AWS", + }, }, }, }, }, }, + Dependencies: []string{ + v1.AWSIngressSpec{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_GenerationHistory(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_IngressSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "GenerationHistory keeps track of the generation for a given resource so that decisions about forced updated can be made. DEPRECATED: Use fields in v1.GenerationStatus instead", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "group": { + "domain": { SchemaProps: spec.SchemaProps{ - Description: "group is the group of the thing you're tracking", + Description: "domain is used to generate a default host name for a route when the route's host name is empty. The generated host name will follow this pattern: \"..\".\n\nIt is also used as the default wildcard domain suffix for ingress. The default ingresscontroller domain will follow this pattern: \"*.\".\n\nOnce set, changing domain is not currently supported.", Default: "", Type: []string{"string"}, Format: "", }, }, - "resource": { + "appsDomain": { SchemaProps: spec.SchemaProps{ - Description: "resource is the resource type of the thing you're tracking", - Default: "", + Description: "appsDomain is an optional domain to use instead of the one specified in the domain field when a Route is created without specifying an explicit host. If appsDomain is nonempty, this value is used to generate default host values for Route. Unlike domain, appsDomain may be modified after installation. This assumes a new ingresscontroller has been setup with a wildcard certificate.", Type: []string{"string"}, Format: "", }, }, - "namespace": { + "componentRoutes": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "namespace", + "name", + }, + "x-kubernetes-list-type": "map", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "namespace is where the thing you're tracking is", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "componentRoutes is an optional list of routes that are managed by OpenShift components that a cluster-admin is able to configure the hostname and serving certificate for. The namespace and name of each route in this list should match an existing entry in the status.componentRoutes list.\n\nTo determine the set of configurable Routes, look at namespace and name of entries in the .status.componentRoutes list, where participating operators write the status of configurable routes. A maximum of 250 component routes may be configured.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.ComponentRouteSpec{}.OpenAPIModelName()), + }, + }, + }, }, }, - "name": { + "requiredHSTSPolicies": { SchemaProps: spec.SchemaProps{ - Description: "name is the name of the thing you're tracking", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "requiredHSTSPolicies specifies HSTS policies that are required to be set on newly created or updated routes matching the domainPattern/s and namespaceSelector/s that are specified in the policy. Each requiredHSTSPolicy must have at least a domainPattern and a maxAge to validate a route HSTS Policy route annotation, and affect route admission.\n\nA candidate route is checked for HSTS Policies if it has the HSTS Policy route annotation: \"haproxy.router.openshift.io/hsts_header\" E.g. haproxy.router.openshift.io/hsts_header: max-age=31536000;preload;includeSubDomains\n\n- For each candidate route, if it matches a requiredHSTSPolicy domainPattern and optional namespaceSelector, then the maxAge, preloadPolicy, and includeSubdomainsPolicy must be valid to be admitted. Otherwise, the route is rejected. - The first match, by domainPattern and optional namespaceSelector, in the ordering of the RequiredHSTSPolicies determines the route's admission status. - If the candidate route doesn't match any requiredHSTSPolicy domainPattern and optional namespaceSelector, then it may use any HSTS Policy annotation.\n\nThe HSTS policy configuration may be changed after routes have already been created. An update to a previously admitted route may then fail if the updated route does not conform to the updated HSTS policy configuration. However, changing the HSTS policy configuration will not cause a route that is already admitted to stop working.\n\nNote that if there are no RequiredHSTSPolicies, any HSTS Policy annotation on the route is valid.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.RequiredHSTSPolicy{}.OpenAPIModelName()), + }, + }, + }, }, }, - "lastGeneration": { + "loadBalancer": { SchemaProps: spec.SchemaProps{ - Description: "lastGeneration is the last generation of the workload controller involved", - Default: 0, - Type: []string{"integer"}, - Format: "int64", + Description: "loadBalancer contains the load balancer details in general which are not only specific to the underlying infrastructure provider of the current cluster and are required for Ingress Controller to work on OpenShift.", + Default: map[string]interface{}{}, + Ref: ref(v1.LoadBalancer{}.OpenAPIModelName()), }, }, }, - Required: []string{"group", "resource", "namespace", "name", "lastGeneration"}, + Required: []string{"domain"}, }, }, + Dependencies: []string{ + v1.ComponentRouteSpec{}.OpenAPIModelName(), v1.LoadBalancer{}.OpenAPIModelName(), v1.RequiredHSTSPolicy{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_GenericOperatorConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_IngressStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "GenericOperatorConfig provides information to configure an operator\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "servingInfo": { - SchemaProps: spec.SchemaProps{ - Description: "servingInfo is the HTTP serving information for the controller's endpoints", - Default: map[string]interface{}{}, - Ref: ref(configv1.HTTPServingInfo{}.OpenAPIModelName()), - }, - }, - "leaderElection": { - SchemaProps: spec.SchemaProps{ - Description: "leaderElection provides information to elect a leader. Only override this if you have a specific need", - Default: map[string]interface{}{}, - Ref: ref(configv1.LeaderElection{}.OpenAPIModelName()), + "componentRoutes": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "namespace", + "name", + }, + "x-kubernetes-list-type": "map", + }, }, - }, - "authentication": { SchemaProps: spec.SchemaProps{ - Description: "authentication allows configuration of authentication for the endpoints", - Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.DelegatedAuthentication{}.OpenAPIModelName()), + Description: "componentRoutes is where participating operators place the current route status for routes whose hostnames and serving certificates can be customized by the cluster-admin.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.ComponentRouteStatus{}.OpenAPIModelName()), + }, + }, + }, }, }, - "authorization": { + "defaultPlacement": { SchemaProps: spec.SchemaProps{ - Description: "authorization allows configuration of authentication for the endpoints", - Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.DelegatedAuthorization{}.OpenAPIModelName()), + Description: "defaultPlacement is set at installation time to control which nodes will host the ingress router pods by default. The options are control-plane nodes or worker nodes.\n\nThis field works by dictating how the Cluster Ingress Operator will consider unset replicas and nodePlacement fields in IngressController resources when creating the corresponding Deployments.\n\nSee the documentation for the IngressController replicas and nodePlacement fields for more information.\n\nWhen omitted, the default value is Workers", + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, Dependencies: []string{ - configv1.HTTPServingInfo{}.OpenAPIModelName(), configv1.LeaderElection{}.OpenAPIModelName(), operatorv1alpha1.DelegatedAuthentication{}.OpenAPIModelName(), operatorv1alpha1.DelegatedAuthorization{}.OpenAPIModelName()}, + v1.ComponentRouteStatus{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_ImageContentSourcePolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_InsightsDataGather(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ImageContentSourcePolicy holds cluster-wide information about how to handle registry mirror rules. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "InsightsDataGather provides data gather configuration options for the Insights Operator.\n\n\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -66419,7 +8418,7 @@ func schema_openshift_api_operator_v1alpha1_ImageContentSourcePolicy(ref common. SchemaProps: spec.SchemaProps{ Description: "spec holds user settable values for configuration", Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.ImageContentSourcePolicySpec{}.OpenAPIModelName()), + Ref: ref(v1.InsightsDataGatherSpec{}.OpenAPIModelName()), }, }, }, @@ -66427,15 +8426,15 @@ func schema_openshift_api_operator_v1alpha1_ImageContentSourcePolicy(ref common. }, }, Dependencies: []string{ - operatorv1alpha1.ImageContentSourcePolicySpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.InsightsDataGatherSpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_ImageContentSourcePolicyList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_InsightsDataGatherList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ImageContentSourcePolicyList lists the items in the ImageContentSourcePolicy CRD.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "InsightsDataGatherList is a collection of items Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -66454,19 +8453,20 @@ func schema_openshift_api_operator_v1alpha1_ImageContentSourcePolicyList(ref com }, "metadata": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Description: "metadata is the required standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", Default: map[string]interface{}{}, Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), }, }, "items": { SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, + Description: "items is the required list of InsightsDataGather objects it may not exceed 100 items", + Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.ImageContentSourcePolicy{}.OpenAPIModelName()), + Ref: ref(v1.InsightsDataGather{}.OpenAPIModelName()), }, }, }, @@ -66477,279 +8477,263 @@ func schema_openshift_api_operator_v1alpha1_ImageContentSourcePolicyList(ref com }, }, Dependencies: []string{ - operatorv1alpha1.ImageContentSourcePolicy{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.InsightsDataGather{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_ImageContentSourcePolicySpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_InsightsDataGatherSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ImageContentSourcePolicySpec is the specification of the ImageContentSourcePolicy CRD.", + Description: "InsightsDataGatherSpec contains the configuration for the data gathering.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "repositoryDigestMirrors": { + "gatherConfig": { SchemaProps: spec.SchemaProps{ - Description: "repositoryDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in RepositoryDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. Only image pull specifications that have an image digest will have this behavior applied to them - tags will continue to be pulled from the specified repository in the pull spec.\n\nEach “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.RepositoryDigestMirrors{}.OpenAPIModelName()), - }, - }, - }, + Description: "gatherConfig is a required spec attribute that includes all the configuration options related to gathering of the Insights data and its uploading to the ingress.", + Default: map[string]interface{}{}, + Ref: ref(v1.GatherConfig{}.OpenAPIModelName()), }, }, }, + Required: []string{"gatherConfig"}, }, }, Dependencies: []string{ - operatorv1alpha1.RepositoryDigestMirrors{}.OpenAPIModelName()}, + v1.GatherConfig{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_IntermediateTLSProfile(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "IntermediateTLSProfile is a TLS security profile based on the \"intermediate\" configuration of the Mozilla Server Side TLS configuration guidelines.", + Type: []string{"object"}, + }, + }, } } -func schema_openshift_api_operator_v1alpha1_Ingress(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_KMSPluginConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "Ingress contains configuration options specific to the Ingress Operator itself, including how it manages Gateway API integration.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "KMSPluginConfig defines the configuration for the KMS instance that will be used with KMS encryption", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { + "type": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "type defines the kind of platform for the KMS provider. Allowed values are Vault. When set to Vault, the plugin connects to a HashiCorp Vault server for key management.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { + "vault": { SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration.", + Description: "vault defines the configuration for the Vault KMS plugin. The plugin connects to a Vault Enterprise server that is managed by the user outside the purview of the control plane. This field must be set when type is Vault, and must be unset otherwise.", Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.IngressSpec{}.OpenAPIModelName()), + Ref: ref(v1.VaultKMSPluginConfig{}.OpenAPIModelName()), }, }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster.", - Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.IngressStatus{}.OpenAPIModelName()), + }, + Required: []string{"type"}, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "type", + "fields-to-discriminateBy": map[string]interface{}{ + "vault": "Vault", + }, }, }, }, - Required: []string{"metadata", "spec"}, }, }, Dependencies: []string{ - operatorv1alpha1.IngressSpec{}.OpenAPIModelName(), operatorv1alpha1.IngressStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.VaultKMSPluginConfig{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_IngressList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_KeystoneIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "IngressList is a collection of Ingresses.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "url": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "url is the remote URL to connect to", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "ca": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + Description: "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.ConfigMapNameReference{}.OpenAPIModelName()), }, }, - "metadata": { + "tlsClientCert": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Description: "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), }, }, - "items": { + "tlsClientKey": { SchemaProps: spec.SchemaProps{ - Description: "items is a list of Ingresses.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.Ingress{}.OpenAPIModelName()), - }, - }, - }, + Description: "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), + }, + }, + "domainName": { + SchemaProps: spec.SchemaProps{ + Description: "domainName is required for keystone v3", + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, - Required: []string{"metadata"}, + Required: []string{"url", "domainName"}, }, }, Dependencies: []string{ - operatorv1alpha1.Ingress{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.ConfigMapNameReference{}.OpenAPIModelName(), v1.SecretNameReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_IngressSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_KubeClientConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "IngressSpec is the specification of the desired behavior of the Ingress Operator.", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "gatewayAPI": { + "kubeConfig": { + SchemaProps: spec.SchemaProps{ + Description: "kubeConfig is a .kubeconfig filename for going to the owning kube-apiserver. Empty uses an in-cluster-config", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "connectionOverrides": { SchemaProps: spec.SchemaProps{ - Description: "gatewayAPI holds configuration for Gateway API integration, including how the ingress operator manages Gateway API CRDs, the OpenShift Gateway API implementation, and its Gateway API controllers.", + Description: "connectionOverrides specifies client overrides for system components to loop back to this master.", Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.GatewayAPIIngressConfig{}.OpenAPIModelName()), + Ref: ref(v1.ClientConnectionOverrides{}.OpenAPIModelName()), }, }, }, + Required: []string{"kubeConfig", "connectionOverrides"}, }, }, Dependencies: []string{ - operatorv1alpha1.GatewayAPIIngressConfig{}.OpenAPIModelName()}, + v1.ClientConnectionOverrides{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_IngressStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_KubevirtPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "IngressStatus defines the observed status of the Ingress Operator.", + Description: "KubevirtPlatformSpec holds the desired state of the kubevirt infrastructure provider. This only includes fields that can be modified in the cluster.", Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status.\n\nGateway API CRD management conditions are reported here with the \"GatewayAPI\" prefix:\n\n* \"GatewayAPICRDsManaged\" indicates whether the ingress operator is actively\n managing Gateway API CRDs.\n* \"GatewayAPICRDsPresent\" indicates whether Gateway API CRDs exist on the\n cluster.\n* \"GatewayAPICRDsCompliant\" indicates whether the installed CRDs match the\n version expected by this ingress operator release.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration represents the most recent generation observed by the operator and specifies the version of the spec field currently being synced.\n\nWhen omitted, the operator has not yet observed the resource.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, }, }, - Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_LoggingConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_KubevirtPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "LoggingConfig holds information about configuring logging DEPRECATED: Use v1.LogLevel instead", + Description: "KubevirtPlatformStatus holds the current status of the kubevirt infrastructure provider.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "level": { + "apiServerInternalIP": { SchemaProps: spec.SchemaProps{ - Description: "level is passed to glog.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", + Description: "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.", + Type: []string{"string"}, + Format: "", }, }, - "vmodule": { + "ingressIP": { SchemaProps: spec.SchemaProps{ - Description: "vmodule is passed to glog.", - Default: "", + Description: "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.", Type: []string{"string"}, Format: "", }, }, }, - Required: []string{"level", "vmodule"}, }, }, } } -func schema_openshift_api_operator_v1alpha1_NodeStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_LDAPAttributeMapping(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "NodeStatus provides information about the current state of a particular node managed by this operator. Deprecated: Use v1.NodeStatus instead", + Description: "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "nodeName": { - SchemaProps: spec.SchemaProps{ - Description: "nodeName is the name of the node", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "currentDeploymentGeneration": { + "id": { SchemaProps: spec.SchemaProps{ - Description: "currentDeploymentGeneration is the generation of the most recently successful deployment", - Default: 0, - Type: []string{"integer"}, - Format: "int32", + Description: "id is the list of attributes whose values should be used as the user ID. Required. First non-empty attribute is used. At least one attribute is required. If none of the listed attribute have a value, authentication fails. LDAP standard identity attribute is \"dn\"", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "targetDeploymentGeneration": { + "preferredUsername": { SchemaProps: spec.SchemaProps{ - Description: "targetDeploymentGeneration is the generation of the deployment we're trying to apply", - Default: 0, - Type: []string{"integer"}, - Format: "int32", + Description: "preferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "lastFailedDeploymentGeneration": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "lastFailedDeploymentGeneration is the generation of the deployment we tried and failed to deploy.", - Default: 0, - Type: []string{"integer"}, - Format: "int32", + Description: "name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "lastFailedDeploymentErrors": { + "email": { SchemaProps: spec.SchemaProps{ - Description: "lastFailedDeploymentGenerationErrors is a list of the errors during the failed deployment referenced in lastFailedDeploymentGeneration", + Description: "email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -66763,726 +8747,764 @@ func schema_openshift_api_operator_v1alpha1_NodeStatus(ref common.ReferenceCallb }, }, }, - Required: []string{"nodeName", "currentDeploymentGeneration", "targetDeploymentGeneration", "lastFailedDeploymentGeneration", "lastFailedDeploymentErrors"}, + Required: []string{"id"}, }, }, } } -func schema_openshift_api_operator_v1alpha1_OLM(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_LDAPIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "OLM provides information to configure an operator to manage the OLM controllers\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "url": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "url is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is: ldap://host:port/basedn?attribute?scope?filter", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "bindDN": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "bindDN is an optional DN to bind with during the search phase.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { + "bindPassword": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Description: "bindPassword is an optional reference to a secret by name containing a password to bind with during the search phase. The key \"bindPassword\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), }, }, - "spec": { + "insecure": { SchemaProps: spec.SchemaProps{ - Description: "spec holds user settable values for configuration", + Description: "insecure, if true, indicates the connection should not use TLS WARNING: Should not be set to `true` with the URL scheme \"ldaps://\" as \"ldaps://\" URLs always\n attempt to connect using TLS, even when `insecure` is set to `true`\nWhen `true`, \"ldap://\" URLS connect insecurely. When `false`, \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830.", + Default: false, + Type: []string{"boolean"}, + Format: "", + }, + }, + "ca": { + SchemaProps: spec.SchemaProps{ + Description: "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.OLMSpec{}.OpenAPIModelName()), + Ref: ref(v1.ConfigMapNameReference{}.OpenAPIModelName()), }, }, - "status": { + "attributes": { SchemaProps: spec.SchemaProps{ - Description: "status holds observed values from the cluster. They may not be overridden.", + Description: "attributes maps LDAP attributes to identities", Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.OLMStatus{}.OpenAPIModelName()), + Ref: ref(v1.LDAPAttributeMapping{}.OpenAPIModelName()), }, }, }, - Required: []string{"metadata", "spec"}, + Required: []string{"url", "insecure", "attributes"}, }, }, Dependencies: []string{ - operatorv1alpha1.OLMSpec{}.OpenAPIModelName(), operatorv1alpha1.OLMStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.ConfigMapNameReference{}.OpenAPIModelName(), v1.LDAPAttributeMapping{}.OpenAPIModelName(), v1.SecretNameReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_OLMList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_LeaderElection(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "OLMList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "LeaderElection provides information to elect a leader", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "disable": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "disable allows leader election to be suspended while allowing a fully defaulted \"normal\" startup case.", + Type: []string{"boolean"}, + Format: "", + }, + }, + "namespace": { + SchemaProps: spec.SchemaProps{ + Description: "namespace indicates which namespace the resource is in", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "name indicates what name to use for the resource", Type: []string{"string"}, Format: "", }, }, - "metadata": { + "leaseDuration": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + Description: "leaseDuration is the duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled.", + Ref: ref(metav1.Duration{}.OpenAPIModelName()), }, }, - "items": { + "renewDeadline": { SchemaProps: spec.SchemaProps{ - Description: "items contains the items", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.OLM{}.OpenAPIModelName()), - }, - }, - }, + Description: "renewDeadline is the interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled.", + Ref: ref(metav1.Duration{}.OpenAPIModelName()), + }, + }, + "retryPeriod": { + SchemaProps: spec.SchemaProps{ + Description: "retryPeriod is the duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled.", + Ref: ref(metav1.Duration{}.OpenAPIModelName()), }, }, }, - Required: []string{"metadata", "items"}, + Required: []string{"leaseDuration", "renewDeadline", "retryPeriod"}, }, }, Dependencies: []string{ - operatorv1alpha1.OLM{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + metav1.Duration{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_OLMSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_LoadBalancer(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ Type: []string{"object"}, Properties: map[string]spec.Schema{ - "managementState": { - SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { + "platform": { SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", + Description: "platform holds configuration specific to the underlying infrastructure provider for the ingress load balancers. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.", + Default: map[string]interface{}{}, + Ref: ref(v1.IngressPlatformSpec{}.OpenAPIModelName()), }, }, - "unsupportedConfigOverrides": { + }, + }, + }, + Dependencies: []string{ + v1.IngressPlatformSpec{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_MTUMigration(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "MTUMigration contains infomation about MTU migration.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "network": { SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), + Description: "network contains MTU migration configuration for the default network.", + Ref: ref(v1.MTUMigrationValues{}.OpenAPIModelName()), }, }, - "observedConfig": { + "machine": { SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), + Description: "machine contains MTU migration configuration for the machine's uplink.", + Ref: ref(v1.MTUMigrationValues{}.OpenAPIModelName()), }, }, }, - Required: []string{"managementState"}, }, }, Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, + v1.MTUMigrationValues{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_OLMStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_MTUMigrationValues(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Type: []string{"object"}, + Description: "MTUMigrationValues contains the values for a MTU migration.", + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "observedGeneration": { + "to": { SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", + Description: "to is the MTU to migrate to.", Type: []string{"integer"}, Format: "int64", }, }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { + "from": { SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", + Description: "from is the MTU to migrate from.", + Type: []string{"integer"}, + Format: "int64", }, }, - "readyReplicas": { + }, + Required: []string{"to"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_MaxAgePolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "MaxAgePolicy contains a numeric range for specifying a compliant HSTS max-age for the enclosing RequiredHSTSPolicy", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "largestMaxAge": { SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, + Description: "The largest allowed value (in seconds) of the RequiredHSTSPolicy max-age This value can be left unspecified, in which case no upper limit is enforced.", Type: []string{"integer"}, Format: "int32", }, }, - "latestAvailableRevision": { + "smallestMaxAge": { SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", + Description: "The smallest allowed value (in seconds) of the RequiredHSTSPolicy max-age Setting max-age=0 allows the deletion of an existing HSTS header from a host. This is a necessary tool for administrators to quickly correct mistakes. This value can be left unspecified, in which case no lower limit is enforced.", Type: []string{"integer"}, Format: "int32", }, }, - "generations": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), - }, - }, - }, - }, - }, }, }, }, - Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_OperatorCondition(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ModernTLSProfile(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "ModernTLSProfile is a TLS security profile based on the \"modern\" configuration of the Mozilla Server Side TLS configuration guidelines.", + Type: []string{"object"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_NamedCertificate(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "OperatorCondition is just the standard condition fields. DEPRECATED: Use v1.OperatorCondition instead", + Description: "NamedCertificate specifies a certificate/key, and the names it should be served for", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "lastTransitionTime": { + "names": { SchemaProps: spec.SchemaProps{ - Ref: ref(metav1.Time{}.OpenAPIModelName()), + Description: "names is a list of DNS names this certificate should be used to secure A name can be a normal DNS name, or can contain leading wildcard segments.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "reason": { + "certFile": { SchemaProps: spec.SchemaProps{ - Type: []string{"string"}, - Format: "", + Description: "certFile is a file containing a PEM-encoded certificate", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "message": { + "keyFile": { SchemaProps: spec.SchemaProps{ - Type: []string{"string"}, - Format: "", + Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, - Required: []string{"type", "status"}, + Required: []string{"certFile", "keyFile"}, }, }, - Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_OperatorSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_Network(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "OperatorSpec contains common fields for an operator to need. It is intended to be anonymous included inside of the Spec struct for you particular operator. DEPRECATED: Use v1.OperatorSpec instead", + Description: "Network holds cluster-wide information about Network. The canonical name is `cluster`. It is used to configure the desired network configuration, such as: IP address pools for services/pod IPs, network plugin, etc. Please view network.spec for an explanation on what applies when configuring this resource.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "managementState": { + "kind": { SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", - Default: "", + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", Type: []string{"string"}, Format: "", }, }, - "imagePullSpec": { + "apiVersion": { SchemaProps: spec.SchemaProps{ - Description: "imagePullSpec is the image to use for the component.", - Default: "", + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", Type: []string{"string"}, Format: "", }, }, - "imagePullPolicy": { + "metadata": { SchemaProps: spec.SchemaProps{ - Description: "imagePullPolicy specifies the image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), }, }, - "version": { + "spec": { SchemaProps: spec.SchemaProps{ - Description: "version is the desired state in major.minor.micro-patch. Usually patch is ignored.", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "spec holds user settable values for configuration. As a general rule, this SHOULD NOT be read directly. Instead, you should consume the NetworkStatus, as it indicates the currently deployed configuration. Currently, most spec fields are immutable after installation. Please view the individual ones for further details on each.", + Default: map[string]interface{}{}, + Ref: ref(v1.NetworkSpec{}.OpenAPIModelName()), }, }, - "logging": { + "status": { SchemaProps: spec.SchemaProps{ - Description: "logging contains glog parameters for the component pods. It's always a command line arg for the moment", + Description: "status holds observed values from the cluster. They may not be overridden.", Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.LoggingConfig{}.OpenAPIModelName()), + Ref: ref(v1.NetworkStatus{}.OpenAPIModelName()), }, }, }, - Required: []string{"managementState", "imagePullSpec", "imagePullPolicy", "version"}, + Required: []string{"spec"}, }, }, Dependencies: []string{ - operatorv1alpha1.LoggingConfig{}.OpenAPIModelName()}, + v1.NetworkSpec{}.OpenAPIModelName(), v1.NetworkStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_OperatorStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_NetworkDiagnostics(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "OperatorStatus contains common fields for an operator to need. It is intended to be anonymous included inside of the Status struct for you particular operator. DEPRECATED: Use v1.OperatorStatus instead", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "state": { - SchemaProps: spec.SchemaProps{ - Description: "state indicates what the operator has observed to be its current operational status.", - Type: []string{"string"}, - Format: "", - }, - }, - "taskSummary": { + "mode": { SchemaProps: spec.SchemaProps{ - Description: "taskSummary is a high level summary of what the controller is currently attempting to do. It is high-level, human-readable and not guaranteed in any way. (I needed this for debugging and realized it made a great summary).", + Description: "mode controls the network diagnostics mode\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is All.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "currentVersionAvailability": { + "sourcePlacement": { SchemaProps: spec.SchemaProps{ - Description: "currentVersionAvailability is availability information for the current version. If it is unmanged or removed, this doesn't exist.", - Ref: ref(operatorv1alpha1.VersionAvailability{}.OpenAPIModelName()), + Description: "sourcePlacement controls the scheduling of network diagnostics source deployment\n\nSee NetworkDiagnosticsSourcePlacement for more details about default values.", + Default: map[string]interface{}{}, + Ref: ref(v1.NetworkDiagnosticsSourcePlacement{}.OpenAPIModelName()), }, }, - "targetVersionAvailability": { + "targetPlacement": { SchemaProps: spec.SchemaProps{ - Description: "targetVersionAvailability is availability information for the target version if we are migrating", - Ref: ref(operatorv1alpha1.VersionAvailability{}.OpenAPIModelName()), + Description: "targetPlacement controls the scheduling of network diagnostics target daemonset\n\nSee NetworkDiagnosticsTargetPlacement for more details about default values.", + Default: map[string]interface{}{}, + Ref: ref(v1.NetworkDiagnosticsTargetPlacement{}.OpenAPIModelName()), }, }, }, }, }, Dependencies: []string{ - operatorv1alpha1.OperatorCondition{}.OpenAPIModelName(), operatorv1alpha1.VersionAvailability{}.OpenAPIModelName()}, + v1.NetworkDiagnosticsSourcePlacement{}.OpenAPIModelName(), v1.NetworkDiagnosticsTargetPlacement{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_RepositoryDigestMirrors(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_NetworkDiagnosticsSourcePlacement(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RepositoryDigestMirrors holds cluster-wide information about how to handle mirros in the registries config. Note: the mirrors only work when pulling the images that are referenced by their digests.", + Description: "NetworkDiagnosticsSourcePlacement defines node scheduling configuration network diagnostics source components", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "source": { + "nodeSelector": { SchemaProps: spec.SchemaProps{ - Description: "source is the repository that users refer to, e.g. in image pull specifications.", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "nodeSelector is the node selector applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `kubernetes.io/os: linux`.", + Type: []string{"object"}, + AdditionalProperties: &spec.SchemaOrBool{ + Allows: true, + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "mirrors": { + "tolerations": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "mirrors is one or more repositories that may also contain the same images. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. Other cluster configuration, including (but not limited to) other repositoryDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering.", + Description: "tolerations is a list of tolerations applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is an empty list.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(corev1.Toleration{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"source"}, }, }, + Dependencies: []string{ + corev1.Toleration{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_StaticPodOperatorStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_NetworkDiagnosticsTargetPlacement(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "StaticPodOperatorStatus is status for controllers that manage static pods. There are different needs because individual node status must be tracked. DEPRECATED: Use v1.StaticPodOperatorStatus instead", + Description: "NetworkDiagnosticsTargetPlacement defines node scheduling configuration network diagnostics target components", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "observedGeneration": { + "nodeSelector": { SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", + Description: "nodeSelector is the node selector applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `kubernetes.io/os: linux`.", + Type: []string{"object"}, + AdditionalProperties: &spec.SchemaOrBool{ + Allows: true, + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "conditions": { + "tolerations": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", + Description: "tolerations is a list of tolerations applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `- operator: \"Exists\"` which means that all taints are tolerated.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.OperatorCondition{}.OpenAPIModelName()), + Ref: ref(corev1.Toleration{}.OpenAPIModelName()), }, }, }, }, }, - "state": { + }, + }, + }, + Dependencies: []string{ + corev1.Toleration{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_NetworkList(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "kind": { SchemaProps: spec.SchemaProps{ - Description: "state indicates what the operator has observed to be its current operational status.", + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", Type: []string{"string"}, Format: "", }, }, - "taskSummary": { + "apiVersion": { SchemaProps: spec.SchemaProps{ - Description: "taskSummary is a high level summary of what the controller is currently attempting to do. It is high-level, human-readable and not guaranteed in any way. (I needed this for debugging and realized it made a great summary).", + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", Type: []string{"string"}, Format: "", }, }, - "currentVersionAvailability": { - SchemaProps: spec.SchemaProps{ - Description: "currentVersionAvailability is availability information for the current version. If it is unmanged or removed, this doesn't exist.", - Ref: ref(operatorv1alpha1.VersionAvailability{}.OpenAPIModelName()), - }, - }, - "targetVersionAvailability": { - SchemaProps: spec.SchemaProps{ - Description: "targetVersionAvailability is availability information for the target version if we are migrating", - Ref: ref(operatorv1alpha1.VersionAvailability{}.OpenAPIModelName()), - }, - }, - "latestAvailableDeploymentGeneration": { + "metadata": { SchemaProps: spec.SchemaProps{ - Description: "latestAvailableDeploymentGeneration is the deploymentID of the most recent deployment", - Default: 0, - Type: []string{"integer"}, - Format: "int32", + Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), }, }, - "nodeStatuses": { + "items": { SchemaProps: spec.SchemaProps{ - Description: "nodeStatuses track the deployment values and errors across individual nodes", - Type: []string{"array"}, + Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.NodeStatus{}.OpenAPIModelName()), + Ref: ref(v1.Network{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"latestAvailableDeploymentGeneration", "nodeStatuses"}, + Required: []string{"metadata", "items"}, }, }, Dependencies: []string{ - operatorv1alpha1.NodeStatus{}.OpenAPIModelName(), operatorv1alpha1.OperatorCondition{}.OpenAPIModelName(), operatorv1alpha1.VersionAvailability{}.OpenAPIModelName()}, + v1.Network{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operator_v1alpha1_VersionAvailability(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_NetworkMigration(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "VersionAvailability gives information about the synchronization and operational status of a particular version of the component DEPRECATED: Use fields in v1.OperatorStatus instead", + Description: "NetworkMigration represents the network migration status.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "version": { + "networkType": { SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Default: "", + Description: "networkType is the target plugin that is being deployed. DEPRECATED: network type migration is no longer supported, so this should always be unset.", Type: []string{"string"}, Format: "", }, }, - "updatedReplicas": { + "mtu": { SchemaProps: spec.SchemaProps{ - Description: "updatedReplicas indicates how many replicas are at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", + Description: "mtu is the MTU configuration that is being deployed.", + Ref: ref(v1.MTUMigration{}.OpenAPIModelName()), }, }, - "readyReplicas": { + }, + }, + }, + Dependencies: []string{ + v1.MTUMigration{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_NetworkObservabilitySpec(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "NetworkObservabilitySpec defines the configuration for network observability installation", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "installationPolicy": { SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", + Description: "installationPolicy controls whether network observability is installed during cluster deployment. Valid values are \"InstallAndEnable\" and \"NoAction\". When set to \"InstallAndEnable\", ensure that network observability will be installed and enabled on the cluster. If already installed, no action taken, but if it gets uninstalled, it will install it again. When set to \"NoAction\", nothing will be done regarding Network observability. During the installation of NetworkObservability, the platform checks for any existing manual installations. If a successful installation using the OLMv0 or OLMv1 API is detected, it will be used. If the platform cannot determine how the current version was installed, or if the existing installation is incomplete, the installation process will stop.", + Type: []string{"string"}, + Format: "", }, }, - "errors": { + }, + Required: []string{"installationPolicy"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_NetworkSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "NetworkSpec is the desired network configuration. As a general rule, this SHOULD NOT be read directly. Instead, you should consume the NetworkStatus, as it indicates the currently deployed configuration. Currently, most spec fields are immutable after installation. Please view the individual ones for further details on each.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "clusterNetwork": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "errors indicates what failures are associated with the operator trying to manage this version", + Description: "IP address pool to use for pod IPs. This field is immutable after installation.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.ClusterNetworkEntry{}.OpenAPIModelName()), }, }, }, }, }, - "generations": { + "serviceNetwork": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "generations allows an operator to track what the generation of \"important\" resources was the last time we updated them", + Description: "IP address pool for services. Currently, we only support a single entry here. This field is immutable after installation.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1alpha1.GenerationHistory{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, - }, - Required: []string{"version", "updatedReplicas", "readyReplicas", "errors", "generations"}, - }, - }, - Dependencies: []string{ - operatorv1alpha1.GenerationHistory{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operatorcontrolplane_v1alpha1_LogEntry(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LogEntry records events", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "time": { + "networkType": { SchemaProps: spec.SchemaProps{ - Description: "Start time of check action.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), + Description: "networkType is the plugin that is to be deployed (e.g. OVNKubernetes). This should match a value that the cluster-network-operator understands, or else no networking will be installed. Currently supported values are: - OVNKubernetes This field is immutable after installation.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "success": { + "externalIP": { SchemaProps: spec.SchemaProps{ - Description: "success indicates if the log entry indicates a success or failure.", - Default: false, - Type: []string{"boolean"}, - Format: "", + Description: "externalIP defines configuration for controllers that affect Service.ExternalIP. If nil, then ExternalIP is not allowed to be set.", + Ref: ref(v1.ExternalIPConfig{}.OpenAPIModelName()), }, }, - "reason": { + "serviceNodePortRange": { SchemaProps: spec.SchemaProps{ - Description: "reason for status in a machine readable format.", + Description: "The port range allowed for Services of type NodePort. If not specified, the default of 30000-32767 will be used. Such Services without a NodePort specified will have one automatically allocated from this range. This parameter can be updated after the cluster is installed.", Type: []string{"string"}, Format: "", }, }, - "message": { + "networkDiagnostics": { SchemaProps: spec.SchemaProps{ - Description: "message explaining status in a human readable format.", - Type: []string{"string"}, - Format: "", + Description: "networkDiagnostics defines network diagnostics configuration.\n\nTakes precedence over spec.disableNetworkDiagnostics in network.operator.openshift.io. If networkDiagnostics is not specified or is empty, and the spec.disableNetworkDiagnostics flag in network.operator.openshift.io is set to true, the network diagnostics feature will be disabled.", + Default: map[string]interface{}{}, + Ref: ref(v1.NetworkDiagnostics{}.OpenAPIModelName()), }, }, - "latency": { + "networkObservability": { SchemaProps: spec.SchemaProps{ - Description: "latency records how long the action mentioned in the entry took.", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), + Description: "networkObservability is an optional field that configures network observability installation during cluster deployment (day-0). When omitted, unless this is a SNO cluster, network observability will be installed if not already present, after that, no action taken.", + Default: map[string]interface{}{}, + Ref: ref(v1.NetworkObservabilitySpec{}.OpenAPIModelName()), }, }, }, - Required: []string{"time", "success"}, + Required: []string{"clusterNetwork", "serviceNetwork", "networkType"}, }, }, Dependencies: []string{ - metav1.Duration{}.OpenAPIModelName(), metav1.Time{}.OpenAPIModelName()}, + v1.ClusterNetworkEntry{}.OpenAPIModelName(), v1.ExternalIPConfig{}.OpenAPIModelName(), v1.NetworkDiagnostics{}.OpenAPIModelName(), v1.NetworkObservabilitySpec{}.OpenAPIModelName()}, } } -func schema_openshift_api_operatorcontrolplane_v1alpha1_OutageEntry(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_NetworkStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "OutageEntry records time period of an outage", + Description: "NetworkStatus is the current network configuration.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "start": { - SchemaProps: spec.SchemaProps{ - Description: "start of outage detected", - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "end": { - SchemaProps: spec.SchemaProps{ - Description: "end of outage detected", - Ref: ref(metav1.Time{}.OpenAPIModelName()), + "clusterNetwork": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, }, - }, - "startLogs": { SchemaProps: spec.SchemaProps{ - Description: "startLogs contains log entries related to the start of this outage. Should contain the original failure, any entries where the failure mode changed.", + Description: "IP address pool to use for pod IPs.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorcontrolplanev1alpha1.LogEntry{}.OpenAPIModelName()), + Ref: ref(v1.ClusterNetworkEntry{}.OpenAPIModelName()), }, }, }, }, }, - "endLogs": { + "serviceNetwork": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "endLogs contains log entries related to the end of this outage. Should contain the success entry that resolved the outage and possibly a few of the failure log entries that preceded it.", + Description: "IP address pool for services. Currently, we only support a single entry here.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorcontrolplanev1alpha1.LogEntry{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, - "message": { + "networkType": { SchemaProps: spec.SchemaProps{ - Description: "message summarizes outage details in a human readable format.", + Description: "networkType is the plugin that is deployed (e.g. OVNKubernetes).", Type: []string{"string"}, Format: "", }, }, + "clusterNetworkMTU": { + SchemaProps: spec.SchemaProps{ + Description: "clusterNetworkMTU is the MTU for inter-pod networking.", + Type: []string{"integer"}, + Format: "int32", + }, + }, + "migration": { + SchemaProps: spec.SchemaProps{ + Description: "migration contains the cluster network migration configuration.", + Ref: ref(v1.NetworkMigration{}.OpenAPIModelName()), + }, + }, + "conditions": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "type", + }, + "x-kubernetes-list-type": "map", + }, + }, + SchemaProps: spec.SchemaProps{ + Description: "conditions represents the observations of a network.config current state. Known .status.conditions.type are: \"NetworkDiagnosticsAvailable\"", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(metav1.Condition{}.OpenAPIModelName()), + }, + }, + }, + }, + }, }, - Required: []string{"start"}, }, }, Dependencies: []string{ - operatorcontrolplanev1alpha1.LogEntry{}.OpenAPIModelName(), metav1.Time{}.OpenAPIModelName()}, + v1.ClusterNetworkEntry{}.OpenAPIModelName(), v1.NetworkMigration{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, } } -func schema_openshift_api_operatorcontrolplane_v1alpha1_PodNetworkConnectivityCheck(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_Node(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "PodNetworkConnectivityCheck\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "Node holds cluster-wide information about node specific features.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -67508,84 +9530,32 @@ func schema_openshift_api_operatorcontrolplane_v1alpha1_PodNetworkConnectivityCh }, "spec": { SchemaProps: spec.SchemaProps{ - Description: "spec defines the source and target of the connectivity check", + Description: "spec holds user settable values for configuration", Default: map[string]interface{}{}, - Ref: ref(operatorcontrolplanev1alpha1.PodNetworkConnectivityCheckSpec{}.OpenAPIModelName()), + Ref: ref(v1.NodeSpec{}.OpenAPIModelName()), }, }, "status": { SchemaProps: spec.SchemaProps{ - Description: "status contains the observed status of the connectivity check", + Description: "status holds observed values.", Default: map[string]interface{}{}, - Ref: ref(operatorcontrolplanev1alpha1.PodNetworkConnectivityCheckStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, - }, - }, - Dependencies: []string{ - operatorcontrolplanev1alpha1.PodNetworkConnectivityCheckSpec{}.OpenAPIModelName(), operatorcontrolplanev1alpha1.PodNetworkConnectivityCheckStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operatorcontrolplane_v1alpha1_PodNetworkConnectivityCheckCondition(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PodNetworkConnectivityCheckCondition represents the overall status of the pod network connectivity.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Description: "type of the condition", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status of the condition", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "reason": { - SchemaProps: spec.SchemaProps{ - Description: "reason for the condition's last status transition in a machine readable format.", - Type: []string{"string"}, - Format: "", - }, - }, - "message": { - SchemaProps: spec.SchemaProps{ - Description: "message indicating details about last transition in a human readable format.", - Type: []string{"string"}, - Format: "", - }, - }, - "lastTransitionTime": { - SchemaProps: spec.SchemaProps{ - Description: "Last time the condition transitioned from one status to another.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), + Ref: ref(v1.NodeStatus{}.OpenAPIModelName()), }, }, }, - Required: []string{"type", "status", "lastTransitionTime"}, + Required: []string{"spec"}, }, }, Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, + v1.NodeSpec{}.OpenAPIModelName(), v1.NodeStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operatorcontrolplane_v1alpha1_PodNetworkConnectivityCheckList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_NodeList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "PodNetworkConnectivityCheckList is a collection of PodNetworkConnectivityCheck\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -67611,13 +9581,12 @@ func schema_openshift_api_operatorcontrolplane_v1alpha1_PodNetworkConnectivityCh }, "items": { SchemaProps: spec.SchemaProps{ - Description: "items contains the items", - Type: []string{"array"}, + Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorcontrolplanev1alpha1.PodNetworkConnectivityCheck{}.OpenAPIModelName()), + Ref: ref(v1.Node{}.OpenAPIModelName()), }, }, }, @@ -67628,253 +9597,250 @@ func schema_openshift_api_operatorcontrolplane_v1alpha1_PodNetworkConnectivityCh }, }, Dependencies: []string{ - operatorcontrolplanev1alpha1.PodNetworkConnectivityCheck{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.Node{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operatorcontrolplane_v1alpha1_PodNetworkConnectivityCheckSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_NodeSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ Type: []string{"object"}, Properties: map[string]spec.Schema{ - "sourcePod": { + "cgroupMode": { SchemaProps: spec.SchemaProps{ - Description: "sourcePod names the pod from which the condition will be checked", - Default: "", + Description: "cgroupMode determines the cgroups version on the node", Type: []string{"string"}, Format: "", }, }, - "targetEndpoint": { + "workerLatencyProfile": { SchemaProps: spec.SchemaProps{ - Description: "EndpointAddress to check. A TCP address of the form host:port. Note that if host is a DNS name, then the check would fail if the DNS name cannot be resolved. Specify an IP address for host to bypass DNS name lookup.", - Default: "", + Description: "workerLatencyProfile determins the how fast the kubelet is updating the status and corresponding reaction of the cluster", Type: []string{"string"}, Format: "", }, }, - "tlsClientCert": { + "minimumKubeletVersion": { SchemaProps: spec.SchemaProps{ - Description: "TLSClientCert, if specified, references a kubernetes.io/tls type secret with 'tls.crt' and 'tls.key' entries containing an optional TLS client certificate and key to be used when checking endpoints that require a client certificate in order to gracefully preform the scan without causing excessive logging in the endpoint process. The secret must exist in the same namespace as this resource.", - Default: map[string]interface{}{}, - Ref: ref(configv1.SecretNameReference{}.OpenAPIModelName()), + Description: "minimumKubeletVersion is the lowest version of a kubelet that can join the cluster. Specifically, the apiserver will deny most authorization requests of kubelets that are older than the specified version, only allowing the kubelet to get and update its node object, and perform subjectaccessreviews. This means any kubelet that attempts to join the cluster will not be able to run any assigned workloads, and will eventually be marked as not ready. Its max length is 8, so maximum version allowed is either \"9.999.99\" or \"99.99.99\". Since the kubelet reports the version of the kubernetes release, not Openshift, this field references the underlying kubernetes version this version of Openshift is based off of. In other words: if an admin wishes to ensure no nodes run an older version than Openshift 4.17, then they should set the minimumKubeletVersion to 1.30.0. When comparing versions, the kubelet's version is stripped of any contents outside of major.minor.patch version. Thus, a kubelet with version \"1.0.0-ec.0\" will be compatible with minimumKubeletVersion \"1.0.0\" or earlier.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, - Required: []string{"sourcePod", "targetEndpoint"}, }, }, - Dependencies: []string{ - configv1.SecretNameReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_operatorcontrolplane_v1alpha1_PodNetworkConnectivityCheckStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_NodeStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ Type: []string{"object"}, Properties: map[string]spec.Schema{ - "successes": { - SchemaProps: spec.SchemaProps{ - Description: "successes contains logs successful check actions", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorcontrolplanev1alpha1.LogEntry{}.OpenAPIModelName()), - }, + "conditions": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "type", }, + "x-kubernetes-list-type": "map", }, }, - }, - "failures": { SchemaProps: spec.SchemaProps{ - Description: "failures contains logs of unsuccessful check actions", + Description: "conditions contain the details and the current state of the nodes.config object", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorcontrolplanev1alpha1.LogEntry{}.OpenAPIModelName()), + Ref: ref(metav1.Condition{}.OpenAPIModelName()), }, }, }, }, }, - "outages": { + }, + }, + }, + Dependencies: []string{ + metav1.Condition{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_NutanixFailureDomain(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "NutanixFailureDomain configures failure domain information for the Nutanix platform.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "name": { SchemaProps: spec.SchemaProps{ - Description: "outages contains logs of time periods of outages", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorcontrolplanev1alpha1.OutageEntry{}.OpenAPIModelName()), - }, - }, - }, + Description: "name defines the unique name of a failure domain. Name is required and must be at most 64 characters in length. It must consist of only lower case alphanumeric characters and hyphens (-). It must start and end with an alphanumeric character. This value is arbitrary and is used to identify the failure domain within the platform.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "conditions": { + "cluster": { + SchemaProps: spec.SchemaProps{ + Description: "cluster is to identify the cluster (the Prism Element under management of the Prism Central), in which the Machine's VM will be created. The cluster identifier (uuid or name) can be obtained from the Prism Central console or using the prism_central API.", + Default: map[string]interface{}{}, + Ref: ref(v1.NutanixResourceIdentifier{}.OpenAPIModelName()), + }, + }, + "subnets": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge", + "x-kubernetes-list-type": "atomic", }, }, SchemaProps: spec.SchemaProps{ - Description: "conditions summarize the status of the check", + Description: "subnets holds a list of identifiers (one or more) of the cluster's network subnets If the feature gate NutanixMultiSubnets is enabled, up to 32 subnets may be configured. for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be obtained from the Prism Central console or using the prism_central API.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorcontrolplanev1alpha1.PodNetworkConnectivityCheckCondition{}.OpenAPIModelName()), + Ref: ref(v1.NutanixResourceIdentifier{}.OpenAPIModelName()), }, }, }, }, }, }, + Required: []string{"name", "cluster", "subnets"}, }, }, Dependencies: []string{ - operatorcontrolplanev1alpha1.LogEntry{}.OpenAPIModelName(), operatorcontrolplanev1alpha1.OutageEntry{}.OpenAPIModelName(), operatorcontrolplanev1alpha1.PodNetworkConnectivityCheckCondition{}.OpenAPIModelName()}, + v1.NutanixResourceIdentifier{}.OpenAPIModelName()}, } } -func schema_openshift_api_operatoringress_v1_DNSRecord(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_NutanixPlatformLoadBalancer(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "DNSRecord is a DNS record managed in the zones defined by dns.config.openshift.io/cluster .spec.publicZone and .spec.privateZone.\n\nCluster admin manipulation of this resource is not supported. This resource is only for internal communication of OpenShift operators.\n\nIf DNSManagementPolicy is \"Unmanaged\", the operator will not be responsible for managing the DNS records on the cloud provider.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "NutanixPlatformLoadBalancer defines the load balancer used by the cluster on Nutanix platform.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { + "type": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "type defines the type of load balancer used by the cluster on Nutanix platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", + Default: "OpenShiftManagedDefault", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the desired behavior of the dnsRecord.", - Default: map[string]interface{}{}, - Ref: ref(operatoringressv1.DNSRecordSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status is the most recently observed status of the dnsRecord.", - Default: map[string]interface{}{}, - Ref: ref(operatoringressv1.DNSRecordStatus{}.OpenAPIModelName()), + }, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "type", + "fields-to-discriminateBy": map[string]interface{}{}, }, }, }, - Required: []string{"spec", "status"}, }, }, - Dependencies: []string{ - operatoringressv1.DNSRecordSpec{}.OpenAPIModelName(), operatoringressv1.DNSRecordStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_operatoringress_v1_DNSRecordList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_NutanixPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "DNSRecordList contains a list of dnsrecords.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "NutanixPlatformSpec holds the desired state of the Nutanix infrastructure provider. This only includes fields that can be modified in the cluster.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "prismCentral": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", + Description: "prismCentral holds the endpoint address and port to access the Nutanix Prism Central. When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy. Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the proxy spec.noProxy list.", + Default: map[string]interface{}{}, + Ref: ref(v1.NutanixPrismEndpoint{}.OpenAPIModelName()), }, }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + "prismElements": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "name", + }, + "x-kubernetes-list-type": "map", + }, }, - }, - "metadata": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + Description: "prismElements holds one or more endpoint address and port data to access the Nutanix Prism Elements (clusters) of the Nutanix Prism Central. Currently we only support one Prism Element (cluster) for an OpenShift cluster, where all the Nutanix resources (VMs, subnets, volumes, etc.) used in the OpenShift cluster are located. In the future, we may support Nutanix resources (VMs, etc.) spread over multiple Prism Elements (clusters) of the Prism Central.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.NutanixPrismElementEndpoint{}.OpenAPIModelName()), + }, + }, + }, }, }, - "items": { + "failureDomains": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", + "x-kubernetes-list-map-keys": []interface{}{ + "name", + }, + "x-kubernetes-list-type": "map", }, }, SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, + Description: "failureDomains configures failure domains information for the Nutanix platform. When set, the failure domains defined here may be used to spread Machines across prism element clusters to improve fault tolerance of the cluster.", + Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatoringressv1.DNSRecord{}.OpenAPIModelName()), + Ref: ref(v1.NutanixFailureDomain{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"items"}, + Required: []string{"prismCentral", "prismElements"}, }, }, Dependencies: []string{ - operatoringressv1.DNSRecord{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.NutanixFailureDomain{}.OpenAPIModelName(), v1.NutanixPrismElementEndpoint{}.OpenAPIModelName(), v1.NutanixPrismEndpoint{}.OpenAPIModelName()}, } } -func schema_openshift_api_operatoringress_v1_DNSRecordSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_NutanixPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "DNSRecordSpec contains the details of a DNS record.", + Description: "NutanixPlatformStatus holds the current status of the Nutanix infrastructure provider.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "dnsName": { + "apiServerInternalIP": { SchemaProps: spec.SchemaProps{ - Description: "dnsName is the hostname of the DNS record", - Default: "", + Description: "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", Type: []string{"string"}, Format: "", }, }, - "targets": { + "apiServerInternalIPs": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", + "x-kubernetes-list-type": "set", }, }, SchemaProps: spec.SchemaProps{ - Description: "targets are record targets.", + Description: "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -67887,259 +9853,172 @@ func schema_openshift_api_operatoringress_v1_DNSRecordSpec(ref common.ReferenceC }, }, }, - "recordType": { - SchemaProps: spec.SchemaProps{ - Description: "recordType is the DNS record type. For example, \"A\", \"AAAA\", or \"CNAME\".", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "recordTTL": { - SchemaProps: spec.SchemaProps{ - Description: "recordTTL is the record TTL in seconds. If zero, the default is 30. RecordTTL will not be used in AWS regions Alias targets, but will be used in CNAME targets, per AWS API contract.", - Default: 0, - Type: []string{"integer"}, - Format: "int64", - }, - }, - "dnsManagementPolicy": { + "ingressIP": { SchemaProps: spec.SchemaProps{ - Description: "dnsManagementPolicy denotes the current policy applied on the DNS record. Records that have policy set as \"Unmanaged\" are ignored by the ingress operator. This means that the DNS record on the cloud provider is not managed by the operator, and the \"Published\" status condition will be updated to \"Unknown\" status, since it is externally managed. Any existing record on the cloud provider can be deleted at the discretion of the cluster admin.\n\nThis field defaults to Managed. Valid values are \"Managed\" and \"Unmanaged\".", - Default: "Managed", + Description: "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", Type: []string{"string"}, Format: "", }, }, - }, - Required: []string{"dnsName", "targets", "recordType", "recordTTL", "dnsManagementPolicy"}, - }, - }, - } -} - -func schema_openshift_api_operatoringress_v1_DNSRecordStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNSRecordStatus is the most recently observed status of each record.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "zones": { + "ingressIPs": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", + "x-kubernetes-list-type": "set", }, }, SchemaProps: spec.SchemaProps{ - Description: "zones are the status of the record in each zone.", + Description: "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatoringressv1.DNSZoneStatus{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the most recently observed generation of the DNSRecord. When the DNSRecord is updated, the controller updates the corresponding record in each managed zone. If an update for a particular zone fails, that failure is recorded in the status condition for the zone so that the controller can determine that it needs to retry the update for that specific zone.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, - }, - }, - Dependencies: []string{ - operatoringressv1.DNSZoneStatus{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_operatoringress_v1_DNSZoneCondition(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "DNSZoneCondition is just the standard condition fields.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "lastTransitionTime": { - SchemaProps: spec.SchemaProps{ - Ref: ref(metav1.Time{}.OpenAPIModelName()), - }, - }, - "reason": { + "loadBalancer": { SchemaProps: spec.SchemaProps{ - Type: []string{"string"}, - Format: "", + Description: "loadBalancer defines how the load balancer used by the cluster is configured.", + Default: map[string]interface{}{"type": "OpenShiftManagedDefault"}, + Ref: ref(v1.NutanixPlatformLoadBalancer{}.OpenAPIModelName()), }, }, - "message": { + "dnsRecordsType": { SchemaProps: spec.SchemaProps{ - Type: []string{"string"}, - Format: "", + Description: "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", + Type: []string{"string"}, + Format: "", + Enum: []interface{}{"External", "Internal"}, }, }, }, - Required: []string{"type", "status"}, + Required: []string{"apiServerInternalIPs", "ingressIPs"}, }, }, Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, + v1.NutanixPlatformLoadBalancer{}.OpenAPIModelName()}, } } -func schema_openshift_api_operatoringress_v1_DNSZoneStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_NutanixPrismElementEndpoint(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "DNSZoneStatus is the status of a record within a specific zone.", + Description: "NutanixPrismElementEndpoint holds the name and endpoint data for a Prism Element (cluster)", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "dnsZone": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "dnsZone is the zone where the record is published.", - Default: map[string]interface{}{}, - Ref: ref(configv1.DNSZone{}.OpenAPIModelName()), + Description: "name is the name of the Prism Element (cluster). This value will correspond with the cluster field configured on other resources (eg Machines, PVCs, etc).", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, + "endpoint": { SchemaProps: spec.SchemaProps{ - Description: "conditions are any conditions associated with the record in the zone.\n\nIf publishing the record succeeds, the \"Published\" condition will be set with status \"True\" and upon failure it will be set to \"False\" along with the reason and message describing the cause of the failure.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatoringressv1.DNSZoneCondition{}.OpenAPIModelName()), - }, - }, - }, + Description: "endpoint holds the endpoint address and port data of the Prism Element (cluster). When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy. Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the proxy spec.noProxy list.", + Default: map[string]interface{}{}, + Ref: ref(v1.NutanixPrismEndpoint{}.OpenAPIModelName()), }, }, }, - Required: []string{"dnsZone"}, + Required: []string{"name", "endpoint"}, }, }, Dependencies: []string{ - configv1.DNSZone{}.OpenAPIModelName(), operatoringressv1.DNSZoneCondition{}.OpenAPIModelName()}, + v1.NutanixPrismEndpoint{}.OpenAPIModelName()}, } } -func schema_openshift_api_osin_v1_AllowAllPasswordIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_NutanixPrismEndpoint(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "AllowAllPasswordIdentityProvider provides identities for users authenticating using non-empty passwords\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "NutanixPrismEndpoint holds the endpoint address and port to access the Nutanix Prism Central or Element (cluster)", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "address": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "address is the endpoint address (DNS name or IP address) of the Nutanix Prism Central or Element (cluster)", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "port": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + Description: "port is the port number to access the Nutanix Prism Central or Element (cluster)", + Default: 0, + Type: []string{"integer"}, + Format: "int32", }, }, }, + Required: []string{"address", "port"}, }, }, } } -func schema_openshift_api_osin_v1_BasicAuthPasswordIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_NutanixResourceIdentifier(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "NutanixResourceIdentifier holds the identity of a Nutanix PC resource (cluster, image, subnet, etc.)", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "url": { + "type": { SchemaProps: spec.SchemaProps{ - Description: "url is the remote URL to connect to", + Description: "type is the identifier type to use for this resource.", Default: "", Type: []string{"string"}, Format: "", }, }, - "ca": { + "uuid": { SchemaProps: spec.SchemaProps{ - Description: "ca is the CA for verifying TLS connections", - Default: "", + Description: "uuid is the UUID of the resource in the PC. It cannot be empty if the type is UUID.", Type: []string{"string"}, Format: "", }, }, - "certFile": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", + Description: "name is the resource name in the PC. It cannot be empty if the type is Name.", Type: []string{"string"}, Format: "", }, }, - "keyFile": { - SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - Default: "", - Type: []string{"string"}, - Format: "", + }, + Required: []string{"type"}, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "type", + "fields-to-discriminateBy": map[string]interface{}{ + "name": "Name", + "uuid": "UUID", + }, }, }, }, - Required: []string{"url", "ca", "certFile", "keyFile"}, }, }, } } -func schema_openshift_api_osin_v1_DenyAllPasswordIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OAuth(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "DenyAllPasswordIdentityProvider provides no identities for users\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "OAuth holds cluster-wide information about OAuth. The canonical name is `cluster`. It is used to configure the integrated OAuth server. This configuration is only honored when the top level Authentication config has type set to IntegratedOAuth.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -68156,17 +10035,41 @@ func schema_openshift_api_osin_v1_DenyAllPasswordIdentityProvider(ref common.Ref Format: "", }, }, + "metadata": { + SchemaProps: spec.SchemaProps{ + Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + }, + }, + "spec": { + SchemaProps: spec.SchemaProps{ + Description: "spec holds user settable values for configuration", + Default: map[string]interface{}{}, + Ref: ref(v1.OAuthSpec{}.OpenAPIModelName()), + }, + }, + "status": { + SchemaProps: spec.SchemaProps{ + Description: "status holds observed values from the cluster. They may not be overridden.", + Default: map[string]interface{}{}, + Ref: ref(v1.OAuthStatus{}.OpenAPIModelName()), + }, + }, }, + Required: []string{"metadata", "spec"}, }, }, + Dependencies: []string{ + v1.OAuthSpec{}.OpenAPIModelName(), v1.OAuthStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_osin_v1_GitHubIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OAuthList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -68183,430 +10086,335 @@ func schema_openshift_api_osin_v1_GitHubIdentityProvider(ref common.ReferenceCal Format: "", }, }, - "clientID": { - SchemaProps: spec.SchemaProps{ - Description: "clientID is the oauth client ID", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientSecret": { - SchemaProps: spec.SchemaProps{ - Description: "clientSecret is the oauth client secret", - Ref: ref(configv1.StringSource{}.OpenAPIModelName()), - }, - }, - "organizations": { + "metadata": { SchemaProps: spec.SchemaProps{ - Description: "organizations optionally restricts which organizations are allowed to log in", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), }, }, - "teams": { + "items": { SchemaProps: spec.SchemaProps{ - Description: "teams optionally restricts which teams are allowed to log in. Format is /.", - Type: []string{"array"}, + Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.OAuth{}.OpenAPIModelName()), }, }, }, }, }, - "hostname": { - SchemaProps: spec.SchemaProps{ - Description: "hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value that is configured at /setup/settings#hostname.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is the optional trusted certificate authority bundle to use when making requests to the server. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, }, - Required: []string{"clientID", "clientSecret", "organizations", "teams", "hostname", "ca"}, + Required: []string{"metadata", "items"}, }, }, Dependencies: []string{ - configv1.StringSource{}.OpenAPIModelName()}, + v1.OAuth{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_osin_v1_GitLabIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OAuthRemoteConnectionInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "OAuthRemoteConnectionInfo holds information necessary for establishing a remote connection", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, "url": { SchemaProps: spec.SchemaProps{ - Description: "url is the oauth server base URL", + Description: "url is the remote URL to connect to", Default: "", Type: []string{"string"}, Format: "", }, }, - "clientID": { + "ca": { SchemaProps: spec.SchemaProps{ - Description: "clientID is the oauth client ID", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.ConfigMapNameReference{}.OpenAPIModelName()), }, }, - "clientSecret": { + "tlsClientCert": { SchemaProps: spec.SchemaProps{ - Description: "clientSecret is the oauth client secret", - Ref: ref(configv1.StringSource{}.OpenAPIModelName()), + Description: "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), }, }, - "legacy": { + "tlsClientKey": { SchemaProps: spec.SchemaProps{ - Description: "legacy determines if OAuth2 or OIDC should be used If true, OAuth2 is used If false, OIDC is used If nil and the URL's host is gitlab.com, OIDC is used Otherwise, OAuth2 is used In a future release, nil will default to using OIDC Eventually this flag will be removed and only OIDC will be used", - Type: []string{"boolean"}, - Format: "", + Description: "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), }, }, }, - Required: []string{"ca", "url", "clientID", "clientSecret"}, + Required: []string{"url"}, }, }, Dependencies: []string{ - configv1.StringSource{}.OpenAPIModelName()}, + v1.ConfigMapNameReference{}.OpenAPIModelName(), v1.SecretNameReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_osin_v1_GoogleIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OAuthSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "GoogleIdentityProvider provides identities for users authenticating using Google credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "OAuthSpec contains desired cluster auth configuration", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + "identityProviders": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, }, - }, - "clientID": { SchemaProps: spec.SchemaProps{ - Description: "clientID is the oauth client ID", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "identityProviders is an ordered list of ways for a user to identify themselves. When this list is empty, no identities are provisioned for users.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.IdentityProvider{}.OpenAPIModelName()), + }, + }, + }, }, }, - "clientSecret": { + "tokenConfig": { SchemaProps: spec.SchemaProps{ - Description: "clientSecret is the oauth client secret", - Ref: ref(configv1.StringSource{}.OpenAPIModelName()), + Description: "tokenConfig contains options for authorization and access tokens", + Default: map[string]interface{}{}, + Ref: ref(v1.TokenConfig{}.OpenAPIModelName()), }, }, - "hostedDomain": { + "templates": { SchemaProps: spec.SchemaProps{ - Description: "hostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "templates allow you to customize pages like the login page.", + Default: map[string]interface{}{}, + Ref: ref(v1.OAuthTemplates{}.OpenAPIModelName()), }, }, }, - Required: []string{"clientID", "clientSecret", "hostedDomain"}, + Required: []string{"tokenConfig"}, }, }, Dependencies: []string{ - configv1.StringSource{}.OpenAPIModelName()}, + v1.IdentityProvider{}.OpenAPIModelName(), v1.OAuthTemplates{}.OpenAPIModelName(), v1.TokenConfig{}.OpenAPIModelName()}, } } -func schema_openshift_api_osin_v1_GrantConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OAuthStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "GrantConfig holds the necessary configuration options for grant handlers", + Description: "OAuthStatus shows current known state of OAuth server in the cluster", Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "method": { - SchemaProps: spec.SchemaProps{ - Description: "method determines the default strategy to use when an OAuth client requests a grant. This method will be used only if the specific OAuth client doesn't provide a strategy of their own. Valid grant handling methods are:\n - auto: always approves grant requests, useful for trusted clients\n - prompt: prompts the end user for approval of grant requests, useful for third-party clients\n - deny: always denies grant requests, useful for black-listed clients", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "serviceAccountMethod": { - SchemaProps: spec.SchemaProps{ - Description: "serviceAccountMethod is used for determining client authorization for service account oauth client. It must be either: deny, prompt", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"method", "serviceAccountMethod"}, }, }, } } -func schema_openshift_api_osin_v1_HTPasswdPasswordIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OAuthTemplates(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "OAuthTemplates allow for customization of pages like the login page", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "login": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", + Description: "login is the name of a secret that specifies a go template to use to render the login page. The key \"login.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default login page is used. If the specified template is not valid, the default login page is used. If unspecified, the default login page is used. The namespace for this secret is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), }, }, - "apiVersion": { + "providerSelection": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + Description: "providerSelection is the name of a secret that specifies a go template to use to render the provider selection page. The key \"providers.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default provider selection page is used. If the specified template is not valid, the default provider selection page is used. If unspecified, the default provider selection page is used. The namespace for this secret is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), }, }, - "file": { + "error": { SchemaProps: spec.SchemaProps{ - Description: "file is a reference to your htpasswd file", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "error is the name of a secret that specifies a go template to use to render error pages during the authentication or grant flow. The key \"errors.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default error page is used. If the specified template is not valid, the default error page is used. If unspecified, the default error page is used. The namespace for this secret is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), }, }, }, - Required: []string{"file"}, }, }, + Dependencies: []string{ + v1.SecretNameReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_osin_v1_IdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OIDCClientConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "IdentityProvider provides identities for users authenticating using credentials", + Description: "OIDCClientConfig configures how platform clients interact with identity providers as an authentication method.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "name": { + "componentName": { SchemaProps: spec.SchemaProps{ - Description: "name is used to qualify the identities returned by this provider", + Description: "componentName is a required field that specifies the name of the platform component being configured to use the identity provider as an authentication mode.\n\nIt is used in combination with componentNamespace as a unique identifier.\n\ncomponentName must not be an empty string (\"\") and must not exceed 256 characters in length.", Default: "", Type: []string{"string"}, Format: "", }, }, - "challenge": { + "componentNamespace": { SchemaProps: spec.SchemaProps{ - Description: "challenge indicates whether to issue WWW-Authenticate challenges for this provider", - Default: false, - Type: []string{"boolean"}, + Description: "componentNamespace is a required field that specifies the namespace in which the platform component being configured to use the identity provider as an authentication mode is running.\n\nIt is used in combination with componentName as a unique identifier.\n\ncomponentNamespace must not be an empty string (\"\") and must not exceed 63 characters in length.", + Default: "", + Type: []string{"string"}, Format: "", }, }, - "login": { + "clientID": { SchemaProps: spec.SchemaProps{ - Description: "login indicates whether to use this identity provider for unauthenticated browsers to login against", - Default: false, - Type: []string{"boolean"}, + Description: "clientID is a required field that configures the client identifier, from the identity provider, that the platform component uses for authentication requests made to the identity provider. The identity provider must accept this identifier for platform components to be able to use the identity provider as an authentication mode.\n\nclientID must not be an empty string (\"\").", + Default: "", + Type: []string{"string"}, Format: "", }, }, - "mappingMethod": { + "clientSecret": { SchemaProps: spec.SchemaProps{ - Description: "mappingMethod determines how identities from this provider are mapped to users", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "clientSecret is an optional field that configures the client secret used by the platform component when making authentication requests to the identity provider.\n\nWhen not specified, no client secret will be used when making authentication requests to the identity provider.\n\nWhen specified, clientSecret references a Secret in the 'openshift-config' namespace that contains the client secret in the 'clientSecret' key of the '.data' field.\n\nThe client secret will be used when making authentication requests to the identity provider.\n\nPublic clients do not require a client secret but private clients do require a client secret to work with the identity provider.", + Default: map[string]interface{}{}, + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), }, }, - "provider": { + "extraScopes": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "set", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "provider contains the information about how to set up a specific identity provider", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), + Description: "extraScopes is an optional field that configures the extra scopes that should be requested by the platform component when making authentication requests to the identity provider. This is useful if you have configured claim mappings that requires specific scopes to be requested beyond the standard OIDC scopes.\n\nWhen omitted, no additional scopes are requested.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, }, - Required: []string{"name", "challenge", "login", "mappingMethod", "provider"}, + Required: []string{"componentName", "componentNamespace", "clientID"}, }, }, Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, + v1.SecretNameReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_osin_v1_KeystonePasswordIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OIDCClientReference(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "OIDCClientReference is a reference to a platform component client configuration.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url is the remote URL to connect to", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is the CA for verifying TLS connections", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "certFile": { - SchemaProps: spec.SchemaProps{ - Description: "certFile is a file containing a PEM-encoded certificate", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "keyFile": { + "oidcProviderName": { SchemaProps: spec.SchemaProps{ - Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + Description: "oidcProviderName is a required reference to the 'name' of the identity provider configured in 'oidcProviders' that this client is associated with.\n\noidcProviderName must not be an empty string (\"\").", Default: "", Type: []string{"string"}, Format: "", }, }, - "domainName": { + "issuerURL": { SchemaProps: spec.SchemaProps{ - Description: "domainName is required for keystone v3", + Description: "issuerURL is a required field that specifies the URL of the identity provider that this client is configured to make requests against.\n\nissuerURL must use the 'https' scheme.", Default: "", Type: []string{"string"}, Format: "", }, }, - "useKeystoneIdentity": { + "clientID": { SchemaProps: spec.SchemaProps{ - Description: "useKeystoneIdentity flag indicates that user should be authenticated by keystone ID, not by username", - Default: false, - Type: []string{"boolean"}, + Description: "clientID is a required field that specifies the client identifier, from the identity provider, that the platform component is using for authentication requests made to the identity provider.\n\nclientID must not be empty.", + Default: "", + Type: []string{"string"}, Format: "", }, }, }, - Required: []string{"url", "ca", "certFile", "keyFile", "domainName", "useKeystoneIdentity"}, + Required: []string{"oidcProviderName", "issuerURL", "clientID"}, }, }, } } -func schema_openshift_api_osin_v1_LDAPAttributeMapping(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OIDCClientStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields", + Description: "OIDCClientStatus represents the current state of platform components and how they interact with the configured identity providers.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "id": { + "componentName": { SchemaProps: spec.SchemaProps{ - Description: "id is the list of attributes whose values should be used as the user ID. Required. LDAP standard identity attribute is \"dn\"", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, + Description: "componentName is a required field that specifies the name of the platform component using the identity provider as an authentication mode. It is used in combination with componentNamespace as a unique identifier.\n\ncomponentName must not be an empty string (\"\") and must not exceed 256 characters in length.", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "componentNamespace": { + SchemaProps: spec.SchemaProps{ + Description: "componentNamespace is a required field that specifies the namespace in which the platform component using the identity provider as an authentication mode is running.\n\nIt is used in combination with componentName as a unique identifier.\n\ncomponentNamespace must not be an empty string (\"\") and must not exceed 63 characters in length.", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "currentOIDCClients": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "issuerURL", + "clientID", }, + "x-kubernetes-list-type": "map", }, }, - }, - "preferredUsername": { SchemaProps: spec.SchemaProps{ - Description: "preferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"", + Description: "currentOIDCClients is an optional list of clients that the component is currently using.\n\nEntries must have unique issuerURL/clientID pairs.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.OIDCClientReference{}.OpenAPIModelName()), }, }, }, }, }, - "name": { + "consumingUsers": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "set", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"", + Description: "consumingUsers is an optional list of ServiceAccounts requiring read permissions on the `clientSecret` secret.\n\nconsumingUsers must not exceed 5 entries.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -68619,276 +10427,228 @@ func schema_openshift_api_osin_v1_LDAPAttributeMapping(ref common.ReferenceCallb }, }, }, - "email": { + "conditions": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "type", + }, + "x-kubernetes-list-type": "map", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", + Description: "conditions are used to communicate the state of the `oidcClients` entry.\n\nSupported conditions include Available, Degraded and Progressing.\n\nIf Available is true, the component is successfully using the configured client. If Degraded is true, that means something has gone wrong trying to handle the client configuration. If Progressing is true, that means the component is taking some action related to the `oidcClients` entry.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(metav1.Condition{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"id", "preferredUsername", "name", "email"}, + Required: []string{"componentName", "componentNamespace"}, }, }, + Dependencies: []string{ + v1.OIDCClientReference{}.OpenAPIModelName(), metav1.Condition{}.OpenAPIModelName()}, } } -func schema_openshift_api_osin_v1_LDAPPasswordIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OIDCProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "name is a required field that configures the unique human-readable identifier associated with the identity provider. It is used to distinguish between multiple identity providers and has no impact on token validation or authentication mechanics.\n\nname must not be an empty string (\"\").", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "issuer": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + Description: "issuer is a required field that configures how the platform interacts with the identity provider and how tokens issued from the identity provider are evaluated by the Kubernetes API server.", + Default: map[string]interface{}{}, + Ref: ref(v1.TokenIssuer{}.OpenAPIModelName()), }, }, - "url": { - SchemaProps: spec.SchemaProps{ - Description: "url is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is\n ldap://host:port/basedn?attribute?scope?filter", - Default: "", - Type: []string{"string"}, - Format: "", + "oidcClients": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "componentNamespace", + "componentName", + }, + "x-kubernetes-list-type": "map", + }, }, - }, - "bindDN": { SchemaProps: spec.SchemaProps{ - Description: "bindDN is an optional DN to bind with during the search phase.", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "oidcClients is an optional field that configures how on-cluster, platform clients should request tokens from the identity provider. oidcClients must not exceed 20 entries and entries must have unique namespace/name pairs.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.OIDCClientConfig{}.OpenAPIModelName()), + }, + }, + }, }, }, - "bindPassword": { + "claimMappings": { SchemaProps: spec.SchemaProps{ - Description: "bindPassword is an optional password to bind with during the search phase.", - Ref: ref(configv1.StringSource{}.OpenAPIModelName()), + Description: "claimMappings is a required field that configures the rules to be used by the Kubernetes API server for translating claims in a JWT token, issued by the identity provider, to a cluster identity.", + Default: map[string]interface{}{}, + Ref: ref(v1.TokenClaimMappings{}.OpenAPIModelName()), }, }, - "insecure": { + "claimValidationRules": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "insecure, if true, indicates the connection should not use TLS. Cannot be set to true with a URL scheme of \"ldaps://\" If false, \"ldaps://\" URLs connect using TLS, and \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830", - Default: false, - Type: []string{"boolean"}, - Format: "", + Description: "claimValidationRules is an optional field that configures the rules to be used by the Kubernetes API server for validating the claims in a JWT token issued by the identity provider.\n\nValidation rules are joined via an AND operation.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.TokenClaimValidationRule{}.OpenAPIModelName()), + }, + }, + }, }, }, - "ca": { + "userValidationRules": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "expression", + }, + "x-kubernetes-list-type": "map", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "userValidationRules is an optional field that configures the set of rules used to validate the cluster user identity that was constructed via mapping token claims to user identity attributes. Rules are CEL expressions that must evaluate to 'true' for authentication to succeed. If any rule in the chain of rules evaluates to 'false', authentication will fail. When specified, at least one rule must be specified and no more than 64 rules may be specified.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.TokenUserValidationRule{}.OpenAPIModelName()), + }, + }, + }, }, }, - "attributes": { + "externalClaimsSources": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "attributes maps LDAP attributes to identities", - Default: map[string]interface{}{}, - Ref: ref(osinv1.LDAPAttributeMapping{}.OpenAPIModelName()), + Description: "externalClaimsSources is an optional field that can be used to configure sources, external to the token provided in a request, in which claims should be fetched from and made available to the claim mapping process that is used to build the identity of a token holder.\n\nFor example, fetching additional user metadata from an OIDC provider's UserInfo endpoint.\n\nWhen not specified, only claims present in the token itself will be available in the claim mapping process.\n\nWhen specified, at least one external claim source must be specified and no more than 5 sources may be specified. All external claim sources must have unique claim mappings. When an external source responds and resolves additional claims successfully, they will be made available as claims during the claim mapping process. Externally sourced claims with the same name as a claim existing within the token will overwrite the claim data from the token with the externally sourced information. If an external source does not respond, responds with an error, or the additional claim data cannot be resolved from the response successfully it will not be included in the claim data passed to the claim mapping process.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.ExternalClaimsSource{}.OpenAPIModelName()), + }, + }, + }, }, }, }, - Required: []string{"url", "bindDN", "bindPassword", "insecure", "ca", "attributes"}, + Required: []string{"name", "issuer", "claimMappings"}, }, }, Dependencies: []string{ - configv1.StringSource{}.OpenAPIModelName(), osinv1.LDAPAttributeMapping{}.OpenAPIModelName()}, + v1.ExternalClaimsSource{}.OpenAPIModelName(), v1.OIDCClientConfig{}.OpenAPIModelName(), v1.TokenClaimMappings{}.OpenAPIModelName(), v1.TokenClaimValidationRule{}.OpenAPIModelName(), v1.TokenIssuer{}.OpenAPIModelName(), v1.TokenUserValidationRule{}.OpenAPIModelName()}, } } -func schema_openshift_api_osin_v1_OAuthConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ObjectReference(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "OAuthConfig holds the necessary configuration options for OAuth authentication", + Description: "ObjectReference contains enough information to let you inspect or modify the referred object.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "masterCA": { - SchemaProps: spec.SchemaProps{ - Description: "masterCA is the CA for verifying the TLS connection back to the MasterURL. This field is deprecated and will be removed in a future release. See loginURL for details. Deprecated", - Type: []string{"string"}, - Format: "", - }, - }, - "masterURL": { + "group": { SchemaProps: spec.SchemaProps{ - Description: "masterURL is used for making server-to-server calls to exchange authorization codes for access tokens This field is deprecated and will be removed in a future release. See loginURL for details. Deprecated", + Description: "group of the referent.", Default: "", Type: []string{"string"}, Format: "", }, }, - "masterPublicURL": { + "resource": { SchemaProps: spec.SchemaProps{ - Description: "masterPublicURL is used for building valid client redirect URLs for internal and external access This field is deprecated and will be removed in a future release. See loginURL for details. Deprecated", + Description: "resource of the referent.", Default: "", Type: []string{"string"}, Format: "", }, }, - "loginURL": { + "namespace": { SchemaProps: spec.SchemaProps{ - Description: "loginURL, along with masterCA, masterURL and masterPublicURL have distinct meanings depending on how the OAuth server is run. The two states are: 1. embedded in the kube api server (all 3.x releases) 2. as a standalone external process (all 4.x releases) in the embedded configuration, loginURL is equivalent to masterPublicURL and the other fields have functionality that matches their docs. in the standalone configuration, the fields are used as: loginURL is the URL required to login to the cluster: oc login --server= masterPublicURL is the issuer URL it is accessible from inside (service network) and outside (ingress) of the cluster masterURL is the loopback variation of the token_endpoint URL with no path component it is only accessible from inside (service network) of the cluster masterCA is used to perform TLS verification for connections made to masterURL For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2", - Default: "", + Description: "namespace of the referent.", Type: []string{"string"}, Format: "", }, }, - "assetPublicURL": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "assetPublicURL is used for building valid client redirect URLs for external access", + Description: "name of the referent.", Default: "", Type: []string{"string"}, Format: "", }, }, - "alwaysShowProviderSelection": { - SchemaProps: spec.SchemaProps{ - Description: "alwaysShowProviderSelection will force the provider selection page to render even when there is only a single provider.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "identityProviders": { - SchemaProps: spec.SchemaProps{ - Description: "identityProviders is an ordered list of ways for a user to identify themselves", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(osinv1.IdentityProvider{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "grantConfig": { - SchemaProps: spec.SchemaProps{ - Description: "grantConfig describes how to handle grants", - Default: map[string]interface{}{}, - Ref: ref(osinv1.GrantConfig{}.OpenAPIModelName()), - }, - }, - "sessionConfig": { - SchemaProps: spec.SchemaProps{ - Description: "sessionConfig hold information about configuring sessions.", - Ref: ref(osinv1.SessionConfig{}.OpenAPIModelName()), - }, - }, - "tokenConfig": { - SchemaProps: spec.SchemaProps{ - Description: "tokenConfig contains options for authorization and access tokens", - Default: map[string]interface{}{}, - Ref: ref(osinv1.TokenConfig{}.OpenAPIModelName()), - }, - }, - "templates": { - SchemaProps: spec.SchemaProps{ - Description: "templates allow you to customize pages like the login page.", - Ref: ref(osinv1.OAuthTemplates{}.OpenAPIModelName()), - }, - }, - "proxyTrustedCA": { - SchemaProps: spec.SchemaProps{ - Description: "proxyTrustedCA is an optional path to a PEM-encoded CA bundle used to verify connections to an HTTPS proxy during outbound IdP requests. When omitted, proxy connections use the system trust roots only.", - Type: []string{"string"}, - Format: "", - }, - }, }, - Required: []string{"masterCA", "masterURL", "masterPublicURL", "loginURL", "assetPublicURL", "alwaysShowProviderSelection", "identityProviders", "grantConfig", "sessionConfig", "tokenConfig", "templates"}, + Required: []string{"group", "resource", "name"}, }, }, - Dependencies: []string{ - osinv1.GrantConfig{}.OpenAPIModelName(), osinv1.IdentityProvider{}.OpenAPIModelName(), osinv1.OAuthTemplates{}.OpenAPIModelName(), osinv1.SessionConfig{}.OpenAPIModelName(), osinv1.TokenConfig{}.OpenAPIModelName()}, } } -func schema_openshift_api_osin_v1_OAuthTemplates(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OldTLSProfile(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "OAuthTemplates allow for customization of pages like the login page", + Description: "OldTLSProfile is a TLS security profile based on the \"old\" configuration of the Mozilla Server Side TLS configuration guidelines.", Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "login": { - SchemaProps: spec.SchemaProps{ - Description: "login is a path to a file containing a go template used to render the login page. If unspecified, the default login page is used.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "providerSelection": { - SchemaProps: spec.SchemaProps{ - Description: "providerSelection is a path to a file containing a go template used to render the provider selection page. If unspecified, the default provider selection page is used.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "error": { - SchemaProps: spec.SchemaProps{ - Description: "error is a path to a file containing a go template used to render error pages during the authentication or grant flow If unspecified, the default error page is used.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"login", "providerSelection", "error"}, }, }, } } -func schema_openshift_api_osin_v1_OpenIDClaims(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OpenIDClaims(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ Description: "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "id": { - SchemaProps: spec.SchemaProps{ - Description: "id is the list of claims whose values should be used as the user ID. Required. OpenID standard identity claim is \"sub\"", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, + "preferredUsername": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", }, }, - }, - "preferredUsername": { SchemaProps: spec.SchemaProps{ - Description: "preferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the id claim", + Description: "preferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the sub claim", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -68902,6 +10662,11 @@ func schema_openshift_api_osin_v1_OpenIDClaims(ref common.ReferenceCallback) com }, }, "name": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ Description: "name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity", Type: []string{"array"}, @@ -68917,6 +10682,11 @@ func schema_openshift_api_osin_v1_OpenIDClaims(ref common.ReferenceCallback) com }, }, "email": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ Description: "email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", Type: []string{"array"}, @@ -68932,8 +10702,13 @@ func schema_openshift_api_osin_v1_OpenIDClaims(ref common.ReferenceCallback) com }, }, "groups": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "groups is the list of claims value of which should be used to synchronize groups from the OIDC provider to OpenShift for the user", + Description: "groups is the list of claims value of which should be used to synchronize groups from the OIDC provider to OpenShift for the user. If multiple claims are specified, the first one with a non-empty value is used.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -68947,41 +10722,18 @@ func schema_openshift_api_osin_v1_OpenIDClaims(ref common.ReferenceCallback) com }, }, }, - Required: []string{"id", "preferredUsername", "name", "email", "groups"}, }, }, } } -func schema_openshift_api_osin_v1_OpenIDIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OpenIDIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "ca": { - SchemaProps: spec.SchemaProps{ - Description: "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, "clientID": { SchemaProps: spec.SchemaProps{ Description: "clientID is the oauth client ID", @@ -68992,8 +10744,16 @@ func schema_openshift_api_osin_v1_OpenIDIdentityProvider(ref common.ReferenceCal }, "clientSecret": { SchemaProps: spec.SchemaProps{ - Description: "clientSecret is the oauth client secret", - Ref: ref(configv1.StringSource{}.OpenAPIModelName()), + Description: "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), + }, + }, + "ca": { + SchemaProps: spec.SchemaProps{ + Description: "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.ConfigMapNameReference{}.OpenAPIModelName()), }, }, "extraScopes": { @@ -69027,231 +10787,76 @@ func schema_openshift_api_osin_v1_OpenIDIdentityProvider(ref common.ReferenceCal }, }, }, - "urls": { + "issuer": { SchemaProps: spec.SchemaProps{ - Description: "urls to use to authenticate", - Default: map[string]interface{}{}, - Ref: ref(osinv1.OpenIDURLs{}.OpenAPIModelName()), + Description: "issuer is the URL that the OpenID Provider asserts as its Issuer Identifier. It must use the https scheme with no query or fragment component.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, "claims": { SchemaProps: spec.SchemaProps{ Description: "claims mappings", Default: map[string]interface{}{}, - Ref: ref(osinv1.OpenIDClaims{}.OpenAPIModelName()), + Ref: ref(v1.OpenIDClaims{}.OpenAPIModelName()), }, }, }, - Required: []string{"ca", "clientID", "clientSecret", "extraScopes", "extraAuthorizeParameters", "urls", "claims"}, + Required: []string{"clientID", "clientSecret", "issuer", "claims"}, }, }, Dependencies: []string{ - configv1.StringSource{}.OpenAPIModelName(), osinv1.OpenIDClaims{}.OpenAPIModelName(), osinv1.OpenIDURLs{}.OpenAPIModelName()}, + v1.ConfigMapNameReference{}.OpenAPIModelName(), v1.OpenIDClaims{}.OpenAPIModelName(), v1.SecretNameReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_osin_v1_OpenIDURLs(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OpenStackPlatformLoadBalancer(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "OpenIDURLs are URLs to use when authenticating with an OpenID identity provider", + Description: "OpenStackPlatformLoadBalancer defines the load balancer used by the cluster on OpenStack platform.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "authorize": { - SchemaProps: spec.SchemaProps{ - Description: "authorize is the oauth authorization URL", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "token": { - SchemaProps: spec.SchemaProps{ - Description: "token is the oauth token granting URL", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "userInfo": { + "type": { SchemaProps: spec.SchemaProps{ - Description: "userInfo is the optional userinfo URL. If present, a granted access_token is used to request claims If empty, a granted id_token is parsed for claims", - Default: "", + Description: "type defines the type of load balancer used by the cluster on OpenStack platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", + Default: "OpenShiftManagedDefault", Type: []string{"string"}, Format: "", }, }, }, - Required: []string{"authorize", "token", "userInfo"}, }, - }, - } -} - -func schema_openshift_api_osin_v1_OsinServerConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "servingInfo": { - SchemaProps: spec.SchemaProps{ - Description: "servingInfo describes how to start serving", - Default: map[string]interface{}{}, - Ref: ref(configv1.HTTPServingInfo{}.OpenAPIModelName()), - }, - }, - "corsAllowedOrigins": { - SchemaProps: spec.SchemaProps{ - Description: "corsAllowedOrigins", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "auditConfig": { - SchemaProps: spec.SchemaProps{ - Description: "auditConfig describes how to configure audit information", - Default: map[string]interface{}{}, - Ref: ref(configv1.AuditConfig{}.OpenAPIModelName()), - }, - }, - "storageConfig": { - SchemaProps: spec.SchemaProps{ - Description: "storageConfig contains information about how to use", - Default: map[string]interface{}{}, - Ref: ref(configv1.EtcdStorageConfig{}.OpenAPIModelName()), - }, - }, - "admission": { - SchemaProps: spec.SchemaProps{ - Description: "admissionConfig holds information about how to configure admission.", - Default: map[string]interface{}{}, - Ref: ref(configv1.AdmissionConfig{}.OpenAPIModelName()), - }, - }, - "kubeClientConfig": { - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(configv1.KubeClientConfig{}.OpenAPIModelName()), - }, - }, - "oauthConfig": { - SchemaProps: spec.SchemaProps{ - Description: "oauthConfig holds the necessary configuration options for OAuth authentication", - Default: map[string]interface{}{}, - Ref: ref(osinv1.OAuthConfig{}.OpenAPIModelName()), + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "type", + "fields-to-discriminateBy": map[string]interface{}{}, }, }, }, - Required: []string{"servingInfo", "corsAllowedOrigins", "auditConfig", "storageConfig", "admission", "kubeClientConfig", "oauthConfig"}, }, }, - Dependencies: []string{ - configv1.AdmissionConfig{}.OpenAPIModelName(), configv1.AuditConfig{}.OpenAPIModelName(), configv1.EtcdStorageConfig{}.OpenAPIModelName(), configv1.HTTPServingInfo{}.OpenAPIModelName(), configv1.KubeClientConfig{}.OpenAPIModelName(), osinv1.OAuthConfig{}.OpenAPIModelName()}, } } -func schema_openshift_api_osin_v1_RequestHeaderIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OpenStackPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "loginURL": { - SchemaProps: spec.SchemaProps{ - Description: "loginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "challengeURL": { - SchemaProps: spec.SchemaProps{ - Description: "challengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientCA": { - SchemaProps: spec.SchemaProps{ - Description: "clientCA is a file with the trusted signer certs. If empty, no request verification is done, and any direct request to the OAuth server can impersonate any identity from this provider, merely by setting a request header.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "clientCommonNames": { - SchemaProps: spec.SchemaProps{ - Description: "clientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "headers": { - SchemaProps: spec.SchemaProps{ - Description: "headers is the set of headers to check for identity information", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, + Description: "OpenStackPlatformSpec holds the desired state of the OpenStack infrastructure provider. This only includes fields that can be modified in the cluster.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "apiServerInternalIPs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", }, }, - }, - "preferredUsernameHeaders": { SchemaProps: spec.SchemaProps{ - Description: "preferredUsernameHeaders is the set of headers to check for the preferred username", + Description: "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -69264,9 +10869,14 @@ func schema_openshift_api_osin_v1_RequestHeaderIdentityProvider(ref common.Refer }, }, }, - "nameHeaders": { + "ingressIPs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "nameHeaders is the set of headers to check for the display name", + Description: "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -69279,9 +10889,14 @@ func schema_openshift_api_osin_v1_RequestHeaderIdentityProvider(ref common.Refer }, }, }, - "emailHeaders": { + "machineNetworks": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "emailHeaders is the set of headers to check for the email address", + Description: "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -69295,171 +10910,164 @@ func schema_openshift_api_osin_v1_RequestHeaderIdentityProvider(ref common.Refer }, }, }, - Required: []string{"loginURL", "challengeURL", "clientCA", "clientCommonNames", "headers", "preferredUsernameHeaders", "nameHeaders", "emailHeaders"}, }, }, } } -func schema_openshift_api_osin_v1_SessionConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OpenStackPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SessionConfig specifies options for cookie-based sessions. Used by AuthRequestHandlerSession", + Description: "OpenStackPlatformStatus holds the current status of the OpenStack infrastructure provider.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "sessionSecretsFile": { + "apiServerInternalIP": { SchemaProps: spec.SchemaProps{ - Description: "sessionSecretsFile is a reference to a file containing a serialized SessionSecrets object If no file is specified, a random signing and encryption key are generated at each server start", - Default: "", + Description: "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", Type: []string{"string"}, Format: "", }, }, - "sessionMaxAgeSeconds": { + "apiServerInternalIPs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "sessionMaxAgeSeconds specifies how long created sessions last. Used by AuthRequestHandlerSession", - Default: 0, - Type: []string{"integer"}, - Format: "int32", + Description: "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "sessionName": { + "cloudName": { SchemaProps: spec.SchemaProps{ - Description: "sessionName is the cookie name used to store the session", - Default: "", + Description: "cloudName is the name of the desired OpenStack cloud in the client configuration file (`clouds.yaml`).", Type: []string{"string"}, Format: "", }, }, - }, - Required: []string{"sessionSecretsFile", "sessionMaxAgeSeconds", "sessionName"}, - }, - }, - } -} - -func schema_openshift_api_osin_v1_SessionSecret(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SessionSecret is a secret used to authenticate/decrypt cookie-based sessions", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "authentication": { + "ingressIP": { SchemaProps: spec.SchemaProps{ - Description: "authentication is used to authenticate sessions using HMAC. Recommended to use a secret with 32 or 64 bytes.", - Default: "", + Description: "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", Type: []string{"string"}, Format: "", }, }, - "encryption": { + "ingressIPs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "encryption is used to encrypt sessions. Must be 16, 24, or 32 characters long, to select AES-128, AES-", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - }, - Required: []string{"authentication", "encryption"}, - }, - }, - } -} - -func schema_openshift_api_osin_v1_SessionSecrets(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SessionSecrets list the secrets to use to sign/encrypt and authenticate/decrypt created sessions.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { + "nodeDNSIP": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for OpenStack deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "loadBalancer": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "loadBalancer defines how the load balancer used by the cluster is configured.", + Default: map[string]interface{}{"type": "OpenShiftManagedDefault"}, + Ref: ref(v1.OpenStackPlatformLoadBalancer{}.OpenAPIModelName()), + }, + }, + "dnsRecordsType": { + SchemaProps: spec.SchemaProps{ + Description: "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", Type: []string{"string"}, Format: "", + Enum: []interface{}{"External", "Internal"}, }, }, - "secrets": { + "machineNetworks": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "secrets is a list of secrets New sessions are signed and encrypted using the first secret. Existing sessions are decrypted/authenticated by each secret until one succeeds. This allows rotating secrets.", + Description: "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(osinv1.SessionSecret{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, }, - Required: []string{"secrets"}, + Required: []string{"apiServerInternalIPs", "ingressIPs"}, }, }, Dependencies: []string{ - osinv1.SessionSecret{}.OpenAPIModelName()}, + v1.OpenStackPlatformLoadBalancer{}.OpenAPIModelName()}, } } -func schema_openshift_api_osin_v1_TokenConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OperandVersion(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "TokenConfig holds the necessary configuration options for authorization and access tokens", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "authorizeTokenMaxAgeSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "authorizeTokenMaxAgeSeconds defines the maximum age of authorize tokens", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "accessTokenMaxAgeSeconds": { - SchemaProps: spec.SchemaProps{ - Description: "accessTokenMaxAgeSeconds defines the maximum age of access tokens", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "accessTokenInactivityTimeoutSeconds": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "accessTokenInactivityTimeoutSeconds - DEPRECATED: setting this field has no effect.", - Type: []string{"integer"}, - Format: "int32", + Description: "name is the name of the particular operand this version is for. It usually matches container images, not operators.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "accessTokenInactivityTimeout": { + "version": { SchemaProps: spec.SchemaProps{ - Description: "accessTokenInactivityTimeout defines the token inactivity timeout for tokens granted by any client. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Takes valid time duration string such as \"5m\", \"1.5h\" or \"2h45m\". The minimum allowed value for duration is 300s (5 minutes). If the timeout is configured per client, then that value takes precedence. If the timeout value is not specified and the client does not override the value, then tokens are valid until their lifetime.", - Ref: ref(metav1.Duration{}.OpenAPIModelName()), + Description: "version indicates which version of a particular operand is currently being managed. It must always match the Available operand. If 1.0.0 is Available, then this must indicate 1.0.0 even if the operator is trying to rollout 1.1.0", + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, + Required: []string{"name", "version"}, }, }, - Dependencies: []string{ - metav1.Duration{}.OpenAPIModelName()}, } } -func schema_openshift_api_project_v1_Project(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OperatorHub(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "Projects are the unit of isolation and collaboration in OpenShift. A project has one or more members, a quota on the resources that the project may consume, and the security controls on the resources in the project. Within a project, members may have different roles - project administrators can set membership, editors can create and manage the resources, and viewers can see but not access running containers. In a normal cluster project administrators are not able to alter their quotas - that is restricted to cluster administrators.\n\nListing or watching projects will return only projects the user has the reader role on.\n\nAn OpenShift project is an alternative representation of a Kubernetes namespace. Projects are exposed as editable to end users while namespaces are not. Direct creation of a project is typically restricted to administrators, while end users should use the requestproject resource.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "OperatorHub is the Schema for the operatorhubs API. It can be used to change the state of the default hub sources for OperatorHub on the cluster from enabled to disabled and vice versa.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -69485,31 +11093,30 @@ func schema_openshift_api_project_v1_Project(ref common.ReferenceCallback) commo }, "spec": { SchemaProps: spec.SchemaProps{ - Description: "spec defines the behavior of the Namespace.", - Default: map[string]interface{}{}, - Ref: ref(projectv1.ProjectSpec{}.OpenAPIModelName()), + Default: map[string]interface{}{}, + Ref: ref(v1.OperatorHubSpec{}.OpenAPIModelName()), }, }, "status": { SchemaProps: spec.SchemaProps{ - Description: "status describes the current status of a Namespace", - Default: map[string]interface{}{}, - Ref: ref(projectv1.ProjectStatus{}.OpenAPIModelName()), + Default: map[string]interface{}{}, + Ref: ref(v1.OperatorHubStatus{}.OpenAPIModelName()), }, }, }, + Required: []string{"metadata", "spec", "status"}, }, }, Dependencies: []string{ - projectv1.ProjectSpec{}.OpenAPIModelName(), projectv1.ProjectStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.OperatorHubSpec{}.OpenAPIModelName(), v1.OperatorHubStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_project_v1_ProjectList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OperatorHubList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ProjectList is a list of Project objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "OperatorHubList contains a list of OperatorHub\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -69535,94 +11142,78 @@ func schema_openshift_api_project_v1_ProjectList(ref common.ReferenceCallback) c }, "items": { SchemaProps: spec.SchemaProps{ - Description: "items is the list of projects", - Type: []string{"array"}, + Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(projectv1.Project{}.OpenAPIModelName()), + Ref: ref(v1.OperatorHub{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"items"}, + Required: []string{"metadata", "items"}, }, }, Dependencies: []string{ - projectv1.Project{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.OperatorHub{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_project_v1_ProjectRequest(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OperatorHubSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ProjectRequest is the set of options necessary to fully qualify a project request\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "OperatorHubSpec defines the desired state of OperatorHub", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "displayName": { + "disableAllDefaultSources": { SchemaProps: spec.SchemaProps{ - Description: "displayName is the display name to apply to a project", - Type: []string{"string"}, + Description: "disableAllDefaultSources allows you to disable all the default hub sources. If this is true, a specific entry in sources can be used to enable a default source. If this is false, a specific entry in sources can be used to disable or enable a default source.", + Type: []string{"boolean"}, Format: "", }, }, - "description": { + "sources": { SchemaProps: spec.SchemaProps{ - Description: "description is the description to apply to a project", - Type: []string{"string"}, - Format: "", + Description: "sources is the list of default hub sources and their configuration. If the list is empty, it implies that the default hub sources are enabled on the cluster unless disableAllDefaultSources is true. If disableAllDefaultSources is true and sources is not empty, the configuration present in sources will take precedence. The list of default hub sources and their current state will always be reflected in the status block.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.HubSource{}.OpenAPIModelName()), + }, + }, + }, }, }, }, }, }, Dependencies: []string{ - metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.HubSource{}.OpenAPIModelName()}, } } -func schema_openshift_api_project_v1_ProjectSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OperatorHubStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ProjectSpec describes the attributes on a Project", + Description: "OperatorHubStatus defines the observed state of OperatorHub. The current state of the default hub sources will always be reflected here.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "finalizers": { + "sources": { SchemaProps: spec.SchemaProps{ - Description: "finalizers is an opaque list of values that must be empty to permanently remove object from storage", + Description: "sources encapsulates the result of applying the configuration for each hub source", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.HubSourceStatus{}.OpenAPIModelName()), }, }, }, @@ -69631,588 +11222,507 @@ func schema_openshift_api_project_v1_ProjectSpec(ref common.ReferenceCallback) c }, }, }, + Dependencies: []string{ + v1.HubSourceStatus{}.OpenAPIModelName()}, } } -func schema_openshift_api_project_v1_ProjectStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OvirtPlatformLoadBalancer(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ProjectStatus is information about the current status of a Project", + Description: "OvirtPlatformLoadBalancer defines the load balancer used by the cluster on Ovirt platform.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "phase": { + "type": { SchemaProps: spec.SchemaProps{ - Description: "phase is the current lifecycle phase of the project\n\nPossible enum values:\n - `\"Active\"` means the namespace is available for use in the system\n - `\"Terminating\"` means the namespace is undergoing graceful termination", + Description: "type defines the type of load balancer used by the cluster on Ovirt platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", + Default: "OpenShiftManagedDefault", Type: []string{"string"}, Format: "", - Enum: []interface{}{"Active", "Terminating"}, }, }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "Represents the latest available observations of the project current state.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(corev1.NamespaceCondition{}.OpenAPIModelName()), - }, - }, - }, + }, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "type", + "fields-to-discriminateBy": map[string]interface{}{}, }, }, }, }, }, - Dependencies: []string{ - corev1.NamespaceCondition{}.OpenAPIModelName()}, } } -func schema_openshift_api_quota_v1_AppliedClusterResourceQuota(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OvirtPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "AppliedClusterResourceQuota mirrors ClusterResourceQuota at a project scope, for projection into a project. It allows a project-admin to know which ClusterResourceQuotas are applied to his project and their associated usage.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "OvirtPlatformSpec holds the desired state of the oVirt infrastructure provider. This only includes fields that can be modified in the cluster.", Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec defines the desired quota", - Default: map[string]interface{}{}, - Ref: ref(quotav1.ClusterResourceQuotaSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status defines the actual enforced quota and its current usage", - Default: map[string]interface{}{}, - Ref: ref(quotav1.ClusterResourceQuotaStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"metadata", "spec"}, }, }, - Dependencies: []string{ - quotav1.ClusterResourceQuotaSpec{}.OpenAPIModelName(), quotav1.ClusterResourceQuotaStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_quota_v1_AppliedClusterResourceQuotaList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_OvirtPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "AppliedClusterResourceQuotaList is a collection of AppliedClusterResourceQuotas\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "OvirtPlatformStatus holds the current status of the oVirt infrastructure provider.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "apiServerInternalIP": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "apiServerInternalIPs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "set", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + Description: "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "metadata": { + "ingressIP": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + Description: "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", + Type: []string{"string"}, + Format: "", }, }, - "items": { + "ingressIPs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "set", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "items is a list of AppliedClusterResourceQuota", + Description: "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(quotav1.AppliedClusterResourceQuota{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, + "nodeDNSIP": { + SchemaProps: spec.SchemaProps{ + Description: "deprecated: as of 4.6, this field is no longer set or honored. It will be removed in a future release.", + Type: []string{"string"}, + Format: "", + }, + }, + "loadBalancer": { + SchemaProps: spec.SchemaProps{ + Description: "loadBalancer defines how the load balancer used by the cluster is configured.", + Default: map[string]interface{}{"type": "OpenShiftManagedDefault"}, + Ref: ref(v1.OvirtPlatformLoadBalancer{}.OpenAPIModelName()), + }, + }, + "dnsRecordsType": { + SchemaProps: spec.SchemaProps{ + Description: "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", + Type: []string{"string"}, + Format: "", + Enum: []interface{}{"External", "Internal"}, + }, + }, }, - Required: []string{"items"}, + Required: []string{"apiServerInternalIPs", "ingressIPs"}, }, }, Dependencies: []string{ - quotav1.AppliedClusterResourceQuota{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.OvirtPlatformLoadBalancer{}.OpenAPIModelName()}, } } -func schema_openshift_api_quota_v1_ClusterResourceQuota(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_PKICertificateSubject(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterResourceQuota mirrors ResourceQuota at a cluster scope. This object is easily convertible to synthetic ResourceQuota object to allow quota evaluation re-use.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "PKICertificateSubject defines the requirements imposed on the subject to which the certificate was issued.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "email": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "email specifies the expected email address imposed on the subject to which the certificate was issued, and must match the email address listed in the Subject Alternative Name (SAN) field of the certificate. The email must be a valid email address and at most 320 characters in length.", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "hostname": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "hostname specifies the expected hostname imposed on the subject to which the certificate was issued, and it must match the hostname listed in the Subject Alternative Name (SAN) DNS field of the certificate. The hostname must be a valid dns 1123 subdomain name, optionally prefixed by '*.', and at most 253 characters in length. It must consist only of lowercase alphanumeric characters, hyphens, periods and the optional preceding asterisk.", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec defines the desired quota", - Default: map[string]interface{}{}, - Ref: ref(quotav1.ClusterResourceQuotaSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status defines the actual enforced quota and its current usage", - Default: map[string]interface{}{}, - Ref: ref(quotav1.ClusterResourceQuotaStatus{}.OpenAPIModelName()), - }, - }, }, - Required: []string{"metadata", "spec"}, }, }, - Dependencies: []string{ - quotav1.ClusterResourceQuotaSpec{}.OpenAPIModelName(), quotav1.ClusterResourceQuotaStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_quota_v1_ClusterResourceQuotaList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_PersistentVolumeClaimReference(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterResourceQuotaList is a collection of ClusterResourceQuotas\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "PersistentVolumeClaimReference is a reference to a PersistentVolumeClaim.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "name is the name of the PersistentVolumeClaim that will be used to store the Insights data archive. It is a string that follows the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start and end with an alphanumeric character.", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is a list of ClusterResourceQuotas", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(quotav1.ClusterResourceQuota{}.OpenAPIModelName()), - }, - }, - }, - }, - }, }, - Required: []string{"items"}, + Required: []string{"name"}, }, }, - Dependencies: []string{ - quotav1.ClusterResourceQuota{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_quota_v1_ClusterResourceQuotaSelector(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_PersistentVolumeConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterResourceQuotaSelector is used to select projects. At least one of LabelSelector or AnnotationSelector must present. If only one is present, it is the only selection criteria. If both are specified, the project must match both restrictions.", + Description: "PersistentVolumeConfig provides configuration options for PersistentVolume storage.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "labels": { + "claim": { SchemaProps: spec.SchemaProps{ - Description: "LabelSelector is used to select projects by label.", - Ref: ref(metav1.LabelSelector{}.OpenAPIModelName()), + Description: "claim is a required field that specifies the configuration of the PersistentVolumeClaim that will be used to store the Insights data archive. The PersistentVolumeClaim must be created in the openshift-insights namespace.", + Default: map[string]interface{}{}, + Ref: ref(v1.PersistentVolumeClaimReference{}.OpenAPIModelName()), }, }, - "annotations": { + "mountPath": { SchemaProps: spec.SchemaProps{ - Description: "AnnotationSelector is used to select projects by annotation.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "mountPath is an optional field specifying the directory where the PVC will be mounted inside the Insights data gathering Pod. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default mount path is /var/lib/insights-operator The path may not exceed 1024 characters and must not contain a colon.", + Type: []string{"string"}, + Format: "", }, }, }, + Required: []string{"claim"}, }, }, Dependencies: []string{ - metav1.LabelSelector{}.OpenAPIModelName()}, + v1.PersistentVolumeClaimReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_quota_v1_ClusterResourceQuotaSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_PlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ClusterResourceQuotaSpec defines the desired quota restrictions", + Description: "PlatformSpec holds the desired state specific to the underlying infrastructure provider of the current cluster. Since these are used at spec-level for the underlying cluster, it is supposed that only one of the spec structs is set.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "selector": { + "type": { + SchemaProps: spec.SchemaProps{ + Description: "type is the underlying infrastructure provider for the cluster. This value controls whether infrastructure automation such as service load balancers, dynamic volume provisioning, machine creation and deletion, and other integrations are enabled. If None, no infrastructure automation is enabled. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"IBMCloud\", \"KubeVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\", \"External\", and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "aws": { + SchemaProps: spec.SchemaProps{ + Description: "aws contains settings specific to the Amazon Web Services infrastructure provider.", + Ref: ref(v1.AWSPlatformSpec{}.OpenAPIModelName()), + }, + }, + "azure": { + SchemaProps: spec.SchemaProps{ + Description: "azure contains settings specific to the Azure infrastructure provider.", + Ref: ref(v1.AzurePlatformSpec{}.OpenAPIModelName()), + }, + }, + "gcp": { + SchemaProps: spec.SchemaProps{ + Description: "gcp contains settings specific to the Google Cloud Platform infrastructure provider.", + Ref: ref(v1.GCPPlatformSpec{}.OpenAPIModelName()), + }, + }, + "baremetal": { + SchemaProps: spec.SchemaProps{ + Description: "baremetal contains settings specific to the BareMetal platform.", + Ref: ref(v1.BareMetalPlatformSpec{}.OpenAPIModelName()), + }, + }, + "openstack": { + SchemaProps: spec.SchemaProps{ + Description: "openstack contains settings specific to the OpenStack infrastructure provider.", + Ref: ref(v1.OpenStackPlatformSpec{}.OpenAPIModelName()), + }, + }, + "ovirt": { + SchemaProps: spec.SchemaProps{ + Description: "ovirt contains settings specific to the oVirt infrastructure provider.", + Ref: ref(v1.OvirtPlatformSpec{}.OpenAPIModelName()), + }, + }, + "vsphere": { + SchemaProps: spec.SchemaProps{ + Description: "vsphere contains settings specific to the VSphere infrastructure provider.", + Ref: ref(v1.VSpherePlatformSpec{}.OpenAPIModelName()), + }, + }, + "ibmcloud": { + SchemaProps: spec.SchemaProps{ + Description: "ibmcloud contains settings specific to the IBMCloud infrastructure provider.", + Ref: ref(v1.IBMCloudPlatformSpec{}.OpenAPIModelName()), + }, + }, + "kubevirt": { SchemaProps: spec.SchemaProps{ - Description: "selector is the selector used to match projects. It should only select active projects on the scale of dozens (though it can select many more less active projects). These projects will contend on object creation through this resource.", - Default: map[string]interface{}{}, - Ref: ref(quotav1.ClusterResourceQuotaSelector{}.OpenAPIModelName()), + Description: "kubevirt contains settings specific to the kubevirt infrastructure provider.", + Ref: ref(v1.KubevirtPlatformSpec{}.OpenAPIModelName()), }, }, - "quota": { + "equinixMetal": { SchemaProps: spec.SchemaProps{ - Description: "quota defines the desired quota", - Default: map[string]interface{}{}, - Ref: ref(corev1.ResourceQuotaSpec{}.OpenAPIModelName()), + Description: "equinixMetal contains settings specific to the Equinix Metal infrastructure provider.", + Ref: ref(v1.EquinixMetalPlatformSpec{}.OpenAPIModelName()), }, }, - }, - Required: []string{"selector", "quota"}, - }, - }, - Dependencies: []string{ - quotav1.ClusterResourceQuotaSelector{}.OpenAPIModelName(), corev1.ResourceQuotaSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_quota_v1_ClusterResourceQuotaStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "ClusterResourceQuotaStatus defines the actual enforced quota and its current usage", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "total": { + "powervs": { SchemaProps: spec.SchemaProps{ - Description: "total defines the actual enforced quota and its current usage across all projects", - Default: map[string]interface{}{}, - Ref: ref(corev1.ResourceQuotaStatus{}.OpenAPIModelName()), + Description: "powervs contains settings specific to the IBM Power Systems Virtual Servers infrastructure provider.", + Ref: ref(v1.PowerVSPlatformSpec{}.OpenAPIModelName()), }, }, - "namespaces": { + "alibabaCloud": { SchemaProps: spec.SchemaProps{ - Description: "namespaces slices the usage by project. This division allows for quick resolution of deletion reconciliation inside of a single project without requiring a recalculation across all projects. This can be used to pull the deltas for a given project.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(quotav1.ResourceQuotaStatusByNamespace{}.OpenAPIModelName()), - }, - }, - }, + Description: "alibabaCloud contains settings specific to the Alibaba Cloud infrastructure provider.", + Ref: ref(v1.AlibabaCloudPlatformSpec{}.OpenAPIModelName()), + }, + }, + "nutanix": { + SchemaProps: spec.SchemaProps{ + Description: "nutanix contains settings specific to the Nutanix infrastructure provider.", + Ref: ref(v1.NutanixPlatformSpec{}.OpenAPIModelName()), + }, + }, + "external": { + SchemaProps: spec.SchemaProps{ + Description: "ExternalPlatformType represents generic infrastructure provider. Platform-specific components should be supplemented separately.", + Ref: ref(v1.ExternalPlatformSpec{}.OpenAPIModelName()), }, }, }, - Required: []string{"total"}, + Required: []string{"type"}, }, }, Dependencies: []string{ - quotav1.ResourceQuotaStatusByNamespace{}.OpenAPIModelName(), corev1.ResourceQuotaStatus{}.OpenAPIModelName()}, + v1.AWSPlatformSpec{}.OpenAPIModelName(), v1.AlibabaCloudPlatformSpec{}.OpenAPIModelName(), v1.AzurePlatformSpec{}.OpenAPIModelName(), v1.BareMetalPlatformSpec{}.OpenAPIModelName(), v1.EquinixMetalPlatformSpec{}.OpenAPIModelName(), v1.ExternalPlatformSpec{}.OpenAPIModelName(), v1.GCPPlatformSpec{}.OpenAPIModelName(), v1.IBMCloudPlatformSpec{}.OpenAPIModelName(), v1.KubevirtPlatformSpec{}.OpenAPIModelName(), v1.NutanixPlatformSpec{}.OpenAPIModelName(), v1.OpenStackPlatformSpec{}.OpenAPIModelName(), v1.OvirtPlatformSpec{}.OpenAPIModelName(), v1.PowerVSPlatformSpec{}.OpenAPIModelName(), v1.VSpherePlatformSpec{}.OpenAPIModelName()}, } } -func schema_openshift_api_quota_v1_ResourceQuotaStatusByNamespace(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_PlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ResourceQuotaStatusByNamespace gives status for a particular project", + Description: "PlatformStatus holds the current status specific to the underlying infrastructure provider of the current cluster. Since these are used at status-level for the underlying cluster, it is supposed that only one of the status structs is set.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "namespace": { + "type": { SchemaProps: spec.SchemaProps{ - Description: "namespace the project this status applies to", + Description: "type is the underlying infrastructure provider for the cluster. This value controls whether infrastructure automation such as service load balancers, dynamic volume provisioning, machine creation and deletion, and other integrations are enabled. If None, no infrastructure automation is enabled. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.\n\nThis value will be synced with to the `status.platform` and `status.platformStatus.type`. Currently this value cannot be changed once set.", Default: "", Type: []string{"string"}, Format: "", }, }, - "status": { + "aws": { SchemaProps: spec.SchemaProps{ - Description: "status indicates how many resources have been consumed by this project", - Default: map[string]interface{}{}, - Ref: ref(corev1.ResourceQuotaStatus{}.OpenAPIModelName()), + Description: "aws contains settings specific to the Amazon Web Services infrastructure provider.", + Ref: ref(v1.AWSPlatformStatus{}.OpenAPIModelName()), }, }, - }, - Required: []string{"namespace", "status"}, - }, - }, - Dependencies: []string{ - corev1.ResourceQuotaStatus{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_route_v1_LocalObjectReference(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "name": { + "azure": { SchemaProps: spec.SchemaProps{ - Description: "name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - Type: []string{"string"}, - Format: "", + Description: "azure contains settings specific to the Azure infrastructure provider.", + Ref: ref(v1.AzurePlatformStatus{}.OpenAPIModelName()), }, }, - }, - }, - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-map-type": "atomic", - }, - }, - }, - } -} - -func schema_openshift_api_route_v1_Route(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "A route allows developers to expose services through an HTTP(S) aware load balancing and proxy layer via a public DNS entry. The route may further specify TLS options and a certificate, or specify a public CNAME that the router should also accept for HTTP and HTTPS traffic. An administrator typically configures their router to be visible outside the cluster firewall, and may also add additional security, caching, or traffic controls on the service content. Routers usually talk directly to the service endpoints.\n\nOnce a route is created, the `host` field may not be changed. Generally, routers use the oldest route with a given host when resolving conflicts.\n\nRouters are subject to additional customization and may support additional controls via the annotations field.\n\nBecause administrators may configure multiple routers, the route status field is used to return information to clients about the names and states of the route under each router. If a client chooses a duplicate name, for instance, the route status conditions are used to indicate the route cannot be chosen.\n\nTo enable HTTP/2 ALPN on a route it requires a custom (non-wildcard) certificate. This prevents connection coalescing by clients, notably web browsers. We do not support HTTP/2 ALPN on routes that use the default certificate because of the risk of connection re-use/coalescing. Routes that do not have their own custom certificate will not be HTTP/2 ALPN-enabled on either the frontend or the backend.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { + "gcp": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", + Description: "gcp contains settings specific to the Google Cloud Platform infrastructure provider.", + Ref: ref(v1.GCPPlatformStatus{}.OpenAPIModelName()), }, }, - "apiVersion": { + "baremetal": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + Description: "baremetal contains settings specific to the BareMetal platform.", + Ref: ref(v1.BareMetalPlatformStatus{}.OpenAPIModelName()), }, }, - "metadata": { + "openstack": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + Description: "openstack contains settings specific to the OpenStack infrastructure provider.", + Ref: ref(v1.OpenStackPlatformStatus{}.OpenAPIModelName()), }, }, - "spec": { + "ovirt": { SchemaProps: spec.SchemaProps{ - Description: "spec is the desired state of the route", - Default: map[string]interface{}{}, - Ref: ref(routev1.RouteSpec{}.OpenAPIModelName()), + Description: "ovirt contains settings specific to the oVirt infrastructure provider.", + Ref: ref(v1.OvirtPlatformStatus{}.OpenAPIModelName()), }, }, - "status": { + "vsphere": { SchemaProps: spec.SchemaProps{ - Description: "status is the current state of the route", - Default: map[string]interface{}{}, - Ref: ref(routev1.RouteStatus{}.OpenAPIModelName()), + Description: "vsphere contains settings specific to the VSphere infrastructure provider.", + Ref: ref(v1.VSpherePlatformStatus{}.OpenAPIModelName()), + }, + }, + "ibmcloud": { + SchemaProps: spec.SchemaProps{ + Description: "ibmcloud contains settings specific to the IBMCloud infrastructure provider.", + Ref: ref(v1.IBMCloudPlatformStatus{}.OpenAPIModelName()), + }, + }, + "kubevirt": { + SchemaProps: spec.SchemaProps{ + Description: "kubevirt contains settings specific to the kubevirt infrastructure provider.", + Ref: ref(v1.KubevirtPlatformStatus{}.OpenAPIModelName()), + }, + }, + "equinixMetal": { + SchemaProps: spec.SchemaProps{ + Description: "equinixMetal contains settings specific to the Equinix Metal infrastructure provider.", + Ref: ref(v1.EquinixMetalPlatformStatus{}.OpenAPIModelName()), + }, + }, + "powervs": { + SchemaProps: spec.SchemaProps{ + Description: "powervs contains settings specific to the Power Systems Virtual Servers infrastructure provider.", + Ref: ref(v1.PowerVSPlatformStatus{}.OpenAPIModelName()), + }, + }, + "alibabaCloud": { + SchemaProps: spec.SchemaProps{ + Description: "alibabaCloud contains settings specific to the Alibaba Cloud infrastructure provider.", + Ref: ref(v1.AlibabaCloudPlatformStatus{}.OpenAPIModelName()), + }, + }, + "nutanix": { + SchemaProps: spec.SchemaProps{ + Description: "nutanix contains settings specific to the Nutanix infrastructure provider.", + Ref: ref(v1.NutanixPlatformStatus{}.OpenAPIModelName()), + }, + }, + "external": { + SchemaProps: spec.SchemaProps{ + Description: "external contains settings specific to the generic External infrastructure provider.", + Ref: ref(v1.ExternalPlatformStatus{}.OpenAPIModelName()), }, }, }, - Required: []string{"spec"}, + Required: []string{"type"}, }, }, Dependencies: []string{ - routev1.RouteSpec{}.OpenAPIModelName(), routev1.RouteStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.AWSPlatformStatus{}.OpenAPIModelName(), v1.AlibabaCloudPlatformStatus{}.OpenAPIModelName(), v1.AzurePlatformStatus{}.OpenAPIModelName(), v1.BareMetalPlatformStatus{}.OpenAPIModelName(), v1.EquinixMetalPlatformStatus{}.OpenAPIModelName(), v1.ExternalPlatformStatus{}.OpenAPIModelName(), v1.GCPPlatformStatus{}.OpenAPIModelName(), v1.IBMCloudPlatformStatus{}.OpenAPIModelName(), v1.KubevirtPlatformStatus{}.OpenAPIModelName(), v1.NutanixPlatformStatus{}.OpenAPIModelName(), v1.OpenStackPlatformStatus{}.OpenAPIModelName(), v1.OvirtPlatformStatus{}.OpenAPIModelName(), v1.PowerVSPlatformStatus{}.OpenAPIModelName(), v1.VSpherePlatformStatus{}.OpenAPIModelName()}, } } -func schema_openshift_api_route_v1_RouteHTTPHeader(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_PolicyFulcioSubject(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RouteHTTPHeader specifies configuration for setting or deleting an HTTP header.", + Description: "PolicyFulcioSubject defines the OIDC issuer and the email of the Fulcio authentication configuration.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "name": { + "oidcIssuer": { SchemaProps: spec.SchemaProps{ - Description: "name specifies the name of a header on which to perform an action. Its value must be a valid HTTP header name as defined in RFC 2616 section 4.2. The name must consist only of alphanumeric and the following special characters, \"-!#$%&'*+.^_`\". The following header names are reserved and may not be modified via this API: Strict-Transport-Security, Proxy, Cookie, Set-Cookie. It must be no more than 255 characters in length. Header name must be unique.", + Description: "oidcIssuer is a required filed contains the expected OIDC issuer. The oidcIssuer must be a valid URL and at most 2048 characters in length. It will be verified that the Fulcio-issued certificate contains a (Fulcio-defined) certificate extension pointing at this OIDC issuer URL. When Fulcio issues certificates, it includes a value based on an URL inside the client-provided ID token. Example: \"https://expected.OIDC.issuer/\"", Default: "", Type: []string{"string"}, Format: "", }, }, - "action": { + "signedEmail": { SchemaProps: spec.SchemaProps{ - Description: "action specifies actions to perform on headers, such as setting or deleting headers.", - Default: map[string]interface{}{}, - Ref: ref(routev1.RouteHTTPHeaderActionUnion{}.OpenAPIModelName()), + Description: "signedEmail is a required field holds the email address that the Fulcio certificate is issued for. The signedEmail must be a valid email address and at most 320 characters in length. Example: \"expected-signing-user@example.com\"", + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, - Required: []string{"name", "action"}, + Required: []string{"oidcIssuer", "signedEmail"}, }, }, - Dependencies: []string{ - routev1.RouteHTTPHeaderActionUnion{}.OpenAPIModelName()}, } } -func schema_openshift_api_route_v1_RouteHTTPHeaderActionUnion(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_PolicyIdentity(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RouteHTTPHeaderActionUnion specifies an action to take on an HTTP header.", + Description: "PolicyIdentity defines image identity the signature claims about the image. When omitted, the default matchPolicy is \"MatchRepoDigestOrExact\".", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "type": { + "matchPolicy": { SchemaProps: spec.SchemaProps{ - Description: "type defines the type of the action to be applied on the header. Possible values are Set or Delete. Set allows you to set HTTP request and response headers. Delete allows you to delete HTTP request and response headers.", + Description: "matchPolicy is a required filed specifies matching strategy to verify the image identity in the signature against the image scope. Allowed values are \"MatchRepoDigestOrExact\", \"MatchRepository\", \"ExactRepository\", \"RemapIdentity\". When omitted, the default value is \"MatchRepoDigestOrExact\". When set to \"MatchRepoDigestOrExact\", the identity in the signature must be in the same repository as the image identity if the image identity is referenced by a digest. Otherwise, the identity in the signature must be the same as the image identity. When set to \"MatchRepository\", the identity in the signature must be in the same repository as the image identity. When set to \"ExactRepository\", the exactRepository must be specified. The identity in the signature must be in the same repository as a specific identity specified by \"repository\". When set to \"RemapIdentity\", the remapIdentity must be specified. The signature must be in the same as the remapped image identity. Remapped image identity is obtained by replacing the \"prefix\" with the specified “signedPrefix” if the the image identity matches the specified remapPrefix.", Default: "", Type: []string{"string"}, Format: "", }, }, - "set": { + "exactRepository": { + SchemaProps: spec.SchemaProps{ + Description: "exactRepository specifies the repository that must be exactly matched by the identity in the signature. exactRepository is required if matchPolicy is set to \"ExactRepository\". It is used to verify that the signature claims an identity matching this exact repository, rather than the original image identity.", + Ref: ref(v1.PolicyMatchExactRepository{}.OpenAPIModelName()), + }, + }, + "remapIdentity": { SchemaProps: spec.SchemaProps{ - Description: "set defines the HTTP header that should be set: added if it doesn't exist or replaced if it does. This field is required when type is Set and forbidden otherwise.", - Ref: ref(routev1.RouteSetHTTPHeader{}.OpenAPIModelName()), + Description: "remapIdentity specifies the prefix remapping rule for verifying image identity. remapIdentity is required if matchPolicy is set to \"RemapIdentity\". It is used to verify that the signature claims a different registry/repository prefix than the original image.", + Ref: ref(v1.PolicyMatchRemapIdentity{}.OpenAPIModelName()), }, }, }, - Required: []string{"type"}, + Required: []string{"matchPolicy"}, }, VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ "x-kubernetes-unions": []interface{}{ map[string]interface{}{ - "discriminator": "type", + "discriminator": "matchPolicy", "fields-to-discriminateBy": map[string]interface{}{ - "set": "Set", - }, - }, - }, - }, - }, - }, - Dependencies: []string{ - routev1.RouteSetHTTPHeader{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_route_v1_RouteHTTPHeaderActions(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RouteHTTPHeaderActions defines configuration for actions on HTTP request and response headers.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "response": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "response is a list of HTTP response headers to modify. Currently, actions may define to either `Set` or `Delete` headers values. Actions defined here will modify the response headers of all requests made through a route. These actions are applied to a specific Route defined within a cluster i.e. connections made through a route. Route actions will be executed before IngressController actions for response headers. Actions are applied in sequence as defined in this list. A maximum of 20 response header actions may be configured. You can use this field to specify HTTP response headers that should be set or deleted when forwarding responses from your application to the client. Sample fetchers allowed are \"res.hdr\" and \"ssl_c_der\". Converters allowed are \"lower\" and \"base64\". Example header values: \"%[res.hdr(X-target),lower]\", \"%{+Q}[ssl_c_der,base64]\". Note: This field cannot be used if your route uses TLS passthrough.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(routev1.RouteHTTPHeader{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "request": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "name", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "request is a list of HTTP request headers to modify. Currently, actions may define to either `Set` or `Delete` headers values. Actions defined here will modify the request headers of all requests made through a route. These actions are applied to a specific Route defined within a cluster i.e. connections made through a route. Currently, actions may define to either `Set` or `Delete` headers values. Route actions will be executed after IngressController actions for request headers. Actions are applied in sequence as defined in this list. A maximum of 20 request header actions may be configured. You can use this field to specify HTTP request headers that should be set or deleted when forwarding connections from the client to your application. Sample fetchers allowed are \"req.hdr\" and \"ssl_c_der\". Converters allowed are \"lower\" and \"base64\". Example header values: \"%[req.hdr(X-target),lower]\", \"%{+Q}[ssl_c_der,base64]\". Any request header configuration applied directly via a Route resource using this API will override header configuration for a header of the same name applied via spec.httpHeaders.actions on the IngressController or route annotation. Note: This field cannot be used if your route uses TLS passthrough.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(routev1.RouteHTTPHeader{}.OpenAPIModelName()), - }, - }, + "exactRepository": "PolicyMatchExactRepository", + "remapIdentity": "PolicyMatchRemapIdentity", }, }, }, @@ -70220,507 +11730,372 @@ func schema_openshift_api_route_v1_RouteHTTPHeaderActions(ref common.ReferenceCa }, }, Dependencies: []string{ - routev1.RouteHTTPHeader{}.OpenAPIModelName()}, + v1.PolicyMatchExactRepository{}.OpenAPIModelName(), v1.PolicyMatchRemapIdentity{}.OpenAPIModelName()}, } } -func schema_openshift_api_route_v1_RouteHTTPHeaders(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_PolicyMatchExactRepository(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RouteHTTPHeaders defines policy for HTTP headers.", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "actions": { + "repository": { SchemaProps: spec.SchemaProps{ - Description: "actions specifies options for modifying headers and their values. Note that this option only applies to cleartext HTTP connections and to secure HTTP connections for which the ingress controller terminates encryption (that is, edge-terminated or reencrypt connections). Headers cannot be modified for TLS passthrough connections. Setting the HSTS (`Strict-Transport-Security`) header is not supported via actions. `Strict-Transport-Security` may only be configured using the \"haproxy.router.openshift.io/hsts_header\" route annotation, and only in accordance with the policy specified in Ingress.Spec.RequiredHSTSPolicies. In case of HTTP request headers, the actions specified in spec.httpHeaders.actions on the Route will be executed after the actions specified in the IngressController's spec.httpHeaders.actions field. In case of HTTP response headers, the actions specified in spec.httpHeaders.actions on the IngressController will be executed after the actions specified in the Route's spec.httpHeaders.actions field. The headers set via this API will not appear in access logs. Any actions defined here are applied after any actions related to the following other fields: cache-control, spec.clientTLS, spec.httpHeaders.forwardedHeaderPolicy, spec.httpHeaders.uniqueId, and spec.httpHeaders.headerNameCaseAdjustments. The following header names are reserved and may not be modified via this API: Strict-Transport-Security, Proxy, Cookie, Set-Cookie. Note that the total size of all net added headers *after* interpolating dynamic values must not exceed the value of spec.tuningOptions.headerBufferMaxRewriteBytes on the IngressController. Please refer to the documentation for that API field for more details.", - Default: map[string]interface{}{}, - Ref: ref(routev1.RouteHTTPHeaderActions{}.OpenAPIModelName()), + Description: "repository is the reference of the image identity to be matched. repository is required if matchPolicy is set to \"ExactRepository\". The value should be a repository name (by omitting the tag or digest) in a registry implementing the \"Docker Registry HTTP API V2\". For example, docker.io/library/busybox", + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, + Required: []string{"repository"}, }, }, - Dependencies: []string{ - routev1.RouteHTTPHeaderActions{}.OpenAPIModelName()}, } } -func schema_openshift_api_route_v1_RouteIngress(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_PolicyMatchRemapIdentity(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RouteIngress holds information about the places where a route is exposed.", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "host": { - SchemaProps: spec.SchemaProps{ - Description: "host is the host string under which the route is exposed; this value is required", - Type: []string{"string"}, - Format: "", - }, - }, - "routerName": { - SchemaProps: spec.SchemaProps{ - Description: "Name is a name chosen by the router to identify itself; this value is required", - Type: []string{"string"}, - Format: "", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is the state of the route, may be empty.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(routev1.RouteIngressCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "wildcardPolicy": { + "prefix": { SchemaProps: spec.SchemaProps{ - Description: "Wildcard policy is the wildcard policy that was allowed where this route is exposed.", + Description: "prefix is required if matchPolicy is set to \"RemapIdentity\". prefix is the prefix of the image identity to be matched. If the image identity matches the specified prefix, that prefix is replaced by the specified “signedPrefix” (otherwise it is used as unchanged and no remapping takes place). This is useful when verifying signatures for a mirror of some other repository namespace that preserves the vendor’s repository structure. The prefix and signedPrefix values can be either host[:port] values (matching exactly the same host[:port], string), repository namespaces, or repositories (i.e. they must not contain tags/digests), and match as prefixes of the fully expanded form. For example, docker.io/library/busybox (not busybox) to specify that single repository, or docker.io/library (not an empty string) to specify the parent namespace of docker.io/library/busybox.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "routerCanonicalHostname": { + "signedPrefix": { SchemaProps: spec.SchemaProps{ - Description: "CanonicalHostname is the external host name for the router that can be used as a CNAME for the host requested for this route. This value is optional and may not be set in all cases.", + Description: "signedPrefix is required if matchPolicy is set to \"RemapIdentity\". signedPrefix is the prefix of the image identity to be matched in the signature. The format is the same as \"prefix\". The values can be either host[:port] values (matching exactly the same host[:port], string), repository namespaces, or repositories (i.e. they must not contain tags/digests), and match as prefixes of the fully expanded form. For example, docker.io/library/busybox (not busybox) to specify that single repository, or docker.io/library (not an empty string) to specify the parent namespace of docker.io/library/busybox.", + Default: "", Type: []string{"string"}, Format: "", }, }, }, + Required: []string{"prefix", "signedPrefix"}, }, }, - Dependencies: []string{ - routev1.RouteIngressCondition{}.OpenAPIModelName()}, } } -func schema_openshift_api_route_v1_RouteIngressCondition(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_PolicyRootOfTrust(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RouteIngressCondition contains details for the current condition of this route on a particular router.", + Description: "PolicyRootOfTrust defines the root of trust based on the selected policyType.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "type": { + "policyType": { SchemaProps: spec.SchemaProps{ - Description: "type is the type of the condition. Currently only Admitted or UnservableInFutureVersions.", + Description: "policyType is a required field specifies the type of the policy for verification. This field must correspond to how the policy was generated. Allowed values are \"PublicKey\", \"FulcioCAWithRekor\", and \"PKI\". When set to \"PublicKey\", the policy relies on a sigstore publicKey and may optionally use a Rekor verification. When set to \"FulcioCAWithRekor\", the policy is based on the Fulcio certification and incorporates a Rekor verification. When set to \"PKI\", the policy is based on the certificates from Bring Your Own Public Key Infrastructure (BYOPKI).", Default: "", Type: []string{"string"}, Format: "", }, }, - "status": { + "publicKey": { SchemaProps: spec.SchemaProps{ - Description: "status is the status of the condition. Can be True, False, Unknown.", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "publicKey defines the root of trust configuration based on a sigstore public key. Optionally include a Rekor public key for Rekor verification. publicKey is required when policyType is PublicKey, and forbidden otherwise.", + Ref: ref(v1.ImagePolicyPublicKeyRootOfTrust{}.OpenAPIModelName()), }, }, - "reason": { + "fulcioCAWithRekor": { SchemaProps: spec.SchemaProps{ - Description: "(brief) reason for the condition's last transition, and is usually a machine and human readable constant", - Type: []string{"string"}, - Format: "", + Description: "fulcioCAWithRekor defines the root of trust configuration based on the Fulcio certificate and the Rekor public key. fulcioCAWithRekor is required when policyType is FulcioCAWithRekor, and forbidden otherwise For more information about Fulcio and Rekor, please refer to the document at: https://github.com/sigstore/fulcio and https://github.com/sigstore/rekor", + Ref: ref(v1.ImagePolicyFulcioCAWithRekorRootOfTrust{}.OpenAPIModelName()), }, }, - "message": { + "pki": { SchemaProps: spec.SchemaProps{ - Description: "Human readable message indicating details about last transition.", - Type: []string{"string"}, - Format: "", + Description: "pki defines the root of trust configuration based on Bring Your Own Public Key Infrastructure (BYOPKI) Root CA(s) and corresponding intermediate certificates. pki is required when policyType is PKI, and forbidden otherwise.", + Ref: ref(v1.ImagePolicyPKIRootOfTrust{}.OpenAPIModelName()), }, }, - "lastTransitionTime": { - SchemaProps: spec.SchemaProps{ - Description: "RFC 3339 date and time when this condition last transitioned", - Ref: ref(metav1.Time{}.OpenAPIModelName()), + }, + Required: []string{"policyType"}, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "policyType", + "fields-to-discriminateBy": map[string]interface{}{ + "fulcioCAWithRekor": "FulcioCAWithRekor", + "pki": "PKI", + "publicKey": "PublicKey", + }, }, }, }, - Required: []string{"type", "status"}, }, }, Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, + v1.ImagePolicyFulcioCAWithRekorRootOfTrust{}.OpenAPIModelName(), v1.ImagePolicyPKIRootOfTrust{}.OpenAPIModelName(), v1.ImagePolicyPublicKeyRootOfTrust{}.OpenAPIModelName()}, } } -func schema_openshift_api_route_v1_RouteList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_PowerVSPlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RouteList is a collection of Routes.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "PowerVSPlatformSpec holds the desired state of the IBM Power Systems Virtual Servers infrastructure provider. This only includes fields that can be modified in the cluster.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + "serviceEndpoints": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "name", + }, + "x-kubernetes-list-type": "map", + }, }, - }, - "items": { SchemaProps: spec.SchemaProps{ - Description: "items is a list of routes", + Description: "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of a Power VS service.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(routev1.Route{}.OpenAPIModelName()), + Ref: ref(v1.PowerVSServiceEndpoint{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - routev1.Route{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_route_v1_RoutePort(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RoutePort defines a port mapping from a router to an endpoint in the service endpoints.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "targetPort": { - SchemaProps: spec.SchemaProps{ - Description: "The target port on pods selected by the service this route points to. If this is a string, it will be looked up as a named port in the target endpoints port list. Required", - Ref: ref(intstr.IntOrString{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"targetPort"}, }, }, Dependencies: []string{ - intstr.IntOrString{}.OpenAPIModelName()}, + v1.PowerVSServiceEndpoint{}.OpenAPIModelName()}, } } -func schema_openshift_api_route_v1_RouteSetHTTPHeader(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_PowerVSPlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RouteSetHTTPHeader specifies what value needs to be set on an HTTP header.", + Description: "PowerVSPlatformStatus holds the current status of the IBM Power Systems Virtual Servers infrastrucutre provider.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "value": { + "region": { SchemaProps: spec.SchemaProps{ - Description: "value specifies a header value. Dynamic values can be added. The value will be interpreted as an HAProxy format string as defined in http://cbonte.github.io/haproxy-dconv/2.6/configuration.html#8.2.6 and may use HAProxy's %[] syntax and otherwise must be a valid HTTP header value as defined in https://datatracker.ietf.org/doc/html/rfc7230#section-3.2. The value of this field must be no more than 16384 characters in length. Note that the total size of all net added headers *after* interpolating dynamic values must not exceed the value of spec.tuningOptions.headerBufferMaxRewriteBytes on the IngressController.", + Description: "region holds the default Power VS region for new Power VS resources created by the cluster.", Default: "", Type: []string{"string"}, Format: "", }, }, - }, - Required: []string{"value"}, - }, - }, - } -} - -func schema_openshift_api_route_v1_RouteSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "RouteSpec describes the hostname or path the route exposes, any security information, and one to four backends (services) the route points to. Requests are distributed among the backends depending on the weights assigned to each backend. When using roundrobin scheduling the portion of requests that go to each backend is the backend weight divided by the sum of all of the backend weights. When the backend has more than one endpoint the requests that end up on the backend are roundrobin distributed among the endpoints. Weights are between 0 and 256 with default 100. Weight 0 causes no requests to the backend. If all weights are zero the route will be considered to have no backends and return a standard 503 response.\n\nThe `tls` field is optional and allows specific certificates or behavior for the route. Routers typically configure a default certificate on a wildcard domain to terminate routes without explicit certificates, but custom hostnames usually must choose passthrough (send traffic directly to the backend via the TLS Server-Name- Indication field) or provide a certificate.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "host": { - SchemaProps: spec.SchemaProps{ - Description: "host is an alias/DNS that points to the service. Optional. If not specified a route name will typically be automatically chosen. Must follow DNS952 subdomain conventions.", - Type: []string{"string"}, - Format: "", - }, - }, - "subdomain": { + "zone": { SchemaProps: spec.SchemaProps{ - Description: "subdomain is a DNS subdomain that is requested within the ingress controller's domain (as a subdomain). If host is set this field is ignored. An ingress controller may choose to ignore this suggested name, in which case the controller will report the assigned name in the status.ingress array or refuse to admit the route. If this value is set and the server does not support this field host will be populated automatically. Otherwise host is left empty. The field may have multiple parts separated by a dot, but not all ingress controllers may honor the request. This field may not be changed after creation except by a user with the update routes/custom-host permission.\n\nExample: subdomain `frontend` automatically receives the router subdomain `apps.mycluster.com` to have a full hostname `frontend.apps.mycluster.com`.", + Description: "zone holds the default zone for the new Power VS resources created by the cluster. Note: Currently only single-zone OCP clusters are supported", + Default: "", Type: []string{"string"}, Format: "", }, }, - "path": { + "resourceGroup": { SchemaProps: spec.SchemaProps{ - Description: "path that the router watches for, to route traffic for to the service. Optional", + Description: "resourceGroup is the resource group name for new IBMCloud resources created for a cluster. The resource group specified here will be used by cluster-image-registry-operator to set up a COS Instance in IBMCloud for the cluster registry. More about resource groups can be found here: https://cloud.ibm.com/docs/account?topic=account-rgs. When omitted, the image registry operator won't be able to configure storage, which results in the image registry cluster operator not being in an available state.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "to": { - SchemaProps: spec.SchemaProps{ - Description: "to is an object the route should use as the primary backend. Only the Service kind is allowed, and it will be defaulted to Service. If the weight field (0-256 default 100) is set to zero, no traffic will be sent to this backend.", - Default: map[string]interface{}{}, - Ref: ref(routev1.RouteTargetReference{}.OpenAPIModelName()), - }, - }, - "alternateBackends": { + "serviceEndpoints": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ "x-kubernetes-list-map-keys": []interface{}{ "name", - "kind", }, "x-kubernetes-list-type": "map", }, }, SchemaProps: spec.SchemaProps{ - Description: "alternateBackends allows up to 3 additional backends to be assigned to the route. Only the Service kind is allowed, and it will be defaulted to Service. Use the weight field in RouteTargetReference object to specify relative preference.", + Description: "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of a Power VS service.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(routev1.RouteTargetReference{}.OpenAPIModelName()), + Ref: ref(v1.PowerVSServiceEndpoint{}.OpenAPIModelName()), }, }, }, }, }, - "port": { - SchemaProps: spec.SchemaProps{ - Description: "If specified, the port to be used by the router. Most routers will use all endpoints exposed by the service by default - set this value to instruct routers which port to use.", - Ref: ref(routev1.RoutePort{}.OpenAPIModelName()), - }, - }, - "tls": { - SchemaProps: spec.SchemaProps{ - Description: "The tls field provides the ability to configure certificates and termination for the route.", - Ref: ref(routev1.TLSConfig{}.OpenAPIModelName()), - }, - }, - "wildcardPolicy": { + "cisInstanceCRN": { SchemaProps: spec.SchemaProps{ - Description: "Wildcard policy if any for the route. Currently only 'Subdomain' or 'None' is allowed.", + Description: "cisInstanceCRN is the CRN of the Cloud Internet Services instance managing the DNS zone for the cluster's base domain", Type: []string{"string"}, Format: "", }, }, - "httpHeaders": { + "dnsInstanceCRN": { SchemaProps: spec.SchemaProps{ - Description: "httpHeaders defines policy for HTTP headers.", - Ref: ref(routev1.RouteHTTPHeaders{}.OpenAPIModelName()), + Description: "dnsInstanceCRN is the CRN of the DNS Services instance managing the DNS zone for the cluster's base domain", + Type: []string{"string"}, + Format: "", }, }, }, - Required: []string{"to"}, + Required: []string{"region", "zone"}, }, }, Dependencies: []string{ - routev1.RouteHTTPHeaders{}.OpenAPIModelName(), routev1.RoutePort{}.OpenAPIModelName(), routev1.RouteTargetReference{}.OpenAPIModelName(), routev1.TLSConfig{}.OpenAPIModelName()}, + v1.PowerVSServiceEndpoint{}.OpenAPIModelName()}, } } -func schema_openshift_api_route_v1_RouteStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_PowerVSServiceEndpoint(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RouteStatus provides relevant info about the status of a route, including which routers acknowledge it.", + Description: "PowervsServiceEndpoint stores the configuration of a custom url to override existing defaults of PowerVS Services.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "ingress": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, + "name": { + SchemaProps: spec.SchemaProps{ + Description: "name is the name of the Power VS service. Few of the services are IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api ResourceController - https://cloud.ibm.com/apidocs/resource-controller/resource-controller Power Cloud - https://cloud.ibm.com/apidocs/power-cloud", + Default: "", + Type: []string{"string"}, + Format: "", }, + }, + "url": { SchemaProps: spec.SchemaProps{ - Description: "ingress describes the places where the route may be exposed. The list of ingress points may contain duplicate Host or RouterName values. Routes are considered live once they are `Ready`", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(routev1.RouteIngress{}.OpenAPIModelName()), - }, - }, - }, + Description: "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, + Required: []string{"name", "url"}, }, }, - Dependencies: []string{ - routev1.RouteIngress{}.OpenAPIModelName()}, } } -func schema_openshift_api_route_v1_RouteTargetReference(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_PrefixedClaimMapping(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RouteTargetReference specifies the target that resolve into endpoints. Only the 'Service' kind is allowed. Use 'weight' field to emphasize one over others.", + Description: "PrefixedClaimMapping configures a claim mapping that allows for an optional prefix.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "claim": { SchemaProps: spec.SchemaProps{ - Description: "The kind of target that the route is referring to. Currently, only 'Service' is allowed", + Description: "claim is an optional field for specifying the JWT token claim that is used in the mapping. The value of this claim will be assigned to the field in which this mapping is associated. claim must not exceed 256 characters in length. When set to the empty string `\"\"`, this means that no named claim should be used for the group mapping. claim is required when the ExternalOIDCWithUpstreamParity feature gate is not enabled.", Default: "", Type: []string{"string"}, Format: "", }, }, - "name": { + "expression": { SchemaProps: spec.SchemaProps{ - Description: "name of the service/target that is being referred to. e.g. name of the service", - Default: "", + Description: "expression is an optional CEL expression used to derive group values from JWT claims.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length .\n\nWhen specified, claim must not be set or be explicitly set to the empty string (`\"\"`).", Type: []string{"string"}, Format: "", }, }, - "weight": { + "prefix": { SchemaProps: spec.SchemaProps{ - Description: "weight as an integer between 0 and 256, default 100, that specifies the target's relative weight against other target reference objects. 0 suppresses requests to this backend.", - Type: []string{"integer"}, - Format: "int32", + Description: "prefix is an optional field that configures the prefix that will be applied to the cluster identity attribute during the process of mapping JWT claims to cluster identity attributes.\n\nWhen omitted or set to an empty string (\"\"), no prefix is applied to the cluster identity attribute. Must not be set to a non-empty value when expression is set.\n\nExample: if `prefix` is set to \"myoidc:\" and the `claim` in JWT contains an array of strings \"a\", \"b\" and \"c\", the mapping will result in an array of string \"myoidc:a\", \"myoidc:b\" and \"myoidc:c\".", + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, - Required: []string{"kind", "name"}, }, }, } } -func schema_openshift_api_route_v1_RouterShard(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ProfileCustomizations(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RouterShard has information of a routing shard and is used to generate host names and routing table entries when a routing shard is allocated for a specific route. Caveat: This is WIP and will likely undergo modifications when sharding support is added.", + Description: "ProfileCustomizations contains various parameters for modifying the default behavior of certain profiles", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "shardName": { - SchemaProps: spec.SchemaProps{ - Description: "shardName uniquely identifies a router shard in the \"set\" of routers used for routing traffic to the services.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "dnsSuffix": { + "dynamicResourceAllocation": { SchemaProps: spec.SchemaProps{ - Description: "dnsSuffix for the shard ala: shard-1.v3.openshift.com", + Description: "dynamicResourceAllocation allows to enable or disable dynamic resource allocation within the scheduler. Dynamic resource allocation is an API for requesting and sharing resources between pods and containers inside a pod. Third-party resource drivers are responsible for tracking and allocating resources. Different kinds of resources support arbitrary parameters for defining requirements and initialization. Valid values are Enabled, Disabled and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is Disabled.", Default: "", Type: []string{"string"}, Format: "", }, }, }, - Required: []string{"shardName", "dnsSuffix"}, }, }, } } -func schema_openshift_api_route_v1_TLSConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_Project(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "TLSConfig defines config used to secure a route and provide termination", + Description: "Project holds cluster-wide information about Project. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "termination": { - SchemaProps: spec.SchemaProps{ - Description: "termination indicates the TLS termination type.\n\n* edge - TLS termination is done by the router and http is used to communicate with the backend (default)\n\n* passthrough - Traffic is sent straight to the destination without the router providing TLS termination\n\n* reencrypt - TLS termination is done by the router and https is used to communicate with the backend\n\nNote: passthrough termination is incompatible with httpHeader actions", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "certificate": { - SchemaProps: spec.SchemaProps{ - Description: "certificate provides certificate contents. This should be a single serving certificate, not a certificate chain. Do not include a CA certificate.", - Type: []string{"string"}, - Format: "", - }, - }, - "key": { + "kind": { SchemaProps: spec.SchemaProps{ - Description: "key provides key file contents", + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", Type: []string{"string"}, Format: "", }, }, - "caCertificate": { + "apiVersion": { SchemaProps: spec.SchemaProps{ - Description: "caCertificate provides the cert authority certificate contents", + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", Type: []string{"string"}, Format: "", }, }, - "destinationCACertificate": { - SchemaProps: spec.SchemaProps{ - Description: "destinationCACertificate provides the contents of the ca certificate of the final destination. When using reencrypt termination this file should be provided in order to have routers use it for health checks on the secure connection. If this field is not specified, the router may provide its own destination CA and perform hostname validation using the short service name (service.namespace.svc), which allows infrastructure generated certificates to automatically verify.", - Type: []string{"string"}, - Format: "", + "metadata": { + SchemaProps: spec.SchemaProps{ + Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), }, }, - "insecureEdgeTerminationPolicy": { + "spec": { SchemaProps: spec.SchemaProps{ - Description: "insecureEdgeTerminationPolicy indicates the desired behavior for insecure connections to a route. While each router may make its own decisions on which ports to expose, this is normally port 80.\n\nIf a route does not specify insecureEdgeTerminationPolicy, then the default behavior is \"None\".\n\n* Allow - traffic is sent to the server on the insecure port (edge/reencrypt terminations only).\n\n* None - no traffic is allowed on the insecure port (default).\n\n* Redirect - clients are redirected to the secure port.", - Type: []string{"string"}, - Format: "", + Description: "spec holds user settable values for configuration", + Default: map[string]interface{}{}, + Ref: ref(v1.ProjectSpec{}.OpenAPIModelName()), }, }, - "externalCertificate": { + "status": { SchemaProps: spec.SchemaProps{ - Description: "externalCertificate provides certificate contents as a secret reference. This should be a single serving certificate, not a certificate chain. Do not include a CA certificate. The secret referenced should be present in the same namespace as that of the Route. Forbidden when `certificate` is set. The router service account needs to be granted with read-only access to this secret, please refer to openshift docs for additional details.", - Ref: ref(routev1.LocalObjectReference{}.OpenAPIModelName()), + Description: "status holds observed values from the cluster. They may not be overridden.", + Default: map[string]interface{}{}, + Ref: ref(v1.ProjectStatus{}.OpenAPIModelName()), }, }, }, - Required: []string{"termination"}, + Required: []string{"spec"}, }, }, Dependencies: []string{ - routev1.LocalObjectReference{}.OpenAPIModelName()}, + v1.ProjectSpec{}.OpenAPIModelName(), v1.ProjectStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_samples_v1_Config(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ProjectList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "Config contains the configuration and detailed condition status for the Samples Operator.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -70739,91 +12114,147 @@ func schema_openshift_api_samples_v1_Config(ref common.ReferenceCallback) common }, "metadata": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), }, }, - "spec": { + "items": { SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(samplesv1.ConfigSpec{}.OpenAPIModelName()), + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: map[string]interface{}{}, + Ref: ref(v1.Project{}.OpenAPIModelName()), + }, + }, + }, }, }, - "status": { + }, + Required: []string{"metadata", "items"}, + }, + }, + Dependencies: []string{ + v1.Project{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_ProjectSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "ProjectSpec holds the project creation configuration.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "projectRequestMessage": { SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(samplesv1.ConfigStatus{}.OpenAPIModelName()), + Description: "projectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "projectRequestTemplate": { + SchemaProps: spec.SchemaProps{ + Description: "projectRequestTemplate is the template to use for creating projects in response to projectrequest. This must point to a template in 'openshift-config' namespace. It is optional. If it is not specified, a default template is used.", + Default: map[string]interface{}{}, + Ref: ref(v1.TemplateReference{}.OpenAPIModelName()), }, }, }, - Required: []string{"metadata", "spec"}, }, }, Dependencies: []string{ - samplesv1.ConfigSpec{}.OpenAPIModelName(), samplesv1.ConfigStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.TemplateReference{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_ProjectStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Type: []string{"object"}, + }, + }, } } -func schema_openshift_api_samples_v1_ConfigCondition(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_PromQLClusterCondition(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ConfigCondition captures various conditions of the Config as entries are processed.", + Description: "PromQLClusterCondition represents a cluster condition based on PromQL.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "type": { + "promql": { SchemaProps: spec.SchemaProps{ - Description: "type of condition.", + Description: "promql is a PromQL query classifying clusters. This query query should return a 1 in the match case and a 0 in the does-not-match case. Queries which return no time series, or which return values besides 0 or 1, are evaluation failures.", Default: "", Type: []string{"string"}, Format: "", }, }, - "status": { + }, + Required: []string{"promql"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_Proxy(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "Proxy holds cluster-wide information on how to configure default proxies for the cluster. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "kind": { SchemaProps: spec.SchemaProps{ - Description: "status of the condition, one of True, False, Unknown.", - Default: "", + Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", Type: []string{"string"}, Format: "", }, }, - "lastUpdateTime": { + "apiVersion": { SchemaProps: spec.SchemaProps{ - Description: "lastUpdateTime is the last time this condition was updated.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), + Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Type: []string{"string"}, + Format: "", }, }, - "lastTransitionTime": { + "metadata": { SchemaProps: spec.SchemaProps{ - Description: "lastTransitionTime is the last time the condition transitioned from one status to another.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), + Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Default: map[string]interface{}{}, + Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), }, }, - "reason": { + "spec": { SchemaProps: spec.SchemaProps{ - Description: "reason is what caused the condition's last transition.", - Type: []string{"string"}, - Format: "", + Description: "spec holds user-settable values for the proxy configuration", + Default: map[string]interface{}{}, + Ref: ref(v1.ProxySpec{}.OpenAPIModelName()), }, }, - "message": { + "status": { SchemaProps: spec.SchemaProps{ - Description: "message is a human readable message indicating details about the transition.", - Type: []string{"string"}, - Format: "", + Description: "status holds observed values from the cluster. They may not be overridden.", + Default: map[string]interface{}{}, + Ref: ref(v1.ProxyStatus{}.OpenAPIModelName()), }, }, }, - Required: []string{"type", "status"}, + Required: []string{"spec"}, }, }, Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, + v1.ProxySpec{}.OpenAPIModelName(), v1.ProxyStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_samples_v1_ConfigList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ProxyList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ @@ -70858,7 +12289,7 @@ func schema_openshift_api_samples_v1_ConfigList(ref common.ReferenceCallback) co Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(samplesv1.Config{}.OpenAPIModelName()), + Ref: ref(v1.Proxy{}.OpenAPIModelName()), }, }, }, @@ -70869,49 +12300,41 @@ func schema_openshift_api_samples_v1_ConfigList(ref common.ReferenceCallback) co }, }, Dependencies: []string{ - samplesv1.Config{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.Proxy{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_samples_v1_ConfigSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ProxySpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ConfigSpec contains the desired configuration and state for the Samples Operator, controlling various behavior around the imagestreams and templates it creates/updates in the openshift namespace.", + Description: "ProxySpec contains cluster proxy creation configuration.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "managementState": { + "httpProxy": { SchemaProps: spec.SchemaProps{ - Description: "managementState is top level on/off type of switch for all operators. When \"Managed\", this operator processes config and manipulates the samples accordingly. When \"Unmanaged\", this operator ignores any updates to the resources it watches. When \"Removed\", it reacts that same wasy as it does if the Config object is deleted, meaning any ImageStreams or Templates it manages (i.e. it honors the skipped lists) and the registry secret are deleted, along with the ConfigMap in the operator's namespace that represents the last config used to manipulate the samples,", + Description: "httpProxy is the URL of the proxy for HTTP requests. Empty means unset and will not result in an env var.", Type: []string{"string"}, Format: "", }, }, - "samplesRegistry": { + "httpsProxy": { SchemaProps: spec.SchemaProps{ - Description: "samplesRegistry allows for the specification of which registry is accessed by the ImageStreams for their image content. Defaults on the content in https://github.com/openshift/library that are pulled into this github repository, but based on our pulling only ocp content it typically defaults to registry.redhat.io.", + Description: "httpsProxy is the URL of the proxy for HTTPS requests. Empty means unset and will not result in an env var.", Type: []string{"string"}, Format: "", }, }, - "architectures": { + "noProxy": { SchemaProps: spec.SchemaProps{ - Description: "architectures determine which hardware architecture(s) to install, where x86_64, ppc64le, and s390x are the only supported choices currently.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "noProxy is a comma-separated list of hostnames and/or CIDRs and/or IPs for which the proxy should not be used. Empty means unset and will not result in an env var.", + Type: []string{"string"}, + Format: "", }, }, - "skippedImagestreams": { + "readinessEndpoints": { SchemaProps: spec.SchemaProps{ - Description: "skippedImagestreams specifies names of image streams that should NOT be created/updated. Admins can use this to allow them to delete content they don’t want. They will still have to manually delete the content but the operator will not recreate(or update) anything listed here.", + Description: "readinessEndpoints is a list of endpoints used to verify readiness of the proxy.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -70924,39 +12347,47 @@ func schema_openshift_api_samples_v1_ConfigSpec(ref common.ReferenceCallback) co }, }, }, - "skippedTemplates": { + "trustedCA": { SchemaProps: spec.SchemaProps{ - Description: "skippedTemplates specifies names of templates that should NOT be created/updated. Admins can use this to allow them to delete content they don’t want. They will still have to manually delete the content but the operator will not recreate(or update) anything listed here.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "trustedCA is a reference to a ConfigMap containing a CA certificate bundle. The trustedCA field should only be consumed by a proxy validator. The validator is responsible for reading the certificate bundle from the required key \"ca-bundle.crt\", merging it with the system default trust bundle, and writing the merged trust bundle to a ConfigMap named \"trusted-ca-bundle\" in the \"openshift-config-managed\" namespace. Clients that expect to make proxy connections must use the trusted-ca-bundle for all HTTPS requests to the proxy, and may use the trusted-ca-bundle for non-proxy HTTPS requests as well.\n\nThe namespace for the ConfigMap referenced by trustedCA is \"openshift-config\". Here is an example ConfigMap (in yaml):\n\napiVersion: v1 kind: ConfigMap metadata:\n name: user-ca-bundle\n namespace: openshift-config\n data:\n ca-bundle.crt: |\n -----BEGIN CERTIFICATE-----\n Custom CA certificate bundle.\n -----END CERTIFICATE-----", + Default: map[string]interface{}{}, + Ref: ref(v1.ConfigMapNameReference{}.OpenAPIModelName()), }, }, - "skippedHelmCharts": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "set", - }, + }, + }, + }, + Dependencies: []string{ + v1.ConfigMapNameReference{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_ProxyStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "ProxyStatus shows current known state of the cluster proxy.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "httpProxy": { + SchemaProps: spec.SchemaProps{ + Description: "httpProxy is the URL of the proxy for HTTP requests.", + Type: []string{"string"}, + Format: "", }, + }, + "httpsProxy": { SchemaProps: spec.SchemaProps{ - Description: "skippedHelmCharts specifies names of helm charts that should NOT be managed. Admins can use this to allow them to delete content they don’t want. They will still have to MANUALLY DELETE the content but the operator will not recreate(or update) anything listed here. Few examples of the name of helmcharts which can be skipped are 'redhat-redhat-perl-imagestreams','redhat-redhat-nodejs-imagestreams','redhat-nginx-imagestreams', 'redhat-redhat-ruby-imagestreams','redhat-redhat-python-imagestreams','redhat-redhat-php-imagestreams', 'redhat-httpd-imagestreams','redhat-redhat-dotnet-imagestreams'. Rest of the names can be obtained from openshift console --> helmcharts -->installed helmcharts. This will display the list of all the 12 helmcharts(of imagestreams)being installed by Samples Operator. The skippedHelmCharts must be a valid Kubernetes resource name. May contain only lowercase alphanumeric characters, hyphens and periods, and each period separated segment must begin and end with an alphanumeric character. It must be non-empty and at most 253 characters in length", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "httpsProxy is the URL of the proxy for HTTPS requests.", + Type: []string{"string"}, + Format: "", + }, + }, + "noProxy": { + SchemaProps: spec.SchemaProps{ + Description: "noProxy is a comma-separated list of hostnames and/or CIDRs for which the proxy should not be used.", + Type: []string{"string"}, + Format: "", }, }, }, @@ -70965,68 +12396,70 @@ func schema_openshift_api_samples_v1_ConfigSpec(ref common.ReferenceCallback) co } } -func schema_openshift_api_samples_v1_ConfigStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_RegistryLocation(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ConfigStatus contains the actual configuration in effect, as well as various details that describe the state of the Samples Operator.", + Description: "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "managementState": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge", - }, - }, + "domainName": { SchemaProps: spec.SchemaProps{ - Description: "managementState reflects the current operational status of the on/off switch for the operator. This operator compares the ManagementState as part of determining that we are turning the operator back on (i.e. \"Managed\") when it was previously \"Unmanaged\".", + Description: "domainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "conditions": { + "insecure": { + SchemaProps: spec.SchemaProps{ + Description: "insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.", + Type: []string{"boolean"}, + Format: "", + }, + }, + }, + Required: []string{"domainName"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_RegistrySources(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "RegistrySources holds cluster-wide information about how to handle the registries config.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "insecureRegistries": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge", + "x-kubernetes-list-type": "atomic", }, }, SchemaProps: spec.SchemaProps{ - Description: "conditions represents the available maintenance status of the sample imagestreams and templates.", + Description: "insecureRegistries are registries which do not have a valid TLS certificates or only support HTTP connections. Each entry must be a valid registry scope in the format hostname[:port][/path], optionally prefixed with \"*.\" for wildcard subdomains (e.g., \"*.example.com\"). The hostname must consist of valid DNS labels separated by dots, where each label contains only alphanumeric characters and hyphens and does not start or end with a hyphen. Entries must not be empty, must not include tags (e.g., \":latest\") or digests (e.g., \"@sha256:...\"), and must be at most 256 characters in length. The list may contain at most 1024 entries.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(samplesv1.ConfigCondition{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, - "samplesRegistry": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "samplesRegistry allows for the specification of which registry is accessed by the ImageStreams for their image content. Defaults on the content in https://github.com/openshift/library that are pulled into this github repository, but based on our pulling only ocp content it typically defaults to registry.redhat.io.", - Type: []string{"string"}, - Format: "", - }, - }, - "architectures": { + "blockedRegistries": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge", + "x-kubernetes-list-type": "atomic", }, }, SchemaProps: spec.SchemaProps{ - Description: "architectures determine which hardware architecture(s) to install, where x86_64 and ppc64le are the supported choices.", + Description: "blockedRegistries cannot be used for image pull and push actions. All other registries are permitted. Each entry must be a valid registry scope in the format hostname[:port][/path], optionally prefixed with \"*.\" for wildcard subdomains (e.g., \"*.example.com\"). The hostname must consist of valid DNS labels separated by dots, where each label contains only alphanumeric characters and hyphens and does not start or end with a hyphen. Entries must not be empty, must not include tags (e.g., \":latest\") or digests (e.g., \"@sha256:...\"), and must be at most 256 characters in length. The list may contain at most 1024 entries.\n\nOnly one of BlockedRegistries or AllowedRegistries may be set.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -71039,15 +12472,14 @@ func schema_openshift_api_samples_v1_ConfigStatus(ref common.ReferenceCallback) }, }, }, - "skippedImagestreams": { + "allowedRegistries": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge", + "x-kubernetes-list-type": "atomic", }, }, SchemaProps: spec.SchemaProps{ - Description: "skippedImagestreams specifies names of image streams that should NOT be created/updated. Admins can use this to allow them to delete content they don’t want. They will still have to manually delete the content but the operator will not recreate(or update) anything listed here.", + Description: "allowedRegistries are the only registries permitted for image pull and push actions. All other registries are denied. Each entry must be a valid registry scope in the format hostname[:port][/path], optionally prefixed with \"*.\" for wildcard subdomains (e.g., \"*.example.com\"). The hostname must consist of valid DNS labels separated by dots, where each label contains only alphanumeric characters and hyphens and does not start or end with a hyphen. Entries must not be empty, must not include tags (e.g., \":latest\") or digests (e.g., \"@sha256:...\"), and must be at most 256 characters in length. The list may contain at most 1024 entries.\n\nOnly one of BlockedRegistries or AllowedRegistries may be set.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -71060,15 +12492,14 @@ func schema_openshift_api_samples_v1_ConfigStatus(ref common.ReferenceCallback) }, }, }, - "skippedTemplates": { + "containerRuntimeSearchRegistries": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge", + "x-kubernetes-list-type": "set", }, }, SchemaProps: spec.SchemaProps{ - Description: "skippedTemplates specifies names of templates that should NOT be created/updated. Admins can use this to allow them to delete content they don’t want. They will still have to manually delete the content but the operator will not recreate(or update) anything listed here.", + Description: "containerRuntimeSearchRegistries are registries that will be searched when pulling images that do not have fully qualified domains in their pull specs. Registries will be searched in the order provided in the list. Note: this search list only works with the container runtime, i.e CRI-O. Will NOT work with builds or imagestream imports.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -71081,384 +12512,300 @@ func schema_openshift_api_samples_v1_ConfigStatus(ref common.ReferenceCallback) }, }, }, - "version": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "version is the value of the operator's payload based version indicator when it was last successfully processed", - Type: []string{"string"}, - Format: "", - }, - }, }, }, }, - Dependencies: []string{ - samplesv1.ConfigCondition{}.OpenAPIModelName()}, } } -func schema_openshift_api_security_v1_AllowedFlexVolume(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_Release(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "AllowedFlexVolume represents a single Flexvolume that is allowed to be used.", + Description: "Release represents an OpenShift release image and associated metadata.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "driver": { + "architecture": { + SchemaProps: spec.SchemaProps{ + Description: "architecture is an optional field that indicates the value of the cluster architecture. In this context cluster architecture means either a single architecture or a multi architecture. Valid values are 'Multi' and empty.", + Type: []string{"string"}, + Format: "", + }, + }, + "version": { SchemaProps: spec.SchemaProps{ - Description: "driver is the name of the Flexvolume driver.", + Description: "version is a semantic version identifying the update version. When this field is part of spec, version is optional if image is specified.", Default: "", Type: []string{"string"}, Format: "", }, }, - }, - Required: []string{"driver"}, - }, - }, - } -} - -func schema_openshift_api_security_v1_FSGroupStrategyOptions(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "FSGroupStrategyOptions defines the strategy type and options used to create the strategy.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "type": { + "image": { + SchemaProps: spec.SchemaProps{ + Description: "image is a container image location that contains the update. When this field is part of spec, image is optional if version is specified and the availableUpdates field contains a matching version.", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "url": { SchemaProps: spec.SchemaProps{ - Description: "type is the strategy that will dictate what FSGroup is used in the SecurityContext.", + Description: "url contains information about this release. This URL is set by the 'url' metadata property on a release or the metadata returned by the update API and should be displayed as a link in user interfaces. The URL field may not be set for test or nightly releases.", Type: []string{"string"}, Format: "", }, }, - "ranges": { + "channels": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", + "x-kubernetes-list-type": "set", }, }, SchemaProps: spec.SchemaProps{ - Description: "ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end.", + Description: "channels is the set of Cincinnati channels to which the release currently belongs.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(securityv1.IDRange{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, }, - }, - }, - Dependencies: []string{ - securityv1.IDRange{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_security_v1_IDRange(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "IDRange provides a min/max of an allowed range of IDs.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "min": { - SchemaProps: spec.SchemaProps{ - Description: "min is the start of the range, inclusive.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "max": { - SchemaProps: spec.SchemaProps{ - Description: "max is the end of the range, inclusive.", - Type: []string{"integer"}, - Format: "int64", - }, - }, - }, + Required: []string{"version", "image"}, }, }, } } -func schema_openshift_api_security_v1_PodSecurityPolicyReview(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_RemoteConnectionInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "PodSecurityPolicyReview checks which service accounts (not users, since that would be cluster-wide) can create the `PodTemplateSpec` in question.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + Description: "RemoteConnectionInfo holds information necessary for establishing a remote connection", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "url": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "url is the remote URL to connect to", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "ca": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "ca is the CA for verifying TLS connections", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { + "certFile": { SchemaProps: spec.SchemaProps{ - Description: "spec is the PodSecurityPolicy to check.", - Default: map[string]interface{}{}, - Ref: ref(securityv1.PodSecurityPolicyReviewSpec{}.OpenAPIModelName()), + Description: "certFile is a file containing a PEM-encoded certificate", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "status": { + "keyFile": { SchemaProps: spec.SchemaProps{ - Description: "status represents the current information/status for the PodSecurityPolicyReview.", - Default: map[string]interface{}{}, - Ref: ref(securityv1.PodSecurityPolicyReviewStatus{}.OpenAPIModelName()), + Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, - Required: []string{"spec"}, + Required: []string{"url", "ca", "certFile", "keyFile"}, }, }, - Dependencies: []string{ - securityv1.PodSecurityPolicyReviewSpec{}.OpenAPIModelName(), securityv1.PodSecurityPolicyReviewStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_security_v1_PodSecurityPolicyReviewSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_RepositoryDigestMirrors(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "PodSecurityPolicyReviewSpec defines specification for PodSecurityPolicyReview", + Description: "RepositoryDigestMirrors holds cluster-wide information about how to handle mirrors in the registries config.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "template": { + "source": { SchemaProps: spec.SchemaProps{ - Description: "template is the PodTemplateSpec to check. The template.spec.serviceAccountName field is used if serviceAccountNames is empty, unless the template.spec.serviceAccountName is empty, in which case \"default\" is used. If serviceAccountNames is specified, template.spec.serviceAccountName is ignored.", - Default: map[string]interface{}{}, - Ref: ref(corev1.PodTemplateSpec{}.OpenAPIModelName()), + Description: "source is the repository that users refer to, e.g. in image pull specifications.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "serviceAccountNames": { + "allowMirrorByTags": { SchemaProps: spec.SchemaProps{ - Description: "serviceAccountNames is an optional set of ServiceAccounts to run the check with. If serviceAccountNames is empty, the template.spec.serviceAccountName is used, unless it's empty, in which case \"default\" is used instead. If serviceAccountNames is specified, template.spec.serviceAccountName is ignored.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "allowMirrorByTags if true, the mirrors can be used to pull the images that are referenced by their tags. Default is false, the mirrors only work when pulling the images that are referenced by their digests. Pulling images by tag can potentially yield different images, depending on which endpoint we pull from. Forcing digest-pulls for mirrors avoids that issue.", + Type: []string{"boolean"}, + Format: "", }, }, - }, - Required: []string{"template"}, - }, - }, - Dependencies: []string{ - corev1.PodTemplateSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_security_v1_PodSecurityPolicyReviewStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PodSecurityPolicyReviewStatus represents the status of PodSecurityPolicyReview.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "allowedServiceAccounts": { + "mirrors": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "set", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "allowedServiceAccounts returns the list of service accounts in *this* namespace that have the power to create the PodTemplateSpec.", + Description: "mirrors is zero or more repositories that may also contain the same images. If the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec. No mirror will be configured. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. Other cluster configuration, including (but not limited to) other repositoryDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(securityv1.ServiceAccountPodSecurityPolicyReviewStatus{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, }, + Required: []string{"source"}, }, }, - Dependencies: []string{ - securityv1.ServiceAccountPodSecurityPolicyReviewStatus{}.OpenAPIModelName()}, } } -func schema_openshift_api_security_v1_PodSecurityPolicySelfSubjectReview(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_RequestHeaderIdentityProvider(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "PodSecurityPolicySelfSubjectReview checks whether this user/SA tuple can create the PodTemplateSpec\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + Description: "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "loginURL": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "loginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}\nRequired when login is set to true.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "challengeURL": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "challengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here. ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}\nRequired when challenge is set to true.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec defines specification the PodSecurityPolicySelfSubjectReview.", - Default: map[string]interface{}{}, - Ref: ref(securityv1.PodSecurityPolicySelfSubjectReviewSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status represents the current information/status for the PodSecurityPolicySelfSubjectReview.", - Default: map[string]interface{}{}, - Ref: ref(securityv1.PodSecurityPolicySubjectReviewStatus{}.OpenAPIModelName()), - }, - }, - }, - Required: []string{"spec"}, - }, - }, - Dependencies: []string{ - securityv1.PodSecurityPolicySelfSubjectReviewSpec{}.OpenAPIModelName(), securityv1.PodSecurityPolicySubjectReviewStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_security_v1_PodSecurityPolicySelfSubjectReviewSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PodSecurityPolicySelfSubjectReviewSpec contains specification for PodSecurityPolicySelfSubjectReview.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "template": { + "ca": { SchemaProps: spec.SchemaProps{ - Description: "template is the PodTemplateSpec to check.", + Description: "ca is a required reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. Specifically, it allows verification of incoming requests to prevent header spoofing. The key \"ca.crt\" is used to locate the data. If the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. The namespace for this config map is openshift-config.", Default: map[string]interface{}{}, - Ref: ref(corev1.PodTemplateSpec{}.OpenAPIModelName()), + Ref: ref(v1.ConfigMapNameReference{}.OpenAPIModelName()), }, }, - }, - Required: []string{"template"}, - }, - }, - Dependencies: []string{ - corev1.PodTemplateSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_security_v1_PodSecurityPolicySubjectReview(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PodSecurityPolicySubjectReview checks whether a particular user/SA tuple can create the PodTemplateSpec.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { + "clientCommonNames": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", + Description: "clientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "apiVersion": { + "headers": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + Description: "headers is the set of headers to check for identity information", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "metadata": { + "preferredUsernameHeaders": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + Description: "preferredUsernameHeaders is the set of headers to check for the preferred username", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "spec": { + "nameHeaders": { SchemaProps: spec.SchemaProps{ - Description: "spec defines specification for the PodSecurityPolicySubjectReview.", - Default: map[string]interface{}{}, - Ref: ref(securityv1.PodSecurityPolicySubjectReviewSpec{}.OpenAPIModelName()), + Description: "nameHeaders is the set of headers to check for the display name", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "status": { + "emailHeaders": { SchemaProps: spec.SchemaProps{ - Description: "status represents the current information/status for the PodSecurityPolicySubjectReview.", - Default: map[string]interface{}{}, - Ref: ref(securityv1.PodSecurityPolicySubjectReviewStatus{}.OpenAPIModelName()), + Description: "emailHeaders is the set of headers to check for the email address", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, }, - Required: []string{"spec"}, + Required: []string{"loginURL", "challengeURL", "ca", "headers", "preferredUsernameHeaders", "nameHeaders", "emailHeaders"}, }, }, Dependencies: []string{ - securityv1.PodSecurityPolicySubjectReviewSpec{}.OpenAPIModelName(), securityv1.PodSecurityPolicySubjectReviewStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.ConfigMapNameReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_security_v1_PodSecurityPolicySubjectReviewSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_RequiredHSTSPolicy(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "PodSecurityPolicySubjectReviewSpec defines specification for PodSecurityPolicySubjectReview", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "template": { - SchemaProps: spec.SchemaProps{ - Description: "template is the PodTemplateSpec to check. If template.spec.serviceAccountName is empty it will not be defaulted. If its non-empty, it will be checked.", - Default: map[string]interface{}{}, - Ref: ref(corev1.PodTemplateSpec{}.OpenAPIModelName()), - }, - }, - "user": { + "namespaceSelector": { SchemaProps: spec.SchemaProps{ - Description: "user is the user you're testing for. If you specify \"user\" but not \"group\", then is it interpreted as \"What if user were not a member of any groups. If user and groups are empty, then the check is performed using *only* the serviceAccountName in the template.", - Type: []string{"string"}, - Format: "", + Description: "namespaceSelector specifies a label selector such that the policy applies only to those routes that are in namespaces with labels that match the selector, and are in one of the DomainPatterns. Defaults to the empty LabelSelector, which matches everything.", + Ref: ref(metav1.LabelSelector{}.OpenAPIModelName()), }, }, - "groups": { + "domainPatterns": { SchemaProps: spec.SchemaProps{ - Description: "groups is the groups you're testing for.", + Description: "domainPatterns is a list of domains for which the desired HSTS annotations are required. If domainPatterns is specified and a route is created with a spec.host matching one of the domains, the route must specify the HSTS Policy components described in the matching RequiredHSTSPolicy.\n\nThe use of wildcards is allowed like this: *.foo.com matches everything under foo.com. foo.com only matches foo.com, so to cover foo.com and everything under it, you must specify *both*.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -71471,55 +12818,41 @@ func schema_openshift_api_security_v1_PodSecurityPolicySubjectReviewSpec(ref com }, }, }, - }, - Required: []string{"template"}, - }, - }, - Dependencies: []string{ - corev1.PodTemplateSpec{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_security_v1_PodSecurityPolicySubjectReviewStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "PodSecurityPolicySubjectReviewStatus contains information/status for PodSecurityPolicySubjectReview.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "allowedBy": { + "maxAge": { SchemaProps: spec.SchemaProps{ - Description: "allowedBy is a reference to the rule that allows the PodTemplateSpec. A rule can be a SecurityContextConstraint or a PodSecurityPolicy A `nil`, indicates that it was denied.", - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), + Description: "maxAge is the delta time range in seconds during which hosts are regarded as HSTS hosts. If set to 0, it negates the effect, and hosts are removed as HSTS hosts. If set to 0 and includeSubdomains is specified, all subdomains of the host are also removed as HSTS hosts. maxAge is a time-to-live value, and if this policy is not refreshed on a client, the HSTS policy will eventually expire on that client.", + Default: map[string]interface{}{}, + Ref: ref(v1.MaxAgePolicy{}.OpenAPIModelName()), }, }, - "reason": { + "preloadPolicy": { SchemaProps: spec.SchemaProps{ - Description: "A machine-readable description of why this operation is in the \"Failure\" status. If this value is empty there is no information available.", + Description: "preloadPolicy directs the client to include hosts in its host preload list so that it never needs to do an initial load to get the HSTS header (note that this is not defined in RFC 6797 and is therefore client implementation-dependent).", Type: []string{"string"}, Format: "", }, }, - "template": { + "includeSubDomainsPolicy": { SchemaProps: spec.SchemaProps{ - Description: "template is the PodTemplateSpec after the defaulting is applied.", - Default: map[string]interface{}{}, - Ref: ref(corev1.PodTemplateSpec{}.OpenAPIModelName()), + Description: "includeSubDomainsPolicy means the HSTS Policy should apply to any subdomains of the host's domain name. Thus, for the host bar.foo.com, if includeSubDomainsPolicy was set to RequireIncludeSubDomains: - the host app.bar.foo.com would inherit the HSTS Policy of bar.foo.com - the host bar.foo.com would inherit the HSTS Policy of bar.foo.com - the host foo.com would NOT inherit the HSTS Policy of bar.foo.com - the host def.foo.com would NOT inherit the HSTS Policy of bar.foo.com", + Type: []string{"string"}, + Format: "", }, }, }, + Required: []string{"domainPatterns", "maxAge"}, }, }, Dependencies: []string{ - corev1.ObjectReference{}.OpenAPIModelName(), corev1.PodTemplateSpec{}.OpenAPIModelName()}, + v1.MaxAgePolicy{}.OpenAPIModelName(), metav1.LabelSelector{}.OpenAPIModelName()}, } } -func schema_openshift_api_security_v1_RangeAllocation(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_Scheduler(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RangeAllocation is used so we can easily expose a RangeAllocation typed for security group\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "Scheduler holds cluster-wide config information to run the Kubernetes Scheduler and influence its placement decisions. The canonical name for this config is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -71543,35 +12876,34 @@ func schema_openshift_api_security_v1_RangeAllocation(ref common.ReferenceCallba Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), }, }, - "range": { + "spec": { SchemaProps: spec.SchemaProps{ - Description: "range is a string representing a unique label for a range of uids, \"1000000000-2000000000/10000\".", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "spec holds user settable values for configuration", + Default: map[string]interface{}{}, + Ref: ref(v1.SchedulerSpec{}.OpenAPIModelName()), }, }, - "data": { + "status": { SchemaProps: spec.SchemaProps{ - Description: "data is a byte array representing the serialized state of a range allocation. It is a bitmap with each bit set to one to represent a range is taken.", - Type: []string{"string"}, - Format: "byte", + Description: "status holds observed values from the cluster. They may not be overridden.", + Default: map[string]interface{}{}, + Ref: ref(v1.SchedulerStatus{}.OpenAPIModelName()), }, }, }, - Required: []string{"range", "data"}, + Required: []string{"spec"}, }, }, Dependencies: []string{ - metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.SchedulerSpec{}.OpenAPIModelName(), v1.SchedulerStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_security_v1_RangeAllocationList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_SchedulerList(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RangeAllocationList is a list of RangeAllocations objects\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -71597,215 +12929,178 @@ func schema_openshift_api_security_v1_RangeAllocationList(ref common.ReferenceCa }, "items": { SchemaProps: spec.SchemaProps{ - Description: "List of RangeAllocations.", - Type: []string{"array"}, + Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(securityv1.RangeAllocation{}.OpenAPIModelName()), + Ref: ref(v1.Scheduler{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"items"}, + Required: []string{"metadata", "items"}, }, }, Dependencies: []string{ - securityv1.RangeAllocation{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.Scheduler{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_security_v1_RunAsUserStrategyOptions(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_SchedulerSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "type": { + "policy": { SchemaProps: spec.SchemaProps{ - Description: "type is the strategy that will dictate what RunAsUser is used in the SecurityContext.", + Description: "DEPRECATED: the scheduler Policy API has been deprecated and will be removed in a future release. policy is a reference to a ConfigMap containing scheduler policy which has user specified predicates and priorities. If this ConfigMap is not available scheduler will default to use DefaultAlgorithmProvider. The namespace for this configmap is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.ConfigMapNameReference{}.OpenAPIModelName()), + }, + }, + "profile": { + SchemaProps: spec.SchemaProps{ + Description: "profile sets which scheduling profile should be set in order to configure scheduling decisions for new pods.\n\nValid values are \"LowNodeUtilization\", \"HighNodeUtilization\", \"NoScoring\" Defaults to \"LowNodeUtilization\"", Type: []string{"string"}, Format: "", }, }, - "uid": { + "profileCustomizations": { SchemaProps: spec.SchemaProps{ - Description: "uid is the user id that containers must run as. Required for the MustRunAs strategy if not using namespace/service account allocated uids.", - Type: []string{"integer"}, - Format: "int64", + Description: "profileCustomizations contains configuration for modifying the default behavior of existing scheduler profiles. Deprecated: no longer needed, since DRA is GA starting with 4.21, and is enabled by' default in the cluster, this field will be removed in 4.24.", + Default: map[string]interface{}{}, + Ref: ref(v1.ProfileCustomizations{}.OpenAPIModelName()), }, }, - "uidRangeMin": { + "defaultNodeSelector": { SchemaProps: spec.SchemaProps{ - Description: "uidRangeMin defines the min value for a strategy that allocates by range.", - Type: []string{"integer"}, - Format: "int64", + Description: "defaultNodeSelector helps set the cluster-wide default node selector to restrict pod placement to specific nodes. This is applied to the pods created in all namespaces and creates an intersection with any existing nodeSelectors already set on a pod, additionally constraining that pod's selector. For example, defaultNodeSelector: \"type=user-node,region=east\" would set nodeSelector field in pod spec to \"type=user-node,region=east\" to all pods created in all namespaces. Namespaces having project-wide node selectors won't be impacted even if this field is set. This adds an annotation section to the namespace. For example, if a new namespace is created with node-selector='type=user-node,region=east', the annotation openshift.io/node-selector: type=user-node,region=east gets added to the project. When the openshift.io/node-selector annotation is set on the project the value is used in preference to the value we are setting for defaultNodeSelector field. For instance, openshift.io/node-selector: \"type=user-node,region=west\" means that the default of \"type=user-node,region=east\" set in defaultNodeSelector would not be applied.", + Type: []string{"string"}, + Format: "", }, }, - "uidRangeMax": { + "mastersSchedulable": { SchemaProps: spec.SchemaProps{ - Description: "uidRangeMax defines the max value for a strategy that allocates by range.", - Type: []string{"integer"}, - Format: "int64", + Description: "mastersSchedulable allows masters nodes to be schedulable. When this flag is turned on, all the master nodes in the cluster will be made schedulable, so that workload pods can run on them. The default value for this field is false, meaning none of the master nodes are schedulable. Important Note: Once the workload pods start running on the master nodes, extreme care must be taken to ensure that cluster-critical control plane components are not impacted. Please turn on this field after doing due diligence.", + Default: false, + Type: []string{"boolean"}, + Format: "", }, }, }, }, }, + Dependencies: []string{ + v1.ConfigMapNameReference{}.OpenAPIModelName(), v1.ProfileCustomizations{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_SchedulerStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Type: []string{"object"}, + }, + }, } } -func schema_openshift_api_security_v1_SELinuxContextStrategyOptions(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_SecretNameReference(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SELinuxContextStrategyOptions defines the strategy type and any options used to create the strategy.", + Description: "SecretNameReference references a secret in a specific namespace. The namespace must be specified at the point of use.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "type": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "type is the strategy that will dictate what SELinux context is used in the SecurityContext.", + Description: "name is the metadata.name of the referenced secret", + Default: "", Type: []string{"string"}, Format: "", }, }, - "seLinuxOptions": { - SchemaProps: spec.SchemaProps{ - Description: "seLinuxOptions required to run as; required for MustRunAs", - Ref: ref(corev1.SELinuxOptions{}.OpenAPIModelName()), - }, - }, }, + Required: []string{"name"}, }, }, - Dependencies: []string{ - corev1.SELinuxOptions{}.OpenAPIModelName()}, } } -func schema_openshift_api_security_v1_SecurityContextConstraints(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_ServingInfo(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SecurityContextConstraints governs the ability to make requests that affect the SecurityContext that will be applied to a container. For historical reasons SCC was exposed under the core Kubernetes API group. That exposure is deprecated and will be removed in a future release - users should instead use the security.openshift.io group to manage SecurityContextConstraints.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "ServingInfo holds information about serving web pages", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "bindAddress": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "bindAddress is the ip:port to serve on", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "bindNetwork": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "bindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "priority": { - SchemaProps: spec.SchemaProps{ - Description: "priority influences the sort order of SCCs when evaluating which SCCs to try first for a given pod request based on access in the Users and Groups fields. The higher the int, the higher priority. An unset value is considered a 0 priority. If scores for multiple SCCs are equal they will be sorted from most restrictive to least restrictive. If both priorities and restrictions are equal the SCCs will be sorted by name.", - Type: []string{"integer"}, - Format: "int32", - }, - }, - "allowPrivilegedContainer": { + "certFile": { SchemaProps: spec.SchemaProps{ - Description: "allowPrivilegedContainer determines if a container can request to be run as privileged.", - Default: false, - Type: []string{"boolean"}, + Description: "certFile is a file containing a PEM-encoded certificate", + Default: "", + Type: []string{"string"}, Format: "", }, }, - "defaultAddCapabilities": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, + "keyFile": { SchemaProps: spec.SchemaProps{ - Description: "defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both DefaultAddCapabilities and RequiredDropCapabilities.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "requiredDropCapabilities": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, + "clientCA": { SchemaProps: spec.SchemaProps{ - Description: "requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "clientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", + Type: []string{"string"}, + Format: "", }, }, - "allowedCapabilities": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, + "namedCertificates": { SchemaProps: spec.SchemaProps{ - Description: "allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field maybe added at the pod author's discretion. You must not list a capability in both AllowedCapabilities and RequiredDropCapabilities. To allow all capabilities you may use '*'.", + Description: "namedCertificates is a list of certificates to use to secure requests to specific hostnames", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.NamedCertificate{}.OpenAPIModelName()), }, }, }, }, }, - "allowHostDirVolumePlugin": { + "minTLSVersion": { SchemaProps: spec.SchemaProps{ - Description: "allowHostDirVolumePlugin determines if the policy allow containers to use the HostDir volume plugin", - Default: false, - Type: []string{"boolean"}, + Description: "minTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", + Type: []string{"string"}, Format: "", }, }, - "volumes": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, + "cipherSuites": { SchemaProps: spec.SchemaProps{ - Description: "volumes is a white list of allowed volume plugins. FSType corresponds directly with the field names of a VolumeSource (azureFile, configMap, emptyDir). To allow all volumes you may use \"*\". To allow no volumes, set to [\"none\"].", + Description: "cipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -71818,468 +13113,408 @@ func schema_openshift_api_security_v1_SecurityContextConstraints(ref common.Refe }, }, }, - "allowedFlexVolumes": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the \"Volumes\" field.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(securityv1.AllowedFlexVolume{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "allowHostNetwork": { + }, + Required: []string{"bindAddress", "bindNetwork", "certFile", "keyFile"}, + }, + }, + Dependencies: []string{ + v1.NamedCertificate{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_SignatureStore(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "SignatureStore represents the URL of custom Signature Store", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "url": { SchemaProps: spec.SchemaProps{ - Description: "allowHostNetwork determines if the policy allows the use of HostNetwork in the pod spec.", - Default: false, - Type: []string{"boolean"}, + Description: "url contains the upstream custom signature store URL. url should be a valid absolute http/https URI of an upstream signature store as per rfc1738. This must be provided and cannot be empty.", + Default: "", + Type: []string{"string"}, Format: "", }, }, - "allowHostPorts": { + "ca": { SchemaProps: spec.SchemaProps{ - Description: "allowHostPorts determines if the policy allows host ports in the containers.", - Default: false, - Type: []string{"boolean"}, - Format: "", + Description: "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the signature store is not honored. If the specified ca data is not valid, the signature store is not honored. If empty, we fall back to the CA configured via Proxy, which is appended to the default system roots. The namespace for this config map is openshift-config.", + Default: map[string]interface{}{}, + Ref: ref(v1.ConfigMapNameReference{}.OpenAPIModelName()), }, }, - "allowHostPID": { + }, + Required: []string{"url"}, + }, + }, + Dependencies: []string{ + v1.ConfigMapNameReference{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_SourceURL(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "SourceURL configures the options used to build the URL that is queried for external claims.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "hostname": { SchemaProps: spec.SchemaProps{ - Description: "allowHostPID determines if the policy allows host pid in the containers.", - Default: false, - Type: []string{"boolean"}, + Description: "hostname is a required hostname for which the external claims are located.\n\nIt must be a valid DNS subdomain name as per RFC1123.\n\nThis means that it must start and end with a lowercase alphanumeric character, must only consist of lowercase alphanumeric characters, '-', and '.'. hostname may optionally specify a port in the format ':{port}'. If a port is specified it must not exceed 65535.\n\nhostname must be at least 1 character in length. When specifying a port, hostname must not exceed 259 characters in length. When not specifying a port, hostname must not exceed 253 characters in length.", + Type: []string{"string"}, Format: "", }, }, - "allowHostIPC": { + "pathExpression": { SchemaProps: spec.SchemaProps{ - Description: "allowHostIPC determines if the policy allows host ipc in the containers.", - Default: false, - Type: []string{"boolean"}, + Description: "pathExpression is a required CEL expression that returns a list of string values used to construct the URL path. Claims from the token used for the request to the kube-apiserver are made available via the `claims` variable. expression must be at least 1 character in length and must not exceed 1024 characters in length.\n\nValues in the returned list will be joined with the hostname using a forward slash (`/`) as a separator. Values in the returned list do not need to include the forward slash. If a forward slash is included in a returned value, it will be encoded as `%2F`.\n\nExample of a static path configuration:\n\n pathExpression: ['realms', 'k8s', 'protocol', 'openid-connect', 'userinfo']\n\nThe above example would resolve to the path: '/realms/k8s/protocol/openid-connect/userinfo'\n\nExample of a dynamic path configuration:\n\n pathExpression: \"['admin', 'realms', 'k8s', 'users'] + [claims.sub] + ['groups']\"\n\nAssuming 'claims.sub' is set to '12345', the above example would resolve to the path: '/admin/realms/k8s/users/12345/groups'", + Type: []string{"string"}, Format: "", }, }, - "userNamespaceLevel": { + }, + Required: []string{"hostname", "pathExpression"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_SourcedClaimMapping(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "SourcedClaimMapping configures the mapping behavior for a single external claim from the response the apiserver received from the external claim source.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "name": { SchemaProps: spec.SchemaProps{ - Description: "userNamespaceLevel determines if the policy allows host users in containers. Valid values are \"AllowHostLevel\", \"RequirePodLevel\", and omitted. When \"AllowHostLevel\" is set, a pod author may set `hostUsers` to either `true` or `false`. When \"RequirePodLevel\" is set, a pod author must set `hostUsers` to `false`. When omitted, the default value is \"AllowHostLevel\".", - Default: "AllowHostLevel", + Description: "name is a required name of the claim that will be produced and made available during the claim-to-identity mapping process. name must consist of only lowercase alpha characters and underscores ('_'). name must be at least 1 character and must not exceed 256 characters in length.", Type: []string{"string"}, Format: "", }, }, - "defaultAllowPrivilegeEscalation": { + "expression": { SchemaProps: spec.SchemaProps{ - Description: "defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.", - Type: []string{"boolean"}, + Description: "expression is a required CEL expression that will produce a value to be assigned to the claim. The full response body from the request to the external claim source is provided via the `response.body` variable.\n\nThe contents of the `response.body` variable varies based on the response received from the external source. It is the responsibility of those configuring this expression to understand what is returned from the external source.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length.", + Type: []string{"string"}, Format: "", }, }, - "allowPrivilegeEscalation": { + }, + Required: []string{"name", "expression"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_Storage(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "Storage provides persistent storage configuration options for gathering jobs. If the type is set to PersistentVolume, then the PersistentVolume must be defined. If the type is set to Ephemeral, then the PersistentVolume must not be defined.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "type": { SchemaProps: spec.SchemaProps{ - Description: "allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.", - Type: []string{"boolean"}, + Description: "type is a required field that specifies the type of storage that will be used to store the Insights data archive. Valid values are \"PersistentVolume\" and \"Ephemeral\". When set to Ephemeral, the Insights data archive is stored in the ephemeral storage of the gathering job. When set to PersistentVolume, the Insights data archive is stored in the PersistentVolume that is defined by the persistentVolume field.", + Type: []string{"string"}, Format: "", }, }, - "seLinuxContext": { - SchemaProps: spec.SchemaProps{ - Description: "seLinuxContext is the strategy that will dictate what labels will be set in the SecurityContext.", - Default: map[string]interface{}{}, - Ref: ref(securityv1.SELinuxContextStrategyOptions{}.OpenAPIModelName()), - }, - }, - "runAsUser": { - SchemaProps: spec.SchemaProps{ - Description: "runAsUser is the strategy that will dictate what RunAsUser is used in the SecurityContext.", - Default: map[string]interface{}{}, - Ref: ref(securityv1.RunAsUserStrategyOptions{}.OpenAPIModelName()), - }, - }, - "supplementalGroups": { - SchemaProps: spec.SchemaProps{ - Description: "supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.", - Default: map[string]interface{}{}, - Ref: ref(securityv1.SupplementalGroupsStrategyOptions{}.OpenAPIModelName()), - }, - }, - "fsGroup": { + "persistentVolume": { SchemaProps: spec.SchemaProps{ - Description: "fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.", + Description: "persistentVolume is an optional field that specifies the PersistentVolume that will be used to store the Insights data archive. The PersistentVolume must be created in the openshift-insights namespace.", Default: map[string]interface{}{}, - Ref: ref(securityv1.FSGroupStrategyOptions{}.OpenAPIModelName()), - }, - }, - "readOnlyRootFilesystem": { - SchemaProps: spec.SchemaProps{ - Description: "readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the SCC should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.", - Default: false, - Type: []string{"boolean"}, - Format: "", - }, - }, - "users": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "The users who have permissions to use this security context constraints", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "groups": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "The groups that have permission to use this security context constraints", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Ref: ref(v1.PersistentVolumeConfig{}.OpenAPIModelName()), }, }, - "seccompProfiles": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "seccompProfiles lists the allowed profiles that may be set for the pod or container's seccomp annotations. An unset (nil) or empty value means that no profiles may be specified by the pod or container.\tThe wildcard '*' may be used to allow all profiles. When used to generate a value for a pod the first non-wildcard profile will be used as the default.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "allowedUnsafeSysctls": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in \"*\" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.\n\nExamples: e.g. \"foo/*\" allows \"foo/bar\", \"foo/baz\", etc. e.g. \"foo.*\" allows \"foo.bar\", \"foo.baz\", etc.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, - }, - }, - "forbiddenSysctls": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in \"*\" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.\n\nExamples: e.g. \"foo/*\" forbids \"foo/bar\", \"foo/baz\", etc. e.g. \"foo.*\" forbids \"foo.bar\", \"foo.baz\", etc.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, + }, + Required: []string{"type"}, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "type", + "fields-to-discriminateBy": map[string]interface{}{ + "persistentVolume": "PersistentVolume", }, }, }, }, - Required: []string{"priority", "allowPrivilegedContainer", "defaultAddCapabilities", "requiredDropCapabilities", "allowedCapabilities", "allowHostDirVolumePlugin", "volumes", "allowHostNetwork", "allowHostPorts", "allowHostPID", "allowHostIPC", "readOnlyRootFilesystem"}, }, }, Dependencies: []string{ - securityv1.AllowedFlexVolume{}.OpenAPIModelName(), securityv1.FSGroupStrategyOptions{}.OpenAPIModelName(), securityv1.RunAsUserStrategyOptions{}.OpenAPIModelName(), securityv1.SELinuxContextStrategyOptions{}.OpenAPIModelName(), securityv1.SupplementalGroupsStrategyOptions{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.PersistentVolumeConfig{}.OpenAPIModelName()}, } } -func schema_openshift_api_security_v1_SecurityContextConstraintsList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_StringSource(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SecurityContextConstraintsList is a list of SecurityContextConstraints objects\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "StringSource allows specifying a string inline, or externally via env var or file. When it contains only a string value, it marshals to a simple JSON string.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "value": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "value specifies the cleartext value, or an encrypted value if keyFile is specified.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "env": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { + "file": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + Description: "file references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "items": { + "keyFile": { SchemaProps: spec.SchemaProps{ - Description: "List of security context constraints.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(securityv1.SecurityContextConstraints{}.OpenAPIModelName()), - }, - }, - }, + Description: "keyFile references a file containing the key to use to decrypt the value.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, - Required: []string{"items"}, + Required: []string{"value", "env", "file", "keyFile"}, }, }, - Dependencies: []string{ - securityv1.SecurityContextConstraints{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_security_v1_ServiceAccountPodSecurityPolicyReviewStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_StringSourceSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ServiceAccountPodSecurityPolicyReviewStatus represents ServiceAccount name and related review status", + Description: "StringSourceSpec specifies a string value, or external location", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "allowedBy": { + "value": { SchemaProps: spec.SchemaProps{ - Description: "allowedBy is a reference to the rule that allows the PodTemplateSpec. A rule can be a SecurityContextConstraint or a PodSecurityPolicy A `nil`, indicates that it was denied.", - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), + Description: "value specifies the cleartext value, or an encrypted value if keyFile is specified.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "reason": { + "env": { SchemaProps: spec.SchemaProps{ - Description: "A machine-readable description of why this operation is in the \"Failure\" status. If this value is empty there is no information available.", + Description: "env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "template": { + "file": { SchemaProps: spec.SchemaProps{ - Description: "template is the PodTemplateSpec after the defaulting is applied.", - Default: map[string]interface{}{}, - Ref: ref(corev1.PodTemplateSpec{}.OpenAPIModelName()), + Description: "file references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "name": { + "keyFile": { SchemaProps: spec.SchemaProps{ - Description: "name contains the allowed and the denied ServiceAccount name", + Description: "keyFile references a file containing the key to use to decrypt the value.", Default: "", Type: []string{"string"}, Format: "", }, }, }, - Required: []string{"name"}, + Required: []string{"value", "env", "file", "keyFile"}, }, }, - Dependencies: []string{ - corev1.ObjectReference{}.OpenAPIModelName(), corev1.PodTemplateSpec{}.OpenAPIModelName()}, } } -func schema_openshift_api_security_v1_SupplementalGroupsStrategyOptions(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_TLSProfileSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.", + Description: "TLSProfileSpec is the desired behavior of a TLSSecurityProfile.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "type": { + "ciphers": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "type is the strategy that will dictate what supplemental groups is used in the SecurityContext.", - Type: []string{"string"}, - Format: "", + Description: "ciphers is used to specify the cipher algorithms that are negotiated during the TLS handshake. Operators may remove entries that their operands do not support. For example, to use only ECDHE-RSA-AES128-GCM-SHA256 (yaml):\n\n ciphers:\n - ECDHE-RSA-AES128-GCM-SHA256\n\nTLS 1.3 cipher suites (e.g. TLS_AES_128_GCM_SHA256) are not configurable and are always enabled when TLS 1.3 is negotiated.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "ranges": { + "groups": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ - "x-kubernetes-list-type": "atomic", + "x-kubernetes-list-type": "set", }, }, SchemaProps: spec.SchemaProps{ - Description: "ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end.", + Description: "groups is an optional, ordered field used to specify the supported groups (formerly known as elliptic curves) that are used during the TLS handshake. The order of the groups represents a suggested preference, with the most preferred group first. Note that not all platform components honor the ordering: Go-based components use Go's internal preference order and treat this list as a filter of allowed groups rather than an ordered preference. Operators may remove entries their operands do not support.\n\nWhen omitted, this means no opinion and the platform is left to choose reasonable defaults which are subject to change over time and may be different per platform component depending on the underlying TLS libraries they use. If specified, the list must contain at least one and at most 7 groups, and each group must be unique.\n\nFor example, to use X25519 and secp256r1 (yaml):\n\n groups:\n - X25519\n - secp256r1", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(securityv1.IDRange{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, + "minTLSVersion": { + SchemaProps: spec.SchemaProps{ + Description: "minTLSVersion is used to specify the minimal version of the TLS protocol that is negotiated during the TLS handshake. For example, to use TLS versions 1.1, 1.2 and 1.3 (yaml):\n\n minTLSVersion: VersionTLS11", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, }, + Required: []string{"ciphers", "minTLSVersion"}, }, }, - Dependencies: []string{ - securityv1.IDRange{}.OpenAPIModelName()}, } } -func schema_openshift_api_securityinternal_v1_RangeAllocation(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_TLSSecurityProfile(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RangeAllocation is used so we can easily expose a RangeAllocation typed for security group This is an internal API, not intended for external consumption.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "TLSSecurityProfile defines the schema for a TLS security profile. This object is used by operators to apply TLS security settings to operands.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "type": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "type is one of Old, Intermediate, Modern or Custom. Custom provides the ability to specify individual TLS security profile parameters.\n\nThe cipher and groups lists in these profiles are based on version 5.8 of the Mozilla Server Side TLS configuration guidelines. See: https://ssl-config.mozilla.org/guidelines/5.8.json\n\nThe groups are listed in suggested preference order, with the most preferred group first. Note that not all platform components honor the ordering: Go-based components use Go's internal preference order and treat this list as a filter of allowed groups rather than an ordered preference. Note that X25519MLKEM768 is a post-quantum hybrid group that is not FIPS-approved and should be ignored by components running in FIPS mode.\n\nThe profiles are intent based, so they may change over time as new ciphers are developed and existing ciphers are found to be insecure. Depending on precisely which ciphers are available to a process, the list may be reduced.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "old": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + Description: "old is a TLS profile for use when services need to be accessed by very old clients or libraries and should be used only as a last resort.\n\nThe supported groups list includes by default the following groups in suggested preference order (ordering may not be honored by all implementations): X25519MLKEM768, X25519, secp256r1, secp384r1.\n\nThis profile is equivalent to a Custom profile specified as:\n minTLSVersion: VersionTLS10\n ciphers:\n - TLS_AES_128_GCM_SHA256\n - TLS_AES_256_GCM_SHA384\n - TLS_CHACHA20_POLY1305_SHA256\n - ECDHE-ECDSA-AES128-GCM-SHA256\n - ECDHE-RSA-AES128-GCM-SHA256\n - ECDHE-ECDSA-AES256-GCM-SHA384\n - ECDHE-RSA-AES256-GCM-SHA384\n - ECDHE-ECDSA-CHACHA20-POLY1305\n - ECDHE-RSA-CHACHA20-POLY1305\n - ECDHE-ECDSA-AES128-SHA256\n - ECDHE-RSA-AES128-SHA256\n - ECDHE-ECDSA-AES128-SHA\n - ECDHE-RSA-AES128-SHA\n - ECDHE-ECDSA-AES256-SHA384\n - ECDHE-RSA-AES256-SHA384\n - ECDHE-ECDSA-AES256-SHA\n - ECDHE-RSA-AES256-SHA\n - AES128-GCM-SHA256\n - AES256-GCM-SHA384\n - AES128-SHA256\n - AES256-SHA256\n - AES128-SHA\n - AES256-SHA\n - DES-CBC3-SHA", + Ref: ref(v1.OldTLSProfile{}.OpenAPIModelName()), }, }, - "metadata": { + "intermediate": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + Description: "intermediate is a TLS profile for use when you do not need compatibility with legacy clients and want to remain highly secure while being compatible with most clients currently in use.\n\nThe supported groups list includes by default the following groups in suggested preference order (ordering may not be honored by all implementations): X25519MLKEM768, X25519, secp256r1, secp384r1.\n\nThis profile is equivalent to a Custom profile specified as:\n minTLSVersion: VersionTLS12\n ciphers:\n - TLS_AES_128_GCM_SHA256\n - TLS_AES_256_GCM_SHA384\n - TLS_CHACHA20_POLY1305_SHA256\n - ECDHE-ECDSA-AES128-GCM-SHA256\n - ECDHE-RSA-AES128-GCM-SHA256\n - ECDHE-ECDSA-AES256-GCM-SHA384\n - ECDHE-RSA-AES256-GCM-SHA384\n - ECDHE-ECDSA-CHACHA20-POLY1305\n - ECDHE-RSA-CHACHA20-POLY1305", + Ref: ref(v1.IntermediateTLSProfile{}.OpenAPIModelName()), }, }, - "range": { + "modern": { SchemaProps: spec.SchemaProps{ - Description: "range is a string representing a unique label for a range of uids, \"1000000000-2000000000/10000\".", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "modern is a TLS security profile for use with clients that support TLS 1.3 and do not need backward compatibility for older clients. The supported groups list includes by default the following groups in suggested preference order (ordering may not be honored by all implementations): X25519MLKEM768, X25519, secp256r1, secp384r1. This profile is equivalent to a Custom profile specified as:\n minTLSVersion: VersionTLS13\n ciphers:\n - TLS_AES_128_GCM_SHA256\n - TLS_AES_256_GCM_SHA384\n - TLS_CHACHA20_POLY1305_SHA256", + Ref: ref(v1.ModernTLSProfile{}.OpenAPIModelName()), }, }, - "data": { + "custom": { SchemaProps: spec.SchemaProps{ - Description: "data is a byte array representing the serialized state of a range allocation. It is a bitmap with each bit set to one to represent a range is taken.", - Type: []string{"string"}, - Format: "byte", + Description: "custom is a user-defined TLS security profile. Be extremely careful using a custom profile as invalid configurations can be catastrophic.\n\nThe supported groups list for this profile is empty by default.\n\nAn example custom profile looks like this:\n\n minTLSVersion: VersionTLS11\n ciphers:\n - ECDHE-ECDSA-CHACHA20-POLY1305\n - ECDHE-RSA-CHACHA20-POLY1305\n - ECDHE-RSA-AES128-GCM-SHA256\n - ECDHE-ECDSA-AES128-GCM-SHA256", + Ref: ref(v1.CustomTLSProfile{}.OpenAPIModelName()), + }, + }, + }, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "type", + "fields-to-discriminateBy": map[string]interface{}{ + "custom": "Custom", + "intermediate": "Intermediate", + "modern": "Modern", + "old": "Old", + }, }, }, }, - Required: []string{"range", "data"}, }, }, Dependencies: []string{ - metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.CustomTLSProfile{}.OpenAPIModelName(), v1.IntermediateTLSProfile{}.OpenAPIModelName(), v1.ModernTLSProfile{}.OpenAPIModelName(), v1.OldTLSProfile{}.OpenAPIModelName()}, } } -func schema_openshift_api_securityinternal_v1_RangeAllocationList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_TemplateReference(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "RangeAllocationList is a list of RangeAllocations objects This is an internal API, not intended for external consumption.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "TemplateReference references a template in a specific namespace. The namespace must be specified at the point of use.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "name is the metadata.name of the referenced project request template", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + }, + Required: []string{"name"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_TestDetails(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "testName": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "testName is the name of the test as it appears in junit XMLs. It does not include the suite name since the same test can be executed in many suites.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "List of RangeAllocations.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(securityinternalv1.RangeAllocation{}.OpenAPIModelName()), - }, - }, - }, - }, - }, }, - Required: []string{"items"}, + Required: []string{"testName"}, }, }, - Dependencies: []string{ - securityinternalv1.RangeAllocation{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_servicecertsigner_v1alpha1_ServiceCertSignerOperatorConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_TestReporting(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ServiceCertSignerOperatorConfig provides information to configure an operator to manage the service cert signing controllers\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + Description: "TestReporting is used for origin (and potentially others) to report the test names for a given FeatureGate into the payload for later analysis on a per-payload basis. This doesn't need any CRD because it's never stored in the cluster.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", Type: []string{"object"}, Properties: map[string]spec.Schema{ "kind": { @@ -72306,1209 +13541,1024 @@ func schema_openshift_api_servicecertsigner_v1alpha1_ServiceCertSignerOperatorCo "spec": { SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(servicecertsignerv1alpha1.ServiceCertSignerOperatorConfigSpec{}.OpenAPIModelName()), + Ref: ref(v1.TestReportingSpec{}.OpenAPIModelName()), }, }, "status": { SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(servicecertsignerv1alpha1.ServiceCertSignerOperatorConfigStatus{}.OpenAPIModelName()), + Description: "status holds observed values from the cluster. They may not be overridden.", + Default: map[string]interface{}{}, + Ref: ref(v1.TestReportingStatus{}.OpenAPIModelName()), }, }, }, - Required: []string{"metadata", "spec", "status"}, + Required: []string{"spec"}, }, }, Dependencies: []string{ - servicecertsignerv1alpha1.ServiceCertSignerOperatorConfigSpec{}.OpenAPIModelName(), servicecertsignerv1alpha1.ServiceCertSignerOperatorConfigStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.TestReportingSpec{}.OpenAPIModelName(), v1.TestReportingStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_servicecertsigner_v1alpha1_ServiceCertSignerOperatorConfigList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_TestReportingSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ServiceCertSignerOperatorConfigList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { + "testsForFeatureGates": { SchemaProps: spec.SchemaProps{ - Description: "items contains the items", + Description: "testsForFeatureGates is a list, indexed by FeatureGate and includes information about testing.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(servicecertsignerv1alpha1.ServiceCertSignerOperatorConfig{}.OpenAPIModelName()), + Ref: ref(v1.FeatureGateTests{}.OpenAPIModelName()), }, }, }, }, }, }, - Required: []string{"items"}, + Required: []string{"testsForFeatureGates"}, }, }, Dependencies: []string{ - servicecertsignerv1alpha1.ServiceCertSignerOperatorConfig{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.FeatureGateTests{}.OpenAPIModelName()}, } } -func schema_openshift_api_servicecertsigner_v1alpha1_ServiceCertSignerOperatorConfigSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_TestReportingStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ Type: []string{"object"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_TokenClaimMapping(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "TokenClaimMapping allows specifying a JWT token claim to be used when mapping claims from an authentication token to cluster identities.", + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "managementState": { + "claim": { SchemaProps: spec.SchemaProps{ - Description: "managementState indicates whether and how the operator should manage the component", + Description: "claim is an optional field for specifying the JWT token claim that is used in the mapping. The value of this claim will be assigned to the field in which this mapping is associated. claim must not exceed 256 characters in length. When set to the empty string `\"\"`, this means that no named claim should be used for the group mapping. claim is required when the ExternalOIDCWithUpstreamParity feature gate is not enabled.", Default: "", Type: []string{"string"}, Format: "", }, }, - "logLevel": { - SchemaProps: spec.SchemaProps{ - Description: "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - Type: []string{"string"}, - Format: "", - }, - }, - "operatorLogLevel": { + "expression": { SchemaProps: spec.SchemaProps{ - Description: "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", + Description: "expression is an optional CEL expression used to derive group values from JWT claims.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length .\n\nWhen specified, claim must not be set or be explicitly set to the empty string (`\"\"`).", Type: []string{"string"}, Format: "", }, }, - "unsupportedConfigOverrides": { - SchemaProps: spec.SchemaProps{ - Description: "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - "observedConfig": { - SchemaProps: spec.SchemaProps{ - Description: "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, }, - Required: []string{"managementState"}, }, }, - Dependencies: []string{ - runtime.RawExtension{}.OpenAPIModelName()}, } } -func schema_openshift_api_servicecertsigner_v1alpha1_ServiceCertSignerOperatorConfigStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_TokenClaimMappings(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ Type: []string{"object"}, Properties: map[string]spec.Schema{ - "observedGeneration": { - SchemaProps: spec.SchemaProps{ - Description: "observedGeneration is the last generation change you've dealt with", - Type: []string{"integer"}, - Format: "int64", - }, - }, - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions is a list of conditions and their status", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(operatorv1.OperatorCondition{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "version": { + "username": { SchemaProps: spec.SchemaProps{ - Description: "version is the level this availability applies to", - Type: []string{"string"}, - Format: "", + Description: "username is a required field that configures how the username of a cluster identity should be constructed from the claims in a JWT token issued by the identity provider.", + Default: map[string]interface{}{}, + Ref: ref(v1.UsernameClaimMapping{}.OpenAPIModelName()), }, }, - "readyReplicas": { + "groups": { SchemaProps: spec.SchemaProps{ - Description: "readyReplicas indicates how many replicas are ready and at the desired state", - Default: 0, - Type: []string{"integer"}, - Format: "int32", + Description: "groups is an optional field that configures how the groups of a cluster identity should be constructed from the claims in a JWT token issued by the identity provider.\n\nWhen referencing a claim, if the claim is present in the JWT token, its value must be a list of groups separated by a comma (',').\n\nFor example - '\"example\"' and '\"exampleOne\", \"exampleTwo\", \"exampleThree\"' are valid claim values.", + Default: map[string]interface{}{}, + Ref: ref(v1.PrefixedClaimMapping{}.OpenAPIModelName()), }, }, - "latestAvailableRevision": { + "uid": { SchemaProps: spec.SchemaProps{ - Description: "latestAvailableRevision is the deploymentID of the most recent deployment", - Type: []string{"integer"}, - Format: "int32", + Description: "uid is an optional field for configuring the claim mapping used to construct the uid for the cluster identity.\n\nWhen using uid.claim to specify the claim it must be a single string value. When using uid.expression the expression must result in a single string value.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose a default, which is subject to change over time.\n\nThe current default is to use the 'sub' claim.", + Ref: ref(v1.TokenClaimOrExpressionMapping{}.OpenAPIModelName()), }, }, - "generations": { + "extra": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ "x-kubernetes-list-map-keys": []interface{}{ - "group", - "resource", - "namespace", - "name", + "key", }, "x-kubernetes-list-type": "map", }, }, SchemaProps: spec.SchemaProps{ - Description: "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", + Description: "extra is an optional field for configuring the mappings used to construct the extra attribute for the cluster identity. When omitted, no extra attributes will be present on the cluster identity.\n\nkey values for extra mappings must be unique. A maximum of 32 extra attribute mappings may be provided.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(operatorv1.GenerationStatus{}.OpenAPIModelName()), + Ref: ref(v1.ExtraMapping{}.OpenAPIModelName()), }, }, }, }, }, }, + Required: []string{"username"}, }, }, Dependencies: []string{ - operatorv1.GenerationStatus{}.OpenAPIModelName(), operatorv1.OperatorCondition{}.OpenAPIModelName()}, + v1.ExtraMapping{}.OpenAPIModelName(), v1.PrefixedClaimMapping{}.OpenAPIModelName(), v1.TokenClaimOrExpressionMapping{}.OpenAPIModelName(), v1.UsernameClaimMapping{}.OpenAPIModelName()}, } } -func schema_openshift_api_sharedresource_v1alpha1_SharedConfigMap(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_TokenClaimOrExpressionMapping(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SharedConfigMap allows a ConfigMap to be shared across namespaces. Pods can mount the shared ConfigMap by adding a CSI volume to the pod specification using the \"csi.sharedresource.openshift.io\" CSI driver and a reference to the SharedConfigMap in the volume attributes:\n\nspec:\n\n\tvolumes:\n\t- name: shared-configmap\n\t csi:\n\t driver: csi.sharedresource.openshift.io\n\t volumeAttributes:\n\t sharedConfigMap: my-share\n\nFor the mount to be successful, the pod's service account must be granted permission to 'use' the named SharedConfigMap object within its namespace with an appropriate Role and RoleBinding. For compactness, here are example `oc` invocations for creating such Role and RoleBinding objects.\n\n\t`oc create role shared-resource-my-share --verb=use --resource=sharedconfigmaps.sharedresource.openshift.io --resource-name=my-share`\n\t`oc create rolebinding shared-resource-my-share --role=shared-resource-my-share --serviceaccount=my-namespace:default`\n\nShared resource objects, in this case ConfigMaps, have default permissions of list, get, and watch for system authenticated users.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. These capabilities should not be used by applications needing long term support.", + Description: "TokenClaimOrExpressionMapping allows specifying either a JWT token claim or CEL expression to be used when mapping claims from an authentication token to cluster identities.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "claim": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "claim is an optional field for specifying the JWT token claim that is used in the mapping. The value of this claim will be assigned to the field in which this mapping is associated.\n\nPrecisely one of claim or expression must be set. claim must not be specified when expression is set. When specified, claim must be at least 1 character in length and must not exceed 256 characters in length.", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "expression": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "expression is an optional field for specifying a CEL expression that produces a string value from JWT token claims.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'. 'claims' is a map of claim names to claim values. For example, the 'sub' claim value can be accessed as 'claims.sub'. Nested claims can be accessed using dot notation ('claims.foo.bar').\n\nPrecisely one of claim or expression must be set. expression must not be specified when claim is set. When specified, expression must be at least 1 character in length and must not exceed 1024 characters in length.", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "spec": { - SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the desired shared configmap", - Default: map[string]interface{}{}, - Ref: ref(sharedresourcev1alpha1.SharedConfigMapSpec{}.OpenAPIModelName()), - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status is the observed status of the shared configmap", - Default: map[string]interface{}{}, - Ref: ref(sharedresourcev1alpha1.SharedConfigMapStatus{}.OpenAPIModelName()), - }, - }, }, - Required: []string{"spec"}, }, }, - Dependencies: []string{ - sharedresourcev1alpha1.SharedConfigMapSpec{}.OpenAPIModelName(), sharedresourcev1alpha1.SharedConfigMapStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_sharedresource_v1alpha1_SharedConfigMapList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_TokenClaimValidationCELRule(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SharedConfigMapList contains a list of SharedConfigMap objects.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "expression": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "expression is a CEL expression evaluated against token claims. expression is required, must be at least 1 character in length and must not exceed 1024 characters. The expression must return a boolean value where 'true' signals a valid token and 'false' an invalid one.", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "message": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "message is a required human-readable message to be logged by the Kubernetes API server if the CEL expression defined in 'expression' fails. message must be at least 1 character in length and must not exceed 256 characters.", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(sharedresourcev1alpha1.SharedConfigMap{}.OpenAPIModelName()), - }, - }, - }, - }, - }, }, - Required: []string{"items"}, + Required: []string{"expression", "message"}, }, }, - Dependencies: []string{ - sharedresourcev1alpha1.SharedConfigMap{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_sharedresource_v1alpha1_SharedConfigMapReference(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_TokenClaimValidationRule(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SharedConfigMapReference contains information about which ConfigMap to share", + Description: "TokenClaimValidationRule represents a validation rule based on token claims. If type is RequiredClaim, requiredClaim must be set. If Type is CEL, CEL must be set and RequiredClaim must be omitted.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "name": { + "type": { SchemaProps: spec.SchemaProps{ - Description: "name represents the name of the ConfigMap that is being referenced.", + Description: "type is an optional field that configures the type of the validation rule.\n\nAllowed values are \"RequiredClaim\" and \"CEL\".\n\nWhen set to 'RequiredClaim', the Kubernetes API server will be configured to validate that the incoming JWT contains the required claim and that its value matches the required value.\n\nWhen set to 'CEL', the Kubernetes API server will be configured to validate the incoming JWT against the configured CEL expression.\n\nPossible enum values:\n - `\"CEL\"` indicates that the token validation is defined via a CEL expression. Used as a value for TokenValidationRuleType.\n - `\"RequiredClaim\"` indicates that the token must contain a specific claim. Used as a value for TokenValidationRuleType.", Default: "", Type: []string{"string"}, Format: "", + Enum: []interface{}{"CEL", "RequiredClaim"}, }, }, - "namespace": { + "requiredClaim": { SchemaProps: spec.SchemaProps{ - Description: "namespace represents the namespace where the referenced ConfigMap is located.", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "requiredClaim allows configuring a required claim name and its expected value. This field is required when `type` is set to RequiredClaim, and must be omitted when `type` is set to any other value. The Kubernetes API server uses this field to validate if an incoming JWT is valid for this identity provider.", + Ref: ref(v1.TokenRequiredClaim{}.OpenAPIModelName()), }, }, - }, - Required: []string{"name", "namespace"}, - }, - }, - } -} - -func schema_openshift_api_sharedresource_v1alpha1_SharedConfigMapSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SharedConfigMapSpec defines the desired state of a SharedConfigMap", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "configMapRef": { + "cel": { SchemaProps: spec.SchemaProps{ - Description: "configMapRef is a reference to the ConfigMap to share", + Description: "cel holds the CEL expression and message for validation. Must be set when Type is \"CEL\", and forbidden otherwise.", Default: map[string]interface{}{}, - Ref: ref(sharedresourcev1alpha1.SharedConfigMapReference{}.OpenAPIModelName()), - }, - }, - "description": { - SchemaProps: spec.SchemaProps{ - Description: "description is a user readable explanation of what the backing resource provides.", - Type: []string{"string"}, - Format: "", - }, - }, - }, - Required: []string{"configMapRef"}, - }, - }, - Dependencies: []string{ - sharedresourcev1alpha1.SharedConfigMapReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_sharedresource_v1alpha1_SharedConfigMapStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "SharedSecretStatus contains the observed status of the shared resource", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { - VendorExtensible: spec.VendorExtensible{ - Extensions: spec.Extensions{ - "x-kubernetes-list-map-keys": []interface{}{ - "type", - }, - "x-kubernetes-list-type": "map", - }, - }, - SchemaProps: spec.SchemaProps{ - Description: "conditions represents any observations made on this particular shared resource by the underlying CSI driver or Share controller.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), - }, - }, - }, + Ref: ref(v1.TokenClaimValidationCELRule{}.OpenAPIModelName()), }, }, }, + Required: []string{"type"}, }, }, Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, + v1.TokenClaimValidationCELRule{}.OpenAPIModelName(), v1.TokenRequiredClaim{}.OpenAPIModelName()}, } } -func schema_openshift_api_sharedresource_v1alpha1_SharedSecret(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_TokenConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SharedSecret allows a Secret to be shared across namespaces. Pods can mount the shared Secret by adding a CSI volume to the pod specification using the \"csi.sharedresource.openshift.io\" CSI driver and a reference to the SharedSecret in the volume attributes:\n\nspec:\n\n\tvolumes:\n\t- name: shared-secret\n\t csi:\n\t driver: csi.sharedresource.openshift.io\n\t volumeAttributes:\n\t sharedSecret: my-share\n\nFor the mount to be successful, the pod's service account must be granted permission to 'use' the named SharedSecret object within its namespace with an appropriate Role and RoleBinding. For compactness, here are example `oc` invocations for creating such Role and RoleBinding objects.\n\n\t`oc create role shared-resource-my-share --verb=use --resource=sharedsecrets.sharedresource.openshift.io --resource-name=my-share`\n\t`oc create rolebinding shared-resource-my-share --role=shared-resource-my-share --serviceaccount=my-namespace:default`\n\nShared resource objects, in this case Secrets, have default permissions of list, get, and watch for system authenticated users.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. These capabilities should not be used by applications needing long term support.", + Description: "TokenConfig holds the necessary configuration options for authorization and access tokens", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { - SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", - }, - }, - "metadata": { + "accessTokenMaxAgeSeconds": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + Description: "accessTokenMaxAgeSeconds defines the maximum age of access tokens", + Type: []string{"integer"}, + Format: "int32", }, }, - "spec": { + "accessTokenInactivityTimeoutSeconds": { SchemaProps: spec.SchemaProps{ - Description: "spec is the specification of the desired shared secret", - Default: map[string]interface{}{}, - Ref: ref(sharedresourcev1alpha1.SharedSecretSpec{}.OpenAPIModelName()), + Description: "accessTokenInactivityTimeoutSeconds - DEPRECATED: setting this field has no effect.", + Type: []string{"integer"}, + Format: "int32", }, }, - "status": { + "accessTokenInactivityTimeout": { SchemaProps: spec.SchemaProps{ - Description: "status is the observed status of the shared secret", - Default: map[string]interface{}{}, - Ref: ref(sharedresourcev1alpha1.SharedSecretStatus{}.OpenAPIModelName()), + Description: "accessTokenInactivityTimeout defines the token inactivity timeout for tokens granted by any client. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Takes valid time duration string such as \"5m\", \"1.5h\" or \"2h45m\". The minimum allowed value for duration is 300s (5 minutes). If the timeout is configured per client, then that value takes precedence. If the timeout value is not specified and the client does not override the value, then tokens are valid until their lifetime.\n\nWARNING: existing tokens' timeout will not be affected (lowered) by changing this value", + Ref: ref(metav1.Duration{}.OpenAPIModelName()), }, }, }, - Required: []string{"spec"}, }, }, Dependencies: []string{ - sharedresourcev1alpha1.SharedSecretSpec{}.OpenAPIModelName(), sharedresourcev1alpha1.SharedSecretStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + metav1.Duration{}.OpenAPIModelName()}, } } -func schema_openshift_api_sharedresource_v1alpha1_SharedSecretList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_TokenIssuer(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SharedSecretList contains a list of SharedSecret objects.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. These capabilities should not be used by applications needing long term support.", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "issuerURL": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "issuerURL is a required field that configures the URL used to issue tokens by the identity provider. The Kubernetes API server determines how authentication tokens should be handled by matching the 'iss' claim in the JWT to the issuerURL of configured identity providers.\n\nMust be at least 1 character and must not exceed 512 characters in length. Must be a valid URL that uses the 'https' scheme and does not contain a query, fragment or user.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "audiences": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "set", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + Description: "audiences is a required field that configures the acceptable audiences the JWT token, issued by the identity provider, must be issued to. At least one of the entries must match the 'aud' claim in the JWT token.\n\naudiences must contain at least one entry and must not exceed ten entries.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "metadata": { + "issuerCertificateAuthority": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Description: "issuerCertificateAuthority is an optional field that configures the certificate authority, used by the Kubernetes API server, to validate the connection to the identity provider when fetching discovery information.\n\nWhen not specified, the system trust is used.\n\nWhen specified, it must reference a ConfigMap in the openshift-config namespace containing the PEM-encoded CA certificates under the 'ca-bundle.crt' key in the data field of the ConfigMap.", Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + Ref: ref(v1.ConfigMapNameReference{}.OpenAPIModelName()), }, }, - "items": { + "discoveryURL": { SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(sharedresourcev1alpha1.SharedSecret{}.OpenAPIModelName()), - }, - }, - }, + Description: "discoveryURL is an optional field that, if specified, overrides the default discovery endpoint used to retrieve OIDC configuration metadata. By default, the discovery URL is derived from `issuerURL` as \"{issuerURL}/.well-known/openid-configuration\".\n\nThe discoveryURL must be a valid absolute HTTPS URL. It must not contain query parameters, user information, or fragments. Additionally, it must differ from the value of `issuerURL` (ignoring trailing slashes). The discoveryURL value must be at least 1 character long and no longer than 2048 characters.", + Type: []string{"string"}, + Format: "", }, }, }, - Required: []string{"items"}, + Required: []string{"issuerURL", "audiences"}, }, }, Dependencies: []string{ - sharedresourcev1alpha1.SharedSecret{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.ConfigMapNameReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_sharedresource_v1alpha1_SharedSecretReference(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_TokenRequiredClaim(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SharedSecretReference contains information about which Secret to share", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "name": { + "claim": { SchemaProps: spec.SchemaProps{ - Description: "name represents the name of the Secret that is being referenced.", + Description: "claim is a required field that configures the name of the required claim. When taken from the JWT claims, claim must be a string value.\n\nclaim must not be an empty string (\"\").", Default: "", Type: []string{"string"}, Format: "", }, }, - "namespace": { + "requiredValue": { SchemaProps: spec.SchemaProps{ - Description: "namespace represents the namespace where the referenced Secret is located.", + Description: "requiredValue is a required field that configures the value that 'claim' must have when taken from the incoming JWT claims. If the value in the JWT claims does not match, the token will be rejected for authentication.\n\nrequiredValue must not be an empty string (\"\").", Default: "", Type: []string{"string"}, Format: "", }, }, }, - Required: []string{"name", "namespace"}, + Required: []string{"claim", "requiredValue"}, }, }, } } -func schema_openshift_api_sharedresource_v1alpha1_SharedSecretSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_TokenUserValidationRule(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SharedSecretSpec defines the desired state of a SharedSecret", + Description: "TokenUserValidationRule provides a CEL-based rule used to validate a token subject. Each rule contains a CEL expression that is evaluated against the token’s claims.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "secretRef": { + "expression": { SchemaProps: spec.SchemaProps{ - Description: "secretRef is a reference to the Secret to share", - Default: map[string]interface{}{}, - Ref: ref(sharedresourcev1alpha1.SharedSecretReference{}.OpenAPIModelName()), + Description: "expression is a required CEL expression that performs a validation on cluster user identity attributes like username, groups, etc.\n\nThe expression must evaluate to a boolean value. When the expression evaluates to 'true', the cluster user identity is considered valid. When the expression evaluates to 'false', the cluster user identity is not considered valid. expression must be at least 1 character in length and must not exceed 1024 characters.", + Type: []string{"string"}, + Format: "", }, }, - "description": { + "message": { SchemaProps: spec.SchemaProps{ - Description: "description is a user readable explanation of what the backing resource provides.", + Description: "message is a required human-readable message to be logged by the Kubernetes API server if the CEL expression defined in 'expression' fails. message must be at least 1 character in length and must not exceed 256 characters.", Type: []string{"string"}, Format: "", }, }, }, - Required: []string{"secretRef"}, + Required: []string{"expression", "message"}, }, }, - Dependencies: []string{ - sharedresourcev1alpha1.SharedSecretReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_sharedresource_v1alpha1_SharedSecretStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_Update(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "SharedSecretStatus contains the observed status of the shared resource", + Description: "Update represents an administrator update request.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "conditions": { + "architecture": { + SchemaProps: spec.SchemaProps{ + Description: "architecture is an optional field that indicates the desired value of the cluster architecture. In this context cluster architecture means either a single architecture or a multi architecture. architecture can only be set to Multi thereby only allowing updates from single to multi architecture. If architecture is set, image cannot be set and version must be set. Valid values are 'Multi' and empty.", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "version": { + SchemaProps: spec.SchemaProps{ + Description: "version is a semantic version identifying the update version. version is required if architecture is specified. If both version and image are set, the version extracted from the referenced image must match the specified version.", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "image": { + SchemaProps: spec.SchemaProps{ + Description: "image is a container image location that contains the update. image should be used when the desired version does not exist in availableUpdates or history. When image is set, architecture cannot be specified. If both version and image are set, the version extracted from the referenced image must match the specified version.", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "force": { + SchemaProps: spec.SchemaProps{ + Description: "force allows an administrator to update to an image that has failed verification or upgradeable checks that are designed to keep your cluster safe. Only use this if: * you are testing unsigned release images in short-lived test clusters or * you are working around a known bug in the cluster-version\n operator and you have verified the authenticity of the provided\n image yourself.\nThe provided image will run with full administrative access to the cluster. Do not use this flag with images that come from unknown or potentially malicious sources.", + Default: false, + Type: []string{"boolean"}, + Format: "", + }, + }, + "acceptRisks": { VendorExtensible: spec.VendorExtensible{ Extensions: spec.Extensions{ "x-kubernetes-list-map-keys": []interface{}{ - "type", + "name", }, "x-kubernetes-list-type": "map", }, }, SchemaProps: spec.SchemaProps{ - Description: "conditions represents any observations made on this particular shared resource by the underlying CSI driver or Share controller.", + Description: "acceptRisks is an optional set of names of conditional update risks that are considered acceptable. A conditional update is performed only if all of its risks are acceptable. This list may contain entries that apply to current, previous or future updates. The entries therefore may not map directly to a risk in .status.conditionalUpdateRisks. acceptRisks must not contain more than 1000 entries. Entries in this list must be unique.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(metav1.Condition{}.OpenAPIModelName()), + Ref: ref(v1.AcceptRisk{}.OpenAPIModelName()), }, }, }, }, }, + "mode": { + SchemaProps: spec.SchemaProps{ + Description: "mode determines how an update should be processed. The only valid value is \"Preflight\". When omitted, the cluster performs a normal update by applying the specified version or image to the cluster. This is the standard update behavior. When set to \"Preflight\", the cluster runs compatibility checks against the target release without performing an actual update. Compatibility results, including any detected risks, are reported in status.conditionalUpdates and status.conditionalUpdateRisks alongside risks from the update recommendation service. This allows administrators to assess update readiness and address issues before committing to the update. Preflight mode is particularly useful for skip-level updates where upgrade compatibility needs to be verified across multiple minor versions. When mode is set to \"Preflight\", the same rules for version, image, and architecture apply as for normal updates.\n\nPossible enum values:\n - `\"Preflight\"` allows an update to be checked for compatibility without committing to updating the cluster.", + Type: []string{"string"}, + Format: "", + Enum: []interface{}{"Preflight"}, + }, + }, }, }, }, Dependencies: []string{ - metav1.Condition{}.OpenAPIModelName()}, + v1.AcceptRisk{}.OpenAPIModelName()}, } } -func schema_openshift_api_template_v1_BrokerTemplateInstance(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_UpdateHistory(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "BrokerTemplateInstance holds the service broker-related state associated with a TemplateInstance. BrokerTemplateInstance is part of an experimental API.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "UpdateHistory is a single attempted update to the cluster.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "state": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "state reflects whether the update was fully applied. The Partial state indicates the update is not fully applied, while the Completed state indicates the update was successfully rolled out at least once (all parts of the update successfully applied).", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "startedTime": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "startedTime is the time at which the update was started.", + Ref: ref(metav1.Time{}.OpenAPIModelName()), + }, + }, + "completionTime": { + SchemaProps: spec.SchemaProps{ + Description: "completionTime, if set, is when the update was fully applied. The update that is currently being applied will have a null completion time. Completion time will always be set for entries that are not the current update (usually to the started time of the next update).", + Ref: ref(metav1.Time{}.OpenAPIModelName()), + }, + }, + "version": { + SchemaProps: spec.SchemaProps{ + Description: "version is a semantic version identifying the update version. If the requested image does not define a version, or if a failure occurs retrieving the image, this value may be empty.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { + "image": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + Description: "image is a container image location that contains the update. This value is always populated.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "spec": { + "verified": { SchemaProps: spec.SchemaProps{ - Description: "spec describes the state of this BrokerTemplateInstance.", - Default: map[string]interface{}{}, - Ref: ref(templatev1.BrokerTemplateInstanceSpec{}.OpenAPIModelName()), + Description: "verified indicates whether the provided update was properly verified before it was installed. If this is false the cluster may not be trusted. Verified does not cover upgradeable checks that depend on the cluster state at the time when the update target was accepted.", + Default: false, + Type: []string{"boolean"}, + Format: "", + }, + }, + "acceptedRisks": { + SchemaProps: spec.SchemaProps{ + Description: "acceptedRisks records risks which were accepted to initiate the update. For example, it may mention an Upgradeable=False or missing signature that was overridden via desiredUpdate.force, or an update that was initiated despite not being in the availableUpdates set of recommended update targets.", + Type: []string{"string"}, + Format: "", }, }, }, - Required: []string{"spec"}, + Required: []string{"state", "startedTime", "completionTime", "image", "verified"}, }, }, Dependencies: []string{ - templatev1.BrokerTemplateInstanceSpec{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + metav1.Time{}.OpenAPIModelName()}, } } -func schema_openshift_api_template_v1_BrokerTemplateInstanceList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_UsernameClaimMapping(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "BrokerTemplateInstanceList is a list of BrokerTemplateInstance objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, + Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "claim": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "claim is an optional field that configures the JWT token claim whose value is assigned to the cluster identity field associated with this mapping. claim is required when the ExternalOIDCWithUpstreamParity feature gate is not enabled. When the ExternalOIDCWithUpstreamParity feature gate is enabled, claim must not be set when expression is set.\n\nclaim must not be an empty string (\"\") and must not exceed 256 characters.", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "expression": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "expression is an optional CEL expression used to derive the username from JWT claims.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length. expression must not be set when claim is set.", Type: []string{"string"}, Format: "", }, }, - "metadata": { + "prefixPolicy": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + Description: "prefixPolicy is an optional field that configures how a prefix should be applied to the value of the JWT claim specified in the 'claim' field.\n\nAllowed values are 'Prefix', 'NoPrefix', and omitted (not provided or an empty string).\n\nWhen set to 'Prefix', the value specified in the prefix field will be prepended to the value of the JWT claim. The prefix field must be set when prefixPolicy is 'Prefix'. Must not be set to 'Prefix' when expression is set. When set to 'NoPrefix', no prefix will be prepended to the value of the JWT claim. When omitted, this means no opinion and the platform is left to choose any prefixes that are applied which is subject to change over time. Currently, the platform prepends `{issuerURL}#` to the value of the JWT claim when the claim is not 'email'.\n\nAs an example, consider the following scenario:\n\n `prefix` is unset, `issuerURL` is set to `https://myoidc.tld`,\n the JWT claims include \"username\":\"userA\" and \"email\":\"userA@myoidc.tld\",\n and `claim` is set to:\n - \"username\": the mapped value will be \"https://myoidc.tld#userA\"\n - \"email\": the mapped value will be \"userA@myoidc.tld\"\n\n\nPossible enum values:\n - `\"\"` let's the cluster assign prefixes. If the username claim is email, there is no prefix If the username claim is anything else, it is prefixed by the issuerURL\n - `\"NoPrefix\"` means the username claim value will not have any prefix\n - `\"Prefix\"` means the prefix value must be specified. It cannot be empty", + Default: "", + Type: []string{"string"}, + Format: "", + Enum: []interface{}{"", "NoPrefix", "Prefix"}, }, }, - "items": { + "prefix": { SchemaProps: spec.SchemaProps{ - Description: "items is a list of BrokerTemplateInstances", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(templatev1.BrokerTemplateInstance{}.OpenAPIModelName()), - }, - }, + Description: "prefix configures the prefix that should be prepended to the value of the JWT claim.\n\nprefix must be set when prefixPolicy is set to 'Prefix' and must be unset otherwise.", + Ref: ref(v1.UsernamePrefix{}.OpenAPIModelName()), + }, + }, + }, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "prefixPolicy", + "fields-to-discriminateBy": map[string]interface{}{ + "claim": "Claim", + "expression": "Expression", + "prefix": "Prefix", }, }, }, }, - Required: []string{"items"}, }, }, Dependencies: []string{ - templatev1.BrokerTemplateInstance{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.UsernamePrefix{}.OpenAPIModelName()}, } } -func schema_openshift_api_template_v1_BrokerTemplateInstanceSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_UsernamePrefix(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "BrokerTemplateInstanceSpec describes the state of a BrokerTemplateInstance.", + Description: "UsernamePrefix configures the string that should be used as a prefix for username claim mappings.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "templateInstance": { - SchemaProps: spec.SchemaProps{ - Description: "templateInstance is a reference to a TemplateInstance object residing in a namespace.", - Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - "secret": { - SchemaProps: spec.SchemaProps{ - Description: "secret is a reference to a Secret object residing in a namespace, containing the necessary template parameters.", - Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - "bindingIDs": { + "prefixString": { SchemaProps: spec.SchemaProps{ - Description: "bindingIDs is a list of 'binding_id's provided during successive bind calls to the template service broker.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "prefixString is a required field that configures the prefix that will be applied to cluster identity username attribute during the process of mapping JWT claims to cluster identity attributes.\n\nprefixString must not be an empty string (\"\").", + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, - Required: []string{"templateInstance", "secret"}, + Required: []string{"prefixString"}, }, }, - Dependencies: []string{ - corev1.ObjectReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_template_v1_Parameter(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_VSphereFailureDomainHostGroup(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "Parameter defines a name/value variable that is to be processed during the Template to Config transformation.", + Description: "VSphereFailureDomainHostGroup holds the vmGroup and the hostGroup names in vCenter corresponds to a vm-host group of type Virtual Machine and Host respectively. Is also contains the vmHostRule which is an affinity vm-host rule in vCenter.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "name": { + "vmGroup": { SchemaProps: spec.SchemaProps{ - Description: "name must be set and it can be referenced in Template Items using ${PARAMETER_NAME}. Required.", + Description: "vmGroup is the name of the vm-host group of type virtual machine within vCenter for this failure domain. vmGroup is limited to 80 characters. This field is required when the VSphereFailureDomain ZoneType is HostGroup", Default: "", Type: []string{"string"}, Format: "", }, }, - "displayName": { - SchemaProps: spec.SchemaProps{ - Description: "Optional: The name that will show in UI instead of parameter 'Name'", - Type: []string{"string"}, - Format: "", - }, - }, - "description": { - SchemaProps: spec.SchemaProps{ - Description: "description of a parameter. Optional.", - Type: []string{"string"}, - Format: "", - }, - }, - "value": { - SchemaProps: spec.SchemaProps{ - Description: "value holds the Parameter data. If specified, the generator will be ignored. The value replaces all occurrences of the Parameter ${Name} expression during the Template to Config transformation. Optional.", - Type: []string{"string"}, - Format: "", - }, - }, - "generate": { + "hostGroup": { SchemaProps: spec.SchemaProps{ - Description: "generate specifies the generator to be used to generate random string from an input value specified by From field. The result string is stored into Value field. If empty, no generator is being used, leaving the result Value untouched. Optional.\n\nThe only supported generator is \"expression\", which accepts a \"from\" value in the form of a simple regular expression containing the range expression \"[a-zA-Z0-9]\", and the length expression \"a{length}\".\n\nExamples:\n\nfrom | value ----------------------------- \"test[0-9]{1}x\" | \"test7x\" \"[0-1]{8}\" | \"01001100\" \"0x[A-F0-9]{4}\" | \"0xB3AF\" \"[a-zA-Z0-9]{8}\" | \"hW4yQU5i\"", + Description: "hostGroup is the name of the vm-host group of type host within vCenter for this failure domain. hostGroup is limited to 80 characters. This field is required when the VSphereFailureDomain ZoneType is HostGroup", + Default: "", Type: []string{"string"}, Format: "", }, }, - "from": { + "vmHostRule": { SchemaProps: spec.SchemaProps{ - Description: "from is an input value for the generator. Optional.", + Description: "vmHostRule is the name of the affinity vm-host rule within vCenter for this failure domain. vmHostRule is limited to 80 characters. This field is required when the VSphereFailureDomain ZoneType is HostGroup", + Default: "", Type: []string{"string"}, Format: "", }, }, - "required": { - SchemaProps: spec.SchemaProps{ - Description: "Optional: Indicates the parameter must have a value. Defaults to false.", - Type: []string{"boolean"}, - Format: "", - }, - }, }, - Required: []string{"name"}, + Required: []string{"vmGroup", "hostGroup", "vmHostRule"}, }, }, } } -func schema_openshift_api_template_v1_Template(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_VSphereFailureDomainRegionAffinity(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "Template contains the inputs needed to produce a Config.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "VSphereFailureDomainRegionAffinity contains the region type which is the string representation of the VSphereFailureDomainRegionType with available options of Datacenter and ComputeCluster.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { + "type": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "type determines the vSphere object type for a region within this failure domain. Available types are Datacenter and ComputeCluster. When set to Datacenter, this means the vCenter Datacenter defined is the region. When set to ComputeCluster, this means the vCenter cluster defined is the region.\n\nPossible enum values:\n - `\"ComputeCluster\"` is a failure domain region for a vCenter compute cluster.\n - `\"Datacenter\"` is a failure domain region for a vCenter datacenter.", + Default: "", Type: []string{"string"}, Format: "", + Enum: []interface{}{"ComputeCluster", "Datacenter"}, }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + }, + Required: []string{"type"}, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "type", + "fields-to-discriminateBy": map[string]interface{}{}, }, }, - "message": { + }, + }, + }, + } +} + +func schema_openshift_api_config_v1_VSphereFailureDomainZoneAffinity(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "VSphereFailureDomainZoneAffinity contains the vCenter cluster vm-host group (virtual machine and host types) and the vm-host affinity rule that together creates an affinity configuration for vm-host based zonal. This configuration within vCenter creates the required association between a failure domain, virtual machines and ESXi hosts to create a vm-host based zone.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "type": { SchemaProps: spec.SchemaProps{ - Description: "message is an optional instructional message that will be displayed when this template is instantiated. This field should inform the user how to utilize the newly created resources. Parameter substitution will be performed on the message before being displayed so that generated credentials and other parameters can be included in the output.", + Description: "type determines the vSphere object type for a zone within this failure domain. Available types are ComputeCluster and HostGroup. When set to ComputeCluster, this means the vCenter cluster defined is the zone. When set to HostGroup, hostGroup must be configured with hostGroup, vmGroup and vmHostRule and this means the zone is defined by the grouping of those fields.\n\nPossible enum values:\n - `\"ComputeCluster\"` is a failure domain zone for a vCenter compute cluster.\n - `\"HostGroup\"` is a failure domain zone for a vCenter vm-host group.", + Default: "", Type: []string{"string"}, Format: "", + Enum: []interface{}{"ComputeCluster", "HostGroup"}, }, }, - "objects": { - SchemaProps: spec.SchemaProps{ - Description: "objects is an array of resources to include in this template. If a namespace value is hardcoded in the object, it will be removed during template instantiation, however if the namespace value is, or contains, a ${PARAMETER_REFERENCE}, the resolved value after parameter substitution will be respected and the object will be created in that namespace.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Ref: ref(runtime.RawExtension{}.OpenAPIModelName()), - }, - }, - }, - }, - }, - "parameters": { + "hostGroup": { SchemaProps: spec.SchemaProps{ - Description: "parameters is an optional array of Parameters used during the Template to Config transformation.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(templatev1.Parameter{}.OpenAPIModelName()), - }, - }, - }, + Description: "hostGroup holds the vmGroup and the hostGroup names in vCenter corresponds to a vm-host group of type Virtual Machine and Host respectively. Is also contains the vmHostRule which is an affinity vm-host rule in vCenter.", + Ref: ref(v1.VSphereFailureDomainHostGroup{}.OpenAPIModelName()), }, }, - "labels": { - SchemaProps: spec.SchemaProps{ - Description: "labels is a optional set of labels that are applied to every object during the Template to Config transformation.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, + }, + Required: []string{"type"}, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "type", + "fields-to-discriminateBy": map[string]interface{}{ + "hostGroup": "HostGroup", }, }, }, }, - Required: []string{"objects"}, }, }, Dependencies: []string{ - templatev1.Parameter{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName(), runtime.RawExtension{}.OpenAPIModelName()}, + v1.VSphereFailureDomainHostGroup{}.OpenAPIModelName()}, } } -func schema_openshift_api_template_v1_TemplateInstance(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_VSpherePlatformFailureDomainSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "TemplateInstance requests and records the instantiation of a Template. TemplateInstance is part of an experimental API.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "VSpherePlatformFailureDomainSpec holds the region and zone failure domain and the vCenter topology of that failure domain.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "name defines the arbitrary but unique name of a failure domain.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "region": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "region defines the name of a region tag that will be attached to a vCenter datacenter. The tag category in vCenter must be named openshift-region.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { + "zone": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + Description: "zone defines the name of a zone tag that will be attached to a vCenter cluster. The tag category in vCenter must be named openshift-zone.", + Default: "", + Type: []string{"string"}, + Format: "", }, }, - "spec": { + "regionAffinity": { SchemaProps: spec.SchemaProps{ - Description: "spec describes the desired state of this TemplateInstance.", - Default: map[string]interface{}{}, - Ref: ref(templatev1.TemplateInstanceSpec{}.OpenAPIModelName()), + Description: "regionAffinity holds the type of region, Datacenter or ComputeCluster. When set to Datacenter, this means the region is a vCenter Datacenter as defined in topology. When set to ComputeCluster, this means the region is a vCenter Cluster as defined in topology.", + Ref: ref(v1.VSphereFailureDomainRegionAffinity{}.OpenAPIModelName()), }, }, - "status": { + "zoneAffinity": { SchemaProps: spec.SchemaProps{ - Description: "status describes the current state of this TemplateInstance.", + Description: "zoneAffinity holds the type of the zone and the hostGroup which vmGroup and the hostGroup names in vCenter corresponds to a vm-host group of type Virtual Machine and Host respectively. Is also contains the vmHostRule which is an affinity vm-host rule in vCenter.", + Ref: ref(v1.VSphereFailureDomainZoneAffinity{}.OpenAPIModelName()), + }, + }, + "server": { + SchemaProps: spec.SchemaProps{ + Description: "server is the fully-qualified domain name or the IP address of the vCenter server. This must match the server field of an entry in the vcenters list. The match is case-sensitive; the value must be specified exactly as it appears in the vcenters entry. The value must be between 1 and 255 characters long.", + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + "topology": { + SchemaProps: spec.SchemaProps{ + Description: "topology describes a given failure domain using vSphere constructs", Default: map[string]interface{}{}, - Ref: ref(templatev1.TemplateInstanceStatus{}.OpenAPIModelName()), + Ref: ref(v1.VSpherePlatformTopology{}.OpenAPIModelName()), }, }, }, - Required: []string{"spec"}, + Required: []string{"name", "region", "zone", "server", "topology"}, }, }, Dependencies: []string{ - templatev1.TemplateInstanceSpec{}.OpenAPIModelName(), templatev1.TemplateInstanceStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.VSphereFailureDomainRegionAffinity{}.OpenAPIModelName(), v1.VSphereFailureDomainZoneAffinity{}.OpenAPIModelName(), v1.VSpherePlatformTopology{}.OpenAPIModelName()}, } } -func schema_openshift_api_template_v1_TemplateInstanceCondition(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_VSpherePlatformLoadBalancer(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "TemplateInstanceCondition contains condition information for a TemplateInstance.", + Description: "VSpherePlatformLoadBalancer defines the load balancer used by the cluster on VSphere platform.", Type: []string{"object"}, Properties: map[string]spec.Schema{ "type": { SchemaProps: spec.SchemaProps{ - Description: "type of the condition, currently Ready or InstantiateFailure.", - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - "status": { - SchemaProps: spec.SchemaProps{ - Description: "status of the condition, one of True, False or Unknown.", - Default: "", + Description: "type defines the type of load balancer used by the cluster on VSphere platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", + Default: "OpenShiftManagedDefault", Type: []string{"string"}, Format: "", }, }, - "lastTransitionTime": { - SchemaProps: spec.SchemaProps{ - Description: "lastTransitionTime is the last time a condition status transitioned from one state to another.", - Ref: ref(metav1.Time{}.OpenAPIModelName()), + }, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "type", + "fields-to-discriminateBy": map[string]interface{}{}, }, }, - "reason": { + }, + }, + }, + } +} + +func schema_openshift_api_config_v1_VSpherePlatformNodeNetworking(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "VSpherePlatformNodeNetworking holds the external and internal node networking spec.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "external": { SchemaProps: spec.SchemaProps{ - Description: "reason is a brief machine readable explanation for the condition's last transition.", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "external represents the network configuration of the node that is externally routable.", + Default: map[string]interface{}{}, + Ref: ref(v1.VSpherePlatformNodeNetworkingSpec{}.OpenAPIModelName()), }, }, - "message": { + "internal": { SchemaProps: spec.SchemaProps{ - Description: "message is a human readable description of the details of the last transition, complementing reason.", - Default: "", - Type: []string{"string"}, - Format: "", + Description: "internal represents the network configuration of the node that is routable only within the cluster.", + Default: map[string]interface{}{}, + Ref: ref(v1.VSpherePlatformNodeNetworkingSpec{}.OpenAPIModelName()), }, }, }, - Required: []string{"type", "status", "lastTransitionTime", "reason", "message"}, }, }, Dependencies: []string{ - metav1.Time{}.OpenAPIModelName()}, + v1.VSpherePlatformNodeNetworkingSpec{}.OpenAPIModelName()}, } } -func schema_openshift_api_template_v1_TemplateInstanceList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_VSpherePlatformNodeNetworkingSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "TemplateInstanceList is a list of TemplateInstance objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "VSpherePlatformNodeNetworkingSpec holds the network CIDR(s) and port group name for including and excluding IP ranges in the cloud provider. This would be used for example when multiple network adapters are attached to a guest to help determine which IP address the cloud config manager should use for the external and internal node networking.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "networkSubnetCidr": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "set", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", + Description: "networkSubnetCidr IP address on VirtualMachine's network interfaces included in the fields' CIDRs that will be used in respective status.addresses fields.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "apiVersion": { + "network": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "network VirtualMachine's VM Network names that will be used to when searching for status.addresses fields. Note that if internal.networkSubnetCIDR and external.networkSubnetCIDR are not set, then the vNIC associated to this network must only have a single IP address assigned to it. The available networks (port groups) can be listed using `govc ls 'network/*'`", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + "excludeNetworkSubnetCidr": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, }, - }, - "items": { SchemaProps: spec.SchemaProps{ - Description: "items is a list of Templateinstances", + Description: "excludeNetworkSubnetCidr IP addresses in subnet ranges will be excluded when selecting the IP address from the VirtualMachine's VM for use in the status.addresses fields.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(templatev1.TemplateInstance{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - templatev1.TemplateInstance{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_template_v1_TemplateInstanceObject(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TemplateInstanceObject references an object created by a TemplateInstance.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "ref": { - SchemaProps: spec.SchemaProps{ - Description: "ref is a reference to the created object. When used under .spec, only name and namespace are used; these can contain references to parameters which will be substituted following the usual rules.", - Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - }, }, }, - Dependencies: []string{ - corev1.ObjectReference{}.OpenAPIModelName()}, } } -func schema_openshift_api_template_v1_TemplateInstanceRequester(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_VSpherePlatformSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "TemplateInstanceRequester holds the identity of an agent requesting a template instantiation.", + Description: "VSpherePlatformSpec holds the desired state of the vSphere infrastructure provider. In the future the cloud provider operator, storage operator and machine operator will use these fields for configuration.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "username": { - SchemaProps: spec.SchemaProps{ - Description: "username uniquely identifies this user among all active users.", - Type: []string{"string"}, - Format: "", - }, - }, - "uid": { - SchemaProps: spec.SchemaProps{ - Description: "uid is a unique value that identifies this user across time; if this user is deleted and another user by the same name is added, they will have different UIDs.", - Type: []string{"string"}, - Format: "", + "vcenters": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, }, - }, - "groups": { SchemaProps: spec.SchemaProps{ - Description: "groups represent the groups this user is a part of.", + Description: "vcenters holds the connection details for services to communicate with vCenter. Up to 3 vCenters are supported. Once the cluster has been installed, you are unable to change the current number of defined vCenters except when 1.) the cluster has been upgraded from a version of OpenShift where the vsphere platform spec was not present or 2.) in TechPreview you are able to add and remove vCenters but may not remove all vCenters. You may make modifications to the existing vCenters that are defined in the vcenters list in order to match with any added or modified failure domains.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", + Default: map[string]interface{}{}, + Ref: ref(v1.VSpherePlatformVCenterSpec{}.OpenAPIModelName()), }, }, }, }, }, - "extra": { + "failureDomains": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-map-keys": []interface{}{ + "name", + }, + "x-kubernetes-list-type": "map", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "extra holds additional information provided by the authenticator.", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, + Description: "failureDomains contains the definition of region, zone and the vCenter topology. If this is omitted failure domains (regions and zones) will not be used. Each failure domain's server must match the server field of an entry in the vcenters list.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Default: map[string]interface{}{}, + Ref: ref(v1.VSpherePlatformFailureDomainSpec{}.OpenAPIModelName()), }, }, }, }, }, - }, - }, - }, - } -} - -func schema_openshift_api_template_v1_TemplateInstanceSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TemplateInstanceSpec describes the desired state of a TemplateInstance.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "template": { + "nodeNetworking": { SchemaProps: spec.SchemaProps{ - Description: "template is a full copy of the template for instantiation.", + Description: "nodeNetworking contains the definition of internal and external network constraints for assigning the node's networking. If this field is omitted, networking defaults to the legacy address selection behavior which is to only support a single address and return the first one found.", Default: map[string]interface{}{}, - Ref: ref(templatev1.Template{}.OpenAPIModelName()), + Ref: ref(v1.VSpherePlatformNodeNetworking{}.OpenAPIModelName()), }, }, - "secret": { - SchemaProps: spec.SchemaProps{ - Description: "secret is a reference to a Secret object containing the necessary template parameters.", - Ref: ref(corev1.LocalObjectReference{}.OpenAPIModelName()), + "apiServerInternalIPs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, }, - }, - "requester": { SchemaProps: spec.SchemaProps{ - Description: "requester holds the identity of the agent requesting the template instantiation.", - Ref: ref(templatev1.TemplateInstanceRequester{}.OpenAPIModelName()), + Description: "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - }, - Required: []string{"template"}, - }, - }, - Dependencies: []string{ - templatev1.Template{}.OpenAPIModelName(), templatev1.TemplateInstanceRequester{}.OpenAPIModelName(), corev1.LocalObjectReference{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_template_v1_TemplateInstanceStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "TemplateInstanceStatus describes the current state of a TemplateInstance.", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "conditions": { + "ingressIPs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "conditions represent the latest available observations of a TemplateInstance's current state.", + Description: "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(templatev1.TemplateInstanceCondition{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, - "objects": { + "machineNetworks": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "objects references the objects created by the TemplateInstance.", + Description: "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(templatev1.TemplateInstanceObject{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, @@ -73518,92 +14568,101 @@ func schema_openshift_api_template_v1_TemplateInstanceStatus(ref common.Referenc }, }, Dependencies: []string{ - templatev1.TemplateInstanceCondition{}.OpenAPIModelName(), templatev1.TemplateInstanceObject{}.OpenAPIModelName()}, + v1.VSpherePlatformFailureDomainSpec{}.OpenAPIModelName(), v1.VSpherePlatformNodeNetworking{}.OpenAPIModelName(), v1.VSpherePlatformVCenterSpec{}.OpenAPIModelName()}, } } -func schema_openshift_api_template_v1_TemplateList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_VSpherePlatformStatus(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "TemplateList is a list of Template objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "VSpherePlatformStatus holds the current status of the vSphere infrastructure provider.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "apiServerInternalIP": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "apiServerInternalIPs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + Description: "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ + Schema: &spec.Schema{ + SchemaProps: spec.SchemaProps{ + Default: "", + Type: []string{"string"}, + Format: "", + }, + }, + }, }, }, - "metadata": { + "ingressIP": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + Description: "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", + Type: []string{"string"}, + Format: "", }, }, - "items": { + "ingressIPs": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "items is a list of templates", + Description: "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(templatev1.Template{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - templatev1.Template{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_user_v1_Group(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Group represents a referenceable set of Users\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { + "nodeDNSIP": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for vSphere deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "loadBalancer": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - Type: []string{"string"}, - Format: "", + Description: "loadBalancer defines how the load balancer used by the cluster is configured.", + Default: map[string]interface{}{"type": "OpenShiftManagedDefault"}, + Ref: ref(v1.VSpherePlatformLoadBalancer{}.OpenAPIModelName()), }, }, - "metadata": { + "dnsRecordsType": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + Description: "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", + Type: []string{"string"}, + Format: "", + Enum: []interface{}{"External", "Internal"}, }, }, - "users": { + "machineNetworks": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "users is the list of users in this group.", + Description: "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ @@ -73617,122 +14676,125 @@ func schema_openshift_api_user_v1_Group(ref common.ReferenceCallback) common.Ope }, }, }, - Required: []string{"users"}, + Required: []string{"apiServerInternalIPs", "ingressIPs"}, }, }, Dependencies: []string{ - metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.VSpherePlatformLoadBalancer{}.OpenAPIModelName()}, } } -func schema_openshift_api_user_v1_GroupList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_VSpherePlatformTopology(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "GroupList is a collection of Groups\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "VSpherePlatformTopology holds the required and optional vCenter objects - datacenter, computeCluster, networks, datastore and resourcePool - to provision virtual machines.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "datacenter": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "datacenter is the name of vCenter datacenter in which virtual machines will be located. The maximum length of the datacenter name is 80 characters.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "computeCluster": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "computeCluster the absolute path of the vCenter cluster in which virtual machine will be located. The absolute path is of the form //host/. The maximum length of the path is 2048 characters.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + "networks": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "atomic", + }, }, - }, - "items": { SchemaProps: spec.SchemaProps{ - Description: "items is the list of groups", + Description: "networks is the list of port group network names within this failure domain. If feature gate VSphereMultiNetworks is enabled, up to 10 network adapters may be defined. 10 is the maximum number of virtual network devices which may be attached to a VM as defined by: https://configmax.esp.vmware.com/guest?vmwareproduct=vSphere&release=vSphere%208.0&categories=1-0 The available networks (port groups) can be listed using `govc ls 'network/*'` Networks should be in the form of an absolute path: //network/.", Type: []string{"array"}, Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(userv1.Group{}.OpenAPIModelName()), + Default: "", + Type: []string{"string"}, + Format: "", }, }, }, }, }, - }, - Required: []string{"items"}, - }, - }, - Dependencies: []string{ - userv1.Group{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, - } -} - -func schema_openshift_api_user_v1_Identity(ref common.ReferenceCallback) common.OpenAPIDefinition { - return common.OpenAPIDefinition{ - Schema: spec.Schema{ - SchemaProps: spec.SchemaProps{ - Description: "Identity records a successful authentication of a user with an identity provider. The information about the source of authentication is stored on the identity, and the identity is then associated with a single user object. Multiple identities can reference a single user. Information retrieved from the authentication provider is stored in the extra field using a schema determined by the provider.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - Type: []string{"object"}, - Properties: map[string]spec.Schema{ - "kind": { + "datastore": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "datastore is the absolute path of the datastore in which the virtual machine is located. The absolute path is of the form //datastore/ The maximum length of the path is 2048 characters.", + Default: "", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + "resourcePool": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "resourcePool is the absolute path of the resource pool where virtual machines will be created. The absolute path is of the form //host//Resources/. The maximum length of the path is 2048 characters.", Type: []string{"string"}, Format: "", }, }, - "metadata": { + "folder": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + Description: "folder is the absolute path of the folder where virtual machines are located. The absolute path is of the form //vm/. The maximum length of the path is 2048 characters.", + Type: []string{"string"}, + Format: "", }, }, - "providerName": { + "template": { SchemaProps: spec.SchemaProps{ - Description: "providerName is the source of identity information", - Default: "", + Description: "template is the full inventory path of the virtual machine or template that will be cloned when creating new machines in this failure domain. The maximum length of the path is 2048 characters.\n\nWhen omitted, the template will be calculated by the control plane machineset operator based on the region and zone defined in VSpherePlatformFailureDomainSpec. For example, for zone=zonea, region=region1, and infrastructure name=test, the template path would be calculated as //vm/test-rhcos-region1-zonea.", Type: []string{"string"}, Format: "", }, }, - "providerUserName": { + }, + Required: []string{"datacenter", "computeCluster", "networks", "datastore"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_VSpherePlatformVCenterSpec(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "VSpherePlatformVCenterSpec stores the vCenter connection fields. This is used by the vSphere CCM.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "server": { SchemaProps: spec.SchemaProps{ - Description: "providerUserName uniquely represents this identity in the scope of the provider", + Description: "server is the fully-qualified domain name or the IP address of the vCenter server.", Default: "", Type: []string{"string"}, Format: "", }, }, - "user": { + "port": { SchemaProps: spec.SchemaProps{ - Description: "user is a reference to the user this identity is associated with Both Name and UID must be set", - Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), + Description: "port is the TCP port that will be used to communicate to the vCenter endpoint. When omitted, this means the user has no opinion and it is up to the platform to choose a sensible default, which is subject to change over time.", + Type: []string{"integer"}, + Format: "int32", }, }, - "extra": { + "datacenters": { + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-list-type": "set", + }, + }, SchemaProps: spec.SchemaProps{ - Description: "extra holds extra information about this identity", - Type: []string{"object"}, - AdditionalProperties: &spec.SchemaOrBool{ - Allows: true, + Description: "The vCenter Datacenters in which the RHCOS vm guests are located. This field will be used by the Cloud Controller Manager. Each datacenter listed here should be used within a topology.", + Type: []string{"array"}, + Items: &spec.SchemaOrArray{ Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: "", @@ -73744,237 +14806,233 @@ func schema_openshift_api_user_v1_Identity(ref common.ReferenceCallback) common. }, }, }, - Required: []string{"providerName", "providerUserName", "user"}, + Required: []string{"server", "datacenters"}, }, }, - Dependencies: []string{ - corev1.ObjectReference{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_user_v1_IdentityList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_VaultAppRoleAuthentication(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "IdentityList is a collection of Identities\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "VaultAppRoleAuthentication defines the configuration for AppRole authentication with Vault.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "secret": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", + Description: "secret references a secret in the openshift-config namespace containing the AppRole credentials used to authenticate with Vault. The referenced Secret must contain two keys: \"role-id\" for the AppRole Role ID and \"secret-id\" for the AppRole Secret ID.", + Default: map[string]interface{}{}, + Ref: ref(v1.VaultSecretReference{}.OpenAPIModelName()), }, }, - "apiVersion": { + }, + Required: []string{"secret"}, + }, + }, + Dependencies: []string{ + v1.VaultSecretReference{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_VaultAuthentication(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "VaultAuthentication defines the authentication method used to authenticate with Vault.", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "type": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "type defines the authentication method used to authenticate with Vault. Allowed values are AppRole. When set to AppRole, the plugin uses AppRole credentials to authenticate with Vault.", Type: []string{"string"}, Format: "", }, }, - "metadata": { + "appRole": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Description: "appRole defines the configuration for AppRole authentication. This field must be set when type is AppRole, and must be unset otherwise.", Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), + Ref: ref(v1.VaultAppRoleAuthentication{}.OpenAPIModelName()), }, }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is the list of identities", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(userv1.Identity{}.OpenAPIModelName()), - }, - }, + }, + Required: []string{"type"}, + }, + VendorExtensible: spec.VendorExtensible{ + Extensions: spec.Extensions{ + "x-kubernetes-unions": []interface{}{ + map[string]interface{}{ + "discriminator": "type", + "fields-to-discriminateBy": map[string]interface{}{ + "appRole": "AppRole", }, }, }, }, - Required: []string{"items"}, }, }, Dependencies: []string{ - userv1.Identity{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.VaultAppRoleAuthentication{}.OpenAPIModelName()}, } } -func schema_openshift_api_user_v1_User(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_VaultConfigMapReference(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "Upon log in, every user of the system receives a User and Identity resource. Administrators may directly manipulate the attributes of the users for their own tracking, or set groups via the API. The user name is unique and is chosen based on the value provided by the identity provider - if a user already exists with the incoming name, the user name may have a number appended to it depending on the configuration of the system.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "VaultConfigMapReference references a ConfigMap in the openshift-config namespace.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + Description: "name is the metadata.name of the referenced ConfigMap in the openshift-config namespace. The name must be a valid DNS subdomain name: it must contain no more than 253 characters, contain only lowercase alphanumeric characters, '-' or '.', and start and end with an alphanumeric character.", Type: []string{"string"}, Format: "", }, }, - "apiVersion": { + }, + Required: []string{"name"}, + }, + }, + } +} + +func schema_openshift_api_config_v1_VaultKMSPluginConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "VaultKMSPluginConfig defines the KMS plugin configuration specific to Vault KMS", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "kmsPluginImage": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "kmsPluginImage specifies the container image for the HashiCorp Vault KMS plugin.\n\nThe image must be a fully qualified OCI image pull spec with a SHA256 digest. The format is: host[:port][/namespace]/name@sha256: where the digest must be 64 characters long and consist only of lowercase hexadecimal characters, a-f and 0-9. The total length must be between 75 and 447 characters.\n\nShort names (e.g., \"vault-plugin\" or \"hashicorp/vault-plugin\") are not allowed. The registry hostname must be included and must contain at least one dot. Image tags (e.g., \":latest\", \":v1.0.0\") are not allowed.\n\nConsult the OpenShift documentation for compatible plugin versions with your cluster version, then obtain the image digest for that version from HashiCorp's container registry.\n\nFor disconnected environments, mirror the plugin image to an accessible registry and reference the mirrored location with its digest.", Type: []string{"string"}, Format: "", }, }, - "metadata": { + "vaultAddress": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), + Description: "vaultAddress specifies the address of the HashiCorp Vault instance. The value must be a valid HTTPS URL containing only scheme, host, and optional port. Paths, user info, query parameters, and fragments are not allowed.\n\nFormat: https://hostname[:port] Example: https://vault.example.com:8200\n\nThe value must be between 1 and 512 characters.", + Type: []string{"string"}, + Format: "", + }, + }, + "vaultNamespace": { + SchemaProps: spec.SchemaProps{ + Description: "vaultNamespace specifies the Vault namespace where the Transit secrets engine is mounted. This is only applicable for Vault Enterprise installations. When this field is not set, no namespace is used.\n\nThe value must be between 1 and 4096 characters. The namespace cannot end with a forward slash, cannot contain spaces, and cannot be one of the reserved strings: root, sys, audit, auth, cubbyhole, or identity.", + Type: []string{"string"}, + Format: "", }, }, - "fullName": { + "vaultAuthNamespace": { SchemaProps: spec.SchemaProps{ - Description: "fullName is the full name of user", + Description: "vaultAuthNamespace specifies the Vault namespace to use for authentication. This is only applicable for Vault Enterprise installations where authentication and Transit operations may be in different namespaces. When this field is not set, the value of vaultNamespace is used for both authentication and Transit key operations.\n\nThe value must be between 1 and 4096 characters. The namespace cannot end with a forward slash, cannot contain spaces, and cannot be one of the reserved strings: root, sys, audit, auth, cubbyhole, or identity.", Type: []string{"string"}, Format: "", }, }, - "identities": { + "tls": { SchemaProps: spec.SchemaProps{ - Description: "identities are the identities associated with this user", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "tls contains the TLS configuration for connecting to the Vault server. When this field is not set, system default TLS settings are used.", + Default: map[string]interface{}{}, + Ref: ref(v1.VaultTLSConfig{}.OpenAPIModelName()), }, }, - "groups": { + "authentication": { SchemaProps: spec.SchemaProps{ - Description: "groups specifies group names this user is a member of. This field is deprecated and will be removed in a future release. Instead, create a Group object containing the name of this User.", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: "", - Type: []string{"string"}, - Format: "", - }, - }, - }, + Description: "authentication defines the authentication method used to authenticate with Vault.", + Default: map[string]interface{}{}, + Ref: ref(v1.VaultAuthentication{}.OpenAPIModelName()), + }, + }, + "vaultKeyPath": { + SchemaProps: spec.SchemaProps{ + Description: "vaultKeyPath specifies the full path to the encryption key in Vault's Transit secrets engine, combining the Transit engine mount path and the key name separated by \"/keys/\". Format: /keys/ (e.g., transit/keys/my-key, myteam/transit/keys/production-key).\n\nThe total path length must be between 8 and 1542 characters. The path cannot start or end with a forward slash, cannot contain consecutive forward slashes, must only contain RFC 3986 unreserved characters (alphanumeric, hyphen, period, underscore, tilde) and forward slashes as path separators, and must not contain \".\" or \"..\" path segments. The key name must start and end with an alphanumeric character or underscore, and may contain alphanumeric characters, underscores, hyphens, and periods in the middle.", + Type: []string{"string"}, + Format: "", }, }, }, - Required: []string{"groups"}, + Required: []string{"kmsPluginImage", "vaultAddress", "authentication", "vaultKeyPath"}, }, }, Dependencies: []string{ - metav1.ObjectMeta{}.OpenAPIModelName()}, + v1.VaultAuthentication{}.OpenAPIModelName(), v1.VaultTLSConfig{}.OpenAPIModelName()}, } } -func schema_openshift_api_user_v1_UserIdentityMapping(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_VaultSecretReference(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "UserIdentityMapping maps a user to an identity\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "VaultSecretReference references a secret in the openshift-config namespace.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { - SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", - }, - }, - "apiVersion": { + "name": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "name is the metadata.name of the referenced secret in the openshift-config namespace. The name must be a valid DNS subdomain name: it must contain no more than 253 characters, contain only lowercase alphanumeric characters, '-' or '.', and start and end with an alphanumeric character.", Type: []string{"string"}, Format: "", }, }, - "metadata": { - SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - Default: map[string]interface{}{}, - Ref: ref(metav1.ObjectMeta{}.OpenAPIModelName()), - }, - }, - "identity": { - SchemaProps: spec.SchemaProps{ - Description: "identity is a reference to an identity", - Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, - "user": { - SchemaProps: spec.SchemaProps{ - Description: "user is a reference to a user", - Default: map[string]interface{}{}, - Ref: ref(corev1.ObjectReference{}.OpenAPIModelName()), - }, - }, }, + Required: []string{"name"}, }, }, - Dependencies: []string{ - corev1.ObjectReference{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } -func schema_openshift_api_user_v1_UserList(ref common.ReferenceCallback) common.OpenAPIDefinition { +func schema_openshift_api_config_v1_VaultTLSConfig(ref common.ReferenceCallback) common.OpenAPIDefinition { return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "UserList is a collection of Users\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + Description: "VaultTLSConfig contains TLS configuration for connecting to Vault.", Type: []string{"object"}, Properties: map[string]spec.Schema{ - "kind": { + "caBundle": { SchemaProps: spec.SchemaProps{ - Description: "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - Type: []string{"string"}, - Format: "", + Description: "caBundle references a ConfigMap in the openshift-config namespace containing the CA certificate bundle used to verify the TLS connection to the Vault server. The referenced ConfigMap must contain the CA bundle in the key \"ca-bundle.crt\". When this field is not set, the system's trusted CA certificates are used.\n\nThe namespace for the ConfigMap is openshift-config.\n\nExample ConfigMap:\n apiVersion: v1\n kind: ConfigMap\n metadata:\n name: vault-ca-bundle\n namespace: openshift-config\n data:\n ca-bundle.crt: |\n -----BEGIN CERTIFICATE-----\n ...\n -----END CERTIFICATE-----", + Default: map[string]interface{}{}, + Ref: ref(v1.VaultConfigMapReference{}.OpenAPIModelName()), }, }, - "apiVersion": { + "serverName": { SchemaProps: spec.SchemaProps{ - Description: "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + Description: "serverName specifies the Server Name Indication (SNI) to use when connecting to Vault via TLS. This is useful when the Vault server's hostname doesn't match its TLS certificate. When this field is not set, the hostname from vaultAddress is used for SNI.\n\nThe value must be a valid DNS hostname: it must contain no more than 253 characters, contain only lowercase alphanumeric characters, '-' or '.', and start and end with an alphanumeric character.", Type: []string{"string"}, Format: "", }, }, - "metadata": { + }, + }, + }, + Dependencies: []string{ + v1.VaultConfigMapReference{}.OpenAPIModelName()}, + } +} + +func schema_openshift_api_config_v1_WebhookTokenAuthenticator(ref common.ReferenceCallback) common.OpenAPIDefinition { + return common.OpenAPIDefinition{ + Schema: spec.Schema{ + SchemaProps: spec.SchemaProps{ + Description: "webhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator", + Type: []string{"object"}, + Properties: map[string]spec.Schema{ + "kubeConfig": { SchemaProps: spec.SchemaProps{ - Description: "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + Description: "kubeConfig references a secret that contains kube config file data which describes how to access the remote webhook service. The namespace for the referenced secret is openshift-config.\n\nFor further details, see:\n\nhttps://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication\n\nThe key \"kubeConfig\" is used to locate the data. If the secret or expected key is not found, the webhook is not honored. If the specified kube config data is not valid, the webhook is not honored.", Default: map[string]interface{}{}, - Ref: ref(metav1.ListMeta{}.OpenAPIModelName()), - }, - }, - "items": { - SchemaProps: spec.SchemaProps{ - Description: "items is the list of users", - Type: []string{"array"}, - Items: &spec.SchemaOrArray{ - Schema: &spec.Schema{ - SchemaProps: spec.SchemaProps{ - Default: map[string]interface{}{}, - Ref: ref(userv1.User{}.OpenAPIModelName()), - }, - }, - }, + Ref: ref(v1.SecretNameReference{}.OpenAPIModelName()), }, }, }, - Required: []string{"items"}, + Required: []string{"kubeConfig"}, }, }, Dependencies: []string{ - userv1.User{}.OpenAPIModelName(), metav1.ListMeta{}.OpenAPIModelName()}, + v1.SecretNameReference{}.OpenAPIModelName()}, } } @@ -76171,14 +17229,14 @@ func schema_k8sio_api_authorization_v1_LocalSubjectAccessReview(ref common.Refer SchemaProps: spec.SchemaProps{ Description: "spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted.", Default: map[string]interface{}{}, - Ref: ref(apiauthorizationv1.SubjectAccessReviewSpec{}.OpenAPIModelName()), + Ref: ref(authorizationv1.SubjectAccessReviewSpec{}.OpenAPIModelName()), }, }, "status": { SchemaProps: spec.SchemaProps{ Description: "status is filled in by the server and indicates whether the request is allowed or not", Default: map[string]interface{}{}, - Ref: ref(apiauthorizationv1.SubjectAccessReviewStatus{}.OpenAPIModelName()), + Ref: ref(authorizationv1.SubjectAccessReviewStatus{}.OpenAPIModelName()), }, }, }, @@ -76186,7 +17244,7 @@ func schema_k8sio_api_authorization_v1_LocalSubjectAccessReview(ref common.Refer }, }, Dependencies: []string{ - apiauthorizationv1.SubjectAccessReviewSpec{}.OpenAPIModelName(), apiauthorizationv1.SubjectAccessReviewStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + authorizationv1.SubjectAccessReviewSpec{}.OpenAPIModelName(), authorizationv1.SubjectAccessReviewStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } @@ -76330,20 +17388,20 @@ func schema_k8sio_api_authorization_v1_ResourceAttributes(ref common.ReferenceCa "fieldSelector": { SchemaProps: spec.SchemaProps{ Description: "fieldSelector describes the limitation on access based on field. It can only limit access, not broaden it.", - Ref: ref(apiauthorizationv1.FieldSelectorAttributes{}.OpenAPIModelName()), + Ref: ref(authorizationv1.FieldSelectorAttributes{}.OpenAPIModelName()), }, }, "labelSelector": { SchemaProps: spec.SchemaProps{ Description: "labelSelector describes the limitation on access based on labels. It can only limit access, not broaden it.", - Ref: ref(apiauthorizationv1.LabelSelectorAttributes{}.OpenAPIModelName()), + Ref: ref(authorizationv1.LabelSelectorAttributes{}.OpenAPIModelName()), }, }, }, }, }, Dependencies: []string{ - apiauthorizationv1.FieldSelectorAttributes{}.OpenAPIModelName(), apiauthorizationv1.LabelSelectorAttributes{}.OpenAPIModelName()}, + authorizationv1.FieldSelectorAttributes{}.OpenAPIModelName(), authorizationv1.LabelSelectorAttributes{}.OpenAPIModelName()}, } } @@ -76473,14 +17531,14 @@ func schema_k8sio_api_authorization_v1_SelfSubjectAccessReview(ref common.Refere SchemaProps: spec.SchemaProps{ Description: "spec holds information about the request being evaluated. user and groups must be empty", Default: map[string]interface{}{}, - Ref: ref(apiauthorizationv1.SelfSubjectAccessReviewSpec{}.OpenAPIModelName()), + Ref: ref(authorizationv1.SelfSubjectAccessReviewSpec{}.OpenAPIModelName()), }, }, "status": { SchemaProps: spec.SchemaProps{ Description: "status is filled in by the server and indicates whether the request is allowed or not", Default: map[string]interface{}{}, - Ref: ref(apiauthorizationv1.SubjectAccessReviewStatus{}.OpenAPIModelName()), + Ref: ref(authorizationv1.SubjectAccessReviewStatus{}.OpenAPIModelName()), }, }, }, @@ -76488,7 +17546,7 @@ func schema_k8sio_api_authorization_v1_SelfSubjectAccessReview(ref common.Refere }, }, Dependencies: []string{ - apiauthorizationv1.SelfSubjectAccessReviewSpec{}.OpenAPIModelName(), apiauthorizationv1.SubjectAccessReviewStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + authorizationv1.SelfSubjectAccessReviewSpec{}.OpenAPIModelName(), authorizationv1.SubjectAccessReviewStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } @@ -76502,20 +17560,20 @@ func schema_k8sio_api_authorization_v1_SelfSubjectAccessReviewSpec(ref common.Re "resourceAttributes": { SchemaProps: spec.SchemaProps{ Description: "resourceAttributes describes information for a resource access request", - Ref: ref(apiauthorizationv1.ResourceAttributes{}.OpenAPIModelName()), + Ref: ref(authorizationv1.ResourceAttributes{}.OpenAPIModelName()), }, }, "nonResourceAttributes": { SchemaProps: spec.SchemaProps{ Description: "nonResourceAttributes describes information for a non-resource access request", - Ref: ref(apiauthorizationv1.NonResourceAttributes{}.OpenAPIModelName()), + Ref: ref(authorizationv1.NonResourceAttributes{}.OpenAPIModelName()), }, }, }, }, }, Dependencies: []string{ - apiauthorizationv1.NonResourceAttributes{}.OpenAPIModelName(), apiauthorizationv1.ResourceAttributes{}.OpenAPIModelName()}, + authorizationv1.NonResourceAttributes{}.OpenAPIModelName(), authorizationv1.ResourceAttributes{}.OpenAPIModelName()}, } } @@ -76551,14 +17609,14 @@ func schema_k8sio_api_authorization_v1_SelfSubjectRulesReview(ref common.Referen SchemaProps: spec.SchemaProps{ Description: "spec holds information about the request being evaluated.", Default: map[string]interface{}{}, - Ref: ref(apiauthorizationv1.SelfSubjectRulesReviewSpec{}.OpenAPIModelName()), + Ref: ref(authorizationv1.SelfSubjectRulesReviewSpec{}.OpenAPIModelName()), }, }, "status": { SchemaProps: spec.SchemaProps{ Description: "status is filled in by the server and indicates the set of actions a user can perform.", Default: map[string]interface{}{}, - Ref: ref(apiauthorizationv1.SubjectRulesReviewStatus{}.OpenAPIModelName()), + Ref: ref(authorizationv1.SubjectRulesReviewStatus{}.OpenAPIModelName()), }, }, }, @@ -76566,7 +17624,7 @@ func schema_k8sio_api_authorization_v1_SelfSubjectRulesReview(ref common.Referen }, }, Dependencies: []string{ - apiauthorizationv1.SelfSubjectRulesReviewSpec{}.OpenAPIModelName(), apiauthorizationv1.SubjectRulesReviewStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + authorizationv1.SelfSubjectRulesReviewSpec{}.OpenAPIModelName(), authorizationv1.SubjectRulesReviewStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } @@ -76622,14 +17680,14 @@ func schema_k8sio_api_authorization_v1_SubjectAccessReview(ref common.ReferenceC SchemaProps: spec.SchemaProps{ Description: "spec holds information about the request being evaluated", Default: map[string]interface{}{}, - Ref: ref(apiauthorizationv1.SubjectAccessReviewSpec{}.OpenAPIModelName()), + Ref: ref(authorizationv1.SubjectAccessReviewSpec{}.OpenAPIModelName()), }, }, "status": { SchemaProps: spec.SchemaProps{ Description: "status is filled in by the server and indicates whether the request is allowed or not", Default: map[string]interface{}{}, - Ref: ref(apiauthorizationv1.SubjectAccessReviewStatus{}.OpenAPIModelName()), + Ref: ref(authorizationv1.SubjectAccessReviewStatus{}.OpenAPIModelName()), }, }, }, @@ -76637,7 +17695,7 @@ func schema_k8sio_api_authorization_v1_SubjectAccessReview(ref common.ReferenceC }, }, Dependencies: []string{ - apiauthorizationv1.SubjectAccessReviewSpec{}.OpenAPIModelName(), apiauthorizationv1.SubjectAccessReviewStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, + authorizationv1.SubjectAccessReviewSpec{}.OpenAPIModelName(), authorizationv1.SubjectAccessReviewStatus{}.OpenAPIModelName(), metav1.ObjectMeta{}.OpenAPIModelName()}, } } @@ -76651,13 +17709,13 @@ func schema_k8sio_api_authorization_v1_SubjectAccessReviewSpec(ref common.Refere "resourceAttributes": { SchemaProps: spec.SchemaProps{ Description: "resourceAttributes describes information for a resource access request", - Ref: ref(apiauthorizationv1.ResourceAttributes{}.OpenAPIModelName()), + Ref: ref(authorizationv1.ResourceAttributes{}.OpenAPIModelName()), }, }, "nonResourceAttributes": { SchemaProps: spec.SchemaProps{ Description: "nonResourceAttributes describes information for a non-resource access request", - Ref: ref(apiauthorizationv1.NonResourceAttributes{}.OpenAPIModelName()), + Ref: ref(authorizationv1.NonResourceAttributes{}.OpenAPIModelName()), }, }, "user": { @@ -76721,7 +17779,7 @@ func schema_k8sio_api_authorization_v1_SubjectAccessReviewSpec(ref common.Refere }, }, Dependencies: []string{ - apiauthorizationv1.NonResourceAttributes{}.OpenAPIModelName(), apiauthorizationv1.ResourceAttributes{}.OpenAPIModelName()}, + authorizationv1.NonResourceAttributes{}.OpenAPIModelName(), authorizationv1.ResourceAttributes{}.OpenAPIModelName()}, } } @@ -76788,7 +17846,7 @@ func schema_k8sio_api_authorization_v1_SubjectRulesReviewStatus(ref common.Refer Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(apiauthorizationv1.ResourceRule{}.OpenAPIModelName()), + Ref: ref(authorizationv1.ResourceRule{}.OpenAPIModelName()), }, }, }, @@ -76807,7 +17865,7 @@ func schema_k8sio_api_authorization_v1_SubjectRulesReviewStatus(ref common.Refer Schema: &spec.Schema{ SchemaProps: spec.SchemaProps{ Default: map[string]interface{}{}, - Ref: ref(apiauthorizationv1.NonResourceRule{}.OpenAPIModelName()), + Ref: ref(authorizationv1.NonResourceRule{}.OpenAPIModelName()), }, }, }, @@ -76833,7 +17891,7 @@ func schema_k8sio_api_authorization_v1_SubjectRulesReviewStatus(ref common.Refer }, }, Dependencies: []string{ - apiauthorizationv1.NonResourceRule{}.OpenAPIModelName(), apiauthorizationv1.ResourceRule{}.OpenAPIModelName()}, + authorizationv1.NonResourceRule{}.OpenAPIModelName(), authorizationv1.ResourceRule{}.OpenAPIModelName()}, } } diff --git a/openapi/openapi.json b/openapi/openapi.json index 2c13f336217..6d4344b5912 100644 --- a/openapi/openapi.json +++ b/openapi/openapi.json @@ -6,74 +6,10 @@ }, "paths": null, "definitions": { - "com.github.openshift.api.apiextensions.v1alpha1.APIExcludedField": { - "description": "APIExcludedField describes a field in the schema which will not be validated by crdSchemaValidation or objectSchemaValidation.", - "type": "object", - "required": [ - "path", - "versions" - ], - "properties": { - "path": { - "description": "path is the path to the field in the schema. Paths are dot-separated field names (e.g., \"fieldA.fieldB.fieldC\") representing nested object fields. If part of the path is a slice (e.g., \"status.conditions\") the remaining path is applied to all items in the slice (e.g., \"status.conditions.lastTransitionTimestamp\"). Each field name must be a valid Kubernetes CRD field name: start with a letter, contain only letters, digits, and underscores, and be between 1 and 63 characters in length. A path may contain at most 16 fields.", - "type": "string" - }, - "versions": { - "description": "versions are the API versions the field is excluded from. When not specified, the field is excluded from all versions.\n\nEach item must be at most 63 characters in length, and must must consist of only lowercase alphanumeric characters and hyphens, and must start with an alphabetic character and end with an alphanumeric character. At most 32 versions may be specified.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - } - } - }, - "com.github.openshift.api.apiextensions.v1alpha1.APIVersions": { - "description": "APIVersions specifies a set of API versions of a CRD.", - "type": "object", - "required": [ - "defaultSelection" - ], - "properties": { - "additionalVersions": { - "description": "additionalVersions specifies a set api versions to require in addition to the default selection. It is explicitly permitted to specify a version in additionalVersions which was also selected by the default selection. The selections will be merged and deduplicated.\n\nEach item must be at most 63 characters in length, and must must consist of only lowercase alphanumeric characters and hyphens, and must start with an alphabetic character and end with an alphanumeric character.// with an alphabetic character and end with an alphanumeric character. At most 32 additional versions may be specified.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "defaultSelection": { - "description": "defaultSelection specifies a method for automatically selecting a set of versions to require.\n\nValid options are StorageOnly and AllServed. When set to StorageOnly, only the storage version is selected for compatibility assessment. When set to AllServed, all served versions are selected for compatibility assessment.\n\nThis field is required.", - "type": "string" - } - } - }, - "com.github.openshift.api.apiextensions.v1alpha1.CRDData": { - "description": "CRDData contains the complete definition of a CRD.", - "type": "object", - "required": [ - "type", - "data" - ], - "properties": { - "data": { - "description": "data contains the complete definition of the CRD. This field must be in the format specified by the type field. It may not be longer than 1572864 characters. This field is required.", - "type": "string" - }, - "type": { - "description": "type indicates the type of the CRD data. The only supported type is \"YAML\". This field is required.", - "type": "string" - } - } - }, - "com.github.openshift.api.apiextensions.v1alpha1.CompatibilityRequirement": { - "description": "CompatibilityRequirement expresses a set of requirements on a target CRD. It is used to ensure compatibility between different actors using the same CRD.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.APIServer": { + "description": "APIServer holds configuration (like serving certificates, client CA and CORS domains) shared by all API servers in the system, among them especially kube-apiserver and openshift-apiserver. The canonical name of an instance is 'cluster'.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "metadata", "spec" ], "properties": { @@ -91,31 +27,57 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec is the specification of the desired behavior of the Compatibility Requirement.", + "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apiextensions.v1alpha1.CompatibilityRequirementSpec" + "$ref": "#/definitions/com.github.openshift.api.config.v1.APIServerSpec" }, "status": { - "description": "status is the most recently observed status of the Compatibility Requirement.", + "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apiextensions.v1alpha1.CompatibilityRequirementStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.APIServerStatus" } } }, - "com.github.openshift.api.apiextensions.v1alpha1.CompatibilityRequirementList": { - "description": "CompatibilityRequirementList is a collection of CompatibilityRequirements.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.APIServerEncryption": { + "description": "APIServerEncryption is used to encrypt sensitive resources on the cluster.", + "type": "object", + "properties": { + "kms": { + "description": "kms defines the configuration for the external KMS instance that manages the encryption keys, when KMS encryption is enabled sensitive resources will be encrypted using keys managed by an externally configured KMS instance.\n\nThe Key Management Service (KMS) instance provides symmetric encryption and is responsible for managing the lifecyle of the encryption keys outside of the control plane. This allows integration with an external provider to manage the data encryption keys securely.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.KMSPluginConfig" + }, + "type": { + "description": "type defines what encryption type should be used to encrypt resources at the datastore layer. When this field is unset (i.e. when it is set to the empty string), identity is implied. The behavior of unset can and will change over time. Even if encryption is enabled by default, the meaning of unset may change to a different encryption type based on changes in best practices.\n\nWhen encryption is enabled, all sensitive resources shipped with the platform are encrypted. This list of sensitive resources can and will change over time. The current authoritative list is:\n\n 1. secrets\n 2. configmaps\n 3. routes.route.openshift.io\n 4. oauthaccesstokens.oauth.openshift.io\n 5. oauthauthorizetokens.oauth.openshift.io", + "type": "string" + } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "kms": "KMS" + } + } + ] + }, + "com.github.openshift.api.config.v1.APIServerList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "metadata", + "items" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, "items": { - "description": "items is a list of CompatibilityRequirements.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apiextensions.v1alpha1.CompatibilityRequirement" + "$ref": "#/definitions/com.github.openshift.api.config.v1.APIServer" } }, "kind": { @@ -129,487 +91,449 @@ } } }, - "com.github.openshift.api.apiextensions.v1alpha1.CompatibilityRequirementSpec": { - "description": "CompatibilityRequirementSpec is the specification of the desired behavior of the Compatibility Requirement.", + "com.github.openshift.api.config.v1.APIServerNamedServingCert": { + "description": "APIServerNamedServingCert maps a server DNS name, as understood by a client, to a certificate.", "type": "object", "required": [ - "compatibilitySchema" + "servingCertificate" ], "properties": { - "compatibilitySchema": { - "description": "compatibilitySchema defines the schema used by customResourceDefinitionSchemaValidation and objectSchemaValidation. This field is required.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apiextensions.v1alpha1.CompatibilitySchema" - }, - "customResourceDefinitionSchemaValidation": { - "description": "customResourceDefinitionSchemaValidation ensures that updates to the installed CRD are compatible with this compatibility requirement. If not specified, admission of the target CRD will not be validated. This field is optional.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apiextensions.v1alpha1.CustomResourceDefinitionSchemaValidation" + "names": { + "description": "names is a optional list of explicit DNS names (leading wildcards allowed) that should use this certificate to serve secure traffic. If no names are provided, the implicit names will be extracted from the certificates. Exact names trump over wildcard names. Explicit names defined here trump over extracted implicit names.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "objectSchemaValidation": { - "description": "objectSchemaValidation ensures that matching resources conform to compatibilitySchema. If not specified, admission of matching resources will not be validated. This field is optional.", + "servingCertificate": { + "description": "servingCertificate references a kubernetes.io/tls type secret containing the TLS cert info for serving secure traffic. The secret must exist in the openshift-config namespace and contain the following required fields: - Secret.Data[\"tls.key\"] - TLS private key. - Secret.Data[\"tls.crt\"] - TLS certificate.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apiextensions.v1alpha1.ObjectSchemaValidation" + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" } } }, - "com.github.openshift.api.apiextensions.v1alpha1.CompatibilityRequirementStatus": { - "description": "CompatibilityRequirementStatus defines the observed status of the Compatibility Requirement.", + "com.github.openshift.api.config.v1.APIServerServingCerts": { "type": "object", "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status. Known condition types are Progressing, Admitted, and Compatible.\n\nThe Progressing condition indicates if reconciliation of a CompatibilityRequirement is still progressing or has finished.\n\nThe Admitted condition indicates if the validating webhook has been configured.\n\nThe Compatible condition indicates if the observed CRD is compatible with the requirement.", + "namedCertificates": { + "description": "namedCertificates references secrets containing the TLS cert info for serving secure traffic to specific hostnames. If no named certificates are provided, or no named certificates match the server name as understood by a client, the defaultServingCertificate will be used.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + "$ref": "#/definitions/com.github.openshift.api.config.v1.APIServerNamedServingCert" }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "crdName": { - "description": "crdName is the name of the target CRD. The target CRD is not required to exist, as we may legitimately place requirements on it before it is created. The observed CRD is given in status.observedCRD, which will be empty if no CRD is observed. When present, must be between 1 and 253 characters and conform to RFC 1123 subdomain format: lowercase alphanumeric characters, '-' or '.', starting and ending with alphanumeric characters. When not specified, the requirement applies to any CRD name discovered from the compatibility schema. This field is optional. Once set, the value cannot be changed and must always remain set.", - "type": "string" - }, - "observedCRD": { - "description": "observedCRD documents the uid and generation of the CRD object when the current status was written. This field will be omitted if the target CRD does not exist or could not be retrieved.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apiextensions.v1alpha1.ObservedCRD" + "x-kubernetes-list-type": "atomic" } } }, - "com.github.openshift.api.apiextensions.v1alpha1.CompatibilitySchema": { - "description": "CompatibilitySchema defines the schema used by crdSchemaValidation and objectSchemaValidation.", + "com.github.openshift.api.config.v1.APIServerSpec": { "type": "object", - "required": [ - "customResourceDefinition", - "requiredVersions" - ], "properties": { - "customResourceDefinition": { - "description": "customResourceDefinition contains the complete definition of the CRD for schema and object validation purposes. This field is required.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apiextensions.v1alpha1.CRDData" - }, - "excludedFields": { - "description": "excludedFields is a set of fields in the schema which will not be validated by crdSchemaValidation or objectSchemaValidation. The list may contain at most 64 fields. Each path in the list must be unique. When not specified, all fields in the schema will be validated.", + "additionalCORSAllowedOrigins": { + "description": "additionalCORSAllowedOrigins lists additional, user-defined regular expressions describing hosts for which the API server allows access using the CORS headers. This may be needed to access the API and the integrated OAuth server from JavaScript applications. The values are regular expressions that correspond to the Golang regular expression language.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apiextensions.v1alpha1.APIExcludedField" + "type": "string", + "default": "" }, "x-kubernetes-list-type": "atomic" }, - "requiredVersions": { - "description": "requiredVersions specifies a subset of the CRD's API versions which will be asserted for compatibility. This field is required.", + "audit": { + "description": "audit specifies the settings for audit configuration to be applied to all OpenShift-provided API servers in the cluster.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.Audit" + }, + "clientCA": { + "description": "clientCA references a ConfigMap containing a certificate bundle for the signers that will be recognized for incoming client certificates in addition to the operator managed signers. If this is empty, then only operator managed signers are valid. You usually only have to set this if you have your own PKI you wish to honor client certificates from. The ConfigMap must exist in the openshift-config namespace and contain the following required fields: - ConfigMap.Data[\"ca-bundle.crt\"] - CA bundle.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" + }, + "encryption": { + "description": "encryption allows the configuration of encryption of resources at the datastore layer.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.APIServerEncryption" + }, + "servingCerts": { + "description": "servingCert is the TLS cert info for serving secure traffic. If not specified, operator managed certificates will be used for serving secure traffic.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apiextensions.v1alpha1.APIVersions" + "$ref": "#/definitions/com.github.openshift.api.config.v1.APIServerServingCerts" + }, + "tlsAdherence": { + "description": "tlsAdherence controls if components in the cluster adhere to the TLS security profile configured on this APIServer resource.\n\nValid values are \"LegacyAdheringComponentsOnly\" and \"StrictAllComponents\".\n\nWhen set to \"LegacyAdheringComponentsOnly\", components that already honor the cluster-wide TLS profile continue to do so. Components that do not already honor it continue to use their individual TLS configurations.\n\nWhen set to \"StrictAllComponents\", all components must honor the configured TLS profile unless they have a component-specific TLS configuration that overrides it. This mode is recommended for security-conscious deployments and is required for certain compliance frameworks.\n\nNote: Some components such as Kubelet and IngressController have their own dedicated TLS configuration mechanisms via KubeletConfig and IngressController CRs respectively. When these component-specific TLS configurations are set, they take precedence over the cluster-wide tlsSecurityProfile. When not set, these components fall back to the cluster-wide default.\n\nComponents that encounter an unknown value for tlsAdherence should treat it as \"StrictAllComponents\" and log a warning to ensure forward compatibility while defaulting to the more secure behavior.\n\nThis field is optional. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is LegacyAdheringComponentsOnly.\n\nOnce set, this field may be changed to a different value, but may not be removed.", + "type": "string" + }, + "tlsSecurityProfile": { + "description": "tlsSecurityProfile specifies settings for TLS connections for externally exposed servers.\n\nWhen omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is the Intermediate profile.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.TLSSecurityProfile" } } }, - "com.github.openshift.api.apiextensions.v1alpha1.CustomResourceDefinitionSchemaValidation": { - "description": "CustomResourceDefinitionSchemaValidation ensures that updates to the installed CRD are compatible with this compatibility requirement.", + "com.github.openshift.api.config.v1.APIServerStatus": { + "type": "object" + }, + "com.github.openshift.api.config.v1.AWSDNSSpec": { + "description": "AWSDNSSpec contains DNS configuration specific to the Amazon Web Services cloud provider.", "type": "object", - "required": [ - "action" - ], "properties": { - "action": { - "description": "action determines whether violations are rejected (Deny) or admitted with an API warning (Warn). Valid options are Deny and Warn. When set to Deny, incompatible CRDs will be rejected and not admitted to the cluster. When set to Warn, incompatible CRDs will be allowed but a warning will be generated in the API response. This field is required.\n\nPossible enum values:\n - `\"Deny\"` means that incompatible CRDs will be rejected.\n - `\"Warn\"` means that incompatible CRDs will be allowed but a warning will be generated.", + "privateZoneIAMRole": { + "description": "privateZoneIAMRole contains the ARN of an IAM role that should be assumed when performing operations on the cluster's private hosted zone specified in the cluster DNS config. When left empty, no role should be assumed.\n\nThe ARN must follow the format: arn::iam:::role/, where: is the AWS partition (aws, aws-cn, aws-us-gov, or aws-eusc), is a 12-digit numeric identifier for the AWS account, is the IAM role name.", "type": "string", - "enum": [ - "Deny", - "Warn" - ] + "default": "" } } }, - "com.github.openshift.api.apiextensions.v1alpha1.ObjectSchemaValidation": { - "description": "ObjectSchemaValidation ensures that matching objects conform to the compatibilitySchema.", + "com.github.openshift.api.config.v1.AWSIngressSpec": { + "description": "AWSIngressSpec holds the desired state of the Ingress for Amazon Web Services infrastructure provider. This only includes fields that can be modified in the cluster.", "type": "object", "required": [ - "action" + "type" ], "properties": { - "action": { - "description": "action determines whether violations are rejected (Deny) or admitted with an API warning (Warn). Valid options are Deny and Warn. When set to Deny, incompatible Objects will be rejected and not admitted to the cluster. When set to Warn, incompatible Objects will be allowed but a warning will be generated in the API response. This field is required.\n\nPossible enum values:\n - `\"Deny\"` means that incompatible CRDs will be rejected.\n - `\"Warn\"` means that incompatible CRDs will be allowed but a warning will be generated.", + "type": { + "description": "type allows user to set a load balancer type. When this field is set the default ingresscontroller will get created using the specified LBType. If this field is not set then the default ingress controller of LBType Classic will be created. Valid values are:\n\n* \"Classic\": A Classic Load Balancer that makes routing decisions at either\n the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See\n the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb\n\n* \"NLB\": A Network Load Balancer that makes routing decisions at the\n transport layer (TCP/SSL). See the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb", "type": "string", - "enum": [ - "Deny", - "Warn" - ] - }, - "matchConditions": { - "description": "matchConditions defines the matchConditions field of the resulting ValidatingWebhookConfiguration. When present, must contain between 1 and 64 match conditions. When not specified, the webhook will match all requests according to its other selectors.", + "default": "" + } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": {} + } + ] + }, + "com.github.openshift.api.config.v1.AWSPlatformSpec": { + "description": "AWSPlatformSpec holds the desired state of the Amazon Web Services infrastructure provider. This only includes fields that can be modified in the cluster.", + "type": "object", + "properties": { + "serviceEndpoints": { + "description": "serviceEndpoints list contains custom endpoints which will override default service endpoint of AWS Services. There must be only one ServiceEndpoint for a service.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MatchCondition" + "$ref": "#/definitions/com.github.openshift.api.config.v1.AWSServiceEndpoint" }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "namespaceSelector": { - "description": "namespaceSelector defines a label selector for namespaces. If defined, only objects in a namespace with matching labels will be subject to validation. When not specified, objects for validation will not be filtered by namespace.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "objectSelector": { - "description": "objectSelector defines a label selector for objects. If defined, only objects with matching labels will be subject to validation. When not specified, objects for validation will not be filtered by label.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "x-kubernetes-list-type": "atomic" } } }, - "com.github.openshift.api.apiextensions.v1alpha1.ObservedCRD": { - "description": "ObservedCRD contains information about the observed target CRD.", + "com.github.openshift.api.config.v1.AWSPlatformStatus": { + "description": "AWSPlatformStatus holds the current status of the Amazon Web Services infrastructure provider.", "type": "object", "required": [ - "uid", - "generation" + "region" ], "properties": { - "generation": { - "description": "generation is the observed generation of the CRD. Must be a positive integer (minimum value of 1).", - "type": "integer", - "format": "int64" + "cloudLoadBalancerConfig": { + "description": "cloudLoadBalancerConfig holds configuration related to DNS and cloud load balancers. It allows configuration of in-cluster DNS as an alternative to the platform default DNS implementation. When using the ClusterHosted DNS type, Load Balancer IP addresses must be provided for the API and internal API load balancers as well as the ingress load balancer.", + "default": { + "dnsType": "PlatformDefault" + }, + "$ref": "#/definitions/com.github.openshift.api.config.v1.CloudLoadBalancerConfig" }, - "uid": { - "description": "uid is the uid of the observed CRD. Must be a valid UUID consisting of lowercase hexadecimal digits in 5 hyphenated blocks (8-4-4-4-12 format). Length must be between 1 and 36 characters.", - "type": "string" + "ipFamily": { + "description": "ipFamily specifies the IP protocol family that should be used for AWS network resources. This controls whether AWS resources are created with IPv4-only, or dual-stack networking with IPv4 or IPv6 as the primary protocol family.\n\nValid values are: * \"IPv4\" (default): Cloud platform resources use IPv4 addressing only. * \"DualStackIPv6Primary\": Cloud platform resources use dual-stack networking with IPv6 as the primary protocol family. * \"DualStackIPv4Primary\": Cloud platform resources use dual-stack networking with IPv4 as the primary protocol family.\n\nWhen omitted, this field defaults to \"IPv4\".\n\nThis field is immutable and cannot be changed once set.", + "type": "string", + "default": "IPv4" + }, + "region": { + "description": "region holds the default AWS region for new AWS resources created by the cluster.", + "type": "string", + "default": "" + }, + "resourceTags": { + "description": "resourceTags is a list of additional tags to apply to AWS resources created for the cluster. See https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html for information on tagging AWS resources. AWS supports a maximum of 50 tags per resource. OpenShift reserves 25 tags for its use, leaving 25 tags available for the user.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.AWSResourceTag" + }, + "x-kubernetes-list-type": "atomic" + }, + "serviceEndpoints": { + "description": "serviceEndpoints list contains custom endpoints which will override default service endpoint of AWS Services. There must be only one ServiceEndpoint for a service.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.AWSServiceEndpoint" + }, + "x-kubernetes-list-type": "atomic" } } }, - "com.github.openshift.api.apiserver.v1.APIRequestCount": { - "description": "APIRequestCount tracks requests made to an API. The instance name must be of the form `resource.version.group`, matching the resource.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.AWSResourceTag": { + "description": "AWSResourceTag is a tag to apply to AWS resources created for the cluster.", "type": "object", "required": [ - "spec" + "key", + "value" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "key": { + "description": "key sets the key of the AWS resource tag key-value pair. Key is required when defining an AWS resource tag. Key should consist of between 1 and 128 characters, and may contain only the set of alphanumeric characters, space (' '), '_', '.', '/', '=', '+', '-', ':', and '@'.", + "type": "string", + "default": "" }, - "spec": { - "description": "spec defines the characteristics of the resource.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apiserver.v1.APIRequestCountSpec" + "value": { + "description": "value sets the value of the AWS resource tag key-value pair. Value is required when defining an AWS resource tag. Value should consist of between 1 and 256 characters, and may contain only the set of alphanumeric characters, space (' '), '_', '.', '/', '=', '+', '-', ':', and '@'. Some AWS service do not support empty values. Since tags are added to resources in many services, the length of the tag value must meet the requirements of all services.", + "type": "string", + "default": "" + } + } + }, + "com.github.openshift.api.config.v1.AWSServiceEndpoint": { + "description": "AWSServiceEndpoint store the configuration of a custom url to override existing defaults of AWS Services.", + "type": "object", + "required": [ + "name", + "url" + ], + "properties": { + "name": { + "description": "name is the name of the AWS service. The list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html This must be provided and cannot be empty.", + "type": "string", + "default": "" }, - "status": { - "description": "status contains the observed state of the resource.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apiserver.v1.APIRequestCountStatus" + "url": { + "description": "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.apiserver.v1.APIRequestCountList": { - "description": "APIRequestCountList is a list of APIRequestCount resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.AcceptRisk": { + "description": "AcceptRisk represents a risk that is considered acceptable.", "type": "object", "required": [ - "metadata", - "items" + "name" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "name": { + "description": "name is the name of the acceptable risk. It must be a non-empty string and must not exceed 256 characters.", "type": "string" - }, - "items": { + } + } + }, + "com.github.openshift.api.config.v1.AdmissionConfig": { + "type": "object", + "properties": { + "disabledPlugins": { + "description": "disabledPlugins is a list of admission plugins that must be off. Putting something in this list is almost always a mistake and likely to result in cluster instability.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apiserver.v1.APIRequestCount" + "type": "string", + "default": "" } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "enabledPlugins": { + "description": "enabledPlugins is a list of admission plugins that must be on in addition to the default list. Some admission plugins are disabled by default, but certain configurations require them. This is fairly uncommon and can result in performance penalties and unexpected behavior.", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "pluginConfig": { + "type": "object", + "additionalProperties": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.AdmissionPluginConfig" + } } } }, - "com.github.openshift.api.apiserver.v1.APIRequestCountSpec": { + "com.github.openshift.api.config.v1.AdmissionPluginConfig": { + "description": "AdmissionPluginConfig holds the necessary configuration options for admission plugins", "type": "object", + "required": [ + "location", + "configuration" + ], "properties": { - "numberOfUsersToReport": { - "description": "numberOfUsersToReport is the number of users to include in the report. If unspecified or zero, the default is ten. This is default is subject to change.", - "type": "integer", - "format": "int64", - "default": 0 + "configuration": { + "description": "configuration is an embedded configuration object to be used as the plugin's configuration. If present, it will be used instead of the path to the configuration file.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + }, + "location": { + "description": "location is the path to a configuration file that contains the plugin's configuration", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.apiserver.v1.APIRequestCountStatus": { + "com.github.openshift.api.config.v1.AlibabaCloudPlatformSpec": { + "description": "AlibabaCloudPlatformSpec holds the desired state of the Alibaba Cloud infrastructure provider. This only includes fields that can be modified in the cluster.", + "type": "object" + }, + "com.github.openshift.api.config.v1.AlibabaCloudPlatformStatus": { + "description": "AlibabaCloudPlatformStatus holds the current status of the Alibaba Cloud infrastructure provider.", "type": "object", "required": [ - "requestCount" + "region" ], "properties": { - "conditions": { - "description": "conditions contains details of the current status of this API Resource.", + "region": { + "description": "region specifies the region for Alibaba Cloud resources created for the cluster.", + "type": "string", + "default": "" + }, + "resourceGroupID": { + "description": "resourceGroupID is the ID of the resource group for the cluster.", + "type": "string" + }, + "resourceTags": { + "description": "resourceTags is a list of additional tags to apply to Alibaba Cloud resources created for the cluster.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + "$ref": "#/definitions/com.github.openshift.api.config.v1.AlibabaCloudResourceTag" }, "x-kubernetes-list-map-keys": [ - "type" + "key" ], "x-kubernetes-list-type": "map" - }, - "currentHour": { - "description": "currentHour contains request history for the current hour. This is porcelain to make the API easier to read by humans seeing if they addressed a problem. This field is reset on the hour.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apiserver.v1.PerResourceAPIRequestLog" - }, - "last24h": { - "description": "last24h contains request history for the last 24 hours, indexed by the hour, so 12:00AM-12:59 is in index 0, 6am-6:59am is index 6, etc. The index of the current hour is updated live and then duplicated into the requestsLastHour field.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apiserver.v1.PerResourceAPIRequestLog" - } - }, - "removedInRelease": { - "description": "removedInRelease is when the API will be removed.", - "type": "string" - }, - "requestCount": { - "description": "requestCount is a sum of all requestCounts across all current hours, nodes, and users.", - "type": "integer", - "format": "int64", - "default": 0 } } }, - "com.github.openshift.api.apiserver.v1.PerNodeAPIRequestLog": { - "description": "PerNodeAPIRequestLog contains logs of requests to a certain node.", + "com.github.openshift.api.config.v1.AlibabaCloudResourceTag": { + "description": "AlibabaCloudResourceTag is the set of tags to add to apply to resources.", "type": "object", "required": [ - "nodeName", - "requestCount", - "byUser" + "key", + "value" ], "properties": { - "byUser": { - "description": "byUser contains request details by top .spec.numberOfUsersToReport users. Note that because in the case of an apiserver, restart the list of top users is determined on a best-effort basis, the list might be imprecise. In addition, some system users may be explicitly included in the list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apiserver.v1.PerUserAPIRequestCount" - } - }, - "nodeName": { - "description": "nodeName where the request are being handled.", + "key": { + "description": "key is the key of the tag.", "type": "string", "default": "" }, - "requestCount": { - "description": "requestCount is a sum of all requestCounts across all users, even those outside of the top 10 users.", - "type": "integer", - "format": "int64", - "default": 0 + "value": { + "description": "value is the value of the tag.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.apiserver.v1.PerResourceAPIRequestLog": { - "description": "PerResourceAPIRequestLog logs request for various nodes.", + "com.github.openshift.api.config.v1.Audit": { "type": "object", - "required": [ - "requestCount" - ], "properties": { - "byNode": { - "description": "byNode contains logs of requests per node.", + "customRules": { + "description": "customRules specify profiles per group. These profile take precedence over the top-level profile field if they apply. They are evaluation from top to bottom and the first one that matches, applies.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apiserver.v1.PerNodeAPIRequestLog" - } + "$ref": "#/definitions/com.github.openshift.api.config.v1.AuditCustomRule" + }, + "x-kubernetes-list-map-keys": [ + "group" + ], + "x-kubernetes-list-type": "map" }, - "requestCount": { - "description": "requestCount is a sum of all requestCounts across nodes.", - "type": "integer", - "format": "int64", - "default": 0 + "profile": { + "description": "profile specifies the name of the desired top-level audit profile to be applied to all requests sent to any of the OpenShift-provided API servers in the cluster (kube-apiserver, openshift-apiserver and oauth-apiserver), with the exception of those requests that match one or more of the customRules.\n\nThe following profiles are provided: - Default: default policy which means MetaData level logging with the exception of events\n (not logged at all), oauthaccesstokens and oauthauthorizetokens (both logged at RequestBody\n level).\n- WriteRequestBodies: like 'Default', but logs request and response HTTP payloads for write requests (create, update, patch). - AllRequestBodies: like 'WriteRequestBodies', but also logs request and response HTTP payloads for read requests (get, list). - None: no requests are logged at all, not even oauthaccesstokens and oauthauthorizetokens.\n\nWarning: It is not recommended to disable audit logging by using the `None` profile unless you are fully aware of the risks of not logging data that can be beneficial when troubleshooting issues. If you disable audit logging and a support situation arises, you might need to enable audit logging and reproduce the issue in order to troubleshoot properly.\n\nIf unset, the 'Default' profile is used as the default.", + "type": "string" } } }, - "com.github.openshift.api.apiserver.v1.PerUserAPIRequestCount": { - "description": "PerUserAPIRequestCount contains logs of a user's requests.", + "com.github.openshift.api.config.v1.AuditConfig": { + "description": "AuditConfig holds configuration for the audit capabilities", "type": "object", "required": [ - "username", - "userAgent", - "requestCount", - "byVerb" + "enabled", + "auditFilePath", + "maximumFileRetentionDays", + "maximumRetainedFiles", + "maximumFileSizeMegabytes", + "policyFile", + "policyConfiguration", + "logFormat", + "webHookKubeConfig", + "webHookMode" ], "properties": { - "byVerb": { - "description": "byVerb details by verb.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apiserver.v1.PerVerbAPIRequestCount" - } + "auditFilePath": { + "description": "All requests coming to the apiserver will be logged to this file.", + "type": "string", + "default": "" + }, + "enabled": { + "description": "If this flag is set, audit log will be printed in the logs. The logs contains, method, user and a requested URL.", + "type": "boolean", + "default": false + }, + "logFormat": { + "description": "Format of saved audits (legacy or json).", + "type": "string", + "default": "" + }, + "maximumFileRetentionDays": { + "description": "Maximum number of days to retain old log files based on the timestamp encoded in their filename.", + "type": "integer", + "format": "int32", + "default": 0 }, - "requestCount": { - "description": "requestCount of requests by the user across all verbs.", + "maximumFileSizeMegabytes": { + "description": "Maximum size in megabytes of the log file before it gets rotated. Defaults to 100MB.", "type": "integer", - "format": "int64", + "format": "int32", "default": 0 }, - "userAgent": { - "description": "userAgent that made the request. The same user often has multiple binaries which connect (pods with many containers). The different binaries will have different userAgents, but the same user. In addition, we have userAgents with version information embedded and the userName isn't likely to change.", + "maximumRetainedFiles": { + "description": "Maximum number of old log files to retain.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "policyConfiguration": { + "description": "policyConfiguration is an embedded policy configuration object to be used as the audit policy configuration. If present, it will be used instead of the path to the policy file.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + }, + "policyFile": { + "description": "policyFile is a path to the file that defines the audit policy configuration.", "type": "string", "default": "" }, - "username": { - "description": "username that made the request.", + "webHookKubeConfig": { + "description": "Path to a .kubeconfig formatted file that defines the audit webhook configuration.", + "type": "string", + "default": "" + }, + "webHookMode": { + "description": "Strategy for sending audit events (block or batch).", "type": "string", "default": "" } } }, - "com.github.openshift.api.apiserver.v1.PerVerbAPIRequestCount": { - "description": "PerVerbAPIRequestCount requestCounts requests by API request verb.", + "com.github.openshift.api.config.v1.AuditCustomRule": { + "description": "AuditCustomRule describes a custom rule for an audit profile that takes precedence over the top-level profile.", "type": "object", "required": [ - "verb", - "requestCount" + "group", + "profile" ], "properties": { - "requestCount": { - "description": "requestCount of requests for verb.", - "type": "integer", - "format": "int64", - "default": 0 + "group": { + "description": "group is a name of group a request user must be member of in order to this profile to apply.", + "type": "string", + "default": "" }, - "verb": { - "description": "verb of API request (get, list, create, etc...)", + "profile": { + "description": "profile specifies the name of the desired audit policy configuration to be deployed to all OpenShift-provided API servers in the cluster.\n\nThe following profiles are provided: - Default: the existing default policy. - WriteRequestBodies: like 'Default', but logs request and response HTTP payloads for write requests (create, update, patch). - AllRequestBodies: like 'WriteRequestBodies', but also logs request and response HTTP payloads for read requests (get, list). - None: no requests are logged at all, not even oauthaccesstokens and oauthauthorizetokens.\n\nIf unset, the 'Default' profile is used as the default.", "type": "string", "default": "" } } }, - "com.github.openshift.api.apps.v1.CustomDeploymentStrategyParams": { - "description": "CustomDeploymentStrategyParams are the input to the Custom deployment strategy.", + "com.github.openshift.api.config.v1.Authentication": { + "description": "Authentication specifies cluster-wide settings for authentication (like OAuth and webhook token authenticators). The canonical name of an instance is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", - "properties": { - "command": { - "description": "command is optional and overrides CMD in the container Image.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "environment": { - "description": "environment holds the environment which will be given to the container for Image.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } - }, - "image": { - "description": "image specifies a container image which can carry out a deployment.", - "type": "string" - } - } - }, - "com.github.openshift.api.apps.v1.DeploymentCause": { - "description": "DeploymentCause captures information about a particular cause of a deployment.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "imageTrigger": { - "description": "imageTrigger contains the image trigger details, if this trigger was fired based on an image change", - "$ref": "#/definitions/com.github.openshift.api.apps.v1.DeploymentCauseImageTrigger" - }, - "type": { - "description": "type of the trigger that resulted in the creation of a new deployment", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.apps.v1.DeploymentCauseImageTrigger": { - "description": "DeploymentCauseImageTrigger represents details about the cause of a deployment originating from an image change trigger", - "type": "object", - "required": [ - "from" - ], - "properties": { - "from": { - "description": "from is a reference to the changed object which triggered a deployment. The field may have the kinds DockerImage, ImageStreamTag, or ImageStreamImage.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - } - } - }, - "com.github.openshift.api.apps.v1.DeploymentCondition": { - "description": "DeploymentCondition describes the state of a deployment config at a certain point.", - "type": "object", - "required": [ - "type", - "status" - ], - "properties": { - "lastTransitionTime": { - "description": "The last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "lastUpdateTime": { - "description": "The last time this condition was updated.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "A human readable message indicating details about the transition.", - "type": "string" - }, - "reason": { - "description": "The reason for the condition's last transition.", - "type": "string" - }, - "status": { - "description": "status of the condition, one of True, False, Unknown.", - "type": "string", - "default": "" - }, - "type": { - "description": "type of deployment condition.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.apps.v1.DeploymentConfig": { - "description": "Deployment Configs define the template for a pod and manages deploying new images or configuration changes. A single deployment configuration is usually analogous to a single micro-service. Can support many different deployment patterns, including full restart, customizable rolling updates, and fully custom behaviors, as well as pre- and post- deployment hooks. Each individual deployment is represented as a replication controller.\n\nA deployment is \"triggered\" when its configuration is changed or a tag in an Image Stream is changed. Triggers can be disabled to allow manual control over a deployment. The \"strategy\" determines how the deployment is carried out and may be changed at any time. The `latestVersion` field is updated when a new deployment is triggered by any means.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). Deprecated: Use deployments or other means for declarative updates for pods instead.", - "type": "object", - "required": [ - "spec" - ], + "required": [ + "spec" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -625,21 +549,22 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec represents a desired deployment state and how to deploy to it.", + "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apps.v1.DeploymentConfigSpec" + "$ref": "#/definitions/com.github.openshift.api.config.v1.AuthenticationSpec" }, "status": { - "description": "status represents the current deployment state.", + "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apps.v1.DeploymentConfigStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.AuthenticationStatus" } } }, - "com.github.openshift.api.apps.v1.DeploymentConfigList": { - "description": "DeploymentConfigList is a collection of deployment configs.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.AuthenticationList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ + "metadata", "items" ], "properties": { @@ -648,11 +573,10 @@ "type": "string" }, "items": { - "description": "items is a list of deployment configs", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apps.v1.DeploymentConfig" + "$ref": "#/definitions/com.github.openshift.api.config.v1.Authentication" } }, "kind": { @@ -666,688 +590,451 @@ } } }, - "com.github.openshift.api.apps.v1.DeploymentConfigRollback": { - "description": "DeploymentConfigRollback provides the input to rollback generation.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.AuthenticationSpec": { "type": "object", - "required": [ - "name", - "spec" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "oauthMetadata": { + "description": "oauthMetadata contains the discovery endpoint data for OAuth 2.0 Authorization Server Metadata for an external OAuth server. This discovery document can be viewed from its served location: oc get --raw '/.well-known/oauth-authorization-server' For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 If oauthMetadata.name is non-empty, this value has precedence over any metadata reference stored in status. The key \"oauthMetadata\" is used to locate the data. If specified and the config map or expected key is not found, no metadata is served. If the specified metadata is not valid, no metadata is served. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "oidcProviders": { + "description": "oidcProviders are OIDC identity providers that can issue tokens for this cluster Can only be set if \"Type\" is set to \"OIDC\".\n\nAt most one provider can be configured.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.OIDCProvider" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map" }, - "name": { - "description": "name of the deployment config that will be rolled back.", + "serviceAccountIssuer": { + "description": "serviceAccountIssuer is the identifier of the bound service account token issuer. The default is https://kubernetes.default.svc WARNING: Updating this field will not result in immediate invalidation of all bound tokens with the previous issuer value. Instead, the tokens issued by previous service account issuer will continue to be trusted for a time period chosen by the platform (currently set to 24h). This time period is subject to change over time. This allows internal components to transition to use new service account issuer without service distruption.", "type": "string", "default": "" }, - "spec": { - "description": "spec defines the options to rollback generation.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apps.v1.DeploymentConfigRollbackSpec" + "type": { + "description": "type identifies the cluster managed, user facing authentication mode in use. Specifically, it manages the component that responds to login attempts. The default is IntegratedOAuth.", + "type": "string", + "default": "" }, - "updatedAnnotations": { - "description": "updatedAnnotations is a set of new annotations that will be added in the deployment config.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "webhookTokenAuthenticator": { + "description": "webhookTokenAuthenticator configures a remote token reviewer. These remote authentication webhooks can be used to verify bearer tokens via the tokenreviews.authentication.k8s.io REST API. This is required to honor bearer tokens that are provisioned by an external authentication service.\n\nCan only be set if \"Type\" is set to \"None\".", + "$ref": "#/definitions/com.github.openshift.api.config.v1.WebhookTokenAuthenticator" + }, + "webhookTokenAuthenticators": { + "description": "webhookTokenAuthenticators is DEPRECATED, setting it has no effect.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.DeprecatedWebhookTokenAuthenticator" + }, + "x-kubernetes-list-type": "atomic" } } }, - "com.github.openshift.api.apps.v1.DeploymentConfigRollbackSpec": { - "description": "DeploymentConfigRollbackSpec represents the options for rollback generation.", + "com.github.openshift.api.config.v1.AuthenticationStatus": { "type": "object", - "required": [ - "from", - "includeTriggers", - "includeTemplate", - "includeReplicationMeta", - "includeStrategy" - ], "properties": { - "from": { - "description": "from points to a ReplicationController which is a deployment.", + "integratedOAuthMetadata": { + "description": "integratedOAuthMetadata contains the discovery endpoint data for OAuth 2.0 Authorization Server Metadata for the in-cluster integrated OAuth server. This discovery document can be viewed from its served location: oc get --raw '/.well-known/oauth-authorization-server' For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This contains the observed value based on cluster state. An explicitly set value in spec.oauthMetadata has precedence over this field. This field has no meaning if authentication spec.type is not set to IntegratedOAuth. The key \"oauthMetadata\" is used to locate the data. If the config map or expected key is not found, no metadata is served. If the specified metadata is not valid, no metadata is served. The namespace for this config map is openshift-config-managed.", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "includeReplicationMeta": { - "description": "includeReplicationMeta specifies whether to include the replica count and selector.", - "type": "boolean", - "default": false - }, - "includeStrategy": { - "description": "includeStrategy specifies whether to include the deployment Strategy.", - "type": "boolean", - "default": false - }, - "includeTemplate": { - "description": "includeTemplate specifies whether to include the PodTemplateSpec.", - "type": "boolean", - "default": false - }, - "includeTriggers": { - "description": "includeTriggers specifies whether to include config Triggers.", - "type": "boolean", - "default": false + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" }, - "revision": { - "description": "revision to rollback to. If set to 0, rollback to the last revision.", - "type": "integer", - "format": "int64" + "oidcClients": { + "description": "oidcClients is where participating operators place the current OIDC client status for OIDC clients that can be customized by the cluster-admin.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.OIDCClientStatus" + }, + "x-kubernetes-list-map-keys": [ + "componentNamespace", + "componentName" + ], + "x-kubernetes-list-type": "map" } } }, - "com.github.openshift.api.apps.v1.DeploymentConfigSpec": { - "description": "DeploymentConfigSpec represents the desired state of the deployment.", + "com.github.openshift.api.config.v1.AzurePlatformSpec": { + "description": "AzurePlatformSpec holds the desired state of the Azure infrastructure provider. This only includes fields that can be modified in the cluster.", + "type": "object" + }, + "com.github.openshift.api.config.v1.AzurePlatformStatus": { + "description": "AzurePlatformStatus holds the current status of the Azure infrastructure provider.", "type": "object", + "required": [ + "resourceGroupName" + ], "properties": { - "minReadySeconds": { - "description": "minReadySeconds is the minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", - "type": "integer", - "format": "int32" - }, - "paused": { - "description": "paused indicates that the deployment config is paused resulting in no new deployments on template changes or changes in the template caused by other triggers.", - "type": "boolean" - }, - "replicas": { - "description": "replicas is the number of desired replicas.", - "type": "integer", - "format": "int32", - "default": 0 + "armEndpoint": { + "description": "armEndpoint specifies a URL to use for resource management in non-soverign clouds such as Azure Stack.", + "type": "string" }, - "revisionHistoryLimit": { - "description": "revisionHistoryLimit is the number of old ReplicationControllers to retain to allow for rollbacks. This field is a pointer to allow for differentiation between an explicit zero and not specified. Defaults to 10. (This only applies to DeploymentConfigs created via the new group API resource, not the legacy resource.)", - "type": "integer", - "format": "int32" + "cloudLoadBalancerConfig": { + "description": "cloudLoadBalancerConfig holds configuration related to DNS and cloud load balancers. It allows configuration of in-cluster DNS as an alternative to the platform default DNS implementation. When using the ClusterHosted DNS type, Load Balancer IP addresses must be provided for the API and internal API load balancers as well as the ingress load balancer.", + "default": { + "dnsType": "PlatformDefault" + }, + "$ref": "#/definitions/com.github.openshift.api.config.v1.CloudLoadBalancerConfig" }, - "selector": { - "description": "selector is a label query over pods that should match the Replicas count.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "cloudName": { + "description": "cloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK with the appropriate Azure API endpoints. If empty, the value is equal to `AzurePublicCloud`.", + "type": "string" }, - "strategy": { - "description": "strategy describes how a deployment is executed.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apps.v1.DeploymentStrategy" + "ipFamily": { + "description": "ipFamily specifies the IP protocol family that should be used for Azure network resources. This controls whether Azure resources are created with IPv4-only, or dual-stack networking with IPv4 or IPv6 as the primary protocol family.", + "type": "string", + "default": "IPv4" }, - "template": { - "description": "template is the object that describes the pod that will be created if insufficient replicas are detected.", - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" + "networkResourceGroupName": { + "description": "networkResourceGroupName is the Resource Group for network resources like the Virtual Network and Subnets used by the cluster. If empty, the value is same as ResourceGroupName.", + "type": "string" }, - "test": { - "description": "test ensures that this deployment config will have zero replicas except while a deployment is running. This allows the deployment config to be used as a continuous deployment test - triggering on images, running the deployment, and then succeeding or failing. Post strategy hooks and After actions can be used to integrate successful deployment with an action.", - "type": "boolean", - "default": false + "resourceGroupName": { + "description": "resourceGroupName is the Resource Group for new Azure resources created for the cluster.", + "type": "string", + "default": "" }, - "triggers": { - "description": "triggers determine how updates to a DeploymentConfig result in new deployments. If no triggers are defined, a new deployment can only occur as a result of an explicit client update to the DeploymentConfig with a new LatestVersion. If null, defaults to having a config change trigger.", + "resourceTags": { + "description": "resourceTags is a list of additional tags to apply to Azure resources created for the cluster. See https://docs.microsoft.com/en-us/rest/api/resources/tags for information on tagging Azure resources. Due to limitations on Automation, Content Delivery Network, DNS Azure resources, a maximum of 15 tags may be applied. OpenShift reserves 5 tags for internal use, allowing 10 tags for user configuration.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apps.v1.DeploymentTriggerPolicy" - } + "$ref": "#/definitions/com.github.openshift.api.config.v1.AzureResourceTag" + }, + "x-kubernetes-list-type": "atomic" } } }, - "com.github.openshift.api.apps.v1.DeploymentConfigStatus": { - "description": "DeploymentConfigStatus represents the current deployment state.", + "com.github.openshift.api.config.v1.AzureResourceTag": { + "description": "AzureResourceTag is a tag to apply to Azure resources created for the cluster.", "type": "object", + "required": [ + "key", + "value" + ], "properties": { - "availableReplicas": { - "description": "availableReplicas is the total number of available pods targeted by this deployment config.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "conditions": { - "description": "conditions represents the latest available observations of a deployment config's current state.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apps.v1.DeploymentCondition" - }, - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "details": { - "description": "details are the reasons for the update to this deployment config. This could be based on a change made by the user or caused by an automatic trigger", - "$ref": "#/definitions/com.github.openshift.api.apps.v1.DeploymentDetails" + "key": { + "description": "key is the key part of the tag. A tag key can have a maximum of 128 characters and cannot be empty. Key must begin with a letter, end with a letter, number or underscore, and must contain only alphanumeric characters and the following special characters `_ . -`.", + "type": "string", + "default": "" }, - "latestVersion": { - "description": "latestVersion is used to determine whether the current deployment associated with a deployment config is out of sync.", - "type": "integer", - "format": "int64", - "default": 0 - }, - "observedGeneration": { - "description": "observedGeneration is the most recent generation observed by the deployment config controller.", - "type": "integer", - "format": "int64", - "default": 0 - }, - "readyReplicas": { - "description": "Total number of ready pods targeted by this deployment.", - "type": "integer", - "format": "int32" - }, - "replicas": { - "description": "replicas is the total number of pods targeted by this deployment config.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "unavailableReplicas": { - "description": "unavailableReplicas is the total number of unavailable pods targeted by this deployment config.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "updatedReplicas": { - "description": "updatedReplicas is the total number of non-terminated pods targeted by this deployment config that have the desired template spec.", - "type": "integer", - "format": "int32", - "default": 0 + "value": { + "description": "value is the value part of the tag. A tag value can have a maximum of 256 characters and cannot be empty. Value must contain only alphanumeric characters and the following special characters `_ + , - . / : ; < = > ? @`.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.apps.v1.DeploymentDetails": { - "description": "DeploymentDetails captures information about the causes of a deployment.", + "com.github.openshift.api.config.v1.BareMetalPlatformLoadBalancer": { + "description": "BareMetalPlatformLoadBalancer defines the load balancer used by the cluster on BareMetal platform.", "type": "object", - "required": [ - "causes" - ], "properties": { - "causes": { - "description": "causes are extended data associated with all the causes for creating a new deployment", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apps.v1.DeploymentCause" - } - }, - "message": { - "description": "message is the user specified change message, if this deployment was triggered manually by the user", - "type": "string" + "type": { + "description": "type defines the type of load balancer used by the cluster on BareMetal platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", + "type": "string", + "default": "OpenShiftManagedDefault" } - } - }, - "com.github.openshift.api.apps.v1.DeploymentLog": { - "description": "DeploymentLog represents the logs for a deployment\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": {} } - } + ] }, - "com.github.openshift.api.apps.v1.DeploymentLogOptions": { - "description": "DeploymentLogOptions is the REST options for a deployment log\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.BareMetalPlatformSpec": { + "description": "BareMetalPlatformSpec holds the desired state of the BareMetal infrastructure provider. This only includes fields that can be modified in the cluster.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "container": { - "description": "The container for which to stream logs. Defaults to only container if there is one container in the pod.", - "type": "string" - }, - "follow": { - "description": "follow if true indicates that the build log should be streamed until the build terminates.", - "type": "boolean" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "limitBytes": { - "description": "If set, the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.", - "type": "integer", - "format": "int64" - }, - "nowait": { - "description": "nowait if true causes the call to return immediately even if the deployment is not available yet. Otherwise the server will wait until the deployment has started.", - "type": "boolean" - }, - "previous": { - "description": "Return previous deployment logs. Defaults to false.", - "type": "boolean" - }, - "sinceSeconds": { - "description": "A relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", - "type": "integer", - "format": "int64" - }, - "sinceTime": { - "description": "An RFC3339 timestamp from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "tailLines": { - "description": "If set, the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime", - "type": "integer", - "format": "int64" + "apiServerInternalIPs": { + "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "timestamps": { - "description": "If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.", - "type": "boolean" + "ingressIPs": { + "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "version": { - "description": "version of the deployment for which to view logs.", - "type": "integer", - "format": "int64" + "machineNetworks": { + "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } } }, - "com.github.openshift.api.apps.v1.DeploymentRequest": { - "description": "DeploymentRequest is a request to a deployment config for a new deployment.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.BareMetalPlatformStatus": { + "description": "BareMetalPlatformStatus holds the current status of the BareMetal infrastructure provider. For more information about the network architecture used with the BareMetal platform type, see: https://github.com/openshift/installer/blob/master/docs/design/baremetal/networking-infrastructure.md", "type": "object", "required": [ - "name", - "latest", - "force" + "apiServerInternalIPs", + "ingressIPs" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "apiServerInternalIP": { + "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", "type": "string" }, - "excludeTriggers": { - "description": "excludeTriggers instructs the instantiator to avoid processing the specified triggers. This field overrides the triggers from latest and allows clients to control specific logic. This field is ignored if not specified.", + "apiServerInternalIPs": { + "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", "type": "array", "items": { "type": "string", "default": "" - } + }, + "x-kubernetes-list-type": "atomic" }, - "force": { - "description": "force will try to force a new deployment to run. If the deployment config is paused, then setting this to true will return an Invalid error.", - "type": "boolean", - "default": false + "dnsRecordsType": { + "description": "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", + "type": "string", + "enum": [ + "External", + "Internal" + ] }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "ingressIP": { + "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", "type": "string" }, - "latest": { - "description": "latest will update the deployment config with the latest state from all triggers.", - "type": "boolean", - "default": false - }, - "name": { - "description": "name of the deployment config for requesting a new deployment.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.apps.v1.DeploymentStrategy": { - "description": "DeploymentStrategy describes how to perform a deployment.", - "type": "object", - "properties": { - "activeDeadlineSeconds": { - "description": "activeDeadlineSeconds is the duration in seconds that the deployer pods for this deployment config may be active on a node before the system actively tries to terminate them.", - "type": "integer", - "format": "int64" - }, - "annotations": { - "description": "annotations is a set of key, value pairs added to custom deployer and lifecycle pre/post hook pods.", - "type": "object", - "additionalProperties": { + "ingressIPs": { + "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", + "type": "array", + "items": { "type": "string", "default": "" - } + }, + "x-kubernetes-list-type": "atomic" }, - "customParams": { - "description": "customParams are the input to the Custom deployment strategy, and may also be specified for the Recreate and Rolling strategies to customize the execution process that runs the deployment.", - "$ref": "#/definitions/com.github.openshift.api.apps.v1.CustomDeploymentStrategyParams" + "loadBalancer": { + "description": "loadBalancer defines how the load balancer used by the cluster is configured.", + "default": { + "type": "OpenShiftManagedDefault" + }, + "$ref": "#/definitions/com.github.openshift.api.config.v1.BareMetalPlatformLoadBalancer" }, - "labels": { - "description": "labels is a set of key, value pairs added to custom deployer and lifecycle pre/post hook pods.", - "type": "object", - "additionalProperties": { + "machineNetworks": { + "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.", + "type": "array", + "items": { "type": "string", "default": "" - } - }, - "recreateParams": { - "description": "recreateParams are the input to the Recreate deployment strategy.", - "$ref": "#/definitions/com.github.openshift.api.apps.v1.RecreateDeploymentStrategyParams" - }, - "resources": { - "description": "resources contains resource requirements to execute the deployment and any hooks.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" - }, - "rollingParams": { - "description": "rollingParams are the input to the Rolling deployment strategy.", - "$ref": "#/definitions/com.github.openshift.api.apps.v1.RollingDeploymentStrategyParams" + }, + "x-kubernetes-list-type": "atomic" }, - "type": { - "description": "type is the name of a deployment strategy.", + "nodeDNSIP": { + "description": "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for BareMetal deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.", "type": "string" + }, + "vipManagement": { + "description": "vipManagement indicates which VIP management mechanism is active on this cluster. Allowed values are `Keepalived`, `BGP`, and omitted. Once set to a non-empty value, this field is immutable. When set to `BGP`, kube-vip (Routing Table Mode) and frr-k8s are deployed as static pods to advertise VIPs via BGP, replacing the default keepalived/VRRP mechanism. When set to `Keepalived`, the default keepalived-based VIP management is used. When omitted, the default keepalived-based VIP management is used.\n\nPossible enum values:\n - `\"BGP\"` means the VIPs are advertised via BGP by kube-vip (Routing Table Mode) and frr-k8s running as static pods.\n - `\"Keepalived\"` means the VIPs are managed by the default keepalived/VRRP mechanism.", + "type": "string", + "enum": [ + "BGP", + "Keepalived" + ] } } }, - "com.github.openshift.api.apps.v1.DeploymentTriggerImageChangeParams": { - "description": "DeploymentTriggerImageChangeParams represents the parameters to the ImageChange trigger.", + "com.github.openshift.api.config.v1.BasicAuthIdentityProvider": { + "description": "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials", "type": "object", "required": [ - "from" + "url" ], "properties": { - "automatic": { - "description": "automatic means that the detection of a new tag value should result in an image update inside the pod template.", - "type": "boolean" - }, - "containerNames": { - "description": "containerNames is used to restrict tag updates to the specified set of container names in a pod. If multiple triggers point to the same containers, the resulting behavior is undefined. Future API versions will make this a validation error. If ContainerNames does not point to a valid container, the trigger will be ignored. Future API versions will make this a validation error.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "ca": { + "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" }, - "from": { - "description": "from is a reference to an image stream tag to watch for changes. From.Name is the only required subfield - if From.Namespace is blank, the namespace of the current deployment trigger will be used.", + "tlsClientCert": { + "description": "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" }, - "lastTriggeredImage": { - "description": "lastTriggeredImage is the last image to be triggered.", - "type": "string" - } - } - }, - "com.github.openshift.api.apps.v1.DeploymentTriggerPolicy": { - "description": "DeploymentTriggerPolicy describes a policy for a single trigger that results in a new deployment.", - "type": "object", - "properties": { - "imageChangeParams": { - "description": "imageChangeParams represents the parameters for the ImageChange trigger.", - "$ref": "#/definitions/com.github.openshift.api.apps.v1.DeploymentTriggerImageChangeParams" + "tlsClientKey": { + "description": "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" }, - "type": { - "description": "type of the trigger", - "type": "string" + "url": { + "description": "url is the remote URL to connect to", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.apps.v1.ExecNewPodHook": { - "description": "ExecNewPodHook is a hook implementation which runs a command in a new pod based on the specified container which is assumed to be part of the deployment template.", + "com.github.openshift.api.config.v1.Build": { + "description": "Build configures the behavior of OpenShift builds for the entire cluster. This includes default settings that can be overridden in BuildConfig objects, and overrides which are applied to all builds.\n\nThe canonical name is \"cluster\"\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "command", - "containerName" + "spec" ], "properties": { - "command": { - "description": "command is the action command and its arguments.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "containerName": { - "description": "containerName is the name of a container in the deployment pod template whose container image will be used for the hook pod's container.", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec holds user-settable values for the build controller configuration", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.BuildSpec" + } + } + }, + "com.github.openshift.api.config.v1.BuildDefaults": { + "type": "object", + "properties": { + "defaultProxy": { + "description": "defaultProxy contains the default proxy settings for all build operations, including image pull/push and source download.\n\nValues can be overrode by setting the `HTTP_PROXY`, `HTTPS_PROXY`, and `NO_PROXY` environment variables in the build config's strategy.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.ProxySpec" }, "env": { - "description": "env is a set of environment variables to supply to the hook pod's container.", + "description": "env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build", "type": "array", "items": { "default": {}, "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" } }, - "volumes": { - "description": "volumes is a list of named volumes from the pod template which should be copied to the hook pod. Volumes names not found in pod spec are ignored. An empty list means no volumes will be copied.", + "gitProxy": { + "description": "gitProxy contains the proxy settings for git operations only. If set, this will override any Proxy settings for all git commands, such as git clone.\n\nValues that are not set here will be inherited from DefaultProxy.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.ProxySpec" + }, + "imageLabels": { + "description": "imageLabels is a list of docker labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageLabel" } + }, + "resources": { + "description": "resources defines resource requirements to execute the build.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" } } }, - "com.github.openshift.api.apps.v1.LifecycleHook": { - "description": "LifecycleHook defines a specific deployment lifecycle action. Only one type of action may be specified at any time.", + "com.github.openshift.api.config.v1.BuildList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "failurePolicy" + "metadata", + "items" ], "properties": { - "execNewPod": { - "description": "execNewPod specifies the options for a lifecycle hook backed by a pod.", - "$ref": "#/definitions/com.github.openshift.api.apps.v1.ExecNewPodHook" - }, - "failurePolicy": { - "description": "failurePolicy specifies what action to take if the hook fails.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "tagImages": { - "description": "tagImages instructs the deployer to tag the current image referenced under a container onto an image stream tag.", + "items": { "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.apps.v1.TagImageHook" + "$ref": "#/definitions/com.github.openshift.api.config.v1.Build" } - } - } - }, - "com.github.openshift.api.apps.v1.RecreateDeploymentStrategyParams": { - "description": "RecreateDeploymentStrategyParams are the input to the Recreate deployment strategy.", - "type": "object", - "properties": { - "mid": { - "description": "mid is a lifecycle hook which is executed while the deployment is scaled down to zero before the first new pod is created. All LifecycleHookFailurePolicy values are supported.", - "$ref": "#/definitions/com.github.openshift.api.apps.v1.LifecycleHook" - }, - "post": { - "description": "post is a lifecycle hook which is executed after the strategy has finished all deployment logic. All LifecycleHookFailurePolicy values are supported.", - "$ref": "#/definitions/com.github.openshift.api.apps.v1.LifecycleHook" - }, - "pre": { - "description": "pre is a lifecycle hook which is executed before the strategy manipulates the deployment. All LifecycleHookFailurePolicy values are supported.", - "$ref": "#/definitions/com.github.openshift.api.apps.v1.LifecycleHook" - }, - "timeoutSeconds": { - "description": "timeoutSeconds is the time to wait for updates before giving up. If the value is nil, a default will be used.", - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.apps.v1.RollingDeploymentStrategyParams": { - "description": "RollingDeploymentStrategyParams are the input to the Rolling deployment strategy.", - "type": "object", - "properties": { - "intervalSeconds": { - "description": "intervalSeconds is the time to wait between polling deployment status after update. If the value is nil, a default will be used.", - "type": "integer", - "format": "int64" - }, - "maxSurge": { - "description": "maxSurge is the maximum number of pods that can be scheduled above the original number of pods. Value can be an absolute number (ex: 5) or a percentage of total pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding up.\n\nThis cannot be 0 if MaxUnavailable is 0. By default, 25% is used.\n\nExample: when this is set to 30%, the new RC can be scaled up by 30% immediately when the rolling update starts. Once old pods have been killed, new RC can be scaled up further, ensuring that total number of pods running at any time during the update is atmost 130% of original pods.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" - }, - "maxUnavailable": { - "description": "maxUnavailable is the maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total pods at the start of update (ex: 10%). Absolute number is calculated from percentage by rounding down.\n\nThis cannot be 0 if MaxSurge is 0. By default, 25% is used.\n\nExample: when this is set to 30%, the old RC can be scaled down by 30% immediately when the rolling update starts. Once new pods are ready, old RC can be scaled down further, followed by scaling up the new RC, ensuring that at least 70% of original number of pods are available at all times during the update.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" - }, - "post": { - "description": "post is a lifecycle hook which is executed after the strategy has finished all deployment logic. All LifecycleHookFailurePolicy values are supported.", - "$ref": "#/definitions/com.github.openshift.api.apps.v1.LifecycleHook" - }, - "pre": { - "description": "pre is a lifecycle hook which is executed before the deployment process begins. All LifecycleHookFailurePolicy values are supported.", - "$ref": "#/definitions/com.github.openshift.api.apps.v1.LifecycleHook" - }, - "timeoutSeconds": { - "description": "timeoutSeconds is the time to wait for updates before giving up. If the value is nil, a default will be used.", - "type": "integer", - "format": "int64" }, - "updatePeriodSeconds": { - "description": "updatePeriodSeconds is the time to wait between individual pod updates. If the value is nil, a default will be used.", - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.apps.v1.TagImageHook": { - "description": "TagImageHook is a request to tag the image in a particular container onto an ImageStreamTag.", - "type": "object", - "required": [ - "containerName", - "to" - ], - "properties": { - "containerName": { - "description": "containerName is the name of a container in the deployment config whose image value will be used as the source of the tag. If there is only a single container this value will be defaulted to the name of that container.", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "to": { - "description": "to is the target ImageStreamTag to set the container's image onto.", + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } } }, - "com.github.openshift.api.authorization.v1.Action": { - "description": "Action describes a request to the API server", + "com.github.openshift.api.config.v1.BuildOverrides": { "type": "object", - "required": [ - "namespace", - "verb", - "resourceAPIGroup", - "resourceAPIVersion", - "resource", - "resourceName", - "path", - "isNonResourceURL" - ], "properties": { - "content": { - "description": "content is the actual content of the request for create and update", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "isNonResourceURL": { - "description": "isNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", - "type": "boolean", - "default": false - }, - "namespace": { - "description": "namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", - "type": "string", - "default": "" - }, - "path": { - "description": "path is the path of a non resource URL", - "type": "string", - "default": "" - }, - "resource": { - "description": "resource is one of the existing resource types", - "type": "string", - "default": "" - }, - "resourceAPIGroup": { - "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", - "type": "string", - "default": "" + "forcePull": { + "description": "forcePull overrides, if set, the equivalent value in the builds, i.e. false disables force pull for all builds, true enables force pull for all builds, independently of what each build specifies itself", + "type": "boolean" }, - "resourceAPIVersion": { - "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", - "type": "string", - "default": "" + "imageLabels": { + "description": "imageLabels is a list of docker labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageLabel" + } }, - "resourceName": { - "description": "resourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", - "type": "string", - "default": "" + "nodeSelector": { + "description": "nodeSelector is a selector which must be true for the build pod to fit on a node", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } }, - "verb": { - "description": "verb is one of: get, list, watch, create, update, delete", - "type": "string", - "default": "" + "tolerations": { + "description": "tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" + } } } }, - "com.github.openshift.api.authorization.v1.ClusterRole": { - "description": "ClusterRole is a logical grouping of PolicyRules that can be referenced as a unit by ClusterRoleBindings.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.BuildSpec": { "type": "object", - "required": [ - "rules" - ], "properties": { - "aggregationRule": { - "description": "aggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.", - "$ref": "#/definitions/io.k8s.api.rbac.v1.AggregationRule" - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "additionalTrustedCA": { + "description": "additionalTrustedCA is a reference to a ConfigMap containing additional CAs that should be trusted for image pushes and pulls during builds. The namespace for this config map is openshift-config.\n\nDEPRECATED: Additional CAs for image pull and push should be set on image.config.openshift.io/cluster instead.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "buildDefaults": { + "description": "buildDefaults controls the default information for Builds", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "$ref": "#/definitions/com.github.openshift.api.config.v1.BuildDefaults" }, - "rules": { - "description": "rules holds all the PolicyRules for this ClusterRole", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.PolicyRule" - } + "buildOverrides": { + "description": "buildOverrides controls override settings for builds", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.BuildOverrides" } } }, - "com.github.openshift.api.authorization.v1.ClusterRoleBinding": { - "description": "ClusterRoleBinding references a ClusterRole, but not contain it. It can reference any ClusterRole in the same namespace or in the global namespace. It adds who information via (Users and Groups) OR Subjects and namespace information by which namespace it exists in. ClusterRoleBindings in a given namespace only have effect in that namespace (excepting the master namespace which has power in all namespaces).\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.CRIOCredentialProviderConfig": { + "description": "CRIOCredentialProviderConfig holds cluster-wide singleton resource configurations for CRI-O credential provider, the name of this instance is \"cluster\". CRI-O credential provider is a binary shipped with CRI-O that provides a way to obtain container image pull credentials from external sources. For example, it can be used to fetch mirror registry credentials from secrets resources in the cluster within the same namespace the pod will be running in. CRIOCredentialProviderConfig configuration specifies the pod image sources registries that should trigger the CRI-O credential provider execution, which will resolve the CRI-O mirror configurations and obtain the necessary credentials for pod creation. Note: Configuration changes will only take effect after the kubelet restarts, which is automatically managed by the cluster during rollout.\n\nThe resource is a singleton named \"cluster\".\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "subjects", - "roleRef" + "spec" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "groupNames": { - "description": "groupNames holds all the groups directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" @@ -1357,33 +1044,22 @@ "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "roleRef": { - "description": "roleRef can only reference the current namespace and the global namespace. If the ClusterRoleRef cannot be resolved, the Authorizer must return an error. Since Policy is a singleton, this is sufficient knowledge to locate a role.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "subjects": { - "description": "subjects hold object references to authorize with this rule. This field is ignored if UserNames or GroupNames are specified to support legacy clients and servers. Thus newer clients that do not need to support backwards compatibility should send only fully qualified Subjects and should omit the UserNames and GroupNames fields. Clients that need to support backwards compatibility can use this field to build the UserNames and GroupNames.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - } + "spec": { + "description": "spec defines the desired configuration of the CRI-O Credential Provider. This field is required and must be provided when creating the resource.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.CRIOCredentialProviderConfigSpec" }, - "userNames": { - "description": "userNames holds all the usernames directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "status": { + "description": "status represents the current state of the CRIOCredentialProviderConfig. When omitted or nil, it indicates that the status has not yet been set by the controller. The controller will populate this field with validation conditions and operational state.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.CRIOCredentialProviderConfigStatus" } } }, - "com.github.openshift.api.authorization.v1.ClusterRoleBindingList": { - "description": "ClusterRoleBindingList is a collection of ClusterRoleBindings\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.CRIOCredentialProviderConfigList": { + "description": "CRIOCredentialProviderConfigList contains a list of CRIOCredentialProviderConfig resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ + "metadata", "items" ], "properties": { @@ -1392,11 +1068,10 @@ "type": "string" }, "items": { - "description": "items is a list of ClusterRoleBindings", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.ClusterRoleBinding" + "$ref": "#/definitions/com.github.openshift.api.config.v1.CRIOCredentialProviderConfig" } }, "kind": { @@ -1410,407 +1085,239 @@ } } }, - "com.github.openshift.api.authorization.v1.ClusterRoleList": { - "description": "ClusterRoleList is a collection of ClusterRoles\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.CRIOCredentialProviderConfigSpec": { + "description": "CRIOCredentialProviderConfigSpec defines the desired configuration of the CRI-O Credential Provider.", "type": "object", - "required": [ - "items" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of ClusterRoles", + "matchImages": { + "description": "matchImages is a list of string patterns used to determine whether the CRI-O credential provider should be invoked for a given image. This list is passed to the kubelet CredentialProviderConfig, and if any pattern matches the requested image, CRI-O credential provider will be invoked to obtain credentials for pulling that image or its mirrors. Depending on the platform, the CRI-O credential provider may be installed alongside an existing platform specific provider. Conflicts between the existing platform specific provider image match configuration and this list will be handled by the following precedence rule: credentials from built-in kubelet providers (e.g., ECR, GCR, ACR) take precedence over those from the CRIOCredentialProviderConfig when both match the same image. To avoid uncertainty, it is recommended to avoid configuring your private image patterns to overlap with existing platform specific provider config(e.g., the entries from https://github.com/openshift/machine-config-operator/blob/main/templates/common/aws/files/etc-kubernetes-credential-providers-ecr-credential-provider.yaml). You can check the resource's Status conditions to see if any entries were ignored due to exact matches with known built-in provider patterns.\n\nThis field is optional, the items of the list must contain between 1 and 50 entries. The list is treated as a set, so duplicate entries are not allowed.\n\nFor more details, see: https://kubernetes.io/docs/tasks/administer-cluster/kubelet-credential-provider/ https://github.com/cri-o/crio-credential-provider#architecture\n\nEach entry in matchImages is a pattern which can optionally contain a port and a path. Each entry must be no longer than 512 characters. Wildcards ('*') are supported for full subdomain labels, such as '*.k8s.io' or 'k8s.*.io', and for top-level domains, such as 'k8s.*' (which matches 'k8s.io' or 'k8s.net'). A global wildcard '*' (matching any domain) is not allowed. Wildcards may replace an entire hostname label (e.g., *.example.com), but they cannot appear within a label (e.g., f*oo.example.com) and are not allowed in the port or path. For example, 'example.*.com' is valid, but 'exa*mple.*.com' is not. Each wildcard matches only a single domain label, so '*.io' does **not** match '*.k8s.io'.\n\nA match exists between an image and a matchImage when all of the below are true: Both contain the same number of domain parts and each part matches. The URL path of an matchImages must be a prefix of the target image URL path. If the matchImages contains a port, then the port must match in the image as well.\n\nExample values of matchImages: - 123456789.dkr.ecr.us-east-1.amazonaws.com - *.azurecr.io - gcr.io - *.*.registry.io - registry.io:8080/path", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.ClusterRole" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" } } }, - "com.github.openshift.api.authorization.v1.GroupRestriction": { - "description": "GroupRestriction matches a group either by a string match on the group name or a label selector applied to group labels.", + "com.github.openshift.api.config.v1.CRIOCredentialProviderConfigStatus": { + "description": "CRIOCredentialProviderConfigStatus defines the observed state of CRIOCredentialProviderConfig", "type": "object", - "required": [ - "groups", - "labels" - ], "properties": { - "groups": { - "description": "groups is a list of groups used to match against an individual user's groups. If the user is a member of one of the whitelisted groups, the user is allowed to be bound to a role.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "labels": { - "description": "Selectors specifies a list of label selectors over group labels.", + "conditions": { + "description": "conditions represent the latest available observations of the configuration state. When omitted, it indicates that no conditions have been reported yet. The maximum number of conditions is 16. Conditions are stored as a map keyed by condition type, ensuring uniqueness.\n\nExpected condition types include: \"Validated\": indicates whether the matchImages configuration is valid", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - } + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" } } }, - "com.github.openshift.api.authorization.v1.IsPersonalSubjectAccessReview": { - "description": "IsPersonalSubjectAccessReview is a marker for PolicyRule.AttributeRestrictions that denotes that subjectaccessreviews on self should be allowed\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.CertInfo": { + "description": "CertInfo relates a certificate with a private key", "type": "object", + "required": [ + "certFile", + "keyFile" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "certFile": { + "description": "certFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "keyFile": { + "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.authorization.v1.LocalResourceAccessReview": { - "description": "LocalResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec in a particular namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.ClientConnectionOverrides": { "type": "object", "required": [ - "namespace", - "verb", - "resourceAPIGroup", - "resourceAPIVersion", - "resource", - "resourceName", - "path", - "isNonResourceURL" + "acceptContentTypes", + "contentType", + "qps", + "burst" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "content": { - "description": "content is the actual content of the request for create and update", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "isNonResourceURL": { - "description": "isNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", - "type": "boolean", - "default": false - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "namespace": { - "description": "namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", - "type": "string", - "default": "" - }, - "path": { - "description": "path is the path of a non resource URL", - "type": "string", - "default": "" - }, - "resource": { - "description": "resource is one of the existing resource types", - "type": "string", - "default": "" - }, - "resourceAPIGroup": { - "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", + "acceptContentTypes": { + "description": "acceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the default value of 'application/json'. This field will control all connections to the server used by a particular client.", "type": "string", "default": "" }, - "resourceAPIVersion": { - "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", - "type": "string", - "default": "" + "burst": { + "description": "burst allows extra queries to accumulate when a client is exceeding its rate.", + "type": "integer", + "format": "int32", + "default": 0 }, - "resourceName": { - "description": "resourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", + "contentType": { + "description": "contentType is the content type used when sending data to the server from this client.", "type": "string", "default": "" }, - "verb": { - "description": "verb is one of: get, list, watch, create, update, delete", - "type": "string", - "default": "" + "qps": { + "description": "qps controls the number of queries per second allowed for this connection.", + "type": "number", + "format": "float", + "default": 0 } } }, - "com.github.openshift.api.authorization.v1.LocalSubjectAccessReview": { - "description": "LocalSubjectAccessReview is an object for requesting information about whether a user or group can perform an action in a particular namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.ClientCredentialConfig": { + "description": "ClientCredentialConfig configures the client credentials and token endpoint to use to get an access token via the OAuth2 client credentials grant flow.", "type": "object", "required": [ - "namespace", - "verb", - "resourceAPIGroup", - "resourceAPIVersion", - "resource", - "resourceName", - "path", - "isNonResourceURL", - "user", - "groups", - "scopes" + "clientID", + "clientSecret", + "tokenEndpoint" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "content": { - "description": "content is the actual content of the request for create and update", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "groups": { - "description": "groups is optional. Groups is the list of groups to which the User belongs.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "isNonResourceURL": { - "description": "isNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", - "type": "boolean", - "default": false - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "clientID": { + "description": "clientID is a required client identifier to use during the OAuth2 client credentials flow. clientID must be at least 1 character in length, must not exceed 256 characters in length, and must only contain printable ASCII characters.", "type": "string" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "clientSecret": { + "description": "clientSecret is a required reference to a Secret in the openshift-config namespace to be used as the client secret during the OAuth2 client credentials flow.\n\nThe key 'client-secret' is used to locate the client secret data in the Secret.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "namespace": { - "description": "namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", - "type": "string", - "default": "" - }, - "path": { - "description": "path is the path of a non resource URL", - "type": "string", - "default": "" - }, - "resource": { - "description": "resource is one of the existing resource types", - "type": "string", - "default": "" - }, - "resourceAPIGroup": { - "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", - "type": "string", - "default": "" - }, - "resourceAPIVersion": { - "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", - "type": "string", - "default": "" - }, - "resourceName": { - "description": "resourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", - "type": "string", - "default": "" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClientSecretSecretReference" }, "scopes": { - "description": "scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\". Nil for a self-SAR, means \"use the scopes on this request\". Nil for a regular SAR, means the same as empty.", + "description": "scopes is an optional list of OAuth2 scopes to request when obtaining an access token.\n\nIf not specified, the token endpoint's default scopes will be used.\n\nWhen specified, there must be at least 1 entry and must not exceed 16 entries. Each entry must be at least 1 character in length and must not exceed 256 characters in length. Each entry must only contain printable ASCII characters, excluding spaces, double quotes and backslashes. Entries must be unique.", "type": "array", "items": { "type": "string", "default": "" - } + }, + "x-kubernetes-list-type": "set" }, - "user": { - "description": "user is optional. If both User and Groups are empty, the current authenticated user is used.", - "type": "string", - "default": "" + "tls": { + "description": "tls is an optional field that allows configuring the TLS settings used to interact with the identity provider as an OAuth2 client.\n\nWhen omitted, system default TLS settings will be used for the OAuth2 client.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalSourceTLS" }, - "verb": { - "description": "verb is one of: get, list, watch, create, update, delete", - "type": "string", - "default": "" + "tokenEndpoint": { + "description": "tokenEndpoint is a required URL to query for an access token using the client credential OAuth2 flow. tokenEndpoint must be at least 1 character in length and must not exceed 2048 characters in length. tokenEndpoint must be a valid HTTPS URL. tokenEndpoint must have a host and a path. tokenEndpoint must not contain query parameters, fragments, or user information (e.g., \"user:password@host\").", + "type": "string" } } }, - "com.github.openshift.api.authorization.v1.NamedClusterRole": { - "description": "NamedClusterRole relates a name with a cluster role", + "com.github.openshift.api.config.v1.ClientSecretSecretReference": { + "description": "ClientSecretSecretReference is a reference to a Secret in the openshift-config namespace that should be used for configuring the client secret to be used when sourcing claims from external sources with the client credential authentication flow.", "type": "object", "required": [ - "name", - "role" + "name" ], "properties": { "name": { - "description": "name is the name of the cluster role", - "type": "string", - "default": "" - }, - "role": { - "description": "role is the cluster role being named", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.ClusterRole" + "description": "name is the required name of the Secret that exists in the openshift-config namespace.\n\nIt must be at least 1 character in length, must not exceed 253 characters in length, must start and end with a lowercase alphanumeric character, and must only contain lowercase alphanumeric characters, '-' or '.'.", + "type": "string" } } }, - "com.github.openshift.api.authorization.v1.NamedClusterRoleBinding": { - "description": "NamedClusterRoleBinding relates a name with a cluster role binding", + "com.github.openshift.api.config.v1.CloudControllerManagerStatus": { + "description": "CloudControllerManagerStatus holds the state of Cloud Controller Manager (a.k.a. CCM or CPI) related settings", "type": "object", - "required": [ - "name", - "roleBinding" - ], "properties": { - "name": { - "description": "name is the name of the cluster role binding", + "state": { + "description": "state determines whether or not an external Cloud Controller Manager is expected to be installed within the cluster. https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/#running-cloud-controller-manager\n\nValid values are \"External\", \"None\" and omitted. When set to \"External\", new nodes will be tainted as uninitialized when created, preventing them from running workloads until they are initialized by the cloud controller manager. When omitted or set to \"None\", new nodes will be not tainted and no extra initialization from the cloud controller manager is expected.", "type": "string", "default": "" - }, - "roleBinding": { - "description": "roleBinding is the cluster role binding being named", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.ClusterRoleBinding" } } }, - "com.github.openshift.api.authorization.v1.NamedRole": { - "description": "NamedRole relates a Role with a name", + "com.github.openshift.api.config.v1.CloudLoadBalancerConfig": { + "description": "CloudLoadBalancerConfig contains an union discriminator indicating the type of DNS solution in use within the cluster. When the DNSType is `ClusterHosted`, the cloud's Load Balancer configuration needs to be provided so that the DNS solution hosted within the cluster can be configured with those values.", "type": "object", - "required": [ - "name", - "role" - ], "properties": { - "name": { - "description": "name is the name of the role", - "type": "string", - "default": "" + "clusterHosted": { + "description": "clusterHosted holds the IP addresses of API, API-Int and Ingress Load Balancers on Cloud Platforms. The DNS solution hosted within the cluster use these IP addresses to provide resolution for API, API-Int and Ingress services.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.CloudLoadBalancerIPs" }, - "role": { - "description": "role is the role being named", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.Role" - } - } - }, - "com.github.openshift.api.authorization.v1.NamedRoleBinding": { - "description": "NamedRoleBinding relates a role binding with a name", - "type": "object", - "required": [ - "name", - "roleBinding" - ], - "properties": { - "name": { - "description": "name is the name of the role binding", + "dnsType": { + "description": "dnsType indicates the type of DNS solution in use within the cluster. Its default value of `PlatformDefault` indicates that the cluster's DNS is the default provided by the cloud platform. It can be set to `ClusterHosted` to bypass the configuration of the cloud default DNS. In this mode, the cluster needs to provide a self-hosted DNS solution for the cluster's installation to succeed. The cluster's use of the cloud's Load Balancers is unaffected by this setting. The value is immutable after it has been set at install time. Currently, there is no way for the customer to add additional DNS entries into the cluster hosted DNS. Enabling this functionality allows the user to start their own DNS solution outside the cluster after installation is complete. The customer would be responsible for configuring this custom DNS solution, and it can be run in addition to the in-cluster DNS solution.", "type": "string", - "default": "" - }, - "roleBinding": { - "description": "roleBinding is the role binding being named", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.RoleBinding" + "default": "PlatformDefault" } - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "dnsType", + "fields-to-discriminateBy": { + "clusterHosted": "ClusterHosted" + } + } + ] }, - "com.github.openshift.api.authorization.v1.PolicyRule": { - "description": "PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.", + "com.github.openshift.api.config.v1.CloudLoadBalancerIPs": { + "description": "CloudLoadBalancerIPs contains the Load Balancer IPs for the cloud's API, API-Int and Ingress Load balancers. They will be populated as soon as the respective Load Balancers have been configured. These values are utilized to configure the DNS solution hosted within the cluster.", "type": "object", - "required": [ - "verbs", - "resources" - ], "properties": { - "apiGroups": { - "description": "apiGroups is the name of the APIGroup that contains the resources. If this field is empty, then both kubernetes and origin API groups are assumed. That means that if an action is requested against one of the enumerated resources in either the kubernetes or the origin API group, the request will be allowed", + "apiIntLoadBalancerIPs": { + "description": "apiIntLoadBalancerIPs holds Load Balancer IPs for the internal API service. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Entries in the apiIntLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.", "type": "array", "items": { "type": "string", "default": "" - } + }, + "x-kubernetes-list-type": "set" }, - "attributeRestrictions": { - "description": "attributeRestrictions will vary depending on what the Authorizer/AuthorizationAttributeBuilder pair supports. If the Authorizer does not recognize how to handle the AttributeRestrictions, the Authorizer should report an error.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "nonResourceURLs": { - "description": "NonResourceURLsSlice is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path This name is intentionally different than the internal type so that the DefaultConvert works nicely and because the ordering may be different.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "resourceNames": { - "description": "resourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.", + "apiLoadBalancerIPs": { + "description": "apiLoadBalancerIPs holds Load Balancer IPs for the API service. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Could be empty for private clusters. Entries in the apiLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.", "type": "array", "items": { "type": "string", "default": "" - } + }, + "x-kubernetes-list-type": "set" }, - "resources": { - "description": "resources is a list of resources this rule applies to. ResourceAll represents all resources.", + "ingressLoadBalancerIPs": { + "description": "ingressLoadBalancerIPs holds IPs for Ingress Load Balancers. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Entries in the ingressLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.", "type": "array", "items": { "type": "string", "default": "" - } + }, + "x-kubernetes-list-type": "set" + } + } + }, + "com.github.openshift.api.config.v1.ClusterCondition": { + "description": "ClusterCondition is a union of typed cluster conditions. The 'type' property determines which of the type-specific properties are relevant. When evaluated on a cluster, the condition may match, not match, or fail to evaluate.", + "type": "object", + "required": [ + "type" + ], + "properties": { + "promql": { + "description": "promql represents a cluster condition based on PromQL.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.PromQLClusterCondition" }, - "verbs": { - "description": "verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "type": { + "description": "type represents the cluster-condition type. This defines the members and semantics of any additional properties.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.authorization.v1.ResourceAccessReview": { - "description": "ResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.ClusterImagePolicy": { + "description": "ClusterImagePolicy holds cluster-wide configuration for image signature verification\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "namespace", - "verb", - "resourceAPIGroup", - "resourceAPIVersion", - "resource", - "resourceName", - "path", - "isNonResourceURL" + "spec" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "content": { - "description": "content is the actual content of the request for create and update", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "isNonResourceURL": { - "description": "isNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", - "type": "boolean", - "default": false - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" @@ -1820,201 +1327,111 @@ "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "namespace": { - "description": "namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", - "type": "string", - "default": "" - }, - "path": { - "description": "path is the path of a non resource URL", - "type": "string", - "default": "" - }, - "resource": { - "description": "resource is one of the existing resource types", - "type": "string", - "default": "" - }, - "resourceAPIGroup": { - "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", - "type": "string", - "default": "" - }, - "resourceAPIVersion": { - "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", - "type": "string", - "default": "" - }, - "resourceName": { - "description": "resourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", - "type": "string", - "default": "" + "spec": { + "description": "spec contains the configuration for the cluster image policy.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterImagePolicySpec" }, - "verb": { - "description": "verb is one of: get, list, watch, create, update, delete", - "type": "string", - "default": "" + "status": { + "description": "status contains the observed state of the resource.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterImagePolicyStatus" } } }, - "com.github.openshift.api.authorization.v1.ResourceAccessReviewResponse": { - "description": "ResourceAccessReviewResponse describes who can perform the action\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.ClusterImagePolicyList": { + "description": "ClusterImagePolicyList is a list of ClusterImagePolicy resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "users", - "groups", - "evalutionError" + "metadata", + "items" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "evalutionError": { - "description": "EvaluationError is an indication that some error occurred during resolution, but partial results can still be returned. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. This is most common when a bound role is missing, but enough roles are still present and bound to reason about the request.", - "type": "string", - "default": "" - }, - "groups": { - "description": "GroupsSlice is the list of groups who can perform the action", + "items": { + "description": "items is a list of ClusterImagePolices", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterImagePolicy" } }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "namespace": { - "description": "namespace is the namespace used for the access review", - "type": "string" - }, - "users": { - "description": "UsersSlice is the list of users who can perform the action", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } } }, - "com.github.openshift.api.authorization.v1.Role": { - "description": "Role is a logical grouping of PolicyRules that can be referenced as a unit by RoleBindings.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.ClusterImagePolicySpec": { + "description": "CLusterImagePolicySpec is the specification of the ClusterImagePolicy custom resource.", "type": "object", "required": [ - "rules" + "scopes", + "policy" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "policy": { + "description": "policy is a required field that contains configuration to allow scopes to be verified, and defines how images not matching the verification policy will be treated.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageSigstoreVerificationPolicy" }, - "rules": { - "description": "rules holds all the PolicyRules for this Role", + "scopes": { + "description": "scopes is a required field that defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. This support no more than 256 scopes in one object. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. If a scope is configured in both the ClusterImagePolicy and the ImagePolicy, or if the scope in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy, only the policy from the ClusterImagePolicy will be applied. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.PolicyRule" - } + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" } } }, - "com.github.openshift.api.authorization.v1.RoleBinding": { - "description": "RoleBinding references a Role, but not contain it. It can reference any Role in the same namespace or in the global namespace. It adds who information via (Users and Groups) OR Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace (excepting the master namespace which has power in all namespaces).\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.ClusterImagePolicyStatus": { "type": "object", - "required": [ - "subjects", - "roleRef" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "groupNames": { - "description": "groupNames holds all the groups directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "roleRef": { - "description": "roleRef can only reference the current namespace and the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. Since Policy is a singleton, this is sufficient knowledge to locate a role.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "subjects": { - "description": "subjects hold object references to authorize with this rule. This field is ignored if UserNames or GroupNames are specified to support legacy clients and servers. Thus newer clients that do not need to support backwards compatibility should send only fully qualified Subjects and should omit the UserNames and GroupNames fields. Clients that need to support backwards compatibility can use this field to build the UserNames and GroupNames.", + "conditions": { + "description": "conditions provide details on the status of this API Resource.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - } - }, - "userNames": { - "description": "userNames holds all the usernames directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" } } }, - "com.github.openshift.api.authorization.v1.RoleBindingList": { - "description": "RoleBindingList is a collection of RoleBindings\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.ClusterNetworkEntry": { + "description": "ClusterNetworkEntry is a contiguous block of IP addresses from which pod IPs are allocated.", "type": "object", "required": [ - "items" + "cidr" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of RoleBindings", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.RoleBinding" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "cidr": { + "description": "The complete block for pod IPs.", + "type": "string", + "default": "" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "hostPrefix": { + "description": "The size (prefix) of block to allocate to each node. If this field is not used by the plugin, it can be left unset.", + "type": "integer", + "format": "int64" } } }, - "com.github.openshift.api.authorization.v1.RoleBindingRestriction": { - "description": "RoleBindingRestriction is an object that can be matched against a subject (user, group, or service account) to determine whether rolebindings on that subject are allowed in the namespace to which the RoleBindingRestriction belongs. If any one of those RoleBindingRestriction objects matches a subject, rolebindings on that subject in the namespace are allowed.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.ClusterOperator": { + "description": "ClusterOperator holds the status of a core or optional OpenShift component managed by the Cluster Version Operator (CVO). This object is used by operators to convey their state to the rest of the cluster. Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "metadata", @@ -2035,16 +1452,22 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec defines the matcher.", + "description": "spec holds configuration that could apply to any operator.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterOperatorSpec" + }, + "status": { + "description": "status holds the information about the state of an operator. It is consistent with status information across the Kubernetes ecosystem.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.RoleBindingRestrictionSpec" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterOperatorStatus" } } }, - "com.github.openshift.api.authorization.v1.RoleBindingRestrictionList": { - "description": "RoleBindingRestrictionList is a collection of RoleBindingRestriction objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.ClusterOperatorList": { + "description": "ClusterOperatorList is a list of OperatorStatus resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ + "metadata", "items" ], "properties": { @@ -2053,11 +1476,10 @@ "type": "string" }, "items": { - "description": "items is a list of RoleBindingRestriction objects.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.RoleBindingRestriction" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterOperator" } }, "kind": { @@ -2071,61 +1493,85 @@ } } }, - "com.github.openshift.api.authorization.v1.RoleBindingRestrictionSpec": { - "description": "RoleBindingRestrictionSpec defines a rolebinding restriction. Exactly one field must be non-nil.", - "type": "object", - "required": [ - "userrestriction", - "grouprestriction", - "serviceaccountrestriction" - ], - "properties": { - "grouprestriction": { - "description": "grouprestriction matches against group subjects.", - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.GroupRestriction" - }, - "serviceaccountrestriction": { - "description": "serviceaccountrestriction matches against service-account subjects.", - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.ServiceAccountRestriction" - }, - "userrestriction": { - "description": "userrestriction matches against user subjects.", - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.UserRestriction" - } - } + "com.github.openshift.api.config.v1.ClusterOperatorSpec": { + "description": "ClusterOperatorSpec is empty for now, but you could imagine holding information like \"pause\".", + "type": "object" }, - "com.github.openshift.api.authorization.v1.RoleList": { - "description": "RoleList is a collection of Roles\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.ClusterOperatorStatus": { + "description": "ClusterOperatorStatus provides information about the status of the operator.", "type": "object", - "required": [ - "items" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of Roles", + "conditions": { + "description": "conditions describes the state of the operator's managed and monitored components.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.Role" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterOperatorStatusCondition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "extension": { + "description": "extension contains any additional status information specific to the operator which owns this status object.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + }, + "relatedObjects": { + "description": "relatedObjects is a list of objects that are \"interesting\" or related to this operator. Common uses are: 1. the detailed resource driving the operator 2. operator namespaces 3. operand namespaces", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ObjectReference" + } + }, + "versions": { + "description": "versions is a slice of operator and operand version tuples. Operators which manage multiple operands will have multiple operand entries in the array. Available operators must report the version of the operator itself with the name \"operator\". An operator reports a new \"operator\" version when it has rolled out the new version to all of its operands.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.OperandVersion" + } + } + } + }, + "com.github.openshift.api.config.v1.ClusterOperatorStatusCondition": { + "description": "ClusterOperatorStatusCondition represents the state of the operator's managed and monitored components.", + "type": "object", + "required": [ + "type", + "status", + "lastTransitionTime" + ], + "properties": { + "lastTransitionTime": { + "description": "lastTransitionTime is the time of the last update to the current status property.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "message provides additional information about the current condition. This is only to be consumed by humans. It may contain Line Feed characters (U+000A), which should be rendered as new lines.", + "type": "string" + }, + "reason": { + "description": "reason is the CamelCase reason for the condition's current status.", + "type": "string" + }, + "status": { + "description": "status of the condition, one of True, False, Unknown.", + "type": "string", + "default": "" + }, + "type": { + "description": "type specifies the aspect reported by this condition.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.authorization.v1.SelfSubjectRulesReview": { - "description": "SelfSubjectRulesReview is a resource you can create to determine which actions you can perform in a namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.ClusterVersion": { + "description": "ClusterVersion is the configuration for the ClusterVersionOperator. This is where parameters related to automatic updates can be set.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "spec" @@ -2145,34232 +1591,507 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec adds information about how to conduct the check", + "description": "spec is the desired state of the cluster version - the operator will work to ensure that the desired version is applied to the cluster.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.SelfSubjectRulesReviewSpec" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterVersionSpec" }, "status": { - "description": "status is completed by the server to tell which permissions you have", + "description": "status contains information about the available updates and any in-progress updates.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.SubjectRulesReviewStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterVersionStatus" } } }, - "com.github.openshift.api.authorization.v1.SelfSubjectRulesReviewSpec": { - "description": "SelfSubjectRulesReviewSpec adds information about how to conduct the check", + "com.github.openshift.api.config.v1.ClusterVersionCapabilitiesSpec": { + "description": "ClusterVersionCapabilitiesSpec selects the managed set of optional, core cluster components.", "type": "object", - "required": [ - "scopes" - ], "properties": { - "scopes": { - "description": "scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\". Nil means \"use the scopes on this request\".", + "additionalEnabledCapabilities": { + "description": "additionalEnabledCapabilities extends the set of managed capabilities beyond the baseline defined in baselineCapabilitySet. The default is an empty set.", "type": "array", "items": { "type": "string", "default": "" - } - } - } - }, - "com.github.openshift.api.authorization.v1.ServiceAccountReference": { - "description": "ServiceAccountReference specifies a service account and namespace by their names.", - "type": "object", - "required": [ - "name", - "namespace" - ], - "properties": { - "name": { - "description": "name is the name of the service account.", - "type": "string", - "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "namespace": { - "description": "namespace is the namespace of the service account. Service accounts from inside the whitelisted namespaces are allowed to be bound to roles. If Namespace is empty, then the namespace of the RoleBindingRestriction in which the ServiceAccountReference is embedded is used.", - "type": "string", - "default": "" + "baselineCapabilitySet": { + "description": "baselineCapabilitySet selects an initial set of optional capabilities to enable, which can be extended via additionalEnabledCapabilities. If unset, the cluster will choose a default, and the default may change over time. The current default is vCurrent.", + "type": "string" } } }, - "com.github.openshift.api.authorization.v1.ServiceAccountRestriction": { - "description": "ServiceAccountRestriction matches a service account by a string match on either the service-account name or the name of the service account's namespace.", + "com.github.openshift.api.config.v1.ClusterVersionCapabilitiesStatus": { + "description": "ClusterVersionCapabilitiesStatus describes the state of optional, core cluster components.", "type": "object", - "required": [ - "serviceaccounts", - "namespaces" - ], "properties": { - "namespaces": { - "description": "namespaces specifies a list of literal namespace names.", + "enabledCapabilities": { + "description": "enabledCapabilities lists all the capabilities that are currently managed.", "type": "array", "items": { "type": "string", "default": "" - } + }, + "x-kubernetes-list-type": "atomic" }, - "serviceaccounts": { - "description": "serviceaccounts specifies a list of literal service-account names.", + "knownCapabilities": { + "description": "knownCapabilities lists all the capabilities known to the current cluster.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.ServiceAccountReference" - } + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } } }, - "com.github.openshift.api.authorization.v1.SubjectAccessReview": { - "description": "SubjectAccessReview is an object for requesting information about whether a user or group can perform an action\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.ClusterVersionList": { + "description": "ClusterVersionList is a list of ClusterVersion resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "namespace", - "verb", - "resourceAPIGroup", - "resourceAPIVersion", - "resource", - "resourceName", - "path", - "isNonResourceURL", - "user", - "groups", - "scopes" + "metadata", + "items" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "content": { - "description": "content is the actual content of the request for create and update", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "groups": { - "description": "GroupsSlice is optional. Groups is the list of groups to which the User belongs.", + "items": { "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterVersion" } }, - "isNonResourceURL": { - "description": "isNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", - "type": "boolean", - "default": false - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "namespace": { - "description": "namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", - "type": "string", - "default": "" - }, - "path": { - "description": "path is the path of a non resource URL", - "type": "string", - "default": "" - }, - "resource": { - "description": "resource is one of the existing resource types", - "type": "string", - "default": "" - }, - "resourceAPIGroup": { - "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", - "type": "string", - "default": "" - }, - "resourceAPIVersion": { - "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", - "type": "string", - "default": "" - }, - "resourceName": { - "description": "resourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", - "type": "string", - "default": "" - }, - "scopes": { - "description": "scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\". Nil for a self-SAR, means \"use the scopes on this request\". Nil for a regular SAR, means the same as empty.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "user": { - "description": "user is optional. If both User and Groups are empty, the current authenticated user is used.", - "type": "string", - "default": "" - }, - "verb": { - "description": "verb is one of: get, list, watch, create, update, delete", - "type": "string", - "default": "" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } } }, - "com.github.openshift.api.authorization.v1.SubjectAccessReviewResponse": { - "description": "SubjectAccessReviewResponse describes whether or not a user or group can perform an action\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.ClusterVersionSpec": { + "description": "ClusterVersionSpec is the desired version state of the cluster. It includes the version the cluster should be at, how the cluster is identified, and where the cluster should look for version updates.", "type": "object", "required": [ - "allowed" + "clusterID" ], "properties": { - "allowed": { - "description": "allowed is required. True if the action would be allowed, false otherwise.", - "type": "boolean", - "default": false + "capabilities": { + "description": "capabilities configures the installation of optional, core cluster components. A null value here is identical to an empty object; see the child properties for default semantics.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterVersionCapabilitiesSpec" }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "channel": { + "description": "channel is an identifier for explicitly requesting a non-default set of updates to be applied to this cluster. The default channel will contain stable updates that are appropriate for production clusters.", "type": "string" }, - "evaluationError": { - "description": "evaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. This is most common when a bound role is missing, but enough roles are still present and bound to reason about the request.", - "type": "string" + "clusterID": { + "description": "clusterID uniquely identifies this cluster. This is expected to be an RFC4122 UUID value (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx in hexadecimal values). This is a required field.", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "desiredUpdate": { + "description": "desiredUpdate is an optional field that indicates the desired value of the cluster version. Setting this value will trigger an upgrade (if the current version does not match the desired version). The set of recommended update values is listed as part of available updates in status, and setting values outside that range may cause the upgrade to fail.\n\nSome of the fields are inter-related with restrictions and meanings described here. 1. image is specified, version is specified, architecture is specified. API validation error. 2. image is specified, version is specified, architecture is not specified. The version extracted from the referenced image must match the specified version. 3. image is specified, version is not specified, architecture is specified. API validation error. 4. image is specified, version is not specified, architecture is not specified. image is used. 5. image is not specified, version is specified, architecture is specified. version and desired architecture are used to select an image. 6. image is not specified, version is specified, architecture is not specified. version and current architecture are used to select an image. 7. image is not specified, version is not specified, architecture is specified. API validation error. 8. image is not specified, version is not specified, architecture is not specified. API validation error.\n\nIf an upgrade fails the operator will halt and report status about the failing component. Setting the desired update value back to the previous version will cause a rollback to be attempted if the previous version is within the current minor version. Not all rollbacks will succeed, and some may unrecoverably break the cluster.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.Update" }, - "namespace": { - "description": "namespace is the namespace used for the access review", - "type": "string" + "overrides": { + "description": "overrides is list of overides for components that are managed by cluster version operator. Marking a component unmanaged will prevent the operator from creating or updating the object.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ComponentOverride" + }, + "x-kubernetes-list-map-keys": [ + "kind", + "group", + "namespace", + "name" + ], + "x-kubernetes-list-type": "map" }, - "reason": { - "description": "reason is optional. It indicates why a request was allowed or denied.", + "signatureStores": { + "description": "signatureStores contains the upstream URIs to verify release signatures and optional reference to a config map by name containing the PEM-encoded CA bundle.\n\nBy default, CVO will use existing signature stores if this property is empty. The CVO will check the release signatures in the local ConfigMaps first. It will search for a valid signature in these stores in parallel only when local ConfigMaps did not include a valid signature. Validation will fail if none of the signature stores reply with valid signature before timeout. Setting signatureStores will replace the default signature stores with custom signature stores. Default stores can be used with custom signature stores by adding them manually.\n\nA maximum of 32 signature stores may be configured.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.SignatureStore" + }, + "x-kubernetes-list-map-keys": [ + "url" + ], + "x-kubernetes-list-type": "map" + }, + "upstream": { + "description": "upstream may be used to specify the preferred update server. By default it will use the appropriate update server for the cluster and region.", "type": "string" } } }, - "com.github.openshift.api.authorization.v1.SubjectRulesReview": { - "description": "SubjectRulesReview is a resource you can create to determine which actions another user can perform in a namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.ClusterVersionStatus": { + "description": "ClusterVersionStatus reports the status of the cluster versioning, including any upgrades that are in progress. The current field will be set to whichever version the cluster is reconciling to, and the conditions array will report whether the update succeeded, is in progress, or is failing.", "type": "object", "required": [ - "spec" + "desired", + "observedGeneration", + "versionHash", + "availableUpdates" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "availableUpdates": { + "description": "availableUpdates contains updates recommended for this cluster. Updates which appear in conditionalUpdates but not in availableUpdates may expose this cluster to known issues. This list may be empty if no updates are recommended, if the update service is unavailable, or if an invalid channel has been specified.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.Release" + }, + "x-kubernetes-list-type": "atomic" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec adds information about how to conduct the check", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.SubjectRulesReviewSpec" - }, - "status": { - "description": "status is completed by the server to tell which permissions you have", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.SubjectRulesReviewStatus" - } - } - }, - "com.github.openshift.api.authorization.v1.SubjectRulesReviewSpec": { - "description": "SubjectRulesReviewSpec adds information about how to conduct the check", - "type": "object", - "required": [ - "user", - "groups", - "scopes" - ], - "properties": { - "groups": { - "description": "groups is optional. Groups is the list of groups to which the User belongs. At least one of User and Groups must be specified.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "scopes": { - "description": "scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\".", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "user": { - "description": "user is optional. At least one of User and Groups must be specified.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.authorization.v1.SubjectRulesReviewStatus": { - "description": "SubjectRulesReviewStatus is contains the result of a rules check", - "type": "object", - "properties": { - "evaluationError": { - "description": "evaluationError can appear in combination with Rules. It means some error happened during evaluation that may have prevented additional rules from being populated.", - "type": "string" - }, - "rules": { - "description": "rules is the list of rules (no particular sort) that are allowed for the subject", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.authorization.v1.PolicyRule" - } - } - } - }, - "com.github.openshift.api.authorization.v1.UserRestriction": { - "description": "UserRestriction matches a user either by a string match on the user name, a string match on the name of a group to which the user belongs, or a label selector applied to the user labels.", - "type": "object", - "required": [ - "users", - "groups", - "labels" - ], - "properties": { - "groups": { - "description": "groups specifies a list of literal group names.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "labels": { - "description": "Selectors specifies a list of label selectors over user labels.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - } - }, - "users": { - "description": "users specifies a list of literal user names.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.build.v1.BinaryBuildRequestOptions": { - "description": "BinaryBuildRequestOptions are the options required to fully speficy a binary build request\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "asFile": { - "description": "asFile determines if the binary should be created as a file within the source rather than extracted as an archive", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "revision.authorEmail": { - "description": "revision.authorEmail of the source control user", - "type": "string" - }, - "revision.authorName": { - "description": "revision.authorName of the source control user", - "type": "string" - }, - "revision.commit": { - "description": "revision.commit is the value identifying a specific commit", - "type": "string" - }, - "revision.committerEmail": { - "description": "revision.committerEmail of the source control user", - "type": "string" - }, - "revision.committerName": { - "description": "revision.committerName of the source control user", - "type": "string" - }, - "revision.message": { - "description": "revision.message is the description of a specific commit", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.BinaryBuildSource": { - "description": "BinaryBuildSource describes a binary file to be used for the Docker and Source build strategies, where the file will be extracted and used as the build source.", - "type": "object", - "properties": { - "asFile": { - "description": "asFile indicates that the provided binary input should be considered a single file within the build input. For example, specifying \"webapp.war\" would place the provided binary as `/webapp.war` for the builder. If left empty, the Docker and Source build strategies assume this file is a zip, tar, or tar.gz file and extract it as the source. The custom strategy receives this binary as standard input. This filename may not contain slashes or be '..' or '.'.", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.BitbucketWebHookCause": { - "description": "BitbucketWebHookCause has information about a Bitbucket webhook that triggered a build.", - "type": "object", - "properties": { - "revision": { - "description": "revision is the git source revision information of the trigger.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.SourceRevision" - }, - "secret": { - "description": "secret is the obfuscated webhook secret that triggered a build.", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.Build": { - "description": "Build encapsulates the inputs needed to produce a new deployable image, as well as the status of the execution and a reference to the Pod which executed the build.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is all the inputs used to execute the build.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildSpec" - }, - "status": { - "description": "status is the current status of the build.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildStatus" - } - } - }, - "com.github.openshift.api.build.v1.BuildCondition": { - "description": "BuildCondition describes the state of a build at a certain point.", - "type": "object", - "required": [ - "type", - "status" - ], - "properties": { - "lastTransitionTime": { - "description": "The last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "lastUpdateTime": { - "description": "The last time this condition was updated.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "A human readable message indicating details about the transition.", - "type": "string" - }, - "reason": { - "description": "The reason for the condition's last transition.", - "type": "string" - }, - "status": { - "description": "status of the condition, one of True, False, Unknown.", - "type": "string", - "default": "" - }, - "type": { - "description": "type of build condition.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.build.v1.BuildConfig": { - "description": "Build configurations define a build process for new container images. There are three types of builds possible - a container image build using a Dockerfile, a Source-to-Image build that uses a specially prepared base image that accepts source code that it can make runnable, and a custom build that can run // arbitrary container images as a base and accept the build parameters. Builds run on the cluster and on completion are pushed to the container image registry specified in the \"output\" section. A build can be triggered via a webhook, when the base image changes, or when a user manually requests a new build be // created.\n\nEach build created by a build configuration is numbered and refers back to its parent configuration. Multiple builds can be triggered at once. Builds that do not have \"output\" set can be used to test code or run a verification build.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds all the input necessary to produce a new build, and the conditions when to trigger them.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildConfigSpec" - }, - "status": { - "description": "status holds any relevant information about a build config", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildConfigStatus" - } - } - }, - "com.github.openshift.api.build.v1.BuildConfigList": { - "description": "BuildConfigList is a collection of BuildConfigs.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of build configs", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildConfig" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.build.v1.BuildConfigSpec": { - "description": "BuildConfigSpec describes when and how builds are created", - "type": "object", - "required": [ - "strategy" - ], - "properties": { - "completionDeadlineSeconds": { - "description": "completionDeadlineSeconds is an optional duration in seconds, counted from the time when a build pod gets scheduled in the system, that the build may be active on a node before the system actively tries to terminate the build; value must be positive integer", - "type": "integer", - "format": "int64" - }, - "failedBuildsHistoryLimit": { - "description": "failedBuildsHistoryLimit is the number of old failed builds to retain. When a BuildConfig is created, the 5 most recent failed builds are retained unless this value is set. If removed after the BuildConfig has been created, all failed builds are retained.", - "type": "integer", - "format": "int32" - }, - "mountTrustedCA": { - "description": "mountTrustedCA bind mounts the cluster's trusted certificate authorities, as defined in the cluster's proxy configuration, into the build. This lets processes within a build trust components signed by custom PKI certificate authorities, such as private artifact repositories and HTTPS proxies.\n\nWhen this field is set to true, the contents of `/etc/pki/ca-trust` within the build are managed by the build container, and any changes to this directory or its subdirectories (for example - within a Dockerfile `RUN` instruction) are not persisted in the build's output image.", - "type": "boolean" - }, - "nodeSelector": { - "description": "nodeSelector is a selector which must be true for the build pod to fit on a node If nil, it can be overridden by default build nodeselector values for the cluster. If set to an empty map or a map with any values, default build nodeselector values are ignored.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "output": { - "description": "output describes the container image the Strategy should produce.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildOutput" - }, - "postCommit": { - "description": "postCommit is a build hook executed after the build output image is committed, before it is pushed to a registry.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildPostCommitSpec" - }, - "resources": { - "description": "resources computes resource requirements to execute the build.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" - }, - "revision": { - "description": "revision is the information from the source for a specific repo snapshot. This is optional.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.SourceRevision" - }, - "runPolicy": { - "description": "runPolicy describes how the new build created from this build configuration will be scheduled for execution. This is optional, if not specified we default to \"Serial\".", - "type": "string" - }, - "serviceAccount": { - "description": "serviceAccount is the name of the ServiceAccount to use to run the pod created by this build. The pod will be allowed to use secrets referenced by the ServiceAccount", - "type": "string" - }, - "source": { - "description": "source describes the SCM in use.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildSource" - }, - "strategy": { - "description": "strategy defines how to perform a build.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildStrategy" - }, - "successfulBuildsHistoryLimit": { - "description": "successfulBuildsHistoryLimit is the number of old successful builds to retain. When a BuildConfig is created, the 5 most recent successful builds are retained unless this value is set. If removed after the BuildConfig has been created, all successful builds are retained.", - "type": "integer", - "format": "int32" - }, - "triggers": { - "description": "triggers determine how new Builds can be launched from a BuildConfig. If no triggers are defined, a new build can only occur as a result of an explicit client build creation.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildTriggerPolicy" - } - } - } - }, - "com.github.openshift.api.build.v1.BuildConfigStatus": { - "description": "BuildConfigStatus contains current state of the build config object.", - "type": "object", - "properties": { - "imageChangeTriggers": { - "description": "imageChangeTriggers captures the runtime state of any ImageChangeTrigger specified in the BuildConfigSpec, including the value reconciled by the OpenShift APIServer for the lastTriggeredImageID. There is a single entry in this array for each image change trigger in spec. Each trigger status references the ImageStreamTag that acts as the source of the trigger.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.ImageChangeTriggerStatus" - } - }, - "lastVersion": { - "description": "lastVersion is used to inform about number of last triggered build.", - "type": "integer", - "format": "int64", - "default": 0 - } - } - }, - "com.github.openshift.api.build.v1.BuildList": { - "description": "BuildList is a collection of Builds.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of builds", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.Build" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.build.v1.BuildLog": { - "description": "BuildLog is the (unused) resource associated with the build log redirector\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.BuildLogOptions": { - "description": "BuildLogOptions is the REST options for a build log\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "container": { - "description": "cointainer for which to stream logs. Defaults to only container if there is one container in the pod.", - "type": "string" - }, - "follow": { - "description": "follow if true indicates that the build log should be streamed until the build terminates.", - "type": "boolean" - }, - "insecureSkipTLSVerifyBackend": { - "description": "insecureSkipTLSVerifyBackend indicates that the apiserver should not confirm the validity of the serving certificate of the backend it is connecting to. This will make the HTTPS connection between the apiserver and the backend insecure. This means the apiserver cannot verify the log data it is receiving came from the real kubelet. If the kubelet is configured to verify the apiserver's TLS credentials, it does not mean the connection to the real kubelet is vulnerable to a man in the middle attack (e.g. an attacker could not intercept the actual log data coming from the real kubelet).", - "type": "boolean" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "limitBytes": { - "description": "limitBytes, If set, is the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.", - "type": "integer", - "format": "int64" - }, - "nowait": { - "description": "nowait if true causes the call to return immediately even if the build is not available yet. Otherwise the server will wait until the build has started.", - "type": "boolean" - }, - "previous": { - "description": "previous returns previous build logs. Defaults to false.", - "type": "boolean" - }, - "sinceSeconds": { - "description": "sinceSeconds is a relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", - "type": "integer", - "format": "int64" - }, - "sinceTime": { - "description": "sinceTime is an RFC3339 timestamp from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "tailLines": { - "description": "tailLines, If set, is the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime", - "type": "integer", - "format": "int64" - }, - "timestamps": { - "description": "timestamps, If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.", - "type": "boolean" - }, - "version": { - "description": "version of the build for which to view logs.", - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.build.v1.BuildOutput": { - "description": "BuildOutput is input to a build strategy and describes the container image that the strategy should produce.", - "type": "object", - "properties": { - "imageLabels": { - "description": "imageLabels define a list of labels that are applied to the resulting image. If there are multiple labels with the same name then the last one in the list is used.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.ImageLabel" - } - }, - "pushSecret": { - "description": "pushSecret is the name of a Secret that would be used for setting up the authentication for executing the Docker push to authentication enabled Docker Registry (or Docker Hub).", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "to": { - "description": "to defines an optional location to push the output of this build to. Kind must be one of 'ImageStreamTag' or 'DockerImage'. This value will be used to look up a container image repository to push to. In the case of an ImageStreamTag, the ImageStreamTag will be looked for in the namespace of the build unless Namespace is specified.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - } - } - }, - "com.github.openshift.api.build.v1.BuildPostCommitSpec": { - "description": "A BuildPostCommitSpec holds a build post commit hook specification. The hook executes a command in a temporary container running the build output image, immediately after the last layer of the image is committed and before the image is pushed to a registry. The command is executed with the current working directory ($PWD) set to the image's WORKDIR.\n\nThe build will be marked as failed if the hook execution fails. It will fail if the script or command return a non-zero exit code, or if there is any other error related to starting the temporary container.\n\nThere are five different ways to configure the hook. As an example, all forms below are equivalent and will execute `rake test --verbose`.\n\n1. Shell script:\n\n\t \"postCommit\": {\n\t \"script\": \"rake test --verbose\",\n\t }\n\n\tThe above is a convenient form which is equivalent to:\n\n\t \"postCommit\": {\n\t \"command\": [\"/bin/sh\", \"-ic\"],\n\t \"args\": [\"rake test --verbose\"]\n\t }\n\n2. A command as the image entrypoint:\n\n\t \"postCommit\": {\n\t \"commit\": [\"rake\", \"test\", \"--verbose\"]\n\t }\n\n\tCommand overrides the image entrypoint in the exec form, as documented in\n\tDocker: https://docs.docker.com/engine/reference/builder/#entrypoint.\n\n3. Pass arguments to the default entrypoint:\n\n\t \"postCommit\": {\n\t\t\t \"args\": [\"rake\", \"test\", \"--verbose\"]\n\t\t }\n\n\t This form is only useful if the image entrypoint can handle arguments.\n\n4. Shell script with arguments:\n\n\t \"postCommit\": {\n\t \"script\": \"rake test $1\",\n\t \"args\": [\"--verbose\"]\n\t }\n\n\tThis form is useful if you need to pass arguments that would otherwise be\n\thard to quote properly in the shell script. In the script, $0 will be\n\t\"/bin/sh\" and $1, $2, etc, are the positional arguments from Args.\n\n5. Command with arguments:\n\n\t \"postCommit\": {\n\t \"command\": [\"rake\", \"test\"],\n\t \"args\": [\"--verbose\"]\n\t }\n\n\tThis form is equivalent to appending the arguments to the Command slice.\n\nIt is invalid to provide both Script and Command simultaneously. If none of the fields are specified, the hook is not executed.", - "type": "object", - "properties": { - "args": { - "description": "args is a list of arguments that are provided to either Command, Script or the container image's default entrypoint. The arguments are placed immediately after the command to be run.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "command": { - "description": "command is the command to run. It may not be specified with Script. This might be needed if the image doesn't have `/bin/sh`, or if you do not want to use a shell. In all other cases, using Script might be more convenient.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "script": { - "description": "script is a shell script to be run with `/bin/sh -ic`. It may not be specified with Command. Use Script when a shell script is appropriate to execute the post build hook, for example for running unit tests with `rake test`. If you need control over the image entrypoint, or if the image does not have `/bin/sh`, use Command and/or Args. The `-i` flag is needed to support CentOS and RHEL images that use Software Collections (SCL), in order to have the appropriate collections enabled in the shell. E.g., in the Ruby image, this is necessary to make `ruby`, `bundle` and other binaries available in the PATH.", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.BuildRequest": { - "description": "BuildRequest is the resource used to pass parameters to build generator\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "binary": { - "description": "binary indicates a request to build from a binary provided to the builder", - "$ref": "#/definitions/com.github.openshift.api.build.v1.BinaryBuildSource" - }, - "dockerStrategyOptions": { - "description": "dockerStrategyOptions contains additional docker-strategy specific options for the build", - "$ref": "#/definitions/com.github.openshift.api.build.v1.DockerStrategyOptions" - }, - "env": { - "description": "env contains additional environment variables you want to pass into a builder container.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } - }, - "from": { - "description": "from is the reference to the ImageStreamTag that triggered the build.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "lastVersion": { - "description": "lastVersion (optional) is the LastVersion of the BuildConfig that was used to generate the build. If the BuildConfig in the generator doesn't match, a build will not be generated.", - "type": "integer", - "format": "int64" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "revision": { - "description": "revision is the information from the source for a specific repo snapshot.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.SourceRevision" - }, - "sourceStrategyOptions": { - "description": "sourceStrategyOptions contains additional source-strategy specific options for the build", - "$ref": "#/definitions/com.github.openshift.api.build.v1.SourceStrategyOptions" - }, - "triggeredBy": { - "description": "triggeredBy describes which triggers started the most recent update to the build configuration and contains information about those triggers.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildTriggerCause" - } - }, - "triggeredByImage": { - "description": "triggeredByImage is the Image that triggered this build.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - } - } - }, - "com.github.openshift.api.build.v1.BuildSource": { - "description": "BuildSource is the SCM used for the build.", - "type": "object", - "properties": { - "binary": { - "description": "binary builds accept a binary as their input. The binary is generally assumed to be a tar, gzipped tar, or zip file depending on the strategy. For container image builds, this is the build context and an optional Dockerfile may be specified to override any Dockerfile in the build context. For Source builds, this is assumed to be an archive as described above. For Source and container image builds, if binary.asFile is set the build will receive a directory with a single file. contextDir may be used when an archive is provided. Custom builds will receive this binary as input on STDIN.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.BinaryBuildSource" - }, - "configMaps": { - "description": "configMaps represents a list of configMaps and their destinations that will be used for the build.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.ConfigMapBuildSource" - } - }, - "contextDir": { - "description": "contextDir specifies the sub-directory where the source code for the application exists. This allows to have buildable sources in directory other than root of repository.", - "type": "string" - }, - "dockerfile": { - "description": "dockerfile is the raw contents of a Dockerfile which should be built. When this option is specified, the FROM may be modified based on your strategy base image and additional ENV stanzas from your strategy environment will be added after the FROM, but before the rest of your Dockerfile stanzas. The Dockerfile source type may be used with other options like git - in those cases the Git repo will have any innate Dockerfile replaced in the context dir.", - "type": "string" - }, - "git": { - "description": "git contains optional information about git build source", - "$ref": "#/definitions/com.github.openshift.api.build.v1.GitBuildSource" - }, - "images": { - "description": "images describes a set of images to be used to provide source for the build", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.ImageSource" - } - }, - "secrets": { - "description": "secrets represents a list of secrets and their destinations that will be used only for the build.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.SecretBuildSource" - } - }, - "sourceSecret": { - "description": "sourceSecret is the name of a Secret that would be used for setting up the authentication for cloning private repository. The secret contains valid credentials for remote repository, where the data's key represent the authentication method to be used and value is the base64 encoded credentials. Supported auth methods are: ssh-privatekey.", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "type": { - "description": "type of build input to accept", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.BuildSpec": { - "description": "BuildSpec has the information to represent a build and also additional information about a build", - "type": "object", - "required": [ - "strategy" - ], - "properties": { - "completionDeadlineSeconds": { - "description": "completionDeadlineSeconds is an optional duration in seconds, counted from the time when a build pod gets scheduled in the system, that the build may be active on a node before the system actively tries to terminate the build; value must be positive integer", - "type": "integer", - "format": "int64" - }, - "mountTrustedCA": { - "description": "mountTrustedCA bind mounts the cluster's trusted certificate authorities, as defined in the cluster's proxy configuration, into the build. This lets processes within a build trust components signed by custom PKI certificate authorities, such as private artifact repositories and HTTPS proxies.\n\nWhen this field is set to true, the contents of `/etc/pki/ca-trust` within the build are managed by the build container, and any changes to this directory or its subdirectories (for example - within a Dockerfile `RUN` instruction) are not persisted in the build's output image.", - "type": "boolean" - }, - "nodeSelector": { - "description": "nodeSelector is a selector which must be true for the build pod to fit on a node If nil, it can be overridden by default build nodeselector values for the cluster. If set to an empty map or a map with any values, default build nodeselector values are ignored.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "output": { - "description": "output describes the container image the Strategy should produce.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildOutput" - }, - "postCommit": { - "description": "postCommit is a build hook executed after the build output image is committed, before it is pushed to a registry.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildPostCommitSpec" - }, - "resources": { - "description": "resources computes resource requirements to execute the build.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" - }, - "revision": { - "description": "revision is the information from the source for a specific repo snapshot. This is optional.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.SourceRevision" - }, - "serviceAccount": { - "description": "serviceAccount is the name of the ServiceAccount to use to run the pod created by this build. The pod will be allowed to use secrets referenced by the ServiceAccount", - "type": "string" - }, - "source": { - "description": "source describes the SCM in use.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildSource" - }, - "strategy": { - "description": "strategy defines how to perform a build.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildStrategy" - }, - "triggeredBy": { - "description": "triggeredBy describes which triggers started the most recent update to the build configuration and contains information about those triggers.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildTriggerCause" - } - } - } - }, - "com.github.openshift.api.build.v1.BuildStatus": { - "description": "BuildStatus contains the status of a build", - "type": "object", - "properties": { - "cancelled": { - "description": "cancelled describes if a cancel event was triggered for the build.", - "type": "boolean" - }, - "completionTimestamp": { - "description": "completionTimestamp is a timestamp representing the server time when this Build was finished, whether that build failed or succeeded. It reflects the time at which the Pod running the Build terminated. It is represented in RFC3339 form and is in UTC.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "conditions": { - "description": "conditions represents the latest available observations of a build's current state.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildCondition" - }, - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "config": { - "description": "config is an ObjectReference to the BuildConfig this Build is based on.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "duration": { - "description": "duration contains time.Duration object describing build time.", - "type": "integer", - "format": "int64" - }, - "logSnippet": { - "description": "logSnippet is the last few lines of the build log. This value is only set for builds that failed.", - "type": "string" - }, - "message": { - "description": "message is a human-readable message indicating details about why the build has this status.", - "type": "string" - }, - "output": { - "description": "output describes the container image the build has produced.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildStatusOutput" - }, - "outputDockerImageReference": { - "description": "outputDockerImageReference contains a reference to the container image that will be built by this build. Its value is computed from Build.Spec.Output.To, and should include the registry address, so that it can be used to push and pull the image.", - "type": "string" - }, - "phase": { - "description": "phase is the point in the build lifecycle. Possible values are \"New\", \"Pending\", \"Running\", \"Complete\", \"Failed\", \"Error\", and \"Cancelled\".", - "type": "string", - "default": "" - }, - "reason": { - "description": "reason is a brief CamelCase string that describes any failure and is meant for machine parsing and tidy display in the CLI.", - "type": "string" - }, - "stages": { - "description": "stages contains details about each stage that occurs during the build including start time, duration (in milliseconds), and the steps that occured within each stage.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.StageInfo" - } - }, - "startTimestamp": { - "description": "startTimestamp is a timestamp representing the server time when this Build started running in a Pod. It is represented in RFC3339 form and is in UTC.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - } - } - }, - "com.github.openshift.api.build.v1.BuildStatusOutput": { - "description": "BuildStatusOutput contains the status of the built image.", - "type": "object", - "properties": { - "to": { - "description": "to describes the status of the built image being pushed to a registry.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildStatusOutputTo" - } - } - }, - "com.github.openshift.api.build.v1.BuildStatusOutputTo": { - "description": "BuildStatusOutputTo describes the status of the built image with regards to image registry to which it was supposed to be pushed.", - "type": "object", - "properties": { - "imageDigest": { - "description": "imageDigest is the digest of the built container image. The digest uniquely identifies the image in the registry to which it was pushed.\n\nPlease note that this field may not always be set even if the push completes successfully - e.g. when the registry returns no digest or returns it in a format that the builder doesn't understand.", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.BuildStrategy": { - "description": "BuildStrategy contains the details of how to perform a build.", - "type": "object", - "properties": { - "customStrategy": { - "description": "customStrategy holds the parameters to the Custom build strategy", - "$ref": "#/definitions/com.github.openshift.api.build.v1.CustomBuildStrategy" - }, - "dockerStrategy": { - "description": "dockerStrategy holds the parameters to the container image build strategy.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.DockerBuildStrategy" - }, - "jenkinsPipelineStrategy": { - "description": "jenkinsPipelineStrategy holds the parameters to the Jenkins Pipeline build strategy. Deprecated: use OpenShift Pipelines", - "$ref": "#/definitions/com.github.openshift.api.build.v1.JenkinsPipelineBuildStrategy" - }, - "sourceStrategy": { - "description": "sourceStrategy holds the parameters to the Source build strategy.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.SourceBuildStrategy" - }, - "type": { - "description": "type is the kind of build strategy.", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.BuildTriggerCause": { - "description": "BuildTriggerCause holds information about a triggered build. It is used for displaying build trigger data for each build and build configuration in oc describe. It is also used to describe which triggers led to the most recent update in the build configuration.", - "type": "object", - "properties": { - "bitbucketWebHook": { - "description": "bitbucketWebHook represents data for a Bitbucket webhook that fired a specific build.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.BitbucketWebHookCause" - }, - "genericWebHook": { - "description": "genericWebHook holds data about a builds generic webhook trigger.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.GenericWebHookCause" - }, - "githubWebHook": { - "description": "githubWebHook represents data for a GitHub webhook that fired a specific build.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.GitHubWebHookCause" - }, - "gitlabWebHook": { - "description": "gitlabWebHook represents data for a GitLab webhook that fired a specific build.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.GitLabWebHookCause" - }, - "imageChangeBuild": { - "description": "imageChangeBuild stores information about an imagechange event that triggered a new build.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.ImageChangeCause" - }, - "message": { - "description": "message is used to store a human readable message for why the build was triggered. E.g.: \"Manually triggered by user\", \"Configuration change\",etc.", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.BuildTriggerPolicy": { - "description": "BuildTriggerPolicy describes a policy for a single trigger that results in a new Build.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "bitbucket": { - "description": "BitbucketWebHook contains the parameters for a Bitbucket webhook type of trigger", - "$ref": "#/definitions/com.github.openshift.api.build.v1.WebHookTrigger" - }, - "generic": { - "description": "generic contains the parameters for a Generic webhook type of trigger", - "$ref": "#/definitions/com.github.openshift.api.build.v1.WebHookTrigger" - }, - "github": { - "description": "github contains the parameters for a GitHub webhook type of trigger", - "$ref": "#/definitions/com.github.openshift.api.build.v1.WebHookTrigger" - }, - "gitlab": { - "description": "GitLabWebHook contains the parameters for a GitLab webhook type of trigger", - "$ref": "#/definitions/com.github.openshift.api.build.v1.WebHookTrigger" - }, - "imageChange": { - "description": "imageChange contains parameters for an ImageChange type of trigger", - "$ref": "#/definitions/com.github.openshift.api.build.v1.ImageChangeTrigger" - }, - "type": { - "description": "type is the type of build trigger. Valid values:\n\n- GitHub GitHubWebHookBuildTriggerType represents a trigger that launches builds on GitHub webhook invocations\n\n- Generic GenericWebHookBuildTriggerType represents a trigger that launches builds on generic webhook invocations\n\n- GitLab GitLabWebHookBuildTriggerType represents a trigger that launches builds on GitLab webhook invocations\n\n- Bitbucket BitbucketWebHookBuildTriggerType represents a trigger that launches builds on Bitbucket webhook invocations\n\n- ImageChange ImageChangeBuildTriggerType represents a trigger that launches builds on availability of a new version of an image\n\n- ConfigChange ConfigChangeBuildTriggerType will trigger a build on an initial build config creation WARNING: In the future the behavior will change to trigger a build on any config change", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.build.v1.BuildVolume": { - "description": "BuildVolume describes a volume that is made available to build pods, such that it can be mounted into buildah's runtime environment. Only a subset of Kubernetes Volume sources are supported.", - "type": "object", - "required": [ - "name", - "source", - "mounts" - ], - "properties": { - "mounts": { - "description": "mounts represents the location of the volume in the image build container", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildVolumeMount" - }, - "x-kubernetes-list-map-keys": [ - "destinationPath" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "destinationPath", - "x-kubernetes-patch-strategy": "merge" - }, - "name": { - "description": "name is a unique identifier for this BuildVolume. It must conform to the Kubernetes DNS label standard and be unique within the pod. Names that collide with those added by the build controller will result in a failed build with an error message detailing which name caused the error. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - "type": "string", - "default": "" - }, - "source": { - "description": "source represents the location and type of the mounted volume.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildVolumeSource" - } - } - }, - "com.github.openshift.api.build.v1.BuildVolumeMount": { - "description": "BuildVolumeMount describes the mounting of a Volume within buildah's runtime environment.", - "type": "object", - "required": [ - "destinationPath" - ], - "properties": { - "destinationPath": { - "description": "destinationPath is the path within the buildah runtime environment at which the volume should be mounted. The transient mount within the build image and the backing volume will both be mounted read only. Must be an absolute path, must not contain '..' or ':', and must not collide with a destination path generated by the builder process Paths that collide with those added by the build controller will result in a failed build with an error message detailing which path caused the error.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.build.v1.BuildVolumeSource": { - "description": "BuildVolumeSource represents the source of a volume to mount Only one of its supported types may be specified at any given time.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "configMap": { - "description": "configMap represents a ConfigMap that should populate this volume", - "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapVolumeSource" - }, - "csi": { - "description": "csi represents ephemeral storage provided by external CSI drivers which support this capability", - "$ref": "#/definitions/io.k8s.api.core.v1.CSIVolumeSource" - }, - "secret": { - "description": "secret represents a Secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretVolumeSource" - }, - "type": { - "description": "type is the BuildVolumeSourceType for the volume source. Type must match the populated volume source. Valid types are: Secret, ConfigMap", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.build.v1.CommonSpec": { - "description": "CommonSpec encapsulates all the inputs necessary to represent a build.", - "type": "object", - "required": [ - "strategy" - ], - "properties": { - "completionDeadlineSeconds": { - "description": "completionDeadlineSeconds is an optional duration in seconds, counted from the time when a build pod gets scheduled in the system, that the build may be active on a node before the system actively tries to terminate the build; value must be positive integer", - "type": "integer", - "format": "int64" - }, - "mountTrustedCA": { - "description": "mountTrustedCA bind mounts the cluster's trusted certificate authorities, as defined in the cluster's proxy configuration, into the build. This lets processes within a build trust components signed by custom PKI certificate authorities, such as private artifact repositories and HTTPS proxies.\n\nWhen this field is set to true, the contents of `/etc/pki/ca-trust` within the build are managed by the build container, and any changes to this directory or its subdirectories (for example - within a Dockerfile `RUN` instruction) are not persisted in the build's output image.", - "type": "boolean" - }, - "nodeSelector": { - "description": "nodeSelector is a selector which must be true for the build pod to fit on a node If nil, it can be overridden by default build nodeselector values for the cluster. If set to an empty map or a map with any values, default build nodeselector values are ignored.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "output": { - "description": "output describes the container image the Strategy should produce.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildOutput" - }, - "postCommit": { - "description": "postCommit is a build hook executed after the build output image is committed, before it is pushed to a registry.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildPostCommitSpec" - }, - "resources": { - "description": "resources computes resource requirements to execute the build.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" - }, - "revision": { - "description": "revision is the information from the source for a specific repo snapshot. This is optional.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.SourceRevision" - }, - "serviceAccount": { - "description": "serviceAccount is the name of the ServiceAccount to use to run the pod created by this build. The pod will be allowed to use secrets referenced by the ServiceAccount", - "type": "string" - }, - "source": { - "description": "source describes the SCM in use.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildSource" - }, - "strategy": { - "description": "strategy defines how to perform a build.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildStrategy" - } - } - }, - "com.github.openshift.api.build.v1.CommonWebHookCause": { - "description": "CommonWebHookCause factors out the identical format of these webhook causes into struct so we can share it in the specific causes; it is too late for GitHub and Generic but we can leverage this pattern with GitLab and Bitbucket.", - "type": "object", - "properties": { - "revision": { - "description": "revision is the git source revision information of the trigger.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.SourceRevision" - }, - "secret": { - "description": "secret is the obfuscated webhook secret that triggered a build.", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.ConfigMapBuildSource": { - "description": "ConfigMapBuildSource describes a configmap and its destination directory that will be used only at the build time. The content of the configmap referenced here will be copied into the destination directory instead of mounting.", - "type": "object", - "required": [ - "configMap" - ], - "properties": { - "configMap": { - "description": "configMap is a reference to an existing configmap that you want to use in your build.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "destinationDir": { - "description": "destinationDir is the directory where the files from the configmap should be available for the build time. For the Source build strategy, these will be injected into a container where the assemble script runs. For the container image build strategy, these will be copied into the build directory, where the Dockerfile is located, so users can ADD or COPY them during container image build.", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.CustomBuildStrategy": { - "description": "CustomBuildStrategy defines input parameters specific to Custom build.", - "type": "object", - "required": [ - "from" - ], - "properties": { - "buildAPIVersion": { - "description": "buildAPIVersion is the requested API version for the Build object serialized and passed to the custom builder", - "type": "string" - }, - "env": { - "description": "env contains additional environment variables you want to pass into a builder container.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } - }, - "exposeDockerSocket": { - "description": "exposeDockerSocket will allow running Docker commands (and build container images) from inside the container.", - "type": "boolean" - }, - "forcePull": { - "description": "forcePull describes if the controller should configure the build pod to always pull the images for the builder or only pull if it is not present locally", - "type": "boolean" - }, - "from": { - "description": "from is reference to an DockerImage, ImageStreamTag, or ImageStreamImage from which the container image should be pulled", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "pullSecret": { - "description": "pullSecret is the name of a Secret that would be used for setting up the authentication for pulling the container images from the private Docker registries", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "secrets": { - "description": "secrets is a list of additional secrets that will be included in the build pod", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.SecretSpec" - } - } - } - }, - "com.github.openshift.api.build.v1.DockerBuildStrategy": { - "description": "DockerBuildStrategy defines input parameters specific to container image build.", - "type": "object", - "properties": { - "buildArgs": { - "description": "buildArgs contains build arguments that will be resolved in the Dockerfile. See https://docs.docker.com/engine/reference/builder/#/arg for more details. NOTE: Only the 'name' and 'value' fields are supported. Any settings on the 'valueFrom' field are ignored.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } - }, - "dockerfilePath": { - "description": "dockerfilePath is the path of the Dockerfile that will be used to build the container image, relative to the root of the context (contextDir). Defaults to `Dockerfile` if unset.", - "type": "string" - }, - "env": { - "description": "env contains additional environment variables you want to pass into a builder container.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } - }, - "forcePull": { - "description": "forcePull describes if the builder should pull the images from registry prior to building.", - "type": "boolean" - }, - "from": { - "description": "from is a reference to an DockerImage, ImageStreamTag, or ImageStreamImage which overrides the FROM image in the Dockerfile for the build. If the Dockerfile uses multi-stage builds, this will replace the image in the last FROM directive of the file.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "imageOptimizationPolicy": { - "description": "imageOptimizationPolicy describes what optimizations the system can use when building images to reduce the final size or time spent building the image. The default policy is 'None' which means the final build image will be equivalent to an image created by the container image build API. The experimental policy 'SkipLayers' will avoid commiting new layers in between each image step, and will fail if the Dockerfile cannot provide compatibility with the 'None' policy. An additional experimental policy 'SkipLayersAndWarn' is the same as 'SkipLayers' but simply warns if compatibility cannot be preserved.", - "type": "string" - }, - "noCache": { - "description": "noCache if set to true indicates that the container image build must be executed with the --no-cache=true flag", - "type": "boolean" - }, - "pullSecret": { - "description": "pullSecret is the name of a Secret that would be used for setting up the authentication for pulling the container images from the private Docker registries", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "volumes": { - "description": "volumes is a list of input volumes that can be mounted into the builds runtime environment. Only a subset of Kubernetes Volume sources are supported by builds. More info: https://kubernetes.io/docs/concepts/storage/volumes", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildVolume" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" - } - } - }, - "com.github.openshift.api.build.v1.DockerStrategyOptions": { - "description": "DockerStrategyOptions contains extra strategy options for container image builds", - "type": "object", - "properties": { - "buildArgs": { - "description": "Args contains any build arguments that are to be passed to Docker. See https://docs.docker.com/engine/reference/builder/#/arg for more details", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } - }, - "noCache": { - "description": "noCache overrides the docker-strategy noCache option in the build config", - "type": "boolean" - } - } - }, - "com.github.openshift.api.build.v1.GenericWebHookCause": { - "description": "GenericWebHookCause holds information about a generic WebHook that triggered a build.", - "type": "object", - "properties": { - "revision": { - "description": "revision is an optional field that stores the git source revision information of the generic webhook trigger when it is available.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.SourceRevision" - }, - "secret": { - "description": "secret is the obfuscated webhook secret that triggered a build.", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.GenericWebHookEvent": { - "description": "GenericWebHookEvent is the payload expected for a generic webhook post", - "type": "object", - "properties": { - "dockerStrategyOptions": { - "description": "dockerStrategyOptions contains additional docker-strategy specific options for the build", - "$ref": "#/definitions/com.github.openshift.api.build.v1.DockerStrategyOptions" - }, - "env": { - "description": "env contains additional environment variables you want to pass into a builder container. ValueFrom is not supported.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } - }, - "git": { - "description": "git is the git information if the Type is BuildSourceGit", - "$ref": "#/definitions/com.github.openshift.api.build.v1.GitInfo" - }, - "type": { - "description": "type is the type of source repository", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.GitBuildSource": { - "description": "GitBuildSource defines the parameters of a Git SCM", - "type": "object", - "required": [ - "uri" - ], - "properties": { - "httpProxy": { - "description": "httpProxy is a proxy used to reach the git repository over http", - "type": "string" - }, - "httpsProxy": { - "description": "httpsProxy is a proxy used to reach the git repository over https", - "type": "string" - }, - "noProxy": { - "description": "noProxy is the list of domains for which the proxy should not be used", - "type": "string" - }, - "ref": { - "description": "ref is the branch/tag/ref to build.", - "type": "string" - }, - "uri": { - "description": "uri points to the source that will be built. The structure of the source will depend on the type of build to run", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.build.v1.GitHubWebHookCause": { - "description": "GitHubWebHookCause has information about a GitHub webhook that triggered a build.", - "type": "object", - "properties": { - "revision": { - "description": "revision is the git revision information of the trigger.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.SourceRevision" - }, - "secret": { - "description": "secret is the obfuscated webhook secret that triggered a build.", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.GitInfo": { - "description": "GitInfo is the aggregated git information for a generic webhook post", - "type": "object", - "required": [ - "uri", - "refs" - ], - "properties": { - "author": { - "description": "author is the author of a specific commit", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.SourceControlUser" - }, - "commit": { - "description": "commit is the commit hash identifying a specific commit", - "type": "string" - }, - "committer": { - "description": "committer is the committer of a specific commit", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.SourceControlUser" - }, - "httpProxy": { - "description": "httpProxy is a proxy used to reach the git repository over http", - "type": "string" - }, - "httpsProxy": { - "description": "httpsProxy is a proxy used to reach the git repository over https", - "type": "string" - }, - "message": { - "description": "message is the description of a specific commit", - "type": "string" - }, - "noProxy": { - "description": "noProxy is the list of domains for which the proxy should not be used", - "type": "string" - }, - "ref": { - "description": "ref is the branch/tag/ref to build.", - "type": "string" - }, - "refs": { - "description": "refs is a list of GitRefs for the provided repo - generally sent when used from a post-receive hook. This field is optional and is used when sending multiple refs", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.GitRefInfo" - } - }, - "uri": { - "description": "uri points to the source that will be built. The structure of the source will depend on the type of build to run", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.build.v1.GitLabWebHookCause": { - "description": "GitLabWebHookCause has information about a GitLab webhook that triggered a build.", - "type": "object", - "properties": { - "revision": { - "description": "revision is the git source revision information of the trigger.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.SourceRevision" - }, - "secret": { - "description": "secret is the obfuscated webhook secret that triggered a build.", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.GitRefInfo": { - "description": "GitRefInfo is a single ref", - "type": "object", - "required": [ - "uri" - ], - "properties": { - "author": { - "description": "author is the author of a specific commit", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.SourceControlUser" - }, - "commit": { - "description": "commit is the commit hash identifying a specific commit", - "type": "string" - }, - "committer": { - "description": "committer is the committer of a specific commit", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.SourceControlUser" - }, - "httpProxy": { - "description": "httpProxy is a proxy used to reach the git repository over http", - "type": "string" - }, - "httpsProxy": { - "description": "httpsProxy is a proxy used to reach the git repository over https", - "type": "string" - }, - "message": { - "description": "message is the description of a specific commit", - "type": "string" - }, - "noProxy": { - "description": "noProxy is the list of domains for which the proxy should not be used", - "type": "string" - }, - "ref": { - "description": "ref is the branch/tag/ref to build.", - "type": "string" - }, - "uri": { - "description": "uri points to the source that will be built. The structure of the source will depend on the type of build to run", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.build.v1.GitSourceRevision": { - "description": "GitSourceRevision is the commit information from a git source for a build", - "type": "object", - "properties": { - "author": { - "description": "author is the author of a specific commit", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.SourceControlUser" - }, - "commit": { - "description": "commit is the commit hash identifying a specific commit", - "type": "string" - }, - "committer": { - "description": "committer is the committer of a specific commit", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.SourceControlUser" - }, - "message": { - "description": "message is the description of a specific commit", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.ImageChangeCause": { - "description": "ImageChangeCause contains information about the image that triggered a build", - "type": "object", - "properties": { - "fromRef": { - "description": "fromRef contains detailed information about an image that triggered a build.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "imageID": { - "description": "imageID is the ID of the image that triggered a new build.", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.ImageChangeTrigger": { - "description": "ImageChangeTrigger allows builds to be triggered when an ImageStream changes", - "type": "object", - "properties": { - "from": { - "description": "from is a reference to an ImageStreamTag that will trigger a build when updated It is optional. If no From is specified, the From image from the build strategy will be used. Only one ImageChangeTrigger with an empty From reference is allowed in a build configuration.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "lastTriggeredImageID": { - "description": "lastTriggeredImageID is used internally by the ImageChangeController to save last used image ID for build This field is deprecated and will be removed in a future release. Deprecated", - "type": "string" - }, - "paused": { - "description": "paused is true if this trigger is temporarily disabled. Optional.", - "type": "boolean" - } - } - }, - "com.github.openshift.api.build.v1.ImageChangeTriggerStatus": { - "description": "ImageChangeTriggerStatus tracks the latest resolved status of the associated ImageChangeTrigger policy specified in the BuildConfigSpec.Triggers struct.", - "type": "object", - "properties": { - "from": { - "description": "from is the ImageStreamTag that is the source of the trigger.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.ImageStreamTagReference" - }, - "lastTriggerTime": { - "description": "lastTriggerTime is the last time this particular ImageStreamTag triggered a Build to start. This field is only updated when this trigger specifically started a Build.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "lastTriggeredImageID": { - "description": "lastTriggeredImageID represents the sha/id of the ImageStreamTag when a Build for this BuildConfig was started. The lastTriggeredImageID is updated each time a Build for this BuildConfig is started, even if this ImageStreamTag is not the reason the Build is started.", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.ImageLabel": { - "description": "ImageLabel represents a label applied to the resulting image.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name defines the name of the label. It must have non-zero length.", - "type": "string", - "default": "" - }, - "value": { - "description": "value defines the literal value of the label.", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.ImageSource": { - "description": "ImageSource is used to describe build source that will be extracted from an image or used during a multi stage build. A reference of type ImageStreamTag, ImageStreamImage or DockerImage may be used. A pull secret can be specified to pull the image from an external registry or override the default service account secret if pulling from the internal registry. Image sources can either be used to extract content from an image and place it into the build context along with the repository source, or used directly during a multi-stage container image build to allow content to be copied without overwriting the contents of the repository source (see the 'paths' and 'as' fields).", - "type": "object", - "required": [ - "from" - ], - "properties": { - "as": { - "description": "A list of image names that this source will be used in place of during a multi-stage container image build. For instance, a Dockerfile that uses \"COPY --from=nginx:latest\" will first check for an image source that has \"nginx:latest\" in this field before attempting to pull directly. If the Dockerfile does not reference an image source it is ignored. This field and paths may both be set, in which case the contents will be used twice.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "from": { - "description": "from is a reference to an ImageStreamTag, ImageStreamImage, or DockerImage to copy source from.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "paths": { - "description": "paths is a list of source and destination paths to copy from the image. This content will be copied into the build context prior to starting the build. If no paths are set, the build context will not be altered.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.ImageSourcePath" - } - }, - "pullSecret": { - "description": "pullSecret is a reference to a secret to be used to pull the image from a registry If the image is pulled from the OpenShift registry, this field does not need to be set.", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - } - } - }, - "com.github.openshift.api.build.v1.ImageSourcePath": { - "description": "ImageSourcePath describes a path to be copied from a source image and its destination within the build directory.", - "type": "object", - "required": [ - "sourcePath", - "destinationDir" - ], - "properties": { - "destinationDir": { - "description": "destinationDir is the relative directory within the build directory where files copied from the image are placed.", - "type": "string", - "default": "" - }, - "sourcePath": { - "description": "sourcePath is the absolute path of the file or directory inside the image to copy to the build directory. If the source path ends in /. then the content of the directory will be copied, but the directory itself will not be created at the destination.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.build.v1.ImageStreamTagReference": { - "description": "ImageStreamTagReference references the ImageStreamTag in an image change trigger by namespace and name.", - "type": "object", - "properties": { - "name": { - "description": "name is the name of the ImageStreamTag for an ImageChangeTrigger", - "type": "string" - }, - "namespace": { - "description": "namespace is the namespace where the ImageStreamTag for an ImageChangeTrigger is located", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.JenkinsPipelineBuildStrategy": { - "description": "JenkinsPipelineBuildStrategy holds parameters specific to a Jenkins Pipeline build. Deprecated: use OpenShift Pipelines", - "type": "object", - "properties": { - "env": { - "description": "env contains additional environment variables you want to pass into a build pipeline.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } - }, - "jenkinsfile": { - "description": "jenkinsfile defines the optional raw contents of a Jenkinsfile which defines a Jenkins pipeline build.", - "type": "string" - }, - "jenkinsfilePath": { - "description": "jenkinsfilePath is the optional path of the Jenkinsfile that will be used to configure the pipeline relative to the root of the context (contextDir). If both JenkinsfilePath & Jenkinsfile are both not specified, this defaults to Jenkinsfile in the root of the specified contextDir.", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.ProxyConfig": { - "description": "ProxyConfig defines what proxies to use for an operation", - "type": "object", - "properties": { - "httpProxy": { - "description": "httpProxy is a proxy used to reach the git repository over http", - "type": "string" - }, - "httpsProxy": { - "description": "httpsProxy is a proxy used to reach the git repository over https", - "type": "string" - }, - "noProxy": { - "description": "noProxy is the list of domains for which the proxy should not be used", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.SecretBuildSource": { - "description": "SecretBuildSource describes a secret and its destination directory that will be used only at the build time. The content of the secret referenced here will be copied into the destination directory instead of mounting.", - "type": "object", - "required": [ - "secret" - ], - "properties": { - "destinationDir": { - "description": "destinationDir is the directory where the files from the secret should be available for the build time. For the Source build strategy, these will be injected into a container where the assemble script runs. Later, when the script finishes, all files injected will be truncated to zero length. For the container image build strategy, these will be copied into the build directory, where the Dockerfile is located, so users can ADD or COPY them during container image build.", - "type": "string" - }, - "secret": { - "description": "secret is a reference to an existing secret that you want to use in your build.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - } - } - }, - "com.github.openshift.api.build.v1.SecretLocalReference": { - "description": "SecretLocalReference contains information that points to the local secret being used", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is the name of the resource in the same namespace being referenced", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.build.v1.SecretSpec": { - "description": "SecretSpec specifies a secret to be included in a build pod and its corresponding mount point", - "type": "object", - "required": [ - "secretSource", - "mountPath" - ], - "properties": { - "mountPath": { - "description": "mountPath is the path at which to mount the secret", - "type": "string", - "default": "" - }, - "secretSource": { - "description": "secretSource is a reference to the secret", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - } - } - }, - "com.github.openshift.api.build.v1.SourceBuildStrategy": { - "description": "SourceBuildStrategy defines input parameters specific to an Source build.", - "type": "object", - "required": [ - "from" - ], - "properties": { - "env": { - "description": "env contains additional environment variables you want to pass into a builder container.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } - }, - "forcePull": { - "description": "forcePull describes if the builder should pull the images from registry prior to building.", - "type": "boolean" - }, - "from": { - "description": "from is reference to an DockerImage, ImageStreamTag, or ImageStreamImage from which the container image should be pulled", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "incremental": { - "description": "incremental flag forces the Source build to do incremental builds if true.", - "type": "boolean" - }, - "pullSecret": { - "description": "pullSecret is the name of a Secret that would be used for setting up the authentication for pulling the container images from the private Docker registries", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "scripts": { - "description": "scripts is the location of Source scripts", - "type": "string" - }, - "volumes": { - "description": "volumes is a list of input volumes that can be mounted into the builds runtime environment. Only a subset of Kubernetes Volume sources are supported by builds. More info: https://kubernetes.io/docs/concepts/storage/volumes", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.BuildVolume" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" - } - } - }, - "com.github.openshift.api.build.v1.SourceControlUser": { - "description": "SourceControlUser defines the identity of a user of source control", - "type": "object", - "properties": { - "email": { - "description": "email of the source control user", - "type": "string" - }, - "name": { - "description": "name of the source control user", - "type": "string" - } - } - }, - "com.github.openshift.api.build.v1.SourceRevision": { - "description": "SourceRevision is the revision or commit information from the source for the build", - "type": "object", - "required": [ - "type" - ], - "properties": { - "git": { - "description": "git contains information about git-based build source", - "$ref": "#/definitions/com.github.openshift.api.build.v1.GitSourceRevision" - }, - "type": { - "description": "type of the build source, may be one of 'Source', 'Dockerfile', 'Binary', or 'Images'", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.build.v1.SourceStrategyOptions": { - "description": "SourceStrategyOptions contains extra strategy options for Source builds", - "type": "object", - "properties": { - "incremental": { - "description": "incremental overrides the source-strategy incremental option in the build config", - "type": "boolean" - } - } - }, - "com.github.openshift.api.build.v1.StageInfo": { - "description": "StageInfo contains details about a build stage.", - "type": "object", - "properties": { - "durationMilliseconds": { - "description": "durationMilliseconds identifies how long the stage took to complete in milliseconds. Note: the duration of a stage can exceed the sum of the duration of the steps within the stage as not all actions are accounted for in explicit build steps.", - "type": "integer", - "format": "int64" - }, - "name": { - "description": "name is a unique identifier for each build stage that occurs.", - "type": "string" - }, - "startTime": { - "description": "startTime is a timestamp representing the server time when this Stage started. It is represented in RFC3339 form and is in UTC.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "steps": { - "description": "steps contains details about each step that occurs during a build stage including start time and duration in milliseconds.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.StepInfo" - } - } - } - }, - "com.github.openshift.api.build.v1.StepInfo": { - "description": "StepInfo contains details about a build step.", - "type": "object", - "properties": { - "durationMilliseconds": { - "description": "durationMilliseconds identifies how long the step took to complete in milliseconds.", - "type": "integer", - "format": "int64" - }, - "name": { - "description": "name is a unique identifier for each build step.", - "type": "string" - }, - "startTime": { - "description": "startTime is a timestamp representing the server time when this Step started. it is represented in RFC3339 form and is in UTC.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - } - } - }, - "com.github.openshift.api.build.v1.WebHookTrigger": { - "description": "WebHookTrigger is a trigger that gets invoked using a webhook type of post", - "type": "object", - "properties": { - "allowEnv": { - "description": "allowEnv determines whether the webhook can set environment variables; can only be set to true for GenericWebHook.", - "type": "boolean" - }, - "secret": { - "description": "secret used to validate requests. Deprecated: use SecretReference instead.", - "type": "string" - }, - "secretReference": { - "description": "secretReference is a reference to a secret in the same namespace, containing the value to be validated when the webhook is invoked. The secret being referenced must contain a key named \"WebHookSecretKey\", the value of which will be checked against the value supplied in the webhook invocation.", - "$ref": "#/definitions/com.github.openshift.api.build.v1.SecretLocalReference" - } - } - }, - "com.github.openshift.api.cloudnetwork.v1.CloudPrivateIPConfig": { - "description": "CloudPrivateIPConfig performs an assignment of a private IP address to the primary NIC associated with cloud VMs. This is done by specifying the IP and Kubernetes node which the IP should be assigned to. This CRD is intended to be used by the network plugin which manages the cluster network. The spec side represents the desired state requested by the network plugin, and the status side represents the current state that this CRD's controller has executed. No users will have permission to modify it, and if a cluster-admin decides to edit it for some reason, their changes will be overwritten the next time the network plugin reconciles the object. Note: the CR's name must specify the requested private IP address (can be IPv4 or IPv6).\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the definition of the desired private IP request.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.cloudnetwork.v1.CloudPrivateIPConfigSpec" - }, - "status": { - "description": "status is the observed status of the desired private IP request. Read-only.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.cloudnetwork.v1.CloudPrivateIPConfigStatus" - } - } - }, - "com.github.openshift.api.cloudnetwork.v1.CloudPrivateIPConfigSpec": { - "description": "CloudPrivateIPConfigSpec consists of a node name which the private IP should be assigned to.", - "type": "object", - "properties": { - "node": { - "description": "node is the node name, as specified by the Kubernetes field: node.metadata.name", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.cloudnetwork.v1.CloudPrivateIPConfigStatus": { - "description": "CloudPrivateIPConfigStatus specifies the node assignment together with its assignment condition.", - "type": "object", - "required": [ - "conditions" - ], - "properties": { - "conditions": { - "description": "condition is the assignment condition of the private IP and its status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "node": { - "description": "node is the node name, as specified by the Kubernetes field: node.metadata.name", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.APIServer": { - "description": "APIServer holds configuration (like serving certificates, client CA and CORS domains) shared by all API servers in the system, among them especially kube-apiserver and openshift-apiserver. The canonical name of an instance is 'cluster'.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.APIServerSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.APIServerStatus" - } - } - }, - "com.github.openshift.api.config.v1.APIServerEncryption": { - "description": "APIServerEncryption is used to encrypt sensitive resources on the cluster.", - "type": "object", - "properties": { - "kms": { - "description": "kms defines the configuration for the external KMS instance that manages the encryption keys, when KMS encryption is enabled sensitive resources will be encrypted using keys managed by an externally configured KMS instance.\n\nThe Key Management Service (KMS) instance provides symmetric encryption and is responsible for managing the lifecyle of the encryption keys outside of the control plane. This allows integration with an external provider to manage the data encryption keys securely.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.KMSPluginConfig" - }, - "type": { - "description": "type defines what encryption type should be used to encrypt resources at the datastore layer. When this field is unset (i.e. when it is set to the empty string), identity is implied. The behavior of unset can and will change over time. Even if encryption is enabled by default, the meaning of unset may change to a different encryption type based on changes in best practices.\n\nWhen encryption is enabled, all sensitive resources shipped with the platform are encrypted. This list of sensitive resources can and will change over time. The current authoritative list is:\n\n 1. secrets\n 2. configmaps\n 3. routes.route.openshift.io\n 4. oauthaccesstokens.oauth.openshift.io\n 5. oauthauthorizetokens.oauth.openshift.io", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "kms": "KMS" - } - } - ] - }, - "com.github.openshift.api.config.v1.APIServerList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.APIServer" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.APIServerNamedServingCert": { - "description": "APIServerNamedServingCert maps a server DNS name, as understood by a client, to a certificate.", - "type": "object", - "required": [ - "servingCertificate" - ], - "properties": { - "names": { - "description": "names is a optional list of explicit DNS names (leading wildcards allowed) that should use this certificate to serve secure traffic. If no names are provided, the implicit names will be extracted from the certificates. Exact names trump over wildcard names. Explicit names defined here trump over extracted implicit names.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "servingCertificate": { - "description": "servingCertificate references a kubernetes.io/tls type secret containing the TLS cert info for serving secure traffic. The secret must exist in the openshift-config namespace and contain the following required fields: - Secret.Data[\"tls.key\"] - TLS private key. - Secret.Data[\"tls.crt\"] - TLS certificate.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - } - } - }, - "com.github.openshift.api.config.v1.APIServerServingCerts": { - "type": "object", - "properties": { - "namedCertificates": { - "description": "namedCertificates references secrets containing the TLS cert info for serving secure traffic to specific hostnames. If no named certificates are provided, or no named certificates match the server name as understood by a client, the defaultServingCertificate will be used.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.APIServerNamedServingCert" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.config.v1.APIServerSpec": { - "type": "object", - "properties": { - "additionalCORSAllowedOrigins": { - "description": "additionalCORSAllowedOrigins lists additional, user-defined regular expressions describing hosts for which the API server allows access using the CORS headers. This may be needed to access the API and the integrated OAuth server from JavaScript applications. The values are regular expressions that correspond to the Golang regular expression language.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "audit": { - "description": "audit specifies the settings for audit configuration to be applied to all OpenShift-provided API servers in the cluster.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.Audit" - }, - "clientCA": { - "description": "clientCA references a ConfigMap containing a certificate bundle for the signers that will be recognized for incoming client certificates in addition to the operator managed signers. If this is empty, then only operator managed signers are valid. You usually only have to set this if you have your own PKI you wish to honor client certificates from. The ConfigMap must exist in the openshift-config namespace and contain the following required fields: - ConfigMap.Data[\"ca-bundle.crt\"] - CA bundle.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "encryption": { - "description": "encryption allows the configuration of encryption of resources at the datastore layer.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.APIServerEncryption" - }, - "servingCerts": { - "description": "servingCert is the TLS cert info for serving secure traffic. If not specified, operator managed certificates will be used for serving secure traffic.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.APIServerServingCerts" - }, - "tlsAdherence": { - "description": "tlsAdherence controls if components in the cluster adhere to the TLS security profile configured on this APIServer resource.\n\nValid values are \"LegacyAdheringComponentsOnly\" and \"StrictAllComponents\".\n\nWhen set to \"LegacyAdheringComponentsOnly\", components that already honor the cluster-wide TLS profile continue to do so. Components that do not already honor it continue to use their individual TLS configurations.\n\nWhen set to \"StrictAllComponents\", all components must honor the configured TLS profile unless they have a component-specific TLS configuration that overrides it. This mode is recommended for security-conscious deployments and is required for certain compliance frameworks.\n\nNote: Some components such as Kubelet and IngressController have their own dedicated TLS configuration mechanisms via KubeletConfig and IngressController CRs respectively. When these component-specific TLS configurations are set, they take precedence over the cluster-wide tlsSecurityProfile. When not set, these components fall back to the cluster-wide default.\n\nComponents that encounter an unknown value for tlsAdherence should treat it as \"StrictAllComponents\" and log a warning to ensure forward compatibility while defaulting to the more secure behavior.\n\nThis field is optional. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is LegacyAdheringComponentsOnly.\n\nOnce set, this field may be changed to a different value, but may not be removed.", - "type": "string" - }, - "tlsSecurityProfile": { - "description": "tlsSecurityProfile specifies settings for TLS connections for externally exposed servers.\n\nWhen omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is the Intermediate profile.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.TLSSecurityProfile" - } - } - }, - "com.github.openshift.api.config.v1.APIServerStatus": { - "type": "object" - }, - "com.github.openshift.api.config.v1.AWSDNSSpec": { - "description": "AWSDNSSpec contains DNS configuration specific to the Amazon Web Services cloud provider.", - "type": "object", - "properties": { - "privateZoneIAMRole": { - "description": "privateZoneIAMRole contains the ARN of an IAM role that should be assumed when performing operations on the cluster's private hosted zone specified in the cluster DNS config. When left empty, no role should be assumed.\n\nThe ARN must follow the format: arn::iam:::role/, where: is the AWS partition (aws, aws-cn, aws-us-gov, or aws-eusc), is a 12-digit numeric identifier for the AWS account, is the IAM role name.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.AWSIngressSpec": { - "description": "AWSIngressSpec holds the desired state of the Ingress for Amazon Web Services infrastructure provider. This only includes fields that can be modified in the cluster.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "type": { - "description": "type allows user to set a load balancer type. When this field is set the default ingresscontroller will get created using the specified LBType. If this field is not set then the default ingress controller of LBType Classic will be created. Valid values are:\n\n* \"Classic\": A Classic Load Balancer that makes routing decisions at either\n the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See\n the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb\n\n* \"NLB\": A Network Load Balancer that makes routing decisions at the\n transport layer (TCP/SSL). See the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": {} - } - ] - }, - "com.github.openshift.api.config.v1.AWSPlatformSpec": { - "description": "AWSPlatformSpec holds the desired state of the Amazon Web Services infrastructure provider. This only includes fields that can be modified in the cluster.", - "type": "object", - "properties": { - "serviceEndpoints": { - "description": "serviceEndpoints list contains custom endpoints which will override default service endpoint of AWS Services. There must be only one ServiceEndpoint for a service.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.AWSServiceEndpoint" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.config.v1.AWSPlatformStatus": { - "description": "AWSPlatformStatus holds the current status of the Amazon Web Services infrastructure provider.", - "type": "object", - "required": [ - "region" - ], - "properties": { - "cloudLoadBalancerConfig": { - "description": "cloudLoadBalancerConfig holds configuration related to DNS and cloud load balancers. It allows configuration of in-cluster DNS as an alternative to the platform default DNS implementation. When using the ClusterHosted DNS type, Load Balancer IP addresses must be provided for the API and internal API load balancers as well as the ingress load balancer.", - "default": { - "dnsType": "PlatformDefault" - }, - "$ref": "#/definitions/com.github.openshift.api.config.v1.CloudLoadBalancerConfig" - }, - "ipFamily": { - "description": "ipFamily specifies the IP protocol family that should be used for AWS network resources. This controls whether AWS resources are created with IPv4-only, or dual-stack networking with IPv4 or IPv6 as the primary protocol family.\n\nValid values are: * \"IPv4\" (default): Cloud platform resources use IPv4 addressing only. * \"DualStackIPv6Primary\": Cloud platform resources use dual-stack networking with IPv6 as the primary protocol family. * \"DualStackIPv4Primary\": Cloud platform resources use dual-stack networking with IPv4 as the primary protocol family.\n\nWhen omitted, this field defaults to \"IPv4\".\n\nThis field is immutable and cannot be changed once set.", - "type": "string", - "default": "IPv4" - }, - "region": { - "description": "region holds the default AWS region for new AWS resources created by the cluster.", - "type": "string", - "default": "" - }, - "resourceTags": { - "description": "resourceTags is a list of additional tags to apply to AWS resources created for the cluster. See https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html for information on tagging AWS resources. AWS supports a maximum of 50 tags per resource. OpenShift reserves 25 tags for its use, leaving 25 tags available for the user.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.AWSResourceTag" - }, - "x-kubernetes-list-type": "atomic" - }, - "serviceEndpoints": { - "description": "serviceEndpoints list contains custom endpoints which will override default service endpoint of AWS Services. There must be only one ServiceEndpoint for a service.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.AWSServiceEndpoint" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.config.v1.AWSResourceTag": { - "description": "AWSResourceTag is a tag to apply to AWS resources created for the cluster.", - "type": "object", - "required": [ - "key", - "value" - ], - "properties": { - "key": { - "description": "key sets the key of the AWS resource tag key-value pair. Key is required when defining an AWS resource tag. Key should consist of between 1 and 128 characters, and may contain only the set of alphanumeric characters, space (' '), '_', '.', '/', '=', '+', '-', ':', and '@'.", - "type": "string", - "default": "" - }, - "value": { - "description": "value sets the value of the AWS resource tag key-value pair. Value is required when defining an AWS resource tag. Value should consist of between 1 and 256 characters, and may contain only the set of alphanumeric characters, space (' '), '_', '.', '/', '=', '+', '-', ':', and '@'. Some AWS service do not support empty values. Since tags are added to resources in many services, the length of the tag value must meet the requirements of all services.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.AWSServiceEndpoint": { - "description": "AWSServiceEndpoint store the configuration of a custom url to override existing defaults of AWS Services.", - "type": "object", - "required": [ - "name", - "url" - ], - "properties": { - "name": { - "description": "name is the name of the AWS service. The list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html This must be provided and cannot be empty.", - "type": "string", - "default": "" - }, - "url": { - "description": "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.AcceptRisk": { - "description": "AcceptRisk represents a risk that is considered acceptable.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is the name of the acceptable risk. It must be a non-empty string and must not exceed 256 characters.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.AdmissionConfig": { - "type": "object", - "properties": { - "disabledPlugins": { - "description": "disabledPlugins is a list of admission plugins that must be off. Putting something in this list is almost always a mistake and likely to result in cluster instability.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "enabledPlugins": { - "description": "enabledPlugins is a list of admission plugins that must be on in addition to the default list. Some admission plugins are disabled by default, but certain configurations require them. This is fairly uncommon and can result in performance penalties and unexpected behavior.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "pluginConfig": { - "type": "object", - "additionalProperties": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.AdmissionPluginConfig" - } - } - } - }, - "com.github.openshift.api.config.v1.AdmissionPluginConfig": { - "description": "AdmissionPluginConfig holds the necessary configuration options for admission plugins", - "type": "object", - "required": [ - "location", - "configuration" - ], - "properties": { - "configuration": { - "description": "configuration is an embedded configuration object to be used as the plugin's configuration. If present, it will be used instead of the path to the configuration file.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "location": { - "description": "location is the path to a configuration file that contains the plugin's configuration", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.AlibabaCloudPlatformSpec": { - "description": "AlibabaCloudPlatformSpec holds the desired state of the Alibaba Cloud infrastructure provider. This only includes fields that can be modified in the cluster.", - "type": "object" - }, - "com.github.openshift.api.config.v1.AlibabaCloudPlatformStatus": { - "description": "AlibabaCloudPlatformStatus holds the current status of the Alibaba Cloud infrastructure provider.", - "type": "object", - "required": [ - "region" - ], - "properties": { - "region": { - "description": "region specifies the region for Alibaba Cloud resources created for the cluster.", - "type": "string", - "default": "" - }, - "resourceGroupID": { - "description": "resourceGroupID is the ID of the resource group for the cluster.", - "type": "string" - }, - "resourceTags": { - "description": "resourceTags is a list of additional tags to apply to Alibaba Cloud resources created for the cluster.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.AlibabaCloudResourceTag" - }, - "x-kubernetes-list-map-keys": [ - "key" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1.AlibabaCloudResourceTag": { - "description": "AlibabaCloudResourceTag is the set of tags to add to apply to resources.", - "type": "object", - "required": [ - "key", - "value" - ], - "properties": { - "key": { - "description": "key is the key of the tag.", - "type": "string", - "default": "" - }, - "value": { - "description": "value is the value of the tag.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.Audit": { - "type": "object", - "properties": { - "customRules": { - "description": "customRules specify profiles per group. These profile take precedence over the top-level profile field if they apply. They are evaluation from top to bottom and the first one that matches, applies.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.AuditCustomRule" - }, - "x-kubernetes-list-map-keys": [ - "group" - ], - "x-kubernetes-list-type": "map" - }, - "profile": { - "description": "profile specifies the name of the desired top-level audit profile to be applied to all requests sent to any of the OpenShift-provided API servers in the cluster (kube-apiserver, openshift-apiserver and oauth-apiserver), with the exception of those requests that match one or more of the customRules.\n\nThe following profiles are provided: - Default: default policy which means MetaData level logging with the exception of events\n (not logged at all), oauthaccesstokens and oauthauthorizetokens (both logged at RequestBody\n level).\n- WriteRequestBodies: like 'Default', but logs request and response HTTP payloads for write requests (create, update, patch). - AllRequestBodies: like 'WriteRequestBodies', but also logs request and response HTTP payloads for read requests (get, list). - None: no requests are logged at all, not even oauthaccesstokens and oauthauthorizetokens.\n\nWarning: It is not recommended to disable audit logging by using the `None` profile unless you are fully aware of the risks of not logging data that can be beneficial when troubleshooting issues. If you disable audit logging and a support situation arises, you might need to enable audit logging and reproduce the issue in order to troubleshoot properly.\n\nIf unset, the 'Default' profile is used as the default.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.AuditConfig": { - "description": "AuditConfig holds configuration for the audit capabilities", - "type": "object", - "required": [ - "enabled", - "auditFilePath", - "maximumFileRetentionDays", - "maximumRetainedFiles", - "maximumFileSizeMegabytes", - "policyFile", - "policyConfiguration", - "logFormat", - "webHookKubeConfig", - "webHookMode" - ], - "properties": { - "auditFilePath": { - "description": "All requests coming to the apiserver will be logged to this file.", - "type": "string", - "default": "" - }, - "enabled": { - "description": "If this flag is set, audit log will be printed in the logs. The logs contains, method, user and a requested URL.", - "type": "boolean", - "default": false - }, - "logFormat": { - "description": "Format of saved audits (legacy or json).", - "type": "string", - "default": "" - }, - "maximumFileRetentionDays": { - "description": "Maximum number of days to retain old log files based on the timestamp encoded in their filename.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "maximumFileSizeMegabytes": { - "description": "Maximum size in megabytes of the log file before it gets rotated. Defaults to 100MB.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "maximumRetainedFiles": { - "description": "Maximum number of old log files to retain.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "policyConfiguration": { - "description": "policyConfiguration is an embedded policy configuration object to be used as the audit policy configuration. If present, it will be used instead of the path to the policy file.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "policyFile": { - "description": "policyFile is a path to the file that defines the audit policy configuration.", - "type": "string", - "default": "" - }, - "webHookKubeConfig": { - "description": "Path to a .kubeconfig formatted file that defines the audit webhook configuration.", - "type": "string", - "default": "" - }, - "webHookMode": { - "description": "Strategy for sending audit events (block or batch).", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.AuditCustomRule": { - "description": "AuditCustomRule describes a custom rule for an audit profile that takes precedence over the top-level profile.", - "type": "object", - "required": [ - "group", - "profile" - ], - "properties": { - "group": { - "description": "group is a name of group a request user must be member of in order to this profile to apply.", - "type": "string", - "default": "" - }, - "profile": { - "description": "profile specifies the name of the desired audit policy configuration to be deployed to all OpenShift-provided API servers in the cluster.\n\nThe following profiles are provided: - Default: the existing default policy. - WriteRequestBodies: like 'Default', but logs request and response HTTP payloads for write requests (create, update, patch). - AllRequestBodies: like 'WriteRequestBodies', but also logs request and response HTTP payloads for read requests (get, list). - None: no requests are logged at all, not even oauthaccesstokens and oauthauthorizetokens.\n\nIf unset, the 'Default' profile is used as the default.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.Authentication": { - "description": "Authentication specifies cluster-wide settings for authentication (like OAuth and webhook token authenticators). The canonical name of an instance is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.AuthenticationSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.AuthenticationStatus" - } - } - }, - "com.github.openshift.api.config.v1.AuthenticationList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.Authentication" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.AuthenticationSpec": { - "type": "object", - "properties": { - "oauthMetadata": { - "description": "oauthMetadata contains the discovery endpoint data for OAuth 2.0 Authorization Server Metadata for an external OAuth server. This discovery document can be viewed from its served location: oc get --raw '/.well-known/oauth-authorization-server' For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 If oauthMetadata.name is non-empty, this value has precedence over any metadata reference stored in status. The key \"oauthMetadata\" is used to locate the data. If specified and the config map or expected key is not found, no metadata is served. If the specified metadata is not valid, no metadata is served. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "oidcProviders": { - "description": "oidcProviders are OIDC identity providers that can issue tokens for this cluster Can only be set if \"Type\" is set to \"OIDC\".\n\nAt most one provider can be configured.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.OIDCProvider" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "serviceAccountIssuer": { - "description": "serviceAccountIssuer is the identifier of the bound service account token issuer. The default is https://kubernetes.default.svc WARNING: Updating this field will not result in immediate invalidation of all bound tokens with the previous issuer value. Instead, the tokens issued by previous service account issuer will continue to be trusted for a time period chosen by the platform (currently set to 24h). This time period is subject to change over time. This allows internal components to transition to use new service account issuer without service distruption.", - "type": "string", - "default": "" - }, - "type": { - "description": "type identifies the cluster managed, user facing authentication mode in use. Specifically, it manages the component that responds to login attempts. The default is IntegratedOAuth.", - "type": "string", - "default": "" - }, - "webhookTokenAuthenticator": { - "description": "webhookTokenAuthenticator configures a remote token reviewer. These remote authentication webhooks can be used to verify bearer tokens via the tokenreviews.authentication.k8s.io REST API. This is required to honor bearer tokens that are provisioned by an external authentication service.\n\nCan only be set if \"Type\" is set to \"None\".", - "$ref": "#/definitions/com.github.openshift.api.config.v1.WebhookTokenAuthenticator" - }, - "webhookTokenAuthenticators": { - "description": "webhookTokenAuthenticators is DEPRECATED, setting it has no effect.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.DeprecatedWebhookTokenAuthenticator" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.config.v1.AuthenticationStatus": { - "type": "object", - "properties": { - "integratedOAuthMetadata": { - "description": "integratedOAuthMetadata contains the discovery endpoint data for OAuth 2.0 Authorization Server Metadata for the in-cluster integrated OAuth server. This discovery document can be viewed from its served location: oc get --raw '/.well-known/oauth-authorization-server' For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This contains the observed value based on cluster state. An explicitly set value in spec.oauthMetadata has precedence over this field. This field has no meaning if authentication spec.type is not set to IntegratedOAuth. The key \"oauthMetadata\" is used to locate the data. If the config map or expected key is not found, no metadata is served. If the specified metadata is not valid, no metadata is served. The namespace for this config map is openshift-config-managed.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "oidcClients": { - "description": "oidcClients is where participating operators place the current OIDC client status for OIDC clients that can be customized by the cluster-admin.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.OIDCClientStatus" - }, - "x-kubernetes-list-map-keys": [ - "componentNamespace", - "componentName" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1.AzurePlatformSpec": { - "description": "AzurePlatformSpec holds the desired state of the Azure infrastructure provider. This only includes fields that can be modified in the cluster.", - "type": "object" - }, - "com.github.openshift.api.config.v1.AzurePlatformStatus": { - "description": "AzurePlatformStatus holds the current status of the Azure infrastructure provider.", - "type": "object", - "required": [ - "resourceGroupName" - ], - "properties": { - "armEndpoint": { - "description": "armEndpoint specifies a URL to use for resource management in non-soverign clouds such as Azure Stack.", - "type": "string" - }, - "cloudLoadBalancerConfig": { - "description": "cloudLoadBalancerConfig holds configuration related to DNS and cloud load balancers. It allows configuration of in-cluster DNS as an alternative to the platform default DNS implementation. When using the ClusterHosted DNS type, Load Balancer IP addresses must be provided for the API and internal API load balancers as well as the ingress load balancer.", - "default": { - "dnsType": "PlatformDefault" - }, - "$ref": "#/definitions/com.github.openshift.api.config.v1.CloudLoadBalancerConfig" - }, - "cloudName": { - "description": "cloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK with the appropriate Azure API endpoints. If empty, the value is equal to `AzurePublicCloud`.", - "type": "string" - }, - "ipFamily": { - "description": "ipFamily specifies the IP protocol family that should be used for Azure network resources. This controls whether Azure resources are created with IPv4-only, or dual-stack networking with IPv4 or IPv6 as the primary protocol family.", - "type": "string", - "default": "IPv4" - }, - "networkResourceGroupName": { - "description": "networkResourceGroupName is the Resource Group for network resources like the Virtual Network and Subnets used by the cluster. If empty, the value is same as ResourceGroupName.", - "type": "string" - }, - "resourceGroupName": { - "description": "resourceGroupName is the Resource Group for new Azure resources created for the cluster.", - "type": "string", - "default": "" - }, - "resourceTags": { - "description": "resourceTags is a list of additional tags to apply to Azure resources created for the cluster. See https://docs.microsoft.com/en-us/rest/api/resources/tags for information on tagging Azure resources. Due to limitations on Automation, Content Delivery Network, DNS Azure resources, a maximum of 15 tags may be applied. OpenShift reserves 5 tags for internal use, allowing 10 tags for user configuration.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.AzureResourceTag" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.config.v1.AzureResourceTag": { - "description": "AzureResourceTag is a tag to apply to Azure resources created for the cluster.", - "type": "object", - "required": [ - "key", - "value" - ], - "properties": { - "key": { - "description": "key is the key part of the tag. A tag key can have a maximum of 128 characters and cannot be empty. Key must begin with a letter, end with a letter, number or underscore, and must contain only alphanumeric characters and the following special characters `_ . -`.", - "type": "string", - "default": "" - }, - "value": { - "description": "value is the value part of the tag. A tag value can have a maximum of 256 characters and cannot be empty. Value must contain only alphanumeric characters and the following special characters `_ + , - . / : ; < = > ? @`.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.BareMetalPlatformLoadBalancer": { - "description": "BareMetalPlatformLoadBalancer defines the load balancer used by the cluster on BareMetal platform.", - "type": "object", - "properties": { - "type": { - "description": "type defines the type of load balancer used by the cluster on BareMetal platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", - "type": "string", - "default": "OpenShiftManagedDefault" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": {} - } - ] - }, - "com.github.openshift.api.config.v1.BareMetalPlatformSpec": { - "description": "BareMetalPlatformSpec holds the desired state of the BareMetal infrastructure provider. This only includes fields that can be modified in the cluster.", - "type": "object", - "properties": { - "apiServerInternalIPs": { - "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "ingressIPs": { - "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "machineNetworks": { - "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.config.v1.BareMetalPlatformStatus": { - "description": "BareMetalPlatformStatus holds the current status of the BareMetal infrastructure provider. For more information about the network architecture used with the BareMetal platform type, see: https://github.com/openshift/installer/blob/master/docs/design/baremetal/networking-infrastructure.md", - "type": "object", - "required": [ - "apiServerInternalIPs", - "ingressIPs" - ], - "properties": { - "apiServerInternalIP": { - "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", - "type": "string" - }, - "apiServerInternalIPs": { - "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "dnsRecordsType": { - "description": "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", - "type": "string", - "enum": [ - "External", - "Internal" - ] - }, - "ingressIP": { - "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", - "type": "string" - }, - "ingressIPs": { - "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "loadBalancer": { - "description": "loadBalancer defines how the load balancer used by the cluster is configured.", - "default": { - "type": "OpenShiftManagedDefault" - }, - "$ref": "#/definitions/com.github.openshift.api.config.v1.BareMetalPlatformLoadBalancer" - }, - "machineNetworks": { - "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "nodeDNSIP": { - "description": "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for BareMetal deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.", - "type": "string" - }, - "vipManagement": { - "description": "vipManagement indicates which VIP management mechanism is active on this cluster. Allowed values are `Keepalived`, `BGP`, and omitted. Once set to a non-empty value, this field is immutable. When set to `BGP`, kube-vip (Routing Table Mode) and frr-k8s are deployed as static pods to advertise VIPs via BGP, replacing the default keepalived/VRRP mechanism. When set to `Keepalived`, the default keepalived-based VIP management is used. When omitted, the default keepalived-based VIP management is used.\n\nPossible enum values:\n - `\"BGP\"` means the VIPs are advertised via BGP by kube-vip (Routing Table Mode) and frr-k8s running as static pods.\n - `\"Keepalived\"` means the VIPs are managed by the default keepalived/VRRP mechanism.", - "type": "string", - "enum": [ - "BGP", - "Keepalived" - ] - } - } - }, - "com.github.openshift.api.config.v1.BasicAuthIdentityProvider": { - "description": "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials", - "type": "object", - "required": [ - "url" - ], - "properties": { - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "tlsClientCert": { - "description": "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - }, - "tlsClientKey": { - "description": "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - }, - "url": { - "description": "url is the remote URL to connect to", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.Build": { - "description": "Build configures the behavior of OpenShift builds for the entire cluster. This includes default settings that can be overridden in BuildConfig objects, and overrides which are applied to all builds.\n\nThe canonical name is \"cluster\"\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user-settable values for the build controller configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.BuildSpec" - } - } - }, - "com.github.openshift.api.config.v1.BuildDefaults": { - "type": "object", - "properties": { - "defaultProxy": { - "description": "defaultProxy contains the default proxy settings for all build operations, including image pull/push and source download.\n\nValues can be overrode by setting the `HTTP_PROXY`, `HTTPS_PROXY`, and `NO_PROXY` environment variables in the build config's strategy.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.ProxySpec" - }, - "env": { - "description": "env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } - }, - "gitProxy": { - "description": "gitProxy contains the proxy settings for git operations only. If set, this will override any Proxy settings for all git commands, such as git clone.\n\nValues that are not set here will be inherited from DefaultProxy.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.ProxySpec" - }, - "imageLabels": { - "description": "imageLabels is a list of docker labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageLabel" - } - }, - "resources": { - "description": "resources defines resource requirements to execute the build.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" - } - } - }, - "com.github.openshift.api.config.v1.BuildList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.Build" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.BuildOverrides": { - "type": "object", - "properties": { - "forcePull": { - "description": "forcePull overrides, if set, the equivalent value in the builds, i.e. false disables force pull for all builds, true enables force pull for all builds, independently of what each build specifies itself", - "type": "boolean" - }, - "imageLabels": { - "description": "imageLabels is a list of docker labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageLabel" - } - }, - "nodeSelector": { - "description": "nodeSelector is a selector which must be true for the build pod to fit on a node", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "tolerations": { - "description": "tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - } - } - } - }, - "com.github.openshift.api.config.v1.BuildSpec": { - "type": "object", - "properties": { - "additionalTrustedCA": { - "description": "additionalTrustedCA is a reference to a ConfigMap containing additional CAs that should be trusted for image pushes and pulls during builds. The namespace for this config map is openshift-config.\n\nDEPRECATED: Additional CAs for image pull and push should be set on image.config.openshift.io/cluster instead.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "buildDefaults": { - "description": "buildDefaults controls the default information for Builds", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.BuildDefaults" - }, - "buildOverrides": { - "description": "buildOverrides controls override settings for builds", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.BuildOverrides" - } - } - }, - "com.github.openshift.api.config.v1.CRIOCredentialProviderConfig": { - "description": "CRIOCredentialProviderConfig holds cluster-wide singleton resource configurations for CRI-O credential provider, the name of this instance is \"cluster\". CRI-O credential provider is a binary shipped with CRI-O that provides a way to obtain container image pull credentials from external sources. For example, it can be used to fetch mirror registry credentials from secrets resources in the cluster within the same namespace the pod will be running in. CRIOCredentialProviderConfig configuration specifies the pod image sources registries that should trigger the CRI-O credential provider execution, which will resolve the CRI-O mirror configurations and obtain the necessary credentials for pod creation. Note: Configuration changes will only take effect after the kubelet restarts, which is automatically managed by the cluster during rollout.\n\nThe resource is a singleton named \"cluster\".\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec defines the desired configuration of the CRI-O Credential Provider. This field is required and must be provided when creating the resource.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.CRIOCredentialProviderConfigSpec" - }, - "status": { - "description": "status represents the current state of the CRIOCredentialProviderConfig. When omitted or nil, it indicates that the status has not yet been set by the controller. The controller will populate this field with validation conditions and operational state.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.CRIOCredentialProviderConfigStatus" - } - } - }, - "com.github.openshift.api.config.v1.CRIOCredentialProviderConfigList": { - "description": "CRIOCredentialProviderConfigList contains a list of CRIOCredentialProviderConfig resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.CRIOCredentialProviderConfig" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.CRIOCredentialProviderConfigSpec": { - "description": "CRIOCredentialProviderConfigSpec defines the desired configuration of the CRI-O Credential Provider.", - "type": "object", - "properties": { - "matchImages": { - "description": "matchImages is a list of string patterns used to determine whether the CRI-O credential provider should be invoked for a given image. This list is passed to the kubelet CredentialProviderConfig, and if any pattern matches the requested image, CRI-O credential provider will be invoked to obtain credentials for pulling that image or its mirrors. Depending on the platform, the CRI-O credential provider may be installed alongside an existing platform specific provider. Conflicts between the existing platform specific provider image match configuration and this list will be handled by the following precedence rule: credentials from built-in kubelet providers (e.g., ECR, GCR, ACR) take precedence over those from the CRIOCredentialProviderConfig when both match the same image. To avoid uncertainty, it is recommended to avoid configuring your private image patterns to overlap with existing platform specific provider config(e.g., the entries from https://github.com/openshift/machine-config-operator/blob/main/templates/common/aws/files/etc-kubernetes-credential-providers-ecr-credential-provider.yaml). You can check the resource's Status conditions to see if any entries were ignored due to exact matches with known built-in provider patterns.\n\nThis field is optional, the items of the list must contain between 1 and 50 entries. The list is treated as a set, so duplicate entries are not allowed.\n\nFor more details, see: https://kubernetes.io/docs/tasks/administer-cluster/kubelet-credential-provider/ https://github.com/cri-o/crio-credential-provider#architecture\n\nEach entry in matchImages is a pattern which can optionally contain a port and a path. Each entry must be no longer than 512 characters. Wildcards ('*') are supported for full subdomain labels, such as '*.k8s.io' or 'k8s.*.io', and for top-level domains, such as 'k8s.*' (which matches 'k8s.io' or 'k8s.net'). A global wildcard '*' (matching any domain) is not allowed. Wildcards may replace an entire hostname label (e.g., *.example.com), but they cannot appear within a label (e.g., f*oo.example.com) and are not allowed in the port or path. For example, 'example.*.com' is valid, but 'exa*mple.*.com' is not. Each wildcard matches only a single domain label, so '*.io' does **not** match '*.k8s.io'.\n\nA match exists between an image and a matchImage when all of the below are true: Both contain the same number of domain parts and each part matches. The URL path of an matchImages must be a prefix of the target image URL path. If the matchImages contains a port, then the port must match in the image as well.\n\nExample values of matchImages: - 123456789.dkr.ecr.us-east-1.amazonaws.com - *.azurecr.io - gcr.io - *.*.registry.io - registry.io:8080/path", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - } - } - }, - "com.github.openshift.api.config.v1.CRIOCredentialProviderConfigStatus": { - "description": "CRIOCredentialProviderConfigStatus defines the observed state of CRIOCredentialProviderConfig", - "type": "object", - "properties": { - "conditions": { - "description": "conditions represent the latest available observations of the configuration state. When omitted, it indicates that no conditions have been reported yet. The maximum number of conditions is 16. Conditions are stored as a map keyed by condition type, ensuring uniqueness.\n\nExpected condition types include: \"Validated\": indicates whether the matchImages configuration is valid", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1.CertInfo": { - "description": "CertInfo relates a certificate with a private key", - "type": "object", - "required": [ - "certFile", - "keyFile" - ], - "properties": { - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.ClientConnectionOverrides": { - "type": "object", - "required": [ - "acceptContentTypes", - "contentType", - "qps", - "burst" - ], - "properties": { - "acceptContentTypes": { - "description": "acceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the default value of 'application/json'. This field will control all connections to the server used by a particular client.", - "type": "string", - "default": "" - }, - "burst": { - "description": "burst allows extra queries to accumulate when a client is exceeding its rate.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "contentType": { - "description": "contentType is the content type used when sending data to the server from this client.", - "type": "string", - "default": "" - }, - "qps": { - "description": "qps controls the number of queries per second allowed for this connection.", - "type": "number", - "format": "float", - "default": 0 - } - } - }, - "com.github.openshift.api.config.v1.ClientCredentialConfig": { - "description": "ClientCredentialConfig configures the client credentials and token endpoint to use to get an access token via the OAuth2 client credentials grant flow.", - "type": "object", - "required": [ - "clientID", - "clientSecret", - "tokenEndpoint" - ], - "properties": { - "clientID": { - "description": "clientID is a required client identifier to use during the OAuth2 client credentials flow. clientID must be at least 1 character in length, must not exceed 256 characters in length, and must only contain printable ASCII characters.", - "type": "string" - }, - "clientSecret": { - "description": "clientSecret is a required reference to a Secret in the openshift-config namespace to be used as the client secret during the OAuth2 client credentials flow.\n\nThe key 'client-secret' is used to locate the client secret data in the Secret.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClientSecretSecretReference" - }, - "scopes": { - "description": "scopes is an optional list of OAuth2 scopes to request when obtaining an access token.\n\nIf not specified, the token endpoint's default scopes will be used.\n\nWhen specified, there must be at least 1 entry and must not exceed 16 entries. Each entry must be at least 1 character in length and must not exceed 256 characters in length. Each entry must only contain printable ASCII characters, excluding spaces, double quotes and backslashes. Entries must be unique.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "tls": { - "description": "tls is an optional field that allows configuring the TLS settings used to interact with the identity provider as an OAuth2 client.\n\nWhen omitted, system default TLS settings will be used for the OAuth2 client.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalSourceTLS" - }, - "tokenEndpoint": { - "description": "tokenEndpoint is a required URL to query for an access token using the client credential OAuth2 flow. tokenEndpoint must be at least 1 character in length and must not exceed 2048 characters in length. tokenEndpoint must be a valid HTTPS URL. tokenEndpoint must have a host and a path. tokenEndpoint must not contain query parameters, fragments, or user information (e.g., \"user:password@host\").", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.ClientSecretSecretReference": { - "description": "ClientSecretSecretReference is a reference to a Secret in the openshift-config namespace that should be used for configuring the client secret to be used when sourcing claims from external sources with the client credential authentication flow.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is the required name of the Secret that exists in the openshift-config namespace.\n\nIt must be at least 1 character in length, must not exceed 253 characters in length, must start and end with a lowercase alphanumeric character, and must only contain lowercase alphanumeric characters, '-' or '.'.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.CloudControllerManagerStatus": { - "description": "CloudControllerManagerStatus holds the state of Cloud Controller Manager (a.k.a. CCM or CPI) related settings", - "type": "object", - "properties": { - "state": { - "description": "state determines whether or not an external Cloud Controller Manager is expected to be installed within the cluster. https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/#running-cloud-controller-manager\n\nValid values are \"External\", \"None\" and omitted. When set to \"External\", new nodes will be tainted as uninitialized when created, preventing them from running workloads until they are initialized by the cloud controller manager. When omitted or set to \"None\", new nodes will be not tainted and no extra initialization from the cloud controller manager is expected.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.CloudLoadBalancerConfig": { - "description": "CloudLoadBalancerConfig contains an union discriminator indicating the type of DNS solution in use within the cluster. When the DNSType is `ClusterHosted`, the cloud's Load Balancer configuration needs to be provided so that the DNS solution hosted within the cluster can be configured with those values.", - "type": "object", - "properties": { - "clusterHosted": { - "description": "clusterHosted holds the IP addresses of API, API-Int and Ingress Load Balancers on Cloud Platforms. The DNS solution hosted within the cluster use these IP addresses to provide resolution for API, API-Int and Ingress services.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.CloudLoadBalancerIPs" - }, - "dnsType": { - "description": "dnsType indicates the type of DNS solution in use within the cluster. Its default value of `PlatformDefault` indicates that the cluster's DNS is the default provided by the cloud platform. It can be set to `ClusterHosted` to bypass the configuration of the cloud default DNS. In this mode, the cluster needs to provide a self-hosted DNS solution for the cluster's installation to succeed. The cluster's use of the cloud's Load Balancers is unaffected by this setting. The value is immutable after it has been set at install time. Currently, there is no way for the customer to add additional DNS entries into the cluster hosted DNS. Enabling this functionality allows the user to start their own DNS solution outside the cluster after installation is complete. The customer would be responsible for configuring this custom DNS solution, and it can be run in addition to the in-cluster DNS solution.", - "type": "string", - "default": "PlatformDefault" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "dnsType", - "fields-to-discriminateBy": { - "clusterHosted": "ClusterHosted" - } - } - ] - }, - "com.github.openshift.api.config.v1.CloudLoadBalancerIPs": { - "description": "CloudLoadBalancerIPs contains the Load Balancer IPs for the cloud's API, API-Int and Ingress Load balancers. They will be populated as soon as the respective Load Balancers have been configured. These values are utilized to configure the DNS solution hosted within the cluster.", - "type": "object", - "properties": { - "apiIntLoadBalancerIPs": { - "description": "apiIntLoadBalancerIPs holds Load Balancer IPs for the internal API service. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Entries in the apiIntLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "apiLoadBalancerIPs": { - "description": "apiLoadBalancerIPs holds Load Balancer IPs for the API service. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Could be empty for private clusters. Entries in the apiLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "ingressLoadBalancerIPs": { - "description": "ingressLoadBalancerIPs holds IPs for Ingress Load Balancers. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Entries in the ingressLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - } - } - }, - "com.github.openshift.api.config.v1.ClusterCondition": { - "description": "ClusterCondition is a union of typed cluster conditions. The 'type' property determines which of the type-specific properties are relevant. When evaluated on a cluster, the condition may match, not match, or fail to evaluate.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "promql": { - "description": "promql represents a cluster condition based on PromQL.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.PromQLClusterCondition" - }, - "type": { - "description": "type represents the cluster-condition type. This defines the members and semantics of any additional properties.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.ClusterImagePolicy": { - "description": "ClusterImagePolicy holds cluster-wide configuration for image signature verification\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec contains the configuration for the cluster image policy.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterImagePolicySpec" - }, - "status": { - "description": "status contains the observed state of the resource.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterImagePolicyStatus" - } - } - }, - "com.github.openshift.api.config.v1.ClusterImagePolicyList": { - "description": "ClusterImagePolicyList is a list of ClusterImagePolicy resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of ClusterImagePolices", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterImagePolicy" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.ClusterImagePolicySpec": { - "description": "CLusterImagePolicySpec is the specification of the ClusterImagePolicy custom resource.", - "type": "object", - "required": [ - "scopes", - "policy" - ], - "properties": { - "policy": { - "description": "policy is a required field that contains configuration to allow scopes to be verified, and defines how images not matching the verification policy will be treated.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageSigstoreVerificationPolicy" - }, - "scopes": { - "description": "scopes is a required field that defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. This support no more than 256 scopes in one object. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. If a scope is configured in both the ClusterImagePolicy and the ImagePolicy, or if the scope in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy, only the policy from the ClusterImagePolicy will be applied. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - } - } - }, - "com.github.openshift.api.config.v1.ClusterImagePolicyStatus": { - "type": "object", - "properties": { - "conditions": { - "description": "conditions provide details on the status of this API Resource.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1.ClusterNetworkEntry": { - "description": "ClusterNetworkEntry is a contiguous block of IP addresses from which pod IPs are allocated.", - "type": "object", - "required": [ - "cidr" - ], - "properties": { - "cidr": { - "description": "The complete block for pod IPs.", - "type": "string", - "default": "" - }, - "hostPrefix": { - "description": "The size (prefix) of block to allocate to each node. If this field is not used by the plugin, it can be left unset.", - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.config.v1.ClusterOperator": { - "description": "ClusterOperator holds the status of a core or optional OpenShift component managed by the Cluster Version Operator (CVO). This object is used by operators to convey their state to the rest of the cluster. Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds configuration that could apply to any operator.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterOperatorSpec" - }, - "status": { - "description": "status holds the information about the state of an operator. It is consistent with status information across the Kubernetes ecosystem.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterOperatorStatus" - } - } - }, - "com.github.openshift.api.config.v1.ClusterOperatorList": { - "description": "ClusterOperatorList is a list of OperatorStatus resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterOperator" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.ClusterOperatorSpec": { - "description": "ClusterOperatorSpec is empty for now, but you could imagine holding information like \"pause\".", - "type": "object" - }, - "com.github.openshift.api.config.v1.ClusterOperatorStatus": { - "description": "ClusterOperatorStatus provides information about the status of the operator.", - "type": "object", - "properties": { - "conditions": { - "description": "conditions describes the state of the operator's managed and monitored components.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterOperatorStatusCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "extension": { - "description": "extension contains any additional status information specific to the operator which owns this status object.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "relatedObjects": { - "description": "relatedObjects is a list of objects that are \"interesting\" or related to this operator. Common uses are: 1. the detailed resource driving the operator 2. operator namespaces 3. operand namespaces", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ObjectReference" - } - }, - "versions": { - "description": "versions is a slice of operator and operand version tuples. Operators which manage multiple operands will have multiple operand entries in the array. Available operators must report the version of the operator itself with the name \"operator\". An operator reports a new \"operator\" version when it has rolled out the new version to all of its operands.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.OperandVersion" - } - } - } - }, - "com.github.openshift.api.config.v1.ClusterOperatorStatusCondition": { - "description": "ClusterOperatorStatusCondition represents the state of the operator's managed and monitored components.", - "type": "object", - "required": [ - "type", - "status", - "lastTransitionTime" - ], - "properties": { - "lastTransitionTime": { - "description": "lastTransitionTime is the time of the last update to the current status property.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "message provides additional information about the current condition. This is only to be consumed by humans. It may contain Line Feed characters (U+000A), which should be rendered as new lines.", - "type": "string" - }, - "reason": { - "description": "reason is the CamelCase reason for the condition's current status.", - "type": "string" - }, - "status": { - "description": "status of the condition, one of True, False, Unknown.", - "type": "string", - "default": "" - }, - "type": { - "description": "type specifies the aspect reported by this condition.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.ClusterVersion": { - "description": "ClusterVersion is the configuration for the ClusterVersionOperator. This is where parameters related to automatic updates can be set.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the desired state of the cluster version - the operator will work to ensure that the desired version is applied to the cluster.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterVersionSpec" - }, - "status": { - "description": "status contains information about the available updates and any in-progress updates.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterVersionStatus" - } - } - }, - "com.github.openshift.api.config.v1.ClusterVersionCapabilitiesSpec": { - "description": "ClusterVersionCapabilitiesSpec selects the managed set of optional, core cluster components.", - "type": "object", - "properties": { - "additionalEnabledCapabilities": { - "description": "additionalEnabledCapabilities extends the set of managed capabilities beyond the baseline defined in baselineCapabilitySet. The default is an empty set.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "baselineCapabilitySet": { - "description": "baselineCapabilitySet selects an initial set of optional capabilities to enable, which can be extended via additionalEnabledCapabilities. If unset, the cluster will choose a default, and the default may change over time. The current default is vCurrent.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.ClusterVersionCapabilitiesStatus": { - "description": "ClusterVersionCapabilitiesStatus describes the state of optional, core cluster components.", - "type": "object", - "properties": { - "enabledCapabilities": { - "description": "enabledCapabilities lists all the capabilities that are currently managed.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "knownCapabilities": { - "description": "knownCapabilities lists all the capabilities known to the current cluster.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.config.v1.ClusterVersionList": { - "description": "ClusterVersionList is a list of ClusterVersion resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterVersion" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.ClusterVersionSpec": { - "description": "ClusterVersionSpec is the desired version state of the cluster. It includes the version the cluster should be at, how the cluster is identified, and where the cluster should look for version updates.", - "type": "object", - "required": [ - "clusterID" - ], - "properties": { - "capabilities": { - "description": "capabilities configures the installation of optional, core cluster components. A null value here is identical to an empty object; see the child properties for default semantics.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterVersionCapabilitiesSpec" - }, - "channel": { - "description": "channel is an identifier for explicitly requesting a non-default set of updates to be applied to this cluster. The default channel will contain stable updates that are appropriate for production clusters.", - "type": "string" - }, - "clusterID": { - "description": "clusterID uniquely identifies this cluster. This is expected to be an RFC4122 UUID value (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx in hexadecimal values). This is a required field.", - "type": "string", - "default": "" - }, - "desiredUpdate": { - "description": "desiredUpdate is an optional field that indicates the desired value of the cluster version. Setting this value will trigger an upgrade (if the current version does not match the desired version). The set of recommended update values is listed as part of available updates in status, and setting values outside that range may cause the upgrade to fail.\n\nSome of the fields are inter-related with restrictions and meanings described here. 1. image is specified, version is specified, architecture is specified. API validation error. 2. image is specified, version is specified, architecture is not specified. The version extracted from the referenced image must match the specified version. 3. image is specified, version is not specified, architecture is specified. API validation error. 4. image is specified, version is not specified, architecture is not specified. image is used. 5. image is not specified, version is specified, architecture is specified. version and desired architecture are used to select an image. 6. image is not specified, version is specified, architecture is not specified. version and current architecture are used to select an image. 7. image is not specified, version is not specified, architecture is specified. API validation error. 8. image is not specified, version is not specified, architecture is not specified. API validation error.\n\nIf an upgrade fails the operator will halt and report status about the failing component. Setting the desired update value back to the previous version will cause a rollback to be attempted if the previous version is within the current minor version. Not all rollbacks will succeed, and some may unrecoverably break the cluster.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.Update" - }, - "overrides": { - "description": "overrides is list of overides for components that are managed by cluster version operator. Marking a component unmanaged will prevent the operator from creating or updating the object.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ComponentOverride" - }, - "x-kubernetes-list-map-keys": [ - "kind", - "group", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "signatureStores": { - "description": "signatureStores contains the upstream URIs to verify release signatures and optional reference to a config map by name containing the PEM-encoded CA bundle.\n\nBy default, CVO will use existing signature stores if this property is empty. The CVO will check the release signatures in the local ConfigMaps first. It will search for a valid signature in these stores in parallel only when local ConfigMaps did not include a valid signature. Validation will fail if none of the signature stores reply with valid signature before timeout. Setting signatureStores will replace the default signature stores with custom signature stores. Default stores can be used with custom signature stores by adding them manually.\n\nA maximum of 32 signature stores may be configured.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SignatureStore" - }, - "x-kubernetes-list-map-keys": [ - "url" - ], - "x-kubernetes-list-type": "map" - }, - "upstream": { - "description": "upstream may be used to specify the preferred update server. By default it will use the appropriate update server for the cluster and region.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.ClusterVersionStatus": { - "description": "ClusterVersionStatus reports the status of the cluster versioning, including any upgrades that are in progress. The current field will be set to whichever version the cluster is reconciling to, and the conditions array will report whether the update succeeded, is in progress, or is failing.", - "type": "object", - "required": [ - "desired", - "observedGeneration", - "versionHash", - "availableUpdates" - ], - "properties": { - "availableUpdates": { - "description": "availableUpdates contains updates recommended for this cluster. Updates which appear in conditionalUpdates but not in availableUpdates may expose this cluster to known issues. This list may be empty if no updates are recommended, if the update service is unavailable, or if an invalid channel has been specified.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.Release" - }, - "x-kubernetes-list-type": "atomic" - }, - "capabilities": { - "description": "capabilities describes the state of optional, core cluster components.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterVersionCapabilitiesStatus" - }, - "conditionalUpdateRisks": { - "description": "conditionalUpdateRisks contains the list of risks associated with conditionalUpdates. When performing a conditional update, all its associated risks will be compared with the set of accepted risks in the spec.desiredUpdate.acceptRisks field. If all risks for a conditional update are included in the spec.desiredUpdate.acceptRisks set, the conditional update can proceed, otherwise it is blocked. The risk names in the list must be unique. conditionalUpdateRisks must not contain more than 500 entries.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConditionalUpdateRisk" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "conditionalUpdates": { - "description": "conditionalUpdates contains the list of updates that may be recommended for this cluster if it meets specific required conditions. Consumers interested in the set of updates that are actually recommended for this cluster should use availableUpdates. This list may be empty if no updates are recommended, if the update service is unavailable, or if an empty or invalid channel has been specified.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConditionalUpdate" - }, - "x-kubernetes-list-type": "atomic" - }, - "conditions": { - "description": "conditions provides information about the cluster version. The condition \"Available\" is set to true if the desiredUpdate has been reached. The condition \"Progressing\" is set to true if an update is being applied. The condition \"Degraded\" is set to true if an update is currently blocked by a temporary or permanent error. Conditions are only valid for the current desiredUpdate when metadata.generation is equal to status.generation.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterOperatorStatusCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "desired": { - "description": "desired is the version that the cluster is reconciling towards. If the cluster is not yet fully initialized desired will be set with the information available, which may be an image or a tag.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.Release" - }, - "history": { - "description": "history contains a list of the most recent versions applied to the cluster. This value may be empty during cluster startup, and then will be updated when a new update is being applied. The newest update is first in the list and it is ordered by recency. Updates in the history have state Completed if the rollout completed - if an update was failing or halfway applied the state will be Partial. Only a limited amount of update history is preserved.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.UpdateHistory" - }, - "x-kubernetes-list-type": "atomic" - }, - "observedGeneration": { - "description": "observedGeneration reports which version of the spec is being synced. If this value is not equal to metadata.generation, then the desired and conditions fields may represent a previous version.", - "type": "integer", - "format": "int64", - "default": 0 - }, - "versionHash": { - "description": "versionHash is a fingerprint of the content that the cluster will be updated with. It is used by the operator to avoid unnecessary work and is for internal use only.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.ComponentOverride": { - "description": "ComponentOverride allows overriding cluster version operator's behavior for a component.", - "type": "object", - "required": [ - "kind", - "group", - "namespace", - "name", - "unmanaged" - ], - "properties": { - "group": { - "description": "group identifies the API group that the kind is in.", - "type": "string", - "default": "" - }, - "kind": { - "description": "kind indentifies which object to override.", - "type": "string", - "default": "" - }, - "name": { - "description": "name is the component's name.", - "type": "string", - "default": "" - }, - "namespace": { - "description": "namespace is the component's namespace. If the resource is cluster scoped, the namespace should be empty.", - "type": "string", - "default": "" - }, - "unmanaged": { - "description": "unmanaged controls if cluster version operator should stop managing the resources in this cluster. Default: false", - "type": "boolean", - "default": false - } - } - }, - "com.github.openshift.api.config.v1.ComponentRouteSpec": { - "description": "ComponentRouteSpec allows for configuration of a route's hostname and serving certificate.", - "type": "object", - "required": [ - "namespace", - "name", - "hostname" - ], - "properties": { - "hostname": { - "description": "hostname is the hostname that should be used by the route.", - "type": "string", - "default": "" - }, - "labels": { - "description": "labels defines additional labels to be applied to the route created for the component. These labels are used by the IngressController to determine which routes it should manage. Changing labels may cause the route to be reassigned to a different IngressController. When omitted, no additional labels are applied to the component route. When specified, labels must contain at least one entry, up to a maximum of 8. Label keys must be valid qualified names, consisting of a name segment and an optional prefix separated by a slash (/). The name segment must be at most 63 characters in length and must consist only of alphanumeric characters, dashes (-), underscores (_), and dots (.), and must start and end with alphanumeric characters. The prefix, if specified, must be a DNS subdomain: at most 253 characters in length, consisting of dot-separated segments where each segment starts and ends with an alphanumeric character. Label values must be either empty or 1-63 characters, consisting of alphanumeric characters, dashes (-), underscores (_), or dots (.), starting and ending with an alphanumeric character. Keys with the \"kubernetes.io/\", \"k8s.io/\", and \"openshift.io/\" prefixes are reserved and may not be used.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - }, - "x-kubernetes-map-type": "granular" - }, - "name": { - "description": "name is the logical name of the route to customize.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of status.componentRoutes if the route is to be customized.", - "type": "string", - "default": "" - }, - "namespace": { - "description": "namespace is the namespace of the route to customize.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of status.componentRoutes if the route is to be customized.", - "type": "string", - "default": "" - }, - "servingCertKeyPairSecret": { - "description": "servingCertKeyPairSecret is a reference to a secret of type `kubernetes.io/tls` in the openshift-config namespace. The serving cert/key pair must match and will be used by the operator to fulfill the intent of serving with this name. If the custom hostname uses the default routing suffix of the cluster, the Secret specification for a serving certificate will not be needed.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - } - } - }, - "com.github.openshift.api.config.v1.ComponentRouteStatus": { - "description": "ComponentRouteStatus contains information allowing configuration of a route's hostname and serving certificate.", - "type": "object", - "required": [ - "namespace", - "name", - "defaultHostname", - "relatedObjects" - ], - "properties": { - "conditions": { - "description": "conditions are used to communicate the state of the componentRoutes entry.\n\nSupported conditions include Available, Degraded and Progressing.\n\nIf available is true, the content served by the route can be accessed by users. This includes cases where a default may continue to serve content while the customized route specified by the cluster-admin is being configured.\n\nIf Degraded is true, that means something has gone wrong trying to handle the componentRoutes entry. The currentHostnames field may or may not be in effect.\n\nIf Progressing is true, that means the component is taking some action related to the componentRoutes entry.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "consumingUsers": { - "description": "consumingUsers is a slice of ServiceAccounts that need to have read permission on the servingCertKeyPairSecret secret.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "currentHostnames": { - "description": "currentHostnames is the list of current names used by the route. Typically, this list should consist of a single hostname, but if multiple hostnames are supported by the route the operator may write multiple entries to this list.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "defaultHostname": { - "description": "defaultHostname is the hostname of this route prior to customization.", - "type": "string", - "default": "" - }, - "name": { - "description": "name is the logical name of the route to customize. It does not have to be the actual name of a route resource but it cannot be renamed.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of spec.componentRoutes if the route is to be customized.", - "type": "string", - "default": "" - }, - "namespace": { - "description": "namespace is the namespace of the route to customize. It must be a real namespace. Using an actual namespace ensures that no two components will conflict and the same component can be installed multiple times.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of spec.componentRoutes if the route is to be customized.", - "type": "string", - "default": "" - }, - "relatedObjects": { - "description": "relatedObjects is a list of resources which are useful when debugging or inspecting how spec.componentRoutes is applied.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ObjectReference" - } - } - } - }, - "com.github.openshift.api.config.v1.ConditionalUpdate": { - "description": "ConditionalUpdate represents an update which is recommended to some clusters on the version the current cluster is reconciling, but which may not be recommended for the current cluster.", - "type": "object", - "required": [ - "release", - "risks" - ], - "properties": { - "conditions": { - "description": "conditions represents the observations of the conditional update's current status. Known types are: * Recommended, for whether the update is recommended for the current cluster.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "release": { - "description": "release is the target of the update.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.Release" - }, - "riskNames": { - "description": "riskNames represents the set of the names of conditionalUpdateRisks that are relevant to this update for some clusters. The Applies condition of each conditionalUpdateRisks entry declares if that risk applies to this cluster. A conditional update is accepted only if each of its risks either does not apply to the cluster or is considered acceptable by the cluster administrator. The latter means that the risk names are included in value of the spec.desiredUpdate.acceptRisks field. Entries must be unique and must not exceed 256 characters. riskNames must not contain more than 500 entries.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "risks": { - "description": "risks represents the range of issues associated with updating to the target release. The cluster-version operator will evaluate all entries, and only recommend the update if there is at least one entry and all entries recommend the update.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConditionalUpdateRisk" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" - } - } - }, - "com.github.openshift.api.config.v1.ConditionalUpdateRisk": { - "description": "ConditionalUpdateRisk represents a reason and cluster-state for not recommending a conditional update.", - "type": "object", - "required": [ - "url", - "name", - "message", - "matchingRules" - ], - "properties": { - "conditions": { - "description": "conditions represents the observations of the conditional update risk's current status. Known types are: * Applies, for whether the risk applies to the current cluster. The condition's types in the list must be unique. conditions must not contain more than one entry.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "matchingRules": { - "description": "matchingRules is a slice of conditions for deciding which clusters match the risk and which do not. The slice is ordered by decreasing precedence. The cluster-version operator will walk the slice in order, and stop after the first it can successfully evaluate. If no condition can be successfully evaluated, the update will not be recommended.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterCondition" - }, - "x-kubernetes-list-type": "atomic" - }, - "message": { - "description": "message provides additional information about the risk of updating, in the event that matchingRules match the cluster state. This is only to be consumed by humans. It may contain Line Feed characters (U+000A), which should be rendered as new lines.", - "type": "string", - "default": "" - }, - "name": { - "description": "name is the CamelCase reason for not recommending a conditional update, in the event that matchingRules match the cluster state.", - "type": "string", - "default": "" - }, - "url": { - "description": "url contains information about this risk.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.ConfigMapFileReference": { - "description": "ConfigMapFileReference references a config map in a specific namespace. The namespace must be specified at the point of use.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "key": { - "description": "key allows pointing to a specific key/value inside of the configmap. This is useful for logical file references.", - "type": "string" - }, - "name": { - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.ConfigMapNameReference": { - "description": "ConfigMapNameReference references a config map in a specific namespace. The namespace must be specified at the point of use.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is the metadata.name of the referenced config map", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.Console": { - "description": "Console holds cluster-wide configuration for the web console, including the logout URL, and reports the public URL of the console. The canonical name is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConsoleSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConsoleStatus" - } - } - }, - "com.github.openshift.api.config.v1.ConsoleAuthentication": { - "description": "ConsoleAuthentication defines a list of optional configuration for console authentication.", - "type": "object", - "properties": { - "logoutRedirect": { - "description": "An optional, absolute URL to redirect web browsers to after logging out of the console. If not specified, it will redirect to the default login page. This is required when using an identity provider that supports single sign-on (SSO) such as: - OpenID (Keycloak, Azure) - RequestHeader (GSSAPI, SSPI, SAML) - OAuth (GitHub, GitLab, Google) Logging out of the console will destroy the user's token. The logoutRedirect provides the user the option to perform single logout (SLO) through the identity provider to destroy their single sign-on session.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.ConsoleList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.Console" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.ConsoleSpec": { - "description": "ConsoleSpec is the specification of the desired behavior of the Console.", - "type": "object", - "properties": { - "authentication": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConsoleAuthentication" - } - } - }, - "com.github.openshift.api.config.v1.ConsoleStatus": { - "description": "ConsoleStatus defines the observed status of the Console.", - "type": "object", - "properties": { - "consoleURL": { - "description": "The URL for the console. This will be derived from the host for the route that is created for the console.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.Custom": { - "description": "Custom provides the custom configuration of gatherers", - "type": "object", - "required": [ - "configs" - ], - "properties": { - "configs": { - "description": "configs is a required list of gatherers configurations that can be used to enable or disable specific gatherers. It may not exceed 100 items and each gatherer can be present only once. It is possible to disable an entire set of gatherers while allowing a specific function within that set. The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.GathererConfig" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1.CustomFeatureGates": { - "type": "object", - "properties": { - "disabled": { - "description": "disabled is a list of all feature gates that you want to force off", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "enabled": { - "description": "enabled is a list of all feature gates that you want to force on", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.config.v1.CustomTLSProfile": { - "description": "CustomTLSProfile is a user-defined TLS security profile. Be extremely careful using a custom TLS profile as invalid configurations can be catastrophic.", - "type": "object", - "required": [ - "ciphers", - "minTLSVersion" - ], - "properties": { - "ciphers": { - "description": "ciphers is used to specify the cipher algorithms that are negotiated during the TLS handshake. Operators may remove entries that their operands do not support. For example, to use only ECDHE-RSA-AES128-GCM-SHA256 (yaml):\n\n ciphers:\n - ECDHE-RSA-AES128-GCM-SHA256\n\nTLS 1.3 cipher suites (e.g. TLS_AES_128_GCM_SHA256) are not configurable and are always enabled when TLS 1.3 is negotiated.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "groups": { - "description": "groups is an optional, ordered field used to specify the supported groups (formerly known as elliptic curves) that are used during the TLS handshake. The order of the groups represents a suggested preference, with the most preferred group first. Note that not all platform components honor the ordering: Go-based components use Go's internal preference order and treat this list as a filter of allowed groups rather than an ordered preference. Operators may remove entries their operands do not support.\n\nWhen omitted, this means no opinion and the platform is left to choose reasonable defaults which are subject to change over time and may be different per platform component depending on the underlying TLS libraries they use. If specified, the list must contain at least one and at most 7 groups, and each group must be unique.\n\nFor example, to use X25519 and secp256r1 (yaml):\n\n groups:\n - X25519\n - secp256r1", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "minTLSVersion": { - "description": "minTLSVersion is used to specify the minimal version of the TLS protocol that is negotiated during the TLS handshake. For example, to use TLS versions 1.1, 1.2 and 1.3 (yaml):\n\n minTLSVersion: VersionTLS11", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.DNS": { - "description": "DNS holds cluster-wide information about DNS. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.DNSSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.DNSStatus" - } - } - }, - "com.github.openshift.api.config.v1.DNSList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.DNS" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.DNSPlatformSpec": { - "description": "DNSPlatformSpec holds cloud-provider-specific configuration for DNS administration.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "aws": { - "description": "aws contains DNS configuration specific to the Amazon Web Services cloud provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.AWSDNSSpec" - }, - "type": { - "description": "type is the underlying infrastructure provider for the cluster. Allowed values: \"\", \"AWS\".\n\nIndividual components may not support all platforms, and must handle unrecognized platforms with best-effort defaults.", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "aws": "AWS" - } - } - ] - }, - "com.github.openshift.api.config.v1.DNSSpec": { - "type": "object", - "required": [ - "baseDomain" - ], - "properties": { - "baseDomain": { - "description": "baseDomain is the base domain of the cluster. All managed DNS records will be sub-domains of this base.\n\nFor example, given the base domain `openshift.example.com`, an API server DNS record may be created for `cluster-api.openshift.example.com`.\n\nOnce set, this field cannot be changed.", - "type": "string", - "default": "" - }, - "platform": { - "description": "platform holds configuration specific to the underlying infrastructure provider for DNS. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.DNSPlatformSpec" - }, - "privateZone": { - "description": "privateZone is the location where all the DNS records that are only available internally to the cluster exist.\n\nIf this field is nil, no private records should be created.\n\nOnce set, this field cannot be changed.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.DNSZone" - }, - "publicZone": { - "description": "publicZone is the location where all the DNS records that are publicly accessible to the internet exist.\n\nIf this field is nil, no public records should be created.\n\nOnce set, this field cannot be changed.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.DNSZone" - } - } - }, - "com.github.openshift.api.config.v1.DNSStatus": { - "type": "object" - }, - "com.github.openshift.api.config.v1.DNSZone": { - "description": "DNSZone is used to define a DNS hosted zone. A zone can be identified by an ID or tags.", - "type": "object", - "properties": { - "id": { - "description": "id is the identifier that can be used to find the DNS hosted zone.\n\non AWS zone can be fetched using `ID` as id in [1] on Azure zone can be fetched using `ID` as a pre-determined name in [2], on GCP zone can be fetched using `ID` as a pre-determined name in [3].\n\n[1]: https://docs.aws.amazon.com/cli/latest/reference/route53/get-hosted-zone.html#options [2]: https://docs.microsoft.com/en-us/cli/azure/network/dns/zone?view=azure-cli-latest#az-network-dns-zone-show [3]: https://cloud.google.com/dns/docs/reference/v1/managedZones/get", - "type": "string" - }, - "tags": { - "description": "tags can be used to query the DNS hosted zone.\n\non AWS, resourcegroupstaggingapi [1] can be used to fetch a zone using `Tags` as tag-filters,\n\n[1]: https://docs.aws.amazon.com/cli/latest/reference/resourcegroupstaggingapi/get-resources.html#options", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.config.v1.DelegatedAuthentication": { - "description": "DelegatedAuthentication allows authentication to be disabled.", - "type": "object", - "properties": { - "disabled": { - "description": "disabled indicates that authentication should be disabled. By default it will use delegated authentication.", - "type": "boolean" - } - } - }, - "com.github.openshift.api.config.v1.DelegatedAuthorization": { - "description": "DelegatedAuthorization allows authorization to be disabled.", - "type": "object", - "properties": { - "disabled": { - "description": "disabled indicates that authorization should be disabled. By default it will use delegated authorization.", - "type": "boolean" - } - } - }, - "com.github.openshift.api.config.v1.DeprecatedWebhookTokenAuthenticator": { - "description": "deprecatedWebhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator. It's the same as WebhookTokenAuthenticator but it's missing the 'required' validation on KubeConfig field.", - "type": "object", - "required": [ - "kubeConfig" - ], - "properties": { - "kubeConfig": { - "description": "kubeConfig contains kube config file data which describes how to access the remote webhook service. For further details, see: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication The key \"kubeConfig\" is used to locate the data. If the secret or expected key is not found, the webhook is not honored. If the specified kube config data is not valid, the webhook is not honored. The namespace for this secret is determined by the point of use.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - } - } - }, - "com.github.openshift.api.config.v1.EquinixMetalPlatformSpec": { - "description": "EquinixMetalPlatformSpec holds the desired state of the Equinix Metal infrastructure provider. This only includes fields that can be modified in the cluster.", - "type": "object" - }, - "com.github.openshift.api.config.v1.EquinixMetalPlatformStatus": { - "description": "EquinixMetalPlatformStatus holds the current status of the Equinix Metal infrastructure provider.", - "type": "object", - "properties": { - "apiServerInternalIP": { - "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.", - "type": "string" - }, - "ingressIP": { - "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.EtcdConnectionInfo": { - "description": "EtcdConnectionInfo holds information necessary for connecting to an etcd server", - "type": "object", - "required": [ - "ca", - "certFile", - "keyFile" - ], - "properties": { - "ca": { - "description": "ca is a file containing trusted roots for the etcd server certificates", - "type": "string", - "default": "" - }, - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - }, - "urls": { - "description": "urls are the URLs for etcd", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.config.v1.EtcdStorageConfig": { - "type": "object", - "required": [ - "ca", - "certFile", - "keyFile", - "storagePrefix" - ], - "properties": { - "ca": { - "description": "ca is a file containing trusted roots for the etcd server certificates", - "type": "string", - "default": "" - }, - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - }, - "storagePrefix": { - "description": "storagePrefix is the path within etcd that the OpenShift resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located.", - "type": "string", - "default": "" - }, - "urls": { - "description": "urls are the URLs for etcd", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.config.v1.ExternalClaimsSource": { - "description": "ExternalClaimsSource provides the configuration for a single external claim source.", - "type": "object", - "required": [ - "url", - "mappings" - ], - "properties": { - "authentication": { - "description": "authentication is an optional field that configures how the apiserver authenticates with an external claims source. When not specified, anonymous authentication is used which means no 'Authorization' header is sent in the HTTP request to fetch the external claims.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalSourceAuthentication" - }, - "mappings": { - "description": "mappings is a required list of the claim and response handling expression pairs that produces the claims from the external source. mappings must have at least 1 entry and must not exceed 16 entries. Entries must have a unique name across all external claim sources.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SourcedClaimMapping" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "predicates": { - "description": "predicates is an optional list of constraints in which claims should attempt to be fetched from this external source.\n\nWhen omitted, claims are always fetched from this external source.\n\nWhen specified, all predicates must evaluate to 'true' before claims are attempted to be fetched from this external source. predicates must have at least 1 entry and must not exceed 16 entries. Entries must have unique expressions.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalSourcePredicate" - }, - "x-kubernetes-list-map-keys": [ - "expression" - ], - "x-kubernetes-list-type": "map" - }, - "tls": { - "description": "tls is an optional field that configures the http client TLS settings when fetching external claims from this source.\n\nWhen omitted, system default TLS settings will be used for fetching claims from the external source.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalSourceTLS" - }, - "url": { - "description": "url is a required configuration of the URL for which the external claims are located.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SourceURL" - } - } - }, - "com.github.openshift.api.config.v1.ExternalIPConfig": { - "description": "ExternalIPConfig specifies some IP blocks relevant for the ExternalIP field of a Service resource.", - "type": "object", - "properties": { - "autoAssignCIDRs": { - "description": "autoAssignCIDRs is a list of CIDRs from which to automatically assign Service.ExternalIP. These are assigned when the service is of type LoadBalancer. In general, this is only useful for bare-metal clusters. In Openshift 3.x, this was misleadingly called \"IngressIPs\". Automatically assigned External IPs are not affected by any ExternalIPPolicy rules. Currently, only one entry may be provided.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "policy": { - "description": "policy is a set of restrictions applied to the ExternalIP field. If nil or empty, then ExternalIP is not allowed to be set.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalIPPolicy" - } - } - }, - "com.github.openshift.api.config.v1.ExternalIPPolicy": { - "description": "ExternalIPPolicy configures exactly which IPs are allowed for the ExternalIP field in a Service. If the zero struct is supplied, then none are permitted. The policy controller always allows automatically assigned external IPs.", - "type": "object", - "properties": { - "allowedCIDRs": { - "description": "allowedCIDRs is the list of allowed CIDRs.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "rejectedCIDRs": { - "description": "rejectedCIDRs is the list of disallowed CIDRs. These take precedence over allowedCIDRs.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.config.v1.ExternalPlatformSpec": { - "description": "ExternalPlatformSpec holds the desired state for the generic External infrastructure provider.", - "type": "object", - "properties": { - "platformName": { - "description": "platformName holds the arbitrary string representing the infrastructure provider name, expected to be set at the installation time. This field is solely for informational and reporting purposes and is not expected to be used for decision-making.", - "type": "string", - "default": "Unknown" - } - } - }, - "com.github.openshift.api.config.v1.ExternalPlatformStatus": { - "description": "ExternalPlatformStatus holds the current status of the generic External infrastructure provider.", - "type": "object", - "properties": { - "cloudControllerManager": { - "description": "cloudControllerManager contains settings specific to the external Cloud Controller Manager (a.k.a. CCM or CPI). When omitted, new nodes will be not tainted and no extra initialization from the cloud controller manager is expected.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.CloudControllerManagerStatus" - } - } - }, - "com.github.openshift.api.config.v1.ExternalSourceAuthentication": { - "description": "ExternalSourceAuthentication configures how the apiserver should attempt to authenticate with an external claims source.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "clientCredential": { - "description": "clientCredential configures the client credentials and token endpoint to use to get an access token. clientCredential is required when type is 'ClientCredential', and forbidden otherwise.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClientCredentialConfig" - }, - "type": { - "description": "type is a required field that sets the type of authentication method used by the authenticator when fetching external claims.\n\nAllowed values are 'RequestProvidedToken' and 'ClientCredential'.\n\nWhen set to 'RequestProvidedToken', the authenticator will use the token provided to the kube-apiserver as part of the request to authenticate with the external claims source.\n\nWhen set to 'ClientCredential', the authenticator will use the configured client-id, client-secret, and token endpoint to fetch an access token using the OAuth2 client credentials grant flow. The fetched access token will then be used to authenticate with the external claims source.\n\n\nPossible enum values:\n - `\"ClientCredential\"` is an ExternalSourceAuthenticationType that represents that the authenticator should use the OAuth2 client credentials grant flow to obtain an access token for authenticating with the external claims source. This is useful for scenarios such as fetching user information from Microsoft's Graph API where a separate client credential is needed to access the API.\n - `\"RequestProvidedToken\"` is an ExternalSourceAuthenticationType that represents that the token being evaluated for authentication should be used for authenticating with the external claims source. This is useful for scenarios where a token has multiple audiences and scopes so that it can be used to access both the cluster and the UserInfo endpoint that contains additional information about the user not present in the token.", - "type": "string", - "enum": [ - "ClientCredential", - "RequestProvidedToken" - ] - } - } - }, - "com.github.openshift.api.config.v1.ExternalSourceCertificateAuthorityConfigMapReference": { - "description": "ExternalSourceCertificateAuthorityConfigMapReference is a reference to a ConfigMap in the openshift-config namespace that should be used for configuring the certificate authority to be used when sourcing claims from external sources.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is the required name of the ConfigMap that exists in the openshift-config namespace. The key \"ca-bundle.crt\" must be present and must contain the CA certificate to be used to verify the external source's TLS certificate.\n\nIt must be at least 1 character in length, must not exceed 253 characters in length, must start and end with a lowercase alphanumeric character, and must only contain lowercase alphanumeric characters, '-' or '.'.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.ExternalSourcePredicate": { - "description": "ExternalSourcePredicate configures a singular condition that must return true before the external source is queried to retrieve external claims.", - "type": "object", - "required": [ - "expression" - ], - "properties": { - "expression": { - "description": "expression is a required CEL expression that is used to determine whether or not an external source should be used to fetch external claims.\n\nThe expression must return a boolean value, where true means that the source should be consulted and false means that it should not.\n\nClaims from the token used for the request to the kube-apiserver are made available via the `claims` variable.\n\nThe contents of the `claims` variable varies based on the claims that are present in the token being validated. It is the responsibility of those configuring this field to understand what claims the identity provider includes when issuing tokens.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.ExternalSourceTLS": { - "description": "ExternalSourceTLS configures the TLS options that the apiserver uses as a client when making a request to the external claim source.", - "type": "object", - "required": [ - "certificateAuthority" - ], - "properties": { - "certificateAuthority": { - "description": "certificateAuthority is a required reference to a ConfigMap in the openshift-config namespace that contains the CA certificate to use to validate TLS connections with the external claims source. The key \"ca-bundle.crt\" must be present in the referenced ConfigMap and must contain the CA certificate to be used to verify the external source's TLS certificate.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalSourceCertificateAuthorityConfigMapReference" - } - } - }, - "com.github.openshift.api.config.v1.ExtraMapping": { - "description": "ExtraMapping allows specifying a key and CEL expression to evaluate the keys' value. It is used to create additional mappings and attributes added to a cluster identity from a provided authentication token.", - "type": "object", - "required": [ - "key", - "valueExpression" - ], - "properties": { - "key": { - "description": "key is a required field that specifies the string to use as the extra attribute key.\n\nkey must be a domain-prefix path (e.g 'example.org/foo'). key must not exceed 510 characters in length. key must contain the '/' character, separating the domain and path characters. key must not be empty.\n\nThe domain portion of the key (string of characters prior to the '/') must be a valid RFC1123 subdomain. It must not exceed 253 characters in length. It must start and end with an alphanumeric character. It must only contain lower case alphanumeric characters and '-' or '.'. It must not use the reserved domains, or be subdomains of, \"kubernetes.io\", \"k8s.io\", and \"openshift.io\".\n\nThe path portion of the key (string of characters after the '/') must not be empty and must consist of at least one alphanumeric character, percent-encoded octets, '-', '.', '_', '~', '!', '$', '&', ''', '(', ')', '*', '+', ',', ';', '=', and ':'. It must not exceed 256 characters in length.", - "type": "string", - "default": "" - }, - "valueExpression": { - "description": "valueExpression is a required field to specify the CEL expression to extract the extra attribute value from a JWT token's claims. valueExpression must produce a string or string array value. \"\", [], and null are treated as the extra mapping not being present. Empty string values within an array are filtered out.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'. 'claims' is a map of claim names to claim values. For example, the 'sub' claim value can be accessed as 'claims.sub'. Nested claims can be accessed using dot notation ('claims.foo.bar').\n\nvalueExpression must not exceed 1024 characters in length. valueExpression must not be empty.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.FeatureGate": { - "description": "Feature holds cluster-wide information about feature gates. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.FeatureGateSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.FeatureGateStatus" - } - } - }, - "com.github.openshift.api.config.v1.FeatureGateAttributes": { - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is the name of the FeatureGate.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.FeatureGateDetails": { - "type": "object", - "required": [ - "version" - ], - "properties": { - "disabled": { - "description": "disabled is a list of all feature gates that are disabled in the cluster for the named version.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.FeatureGateAttributes" - } - }, - "enabled": { - "description": "enabled is a list of all feature gates that are enabled in the cluster for the named version.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.FeatureGateAttributes" - } - }, - "version": { - "description": "version matches the version provided by the ClusterVersion and in the ClusterOperator.Status.Versions field.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.FeatureGateList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.FeatureGate" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.FeatureGateSelection": { - "type": "object", - "properties": { - "customNoUpgrade": { - "description": "customNoUpgrade allows the enabling or disabling of any feature. Turning this feature set on IS NOT SUPPORTED, CANNOT BE UNDONE, and PREVENTS UPGRADES. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations your cluster may fail in an unrecoverable way. featureSet must equal \"CustomNoUpgrade\" must be set to use this field.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.CustomFeatureGates" - }, - "featureSet": { - "description": "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting. Turning on or off features may cause irreversible changes in your cluster which cannot be undone.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "featureSet", - "fields-to-discriminateBy": { - "customNoUpgrade": "CustomNoUpgrade" - } - } - ] - }, - "com.github.openshift.api.config.v1.FeatureGateSpec": { - "type": "object", - "properties": { - "customNoUpgrade": { - "description": "customNoUpgrade allows the enabling or disabling of any feature. Turning this feature set on IS NOT SUPPORTED, CANNOT BE UNDONE, and PREVENTS UPGRADES. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations your cluster may fail in an unrecoverable way. featureSet must equal \"CustomNoUpgrade\" must be set to use this field.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.CustomFeatureGates" - }, - "featureSet": { - "description": "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting. Turning on or off features may cause irreversible changes in your cluster which cannot be undone.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "featureSet", - "fields-to-discriminateBy": { - "customNoUpgrade": "CustomNoUpgrade" - } - } - ] - }, - "com.github.openshift.api.config.v1.FeatureGateStatus": { - "type": "object", - "properties": { - "conditions": { - "description": "conditions represent the observations of the current state. Known .status.conditions.type are: \"DeterminationDegraded\"", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "featureGates": { - "description": "featureGates contains a list of enabled and disabled featureGates that are keyed by payloadVersion. Operators other than the CVO and cluster-config-operator, must read the .status.featureGates, locate the version they are managing, find the enabled/disabled featuregates and make the operand and operator match. The enabled/disabled values for a particular version may change during the life of the cluster as various .spec.featureSet values are selected. Operators may choose to restart their processes to pick up these changes, but remembering past enable/disable lists is beyond the scope of this API and is the responsibility of individual operators. Only featureGates with .version in the ClusterVersion.status will be present in this list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.FeatureGateDetails" - }, - "x-kubernetes-list-map-keys": [ - "version" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1.FeatureGateTests": { - "type": "object", - "required": [ - "featureGate", - "tests" - ], - "properties": { - "featureGate": { - "description": "featureGate is the name of the FeatureGate as it appears in The FeatureGate CR instance.", - "type": "string", - "default": "" - }, - "tests": { - "description": "tests contains an item for every TestName", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.TestDetails" - } - } - } - }, - "com.github.openshift.api.config.v1.GCPPlatformSpec": { - "description": "GCPPlatformSpec holds the desired state of the Google Cloud Platform infrastructure provider. This only includes fields that can be modified in the cluster.", - "type": "object" - }, - "com.github.openshift.api.config.v1.GCPPlatformStatus": { - "description": "GCPPlatformStatus holds the current status of the Google Cloud Platform infrastructure provider.", - "type": "object", - "required": [ - "projectID", - "region" - ], - "properties": { - "cloudLoadBalancerConfig": { - "description": "cloudLoadBalancerConfig holds configuration related to DNS and cloud load balancers. It allows configuration of in-cluster DNS as an alternative to the platform default DNS implementation. When using the ClusterHosted DNS type, Load Balancer IP addresses must be provided for the API and internal API load balancers as well as the ingress load balancer.", - "default": { - "dnsType": "PlatformDefault" - }, - "$ref": "#/definitions/com.github.openshift.api.config.v1.CloudLoadBalancerConfig" - }, - "projectID": { - "description": "resourceGroupName is the Project ID for new GCP resources created for the cluster.", - "type": "string", - "default": "" - }, - "region": { - "description": "region holds the region for new GCP resources created for the cluster.", - "type": "string", - "default": "" - }, - "resourceLabels": { - "description": "resourceLabels is a list of additional labels to apply to GCP resources created for the cluster. See https://cloud.google.com/compute/docs/labeling-resources for information on labeling GCP resources. GCP supports a maximum of 64 labels per resource. OpenShift reserves 32 labels for internal use, allowing 32 labels for user configuration.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.GCPResourceLabel" - }, - "x-kubernetes-list-map-keys": [ - "key" - ], - "x-kubernetes-list-type": "map" - }, - "resourceTags": { - "description": "resourceTags is a list of additional tags to apply to GCP resources created for the cluster. See https://cloud.google.com/resource-manager/docs/tags/tags-overview for information on tagging GCP resources. GCP supports a maximum of 50 tags per resource.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.GCPResourceTag" - }, - "x-kubernetes-list-map-keys": [ - "key" - ], - "x-kubernetes-list-type": "map" - }, - "universeDomain": { - "description": "universeDomain is the GCP universe domain for the cluster, detected from the installer credentials. Components with their own GCP credentials should read the universe domain from those credentials, as they are the authoritative source. This field is provided for components that do not have GCP credentials and for general observability.\n\nWhen omitted, standard public GCP (googleapis.com) is assumed.\n\nuniverseDomain is an optional field that, when specified, must be non-empty and at most 253 characters. It must be a valid DNS subdomain: containing only lowercase alphanumeric characters, '-' or '.', and starting and ending with an alphanumeric character.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.GCPResourceLabel": { - "description": "GCPResourceLabel is a label to apply to GCP resources created for the cluster.", - "type": "object", - "required": [ - "key", - "value" - ], - "properties": { - "key": { - "description": "key is the key part of the label. A label key can have a maximum of 63 characters and cannot be empty. Label key must begin with a lowercase letter, and must contain only lowercase letters, numeric characters, and the following special characters `_-`. Label key must not have the reserved prefixes `kubernetes-io` and `openshift-io`.", - "type": "string", - "default": "" - }, - "value": { - "description": "value is the value part of the label. A label value can have a maximum of 63 characters and cannot be empty. Value must contain only lowercase letters, numeric characters, and the following special characters `_-`.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.GCPResourceTag": { - "description": "GCPResourceTag is a tag to apply to GCP resources created for the cluster.", - "type": "object", - "required": [ - "parentID", - "key", - "value" - ], - "properties": { - "key": { - "description": "key is the key part of the tag. A tag key can have a maximum of 63 characters and cannot be empty. Tag key must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `._-`.", - "type": "string", - "default": "" - }, - "parentID": { - "description": "parentID is the ID of the hierarchical resource where the tags are defined, e.g. at the Organization or the Project level. To find the Organization or Project ID refer to the following pages: https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id, https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects. An OrganizationID must consist of decimal numbers, and cannot have leading zeroes. A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters, numbers, and hyphens, and must start with a letter, and cannot end with a hyphen.", - "type": "string", - "default": "" - }, - "value": { - "description": "value is the value part of the tag. A tag value can have a maximum of 63 characters and cannot be empty. Tag value must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `_-.@%=+:,*#&(){}[]` and spaces.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.GatherConfig": { - "description": "GatherConfig provides data gathering configuration options.", - "type": "object", - "required": [ - "gatherers" - ], - "properties": { - "dataPolicy": { - "description": "dataPolicy is an optional list of DataPolicyOptions that allows user to enable additional obfuscation of the Insights archive data. It may not exceed 2 items and must not contain duplicates. Valid values are ObfuscateNetworking and WorkloadNames. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When set to WorkloadNames, the gathered data about cluster resources will not contain the workload names for your deployments. Resources UIDs will be used instead. When omitted no obfuscation is applied.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "gatherers": { - "description": "gatherers is a required field that specifies the configuration of the gatherers.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.Gatherers" - }, - "storage": { - "description": "storage is an optional field that allows user to define persistent storage for gathering jobs to store the Insights data archive. If omitted, the gathering job will use ephemeral storage.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.Storage" - } - } - }, - "com.github.openshift.api.config.v1.GathererConfig": { - "description": "GathererConfig allows to configure specific gatherers", - "type": "object", - "required": [ - "name", - "state" - ], - "properties": { - "name": { - "description": "name is the required name of a specific gatherer. It may not exceed 256 characters. The format for a gatherer name is: {gatherer}/{function} where the function is optional. Gatherer consists of a lowercase letters only that may include underscores (_). Function consists of a lowercase letters only that may include underscores (_) and is separated from the gatherer by a forward slash (/). The particular gatherers can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", - "type": "string" - }, - "state": { - "description": "state is a required field that allows you to configure specific gatherer. Valid values are \"Enabled\" and \"Disabled\". When set to Enabled the gatherer will run. When set to Disabled the gatherer will not run.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.Gatherers": { - "description": "Gatherers specifies the configuration of the gatherers", - "type": "object", - "required": [ - "mode" - ], - "properties": { - "custom": { - "description": "custom provides gathering configuration. It is required when mode is Custom, and forbidden otherwise. Custom configuration allows user to disable only a subset of gatherers. Gatherers that are not explicitly disabled in custom configuration will run.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.Custom" - }, - "mode": { - "description": "mode is a required field that specifies the mode for gatherers. Allowed values are All, None, and Custom. When set to All, all gatherers will run and gather data. When set to None, all gatherers will be disabled and no data will be gathered. When set to Custom, the custom configuration from the custom field will be applied.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "mode", - "fields-to-discriminateBy": { - "custom": "Custom" - } - } - ] - }, - "com.github.openshift.api.config.v1.GenericAPIServerConfig": { - "description": "GenericAPIServerConfig is an inline-able struct for aggregated apiservers that need to store data in etcd", - "type": "object", - "required": [ - "servingInfo", - "corsAllowedOrigins", - "auditConfig", - "storageConfig", - "admission", - "kubeClientConfig" - ], - "properties": { - "admission": { - "description": "admissionConfig holds information about how to configure admission.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.AdmissionConfig" - }, - "auditConfig": { - "description": "auditConfig describes how to configure audit information", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.AuditConfig" - }, - "corsAllowedOrigins": { - "description": "corsAllowedOrigins", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "kubeClientConfig": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.KubeClientConfig" - }, - "servingInfo": { - "description": "servingInfo describes how to start serving", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.HTTPServingInfo" - }, - "storageConfig": { - "description": "storageConfig contains information about how to use", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.EtcdStorageConfig" - } - } - }, - "com.github.openshift.api.config.v1.GenericControllerConfig": { - "description": "GenericControllerConfig provides information to configure a controller\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "servingInfo", - "leaderElection", - "authentication", - "authorization" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "authentication": { - "description": "authentication allows configuration of authentication for the endpoints", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.DelegatedAuthentication" - }, - "authorization": { - "description": "authorization allows configuration of authentication for the endpoints", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.DelegatedAuthorization" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "leaderElection": { - "description": "leaderElection provides information to elect a leader. Only override this if you have a specific need", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.LeaderElection" - }, - "servingInfo": { - "description": "servingInfo is the HTTP serving information for the controller's endpoints", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.HTTPServingInfo" - } - } - }, - "com.github.openshift.api.config.v1.GitHubIdentityProvider": { - "description": "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials", - "type": "object", - "required": [ - "clientID", - "clientSecret" - ], - "properties": { - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "clientID": { - "description": "clientID is the oauth client ID", - "type": "string", - "default": "" - }, - "clientSecret": { - "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - }, - "hostname": { - "description": "hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value configured at /setup/settings#hostname.", - "type": "string", - "default": "" - }, - "organizations": { - "description": "organizations optionally restricts which organizations are allowed to log in", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "teams": { - "description": "teams optionally restricts which teams are allowed to log in. Format is /.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.config.v1.GitLabIdentityProvider": { - "description": "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials", - "type": "object", - "required": [ - "clientID", - "clientSecret", - "url" - ], - "properties": { - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "clientID": { - "description": "clientID is the oauth client ID", - "type": "string", - "default": "" - }, - "clientSecret": { - "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - }, - "url": { - "description": "url is the oauth server base URL", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.GoogleIdentityProvider": { - "description": "GoogleIdentityProvider provides identities for users authenticating using Google credentials", - "type": "object", - "required": [ - "clientID", - "clientSecret" - ], - "properties": { - "clientID": { - "description": "clientID is the oauth client ID", - "type": "string", - "default": "" - }, - "clientSecret": { - "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - }, - "hostedDomain": { - "description": "hostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.HTPasswdIdentityProvider": { - "description": "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials", - "type": "object", - "required": [ - "fileData" - ], - "properties": { - "fileData": { - "description": "fileData is a required reference to a secret by name containing the data to use as the htpasswd file. The key \"htpasswd\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. If the specified htpasswd data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - } - } - }, - "com.github.openshift.api.config.v1.HTTPServingInfo": { - "description": "HTTPServingInfo holds configuration for serving HTTP", - "type": "object", - "required": [ - "bindAddress", - "bindNetwork", - "certFile", - "keyFile", - "maxRequestsInFlight", - "requestTimeoutSeconds" - ], - "properties": { - "bindAddress": { - "description": "bindAddress is the ip:port to serve on", - "type": "string", - "default": "" - }, - "bindNetwork": { - "description": "bindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", - "type": "string", - "default": "" - }, - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "cipherSuites": { - "description": "cipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "clientCA": { - "description": "clientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", - "type": "string" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - }, - "maxRequestsInFlight": { - "description": "maxRequestsInFlight is the number of concurrent requests allowed to the server. If zero, no limit.", - "type": "integer", - "format": "int64", - "default": 0 - }, - "minTLSVersion": { - "description": "minTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", - "type": "string" - }, - "namedCertificates": { - "description": "namedCertificates is a list of certificates to use to secure requests to specific hostnames", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.NamedCertificate" - } - }, - "requestTimeoutSeconds": { - "description": "requestTimeoutSeconds is the number of seconds before requests are timed out. The default is 60 minutes, if -1 there is no limit on requests.", - "type": "integer", - "format": "int64", - "default": 0 - } - } - }, - "com.github.openshift.api.config.v1.HubSource": { - "description": "HubSource is used to specify the hub source and its configuration", - "type": "object", - "required": [ - "name", - "disabled" - ], - "properties": { - "disabled": { - "description": "disabled is used to disable a default hub source on cluster", - "type": "boolean", - "default": false - }, - "name": { - "description": "name is the name of one of the default hub sources", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.HubSourceStatus": { - "description": "HubSourceStatus is used to reflect the current state of applying the configuration to a default source", - "type": "object", - "required": [ - "name", - "disabled" - ], - "properties": { - "disabled": { - "description": "disabled is used to disable a default hub source on cluster", - "type": "boolean", - "default": false - }, - "message": { - "description": "message provides more information regarding failures", - "type": "string" - }, - "name": { - "description": "name is the name of one of the default hub sources", - "type": "string", - "default": "" - }, - "status": { - "description": "status indicates success or failure in applying the configuration", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.IBMCloudPlatformSpec": { - "description": "IBMCloudPlatformSpec holds the desired state of the IBMCloud infrastructure provider. This only includes fields that can be modified in the cluster.", - "type": "object", - "properties": { - "serviceEndpoints": { - "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of an IBM service. These endpoints are used by components within the cluster when trying to reach the IBM Cloud Services that have been overridden. The CCCMO reads in the IBMCloudPlatformSpec and validates each endpoint is resolvable. Once validated, the cloud config and IBMCloudPlatformStatus are updated to reflect the same custom endpoints. A maximum of 13 service endpoints overrides are supported.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.IBMCloudServiceEndpoint" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1.IBMCloudPlatformStatus": { - "description": "IBMCloudPlatformStatus holds the current status of the IBMCloud infrastructure provider.", - "type": "object", - "properties": { - "cisInstanceCRN": { - "description": "cisInstanceCRN is the CRN of the Cloud Internet Services instance managing the DNS zone for the cluster's base domain", - "type": "string" - }, - "dnsInstanceCRN": { - "description": "dnsInstanceCRN is the CRN of the DNS Services instance managing the DNS zone for the cluster's base domain", - "type": "string" - }, - "location": { - "description": "location is where the cluster has been deployed", - "type": "string" - }, - "providerType": { - "description": "providerType indicates the type of cluster that was created", - "type": "string" - }, - "resourceGroupName": { - "description": "resourceGroupName is the Resource Group for new IBMCloud resources created for the cluster.", - "type": "string" - }, - "serviceEndpoints": { - "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of an IBM service. These endpoints are used by components within the cluster when trying to reach the IBM Cloud Services that have been overridden. The CCCMO reads in the IBMCloudPlatformSpec and validates each endpoint is resolvable. Once validated, the cloud config and IBMCloudPlatformStatus are updated to reflect the same custom endpoints.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.IBMCloudServiceEndpoint" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1.IBMCloudServiceEndpoint": { - "description": "IBMCloudServiceEndpoint stores the configuration of a custom url to override existing defaults of IBM Cloud Services.", - "type": "object", - "required": [ - "name", - "url" - ], - "properties": { - "name": { - "description": "name is the name of the IBM Cloud service. Possible values are: CIS, COS, COSConfig, DNSServices, GlobalCatalog, GlobalSearch, GlobalTagging, HyperProtect, IAM, KeyProtect, ResourceController, ResourceManager, or VPC. For example, the IBM Cloud Private IAM service could be configured with the service `name` of `IAM` and `url` of `https://private.iam.cloud.ibm.com` Whereas the IBM Cloud Private VPC service for US South (Dallas) could be configured with the service `name` of `VPC` and `url` of `https://us.south.private.iaas.cloud.ibm.com`", - "type": "string", - "default": "" - }, - "url": { - "description": "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty. The path must follow the pattern /v[0,9]+ or /api/v[0,9]+", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.IdentityProvider": { - "description": "IdentityProvider provides identities for users authenticating using credentials", - "type": "object", - "required": [ - "name", - "type" - ], - "properties": { - "basicAuth": { - "description": "basicAuth contains configuration options for the BasicAuth IdP", - "$ref": "#/definitions/com.github.openshift.api.config.v1.BasicAuthIdentityProvider" - }, - "github": { - "description": "github enables user authentication using GitHub credentials", - "$ref": "#/definitions/com.github.openshift.api.config.v1.GitHubIdentityProvider" - }, - "gitlab": { - "description": "gitlab enables user authentication using GitLab credentials", - "$ref": "#/definitions/com.github.openshift.api.config.v1.GitLabIdentityProvider" - }, - "google": { - "description": "google enables user authentication using Google credentials", - "$ref": "#/definitions/com.github.openshift.api.config.v1.GoogleIdentityProvider" - }, - "htpasswd": { - "description": "htpasswd enables user authentication using an HTPasswd file to validate credentials", - "$ref": "#/definitions/com.github.openshift.api.config.v1.HTPasswdIdentityProvider" - }, - "keystone": { - "description": "keystone enables user authentication using keystone password credentials", - "$ref": "#/definitions/com.github.openshift.api.config.v1.KeystoneIdentityProvider" - }, - "ldap": { - "description": "ldap enables user authentication using LDAP credentials", - "$ref": "#/definitions/com.github.openshift.api.config.v1.LDAPIdentityProvider" - }, - "mappingMethod": { - "description": "mappingMethod determines how identities from this provider are mapped to users Defaults to \"claim\"", - "type": "string" - }, - "name": { - "description": "name is used to qualify the identities returned by this provider. - It MUST be unique and not shared by any other identity provider used - It MUST be a valid path segment: name cannot equal \".\" or \"..\" or contain \"/\" or \"%\" or \":\"\n Ref: https://godoc.org/github.com/openshift/origin/pkg/user/apis/user/validation#ValidateIdentityProviderName", - "type": "string", - "default": "" - }, - "openID": { - "description": "openID enables user authentication using OpenID credentials", - "$ref": "#/definitions/com.github.openshift.api.config.v1.OpenIDIdentityProvider" - }, - "requestHeader": { - "description": "requestHeader enables user authentication using request header credentials", - "$ref": "#/definitions/com.github.openshift.api.config.v1.RequestHeaderIdentityProvider" - }, - "type": { - "description": "type identifies the identity provider type for this entry.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.IdentityProviderConfig": { - "description": "IdentityProviderConfig contains configuration for using a specific identity provider", - "type": "object", - "required": [ - "type" - ], - "properties": { - "basicAuth": { - "description": "basicAuth contains configuration options for the BasicAuth IdP", - "$ref": "#/definitions/com.github.openshift.api.config.v1.BasicAuthIdentityProvider" - }, - "github": { - "description": "github enables user authentication using GitHub credentials", - "$ref": "#/definitions/com.github.openshift.api.config.v1.GitHubIdentityProvider" - }, - "gitlab": { - "description": "gitlab enables user authentication using GitLab credentials", - "$ref": "#/definitions/com.github.openshift.api.config.v1.GitLabIdentityProvider" - }, - "google": { - "description": "google enables user authentication using Google credentials", - "$ref": "#/definitions/com.github.openshift.api.config.v1.GoogleIdentityProvider" - }, - "htpasswd": { - "description": "htpasswd enables user authentication using an HTPasswd file to validate credentials", - "$ref": "#/definitions/com.github.openshift.api.config.v1.HTPasswdIdentityProvider" - }, - "keystone": { - "description": "keystone enables user authentication using keystone password credentials", - "$ref": "#/definitions/com.github.openshift.api.config.v1.KeystoneIdentityProvider" - }, - "ldap": { - "description": "ldap enables user authentication using LDAP credentials", - "$ref": "#/definitions/com.github.openshift.api.config.v1.LDAPIdentityProvider" - }, - "openID": { - "description": "openID enables user authentication using OpenID credentials", - "$ref": "#/definitions/com.github.openshift.api.config.v1.OpenIDIdentityProvider" - }, - "requestHeader": { - "description": "requestHeader enables user authentication using request header credentials", - "$ref": "#/definitions/com.github.openshift.api.config.v1.RequestHeaderIdentityProvider" - }, - "type": { - "description": "type identifies the identity provider type for this entry.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.Image": { - "description": "Image governs policies related to imagestream imports and runtime configuration for external registries. It allows cluster admins to configure which registries OpenShift is allowed to import images from, extra CA trust bundles for external registries, and policies to block or allow registry hostnames. When exposing OpenShift's image registry to the public, this also lets cluster admins specify the external hostname.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageStatus" - } - } - }, - "com.github.openshift.api.config.v1.ImageContentPolicy": { - "description": "ImageContentPolicy holds cluster-wide information about how to handle registry mirror rules. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageContentPolicySpec" - } - } - }, - "com.github.openshift.api.config.v1.ImageContentPolicyList": { - "description": "ImageContentPolicyList lists the items in the ImageContentPolicy CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageContentPolicy" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.ImageContentPolicySpec": { - "description": "ImageContentPolicySpec is the specification of the ImageContentPolicy CRD.", - "type": "object", - "properties": { - "repositoryDigestMirrors": { - "description": "repositoryDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in RepositoryDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To pull image from mirrors by tags, should set the \"allowMirrorByTags\".\n\nEach “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.RepositoryDigestMirrors" - }, - "x-kubernetes-list-map-keys": [ - "source" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1.ImageDigestMirrorSet": { - "description": "ImageDigestMirrorSet holds cluster-wide information about how to handle registry mirror rules on using digest pull specification. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageDigestMirrorSetSpec" - }, - "status": { - "description": "status contains the observed state of the resource.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageDigestMirrorSetStatus" - } - } - }, - "com.github.openshift.api.config.v1.ImageDigestMirrorSetList": { - "description": "ImageDigestMirrorSetList lists the items in the ImageDigestMirrorSet CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageDigestMirrorSet" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.ImageDigestMirrorSetSpec": { - "description": "ImageDigestMirrorSetSpec is the specification of the ImageDigestMirrorSet CRD.", - "type": "object", - "properties": { - "imageDigestMirrors": { - "description": "imageDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in imageDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To use mirrors to pull images using tag specification, users should configure a list of mirrors using \"ImageTagMirrorSet\" CRD.\n\nIf the image pull specification matches the repository of \"source\" in multiple imagedigestmirrorset objects, only the objects which define the most specific namespace match will be used. For example, if there are objects using quay.io/libpod and quay.io/libpod/busybox as the \"source\", only the objects using quay.io/libpod/busybox are going to apply for pull specification quay.io/libpod/busybox. Each “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified. Users who want to use a specific order of mirrors, should configure them into one list of mirrors using the expected order.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageDigestMirrors" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.config.v1.ImageDigestMirrorSetStatus": { - "type": "object" - }, - "com.github.openshift.api.config.v1.ImageDigestMirrors": { - "description": "ImageDigestMirrors holds cluster-wide information about how to handle mirrors in the registries config.", - "type": "object", - "required": [ - "source" - ], - "properties": { - "mirrorSourcePolicy": { - "description": "mirrorSourcePolicy defines the fallback policy if fails to pull image from the mirrors. If unset, the image will continue to be pulled from the the repository in the pull spec. sourcePolicy is valid configuration only when one or more mirrors are in the mirror list.", - "type": "string" - }, - "mirrors": { - "description": "mirrors is zero or more locations that may also contain the same images. No mirror will be configured if not specified. Images can be pulled from these mirrors only if they are referenced by their digests. The mirrored location is obtained by replacing the part of the input reference that matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo reference, a (source, mirror) pair *.redhat.io, mirror.local/redhat causes a mirror.local/redhat/product/repo repository to be used. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. If no mirror is specified or all image pulls from the mirror list fail, the image will continue to be pulled from the repository in the pull spec unless explicitly prohibited by \"mirrorSourcePolicy\" Other cluster configuration, including (but not limited to) other imageDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering. \"mirrors\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "source": { - "description": "source matches the repository that users refer to, e.g. in image pull specifications. Setting source to a registry hostname e.g. docker.io. quay.io, or registry.redhat.io, will match the image pull specification of corressponding registry. \"source\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo [*.]host for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.ImageLabel": { - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name defines the name of the label. It must have non-zero length.", - "type": "string", - "default": "" - }, - "value": { - "description": "value defines the literal value of the label.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.ImageList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.Image" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.ImagePolicy": { - "description": "ImagePolicy holds namespace-wide configuration for image signature verification\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImagePolicySpec" - }, - "status": { - "description": "status contains the observed state of the resource.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImagePolicyStatus" - } - } - }, - "com.github.openshift.api.config.v1.ImagePolicyFulcioCAWithRekorRootOfTrust": { - "description": "ImagePolicyFulcioCAWithRekorRootOfTrust defines the root of trust based on the Fulcio certificate and the Rekor public key.", - "type": "object", - "required": [ - "fulcioCAData", - "rekorKeyData", - "fulcioSubject" - ], - "properties": { - "fulcioCAData": { - "description": "fulcioCAData is a required field contains inline base64-encoded data for the PEM format fulcio CA. fulcioCAData must be at most 8192 characters.", - "type": "string", - "format": "byte" - }, - "fulcioSubject": { - "description": "fulcioSubject is a required field specifies OIDC issuer and the email of the Fulcio authentication configuration.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.PolicyFulcioSubject" - }, - "rekorKeyData": { - "description": "rekorKeyData is a required field contains inline base64-encoded data for the PEM format from the Rekor public key. rekorKeyData must be at most 8192 characters.", - "type": "string", - "format": "byte" - } - } - }, - "com.github.openshift.api.config.v1.ImagePolicyList": { - "description": "ImagePolicyList is a list of ImagePolicy resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of ImagePolicies", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImagePolicy" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.ImagePolicyPKIRootOfTrust": { - "description": "ImagePolicyPKIRootOfTrust defines the root of trust based on Root CA(s) and corresponding intermediate certificates.", - "type": "object", - "required": [ - "caRootsData", - "pkiCertificateSubject" - ], - "properties": { - "caIntermediatesData": { - "description": "caIntermediatesData contains base64-encoded data of a certificate bundle PEM file, which contains one or more intermediate certificates in the PEM format. The total length of the data must not exceed 8192 characters. caIntermediatesData requires caRootsData to be set.", - "type": "string", - "format": "byte" - }, - "caRootsData": { - "description": "caRootsData contains base64-encoded data of a certificate bundle PEM file, which contains one or more CA roots in the PEM format. The total length of the data must not exceed 8192 characters.", - "type": "string", - "format": "byte" - }, - "pkiCertificateSubject": { - "description": "pkiCertificateSubject defines the requirements imposed on the subject to which the certificate was issued.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.PKICertificateSubject" - } - } - }, - "com.github.openshift.api.config.v1.ImagePolicyPublicKeyRootOfTrust": { - "description": "ImagePolicyPublicKeyRootOfTrust defines the root of trust based on a sigstore public key.", - "type": "object", - "required": [ - "keyData" - ], - "properties": { - "keyData": { - "description": "keyData is a required field contains inline base64-encoded data for the PEM format public key. keyData must be at most 8192 characters.", - "type": "string", - "format": "byte" - }, - "rekorKeyData": { - "description": "rekorKeyData is an optional field contains inline base64-encoded data for the PEM format from the Rekor public key. rekorKeyData must be at most 8192 characters.", - "type": "string", - "format": "byte" - } - } - }, - "com.github.openshift.api.config.v1.ImagePolicySpec": { - "description": "ImagePolicySpec is the specification of the ImagePolicy CRD.", - "type": "object", - "required": [ - "scopes", - "policy" - ], - "properties": { - "policy": { - "description": "policy is a required field that contains configuration to allow scopes to be verified, and defines how images not matching the verification policy will be treated.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageSigstoreVerificationPolicy" - }, - "scopes": { - "description": "scopes is a required field that defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. This support no more than 256 scopes in one object. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. If a scope is configured in both the ClusterImagePolicy and the ImagePolicy, or if the scope in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy, only the policy from the ClusterImagePolicy will be applied. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - } - } - }, - "com.github.openshift.api.config.v1.ImagePolicyStatus": { - "type": "object", - "properties": { - "conditions": { - "description": "conditions provide details on the status of this API Resource. condition type 'Pending' indicates that the customer resource contains a policy that cannot take effect. It is either overwritten by a global policy or the image scope is not valid.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1.ImageSigstoreVerificationPolicy": { - "description": "ImageSigstoreVerificationPolicy defines the verification policy for the items in the scopes list.", - "type": "object", - "required": [ - "rootOfTrust" - ], - "properties": { - "rootOfTrust": { - "description": "rootOfTrust is a required field that defines the root of trust for verifying image signatures during retrieval. This allows image consumers to specify policyType and corresponding configuration of the policy, matching how the policy was generated.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.PolicyRootOfTrust" - }, - "signedIdentity": { - "description": "signedIdentity is an optional field specifies what image identity the signature claims about the image. This is useful when the image identity in the signature differs from the original image spec, such as when mirror registry is configured for the image scope, the signature from the mirror registry contains the image identity of the mirror instead of the original scope. The required matchPolicy field specifies the approach used in the verification process to verify the identity in the signature and the actual image identity, the default matchPolicy is \"MatchRepoDigestOrExact\".", - "$ref": "#/definitions/com.github.openshift.api.config.v1.PolicyIdentity" - } - } - }, - "com.github.openshift.api.config.v1.ImageSpec": { - "type": "object", - "properties": { - "additionalTrustedCA": { - "description": "additionalTrustedCA is a reference to a ConfigMap containing additional CAs that should be trusted during imagestream import, pod image pull, build image pull, and imageregistry pullthrough. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "allowedRegistriesForImport": { - "description": "allowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.RegistryLocation" - }, - "x-kubernetes-list-type": "atomic" - }, - "externalRegistryHostnames": { - "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "imageStreamImportMode": { - "description": "imageStreamImportMode controls the import mode behaviour of imagestreams. It can be set to `Legacy` or `PreserveOriginal` or the empty string. If this value is specified, this setting is applied to all newly created imagestreams which do not have the value set. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported. When empty, the behaviour will be decided based on the payload type advertised by the ClusterVersion status, i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.", - "type": "string", - "default": "", - "enum": [ - "Legacy", - "PreserveOriginal" - ] - }, - "registrySources": { - "description": "registrySources contains configuration that determines how the container runtime should treat individual registries when accessing images for builds+pods. (e.g. whether or not to allow insecure access). It does not contain configuration for the internal cluster registry.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.RegistrySources" - } - } - }, - "com.github.openshift.api.config.v1.ImageStatus": { - "type": "object", - "properties": { - "externalRegistryHostnames": { - "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "imageStreamImportMode": { - "description": "imageStreamImportMode controls the import mode behaviour of imagestreams. It can be `Legacy` or `PreserveOriginal`. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported. This value will be reconciled based on either the spec value or if no spec value is specified, the image registry operator would look at the ClusterVersion status to determine the payload type and set the import mode accordingly, i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.", - "type": "string", - "enum": [ - "Legacy", - "PreserveOriginal" - ] - }, - "internalRegistryHostname": { - "description": "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format. This value is set by the image registry operator which controls the internal registry hostname.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.ImageTagMirrorSet": { - "description": "ImageTagMirrorSet holds cluster-wide information about how to handle registry mirror rules on using tag pull specification. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageTagMirrorSetSpec" - }, - "status": { - "description": "status contains the observed state of the resource.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageTagMirrorSetStatus" - } - } - }, - "com.github.openshift.api.config.v1.ImageTagMirrorSetList": { - "description": "ImageTagMirrorSetList lists the items in the ImageTagMirrorSet CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageTagMirrorSet" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.ImageTagMirrorSetSpec": { - "description": "ImageTagMirrorSetSpec is the specification of the ImageTagMirrorSet CRD.", - "type": "object", - "properties": { - "imageTagMirrors": { - "description": "imageTagMirrors allows images referenced by image tags in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in imageTagMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To use mirrors to pull images using digest specification only, users should configure a list of mirrors using \"ImageDigestMirrorSet\" CRD.\n\nIf the image pull specification matches the repository of \"source\" in multiple imagetagmirrorset objects, only the objects which define the most specific namespace match will be used. For example, if there are objects using quay.io/libpod and quay.io/libpod/busybox as the \"source\", only the objects using quay.io/libpod/busybox are going to apply for pull specification quay.io/libpod/busybox. Each “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified. Users who want to use a deterministic order of mirrors, should configure them into one list of mirrors using the expected order.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageTagMirrors" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.config.v1.ImageTagMirrorSetStatus": { - "type": "object" - }, - "com.github.openshift.api.config.v1.ImageTagMirrors": { - "description": "ImageTagMirrors holds cluster-wide information about how to handle mirrors in the registries config.", - "type": "object", - "required": [ - "source" - ], - "properties": { - "mirrorSourcePolicy": { - "description": "mirrorSourcePolicy defines the fallback policy if fails to pull image from the mirrors. If unset, the image will continue to be pulled from the repository in the pull spec. sourcePolicy is valid configuration only when one or more mirrors are in the mirror list.", - "type": "string" - }, - "mirrors": { - "description": "mirrors is zero or more locations that may also contain the same images. No mirror will be configured if not specified. Images can be pulled from these mirrors only if they are referenced by their tags. The mirrored location is obtained by replacing the part of the input reference that matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo reference, a (source, mirror) pair *.redhat.io, mirror.local/redhat causes a mirror.local/redhat/product/repo repository to be used. Pulling images by tag can potentially yield different images, depending on which endpoint we pull from. Configuring a list of mirrors using \"ImageDigestMirrorSet\" CRD and forcing digest-pulls for mirrors avoids that issue. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. If no mirror is specified or all image pulls from the mirror list fail, the image will continue to be pulled from the repository in the pull spec unless explicitly prohibited by \"mirrorSourcePolicy\". Other cluster configuration, including (but not limited to) other imageTagMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering. \"mirrors\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "source": { - "description": "source matches the repository that users refer to, e.g. in image pull specifications. Setting source to a registry hostname e.g. docker.io. quay.io, or registry.redhat.io, will match the image pull specification of corressponding registry. \"source\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo [*.]host for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.Infrastructure": { - "description": "Infrastructure holds cluster-wide information about Infrastructure. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.InfrastructureSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.InfrastructureStatus" - } - } - }, - "com.github.openshift.api.config.v1.InfrastructureList": { - "description": "InfrastructureList is\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.Infrastructure" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.InfrastructureSpec": { - "description": "InfrastructureSpec contains settings that apply to the cluster infrastructure.", - "type": "object", - "properties": { - "cloudConfig": { - "description": "cloudConfig is a reference to a ConfigMap containing the cloud provider configuration file. This configuration file is used to configure the Kubernetes cloud provider integration when using the built-in cloud provider integration or the external cloud controller manager. The namespace for this config map is openshift-config.\n\ncloudConfig should only be consumed by the kube_cloud_config controller. The controller is responsible for using the user configuration in the spec for various platforms and combining that with the user provided ConfigMap in this field to create a stitched kube cloud config. The controller generates a ConfigMap `kube-cloud-config` in `openshift-config-managed` namespace with the kube cloud config is stored in `cloud.conf` key. All the clients are expected to use the generated ConfigMap only.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapFileReference" - }, - "controlPlaneTopology": { - "description": "controlPlaneTopology expresses the desired topology configuration for control nodes.\n\nWhen status.controlPlaneTopology is 'SingleReplica' and spec.controlPlaneTopology is set to 'HighlyAvailable', a transition will be triggered to reconfigure the cluster from SingleReplica to HighlyAvailable.\n\nWhen left blank or status.controlPlaneTopology and spec.controlPlaneTopology are the same value, no changes are required and no transitions will be triggered.\n\nThis value may be set to match status.controlPlaneTopology regardless of the current value.", - "type": "string" - }, - "platformSpec": { - "description": "platformSpec holds desired information specific to the underlying infrastructure provider.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.PlatformSpec" - } - } - }, - "com.github.openshift.api.config.v1.InfrastructureStatus": { - "description": "InfrastructureStatus describes the infrastructure the cluster is leveraging.", - "type": "object", - "properties": { - "apiServerInternalURI": { - "description": "apiServerInternalURL is a valid URI with scheme 'https', address and optionally a port (defaulting to 443). apiServerInternalURL can be used by components like kubelets, to contact the Kubernetes API server using the infrastructure provider rather than Kubernetes networking.", - "type": "string", - "default": "" - }, - "apiServerURL": { - "description": "apiServerURL is a valid URI with scheme 'https', address and optionally a port (defaulting to 443). apiServerURL can be used by components like the web console to tell users where to find the Kubernetes API.", - "type": "string", - "default": "" - }, - "controlPlaneTopology": { - "description": "controlPlaneTopology expresses the expectations for operands that normally run on control nodes. The default is 'HighlyAvailable', which represents the behavior operators have in a \"normal\" cluster. The 'SingleReplica' mode will be used in single-node deployments and the operators should not configure the operand for highly-available operation The 'External' mode indicates that the control plane is hosted externally to the cluster and that its components are not visible within the cluster. The 'HighlyAvailableArbiter' mode indicates that the control plane will consist of 2 control-plane nodes that run conventional services and 1 smaller sized arbiter node that runs a bare minimum of services to maintain quorum.", - "type": "string", - "default": "" - }, - "cpuPartitioning": { - "description": "cpuPartitioning expresses if CPU partitioning is a currently enabled feature in the cluster. CPU Partitioning means that this cluster can support partitioning workloads to specific CPU Sets. Valid values are \"None\" and \"AllNodes\". When omitted, the default value is \"None\". The default value of \"None\" indicates that no nodes will be setup with CPU partitioning. The \"AllNodes\" value indicates that all nodes have been setup with CPU partitioning, and can then be further configured via the PerformanceProfile API.", - "type": "string", - "default": "None" - }, - "etcdDiscoveryDomain": { - "description": "etcdDiscoveryDomain is the domain used to fetch the SRV records for discovering etcd servers and clients. For more info: https://github.com/etcd-io/etcd/blob/329be66e8b3f9e2e6af83c123ff89297e49ebd15/Documentation/op-guide/clustering.md#dns-discovery deprecated: as of 4.7, this field is no longer set or honored. It will be removed in a future release.", - "type": "string", - "default": "" - }, - "infrastructureName": { - "description": "infrastructureName uniquely identifies a cluster with a human friendly name. Once set it should not be changed. Must be of max length 27 and must have only alphanumeric or hyphen characters.", - "type": "string", - "default": "" - }, - "infrastructureTopology": { - "description": "infrastructureTopology expresses the expectations for infrastructure services that do not run on control plane nodes, usually indicated by a node selector for a `role` value other than `master`. The default is 'HighlyAvailable', which represents the behavior operators have in a \"normal\" cluster. The 'SingleReplica' mode will be used in single-node deployments and the operators should not configure the operand for highly-available operation NOTE: External topology mode is not applicable for this field.", - "type": "string" - }, - "platform": { - "description": "platform is the underlying infrastructure provider for the cluster.\n\nDeprecated: Use platformStatus.type instead.", - "type": "string" - }, - "platformStatus": { - "description": "platformStatus holds status information specific to the underlying infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.PlatformStatus" - } - } - }, - "com.github.openshift.api.config.v1.Ingress": { - "description": "Ingress holds cluster-wide information about ingress, including the default ingress domain used for routes. The canonical name is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.IngressSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.IngressStatus" - } - } - }, - "com.github.openshift.api.config.v1.IngressList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.Ingress" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.IngressPlatformSpec": { - "description": "IngressPlatformSpec holds the desired state of Ingress specific to the underlying infrastructure provider of the current cluster. Since these are used at spec-level for the underlying cluster, it is supposed that only one of the spec structs is set.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "aws": { - "description": "aws contains settings specific to the Amazon Web Services infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.AWSIngressSpec" - }, - "type": { - "description": "type is the underlying infrastructure provider for the cluster. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"KubeVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "aws": "AWS" - } - } - ] - }, - "com.github.openshift.api.config.v1.IngressSpec": { - "type": "object", - "required": [ - "domain" - ], - "properties": { - "appsDomain": { - "description": "appsDomain is an optional domain to use instead of the one specified in the domain field when a Route is created without specifying an explicit host. If appsDomain is nonempty, this value is used to generate default host values for Route. Unlike domain, appsDomain may be modified after installation. This assumes a new ingresscontroller has been setup with a wildcard certificate.", - "type": "string" - }, - "componentRoutes": { - "description": "componentRoutes is an optional list of routes that are managed by OpenShift components that a cluster-admin is able to configure the hostname and serving certificate for. The namespace and name of each route in this list should match an existing entry in the status.componentRoutes list.\n\nTo determine the set of configurable Routes, look at namespace and name of entries in the .status.componentRoutes list, where participating operators write the status of configurable routes. A maximum of 250 component routes may be configured.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ComponentRouteSpec" - }, - "x-kubernetes-list-map-keys": [ - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "domain": { - "description": "domain is used to generate a default host name for a route when the route's host name is empty. The generated host name will follow this pattern: \"..\".\n\nIt is also used as the default wildcard domain suffix for ingress. The default ingresscontroller domain will follow this pattern: \"*.\".\n\nOnce set, changing domain is not currently supported.", - "type": "string", - "default": "" - }, - "loadBalancer": { - "description": "loadBalancer contains the load balancer details in general which are not only specific to the underlying infrastructure provider of the current cluster and are required for Ingress Controller to work on OpenShift.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.LoadBalancer" - }, - "requiredHSTSPolicies": { - "description": "requiredHSTSPolicies specifies HSTS policies that are required to be set on newly created or updated routes matching the domainPattern/s and namespaceSelector/s that are specified in the policy. Each requiredHSTSPolicy must have at least a domainPattern and a maxAge to validate a route HSTS Policy route annotation, and affect route admission.\n\nA candidate route is checked for HSTS Policies if it has the HSTS Policy route annotation: \"haproxy.router.openshift.io/hsts_header\" E.g. haproxy.router.openshift.io/hsts_header: max-age=31536000;preload;includeSubDomains\n\n- For each candidate route, if it matches a requiredHSTSPolicy domainPattern and optional namespaceSelector, then the maxAge, preloadPolicy, and includeSubdomainsPolicy must be valid to be admitted. Otherwise, the route is rejected. - The first match, by domainPattern and optional namespaceSelector, in the ordering of the RequiredHSTSPolicies determines the route's admission status. - If the candidate route doesn't match any requiredHSTSPolicy domainPattern and optional namespaceSelector, then it may use any HSTS Policy annotation.\n\nThe HSTS policy configuration may be changed after routes have already been created. An update to a previously admitted route may then fail if the updated route does not conform to the updated HSTS policy configuration. However, changing the HSTS policy configuration will not cause a route that is already admitted to stop working.\n\nNote that if there are no RequiredHSTSPolicies, any HSTS Policy annotation on the route is valid.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.RequiredHSTSPolicy" - } - } - } - }, - "com.github.openshift.api.config.v1.IngressStatus": { - "type": "object", - "properties": { - "componentRoutes": { - "description": "componentRoutes is where participating operators place the current route status for routes whose hostnames and serving certificates can be customized by the cluster-admin.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ComponentRouteStatus" - }, - "x-kubernetes-list-map-keys": [ - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "defaultPlacement": { - "description": "defaultPlacement is set at installation time to control which nodes will host the ingress router pods by default. The options are control-plane nodes or worker nodes.\n\nThis field works by dictating how the Cluster Ingress Operator will consider unset replicas and nodePlacement fields in IngressController resources when creating the corresponding Deployments.\n\nSee the documentation for the IngressController replicas and nodePlacement fields for more information.\n\nWhen omitted, the default value is Workers", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.InsightsDataGather": { - "description": "InsightsDataGather provides data gather configuration options for the Insights Operator.\n\n\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.InsightsDataGatherSpec" - } - } - }, - "com.github.openshift.api.config.v1.InsightsDataGatherList": { - "description": "InsightsDataGatherList is a collection of items Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is the required list of InsightsDataGather objects it may not exceed 100 items", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.InsightsDataGather" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the required standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.InsightsDataGatherSpec": { - "description": "InsightsDataGatherSpec contains the configuration for the data gathering.", - "type": "object", - "required": [ - "gatherConfig" - ], - "properties": { - "gatherConfig": { - "description": "gatherConfig is a required spec attribute that includes all the configuration options related to gathering of the Insights data and its uploading to the ingress.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.GatherConfig" - } - } - }, - "com.github.openshift.api.config.v1.IntermediateTLSProfile": { - "description": "IntermediateTLSProfile is a TLS security profile based on the \"intermediate\" configuration of the Mozilla Server Side TLS configuration guidelines.", - "type": "object" - }, - "com.github.openshift.api.config.v1.KMSPluginConfig": { - "description": "KMSPluginConfig defines the configuration for the KMS instance that will be used with KMS encryption", - "type": "object", - "required": [ - "type" - ], - "properties": { - "type": { - "description": "type defines the kind of platform for the KMS provider. Allowed values are Vault. When set to Vault, the plugin connects to a HashiCorp Vault server for key management.", - "type": "string", - "default": "" - }, - "vault": { - "description": "vault defines the configuration for the Vault KMS plugin. The plugin connects to a Vault Enterprise server that is managed by the user outside the purview of the control plane. This field must be set when type is Vault, and must be unset otherwise.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.VaultKMSPluginConfig" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "vault": "Vault" - } - } - ] - }, - "com.github.openshift.api.config.v1.KeystoneIdentityProvider": { - "description": "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials", - "type": "object", - "required": [ - "url", - "domainName" - ], - "properties": { - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "domainName": { - "description": "domainName is required for keystone v3", - "type": "string", - "default": "" - }, - "tlsClientCert": { - "description": "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - }, - "tlsClientKey": { - "description": "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - }, - "url": { - "description": "url is the remote URL to connect to", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.KubeClientConfig": { - "type": "object", - "required": [ - "kubeConfig", - "connectionOverrides" - ], - "properties": { - "connectionOverrides": { - "description": "connectionOverrides specifies client overrides for system components to loop back to this master.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClientConnectionOverrides" - }, - "kubeConfig": { - "description": "kubeConfig is a .kubeconfig filename for going to the owning kube-apiserver. Empty uses an in-cluster-config", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.KubevirtPlatformSpec": { - "description": "KubevirtPlatformSpec holds the desired state of the kubevirt infrastructure provider. This only includes fields that can be modified in the cluster.", - "type": "object" - }, - "com.github.openshift.api.config.v1.KubevirtPlatformStatus": { - "description": "KubevirtPlatformStatus holds the current status of the kubevirt infrastructure provider.", - "type": "object", - "properties": { - "apiServerInternalIP": { - "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.", - "type": "string" - }, - "ingressIP": { - "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.LDAPAttributeMapping": { - "description": "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields", - "type": "object", - "required": [ - "id" - ], - "properties": { - "email": { - "description": "email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "id": { - "description": "id is the list of attributes whose values should be used as the user ID. Required. First non-empty attribute is used. At least one attribute is required. If none of the listed attribute have a value, authentication fails. LDAP standard identity attribute is \"dn\"", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "name": { - "description": "name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "preferredUsername": { - "description": "preferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.config.v1.LDAPIdentityProvider": { - "description": "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials", - "type": "object", - "required": [ - "url", - "insecure", - "attributes" - ], - "properties": { - "attributes": { - "description": "attributes maps LDAP attributes to identities", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.LDAPAttributeMapping" - }, - "bindDN": { - "description": "bindDN is an optional DN to bind with during the search phase.", - "type": "string", - "default": "" - }, - "bindPassword": { - "description": "bindPassword is an optional reference to a secret by name containing a password to bind with during the search phase. The key \"bindPassword\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - }, - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "insecure": { - "description": "insecure, if true, indicates the connection should not use TLS WARNING: Should not be set to `true` with the URL scheme \"ldaps://\" as \"ldaps://\" URLs always\n attempt to connect using TLS, even when `insecure` is set to `true`\nWhen `true`, \"ldap://\" URLS connect insecurely. When `false`, \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830.", - "type": "boolean", - "default": false - }, - "url": { - "description": "url is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is: ldap://host:port/basedn?attribute?scope?filter", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.LeaderElection": { - "description": "LeaderElection provides information to elect a leader", - "type": "object", - "required": [ - "leaseDuration", - "renewDeadline", - "retryPeriod" - ], - "properties": { - "disable": { - "description": "disable allows leader election to be suspended while allowing a fully defaulted \"normal\" startup case.", - "type": "boolean" - }, - "leaseDuration": { - "description": "leaseDuration is the duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "name": { - "description": "name indicates what name to use for the resource", - "type": "string" - }, - "namespace": { - "description": "namespace indicates which namespace the resource is in", - "type": "string" - }, - "renewDeadline": { - "description": "renewDeadline is the interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "retryPeriod": { - "description": "retryPeriod is the duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - } - } - }, - "com.github.openshift.api.config.v1.LoadBalancer": { - "type": "object", - "properties": { - "platform": { - "description": "platform holds configuration specific to the underlying infrastructure provider for the ingress load balancers. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.IngressPlatformSpec" - } - } - }, - "com.github.openshift.api.config.v1.MTUMigration": { - "description": "MTUMigration contains infomation about MTU migration.", - "type": "object", - "properties": { - "machine": { - "description": "machine contains MTU migration configuration for the machine's uplink.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.MTUMigrationValues" - }, - "network": { - "description": "network contains MTU migration configuration for the default network.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.MTUMigrationValues" - } - } - }, - "com.github.openshift.api.config.v1.MTUMigrationValues": { - "description": "MTUMigrationValues contains the values for a MTU migration.", - "type": "object", - "required": [ - "to" - ], - "properties": { - "from": { - "description": "from is the MTU to migrate from.", - "type": "integer", - "format": "int64" - }, - "to": { - "description": "to is the MTU to migrate to.", - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.config.v1.MaxAgePolicy": { - "description": "MaxAgePolicy contains a numeric range for specifying a compliant HSTS max-age for the enclosing RequiredHSTSPolicy", - "type": "object", - "properties": { - "largestMaxAge": { - "description": "The largest allowed value (in seconds) of the RequiredHSTSPolicy max-age This value can be left unspecified, in which case no upper limit is enforced.", - "type": "integer", - "format": "int32" - }, - "smallestMaxAge": { - "description": "The smallest allowed value (in seconds) of the RequiredHSTSPolicy max-age Setting max-age=0 allows the deletion of an existing HSTS header from a host. This is a necessary tool for administrators to quickly correct mistakes. This value can be left unspecified, in which case no lower limit is enforced.", - "type": "integer", - "format": "int32" - } - } - }, - "com.github.openshift.api.config.v1.ModernTLSProfile": { - "description": "ModernTLSProfile is a TLS security profile based on the \"modern\" configuration of the Mozilla Server Side TLS configuration guidelines.", - "type": "object" - }, - "com.github.openshift.api.config.v1.NamedCertificate": { - "description": "NamedCertificate specifies a certificate/key, and the names it should be served for", - "type": "object", - "required": [ - "certFile", - "keyFile" - ], - "properties": { - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - }, - "names": { - "description": "names is a list of DNS names this certificate should be used to secure A name can be a normal DNS name, or can contain leading wildcard segments.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.config.v1.Network": { - "description": "Network holds cluster-wide information about Network. The canonical name is `cluster`. It is used to configure the desired network configuration, such as: IP address pools for services/pod IPs, network plugin, etc. Please view network.spec for an explanation on what applies when configuring this resource.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration. As a general rule, this SHOULD NOT be read directly. Instead, you should consume the NetworkStatus, as it indicates the currently deployed configuration. Currently, most spec fields are immutable after installation. Please view the individual ones for further details on each.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.NetworkSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.NetworkStatus" - } - } - }, - "com.github.openshift.api.config.v1.NetworkDiagnostics": { - "type": "object", - "properties": { - "mode": { - "description": "mode controls the network diagnostics mode\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is All.", - "type": "string", - "default": "" - }, - "sourcePlacement": { - "description": "sourcePlacement controls the scheduling of network diagnostics source deployment\n\nSee NetworkDiagnosticsSourcePlacement for more details about default values.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.NetworkDiagnosticsSourcePlacement" - }, - "targetPlacement": { - "description": "targetPlacement controls the scheduling of network diagnostics target daemonset\n\nSee NetworkDiagnosticsTargetPlacement for more details about default values.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.NetworkDiagnosticsTargetPlacement" - } - } - }, - "com.github.openshift.api.config.v1.NetworkDiagnosticsSourcePlacement": { - "description": "NetworkDiagnosticsSourcePlacement defines node scheduling configuration network diagnostics source components", - "type": "object", - "properties": { - "nodeSelector": { - "description": "nodeSelector is the node selector applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `kubernetes.io/os: linux`.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "tolerations": { - "description": "tolerations is a list of tolerations applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is an empty list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.config.v1.NetworkDiagnosticsTargetPlacement": { - "description": "NetworkDiagnosticsTargetPlacement defines node scheduling configuration network diagnostics target components", - "type": "object", - "properties": { - "nodeSelector": { - "description": "nodeSelector is the node selector applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `kubernetes.io/os: linux`.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "tolerations": { - "description": "tolerations is a list of tolerations applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `- operator: \"Exists\"` which means that all taints are tolerated.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.config.v1.NetworkList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.Network" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.NetworkMigration": { - "description": "NetworkMigration represents the network migration status.", - "type": "object", - "properties": { - "mtu": { - "description": "mtu is the MTU configuration that is being deployed.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.MTUMigration" - }, - "networkType": { - "description": "networkType is the target plugin that is being deployed. DEPRECATED: network type migration is no longer supported, so this should always be unset.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.NetworkObservabilitySpec": { - "description": "NetworkObservabilitySpec defines the configuration for network observability installation", - "type": "object", - "required": [ - "installationPolicy" - ], - "properties": { - "installationPolicy": { - "description": "installationPolicy controls whether network observability is installed during cluster deployment. Valid values are \"InstallAndEnable\" and \"NoAction\". When set to \"InstallAndEnable\", ensure that network observability will be installed and enabled on the cluster. If already installed, no action taken, but if it gets uninstalled, it will install it again. When set to \"NoAction\", nothing will be done regarding Network observability. During the installation of NetworkObservability, the platform checks for any existing manual installations. If a successful installation using the OLMv0 or OLMv1 API is detected, it will be used. If the platform cannot determine how the current version was installed, or if the existing installation is incomplete, the installation process will stop.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.NetworkSpec": { - "description": "NetworkSpec is the desired network configuration. As a general rule, this SHOULD NOT be read directly. Instead, you should consume the NetworkStatus, as it indicates the currently deployed configuration. Currently, most spec fields are immutable after installation. Please view the individual ones for further details on each.", - "type": "object", - "required": [ - "clusterNetwork", - "serviceNetwork", - "networkType" - ], - "properties": { - "clusterNetwork": { - "description": "IP address pool to use for pod IPs. This field is immutable after installation.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterNetworkEntry" - }, - "x-kubernetes-list-type": "atomic" - }, - "externalIP": { - "description": "externalIP defines configuration for controllers that affect Service.ExternalIP. If nil, then ExternalIP is not allowed to be set.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalIPConfig" - }, - "networkDiagnostics": { - "description": "networkDiagnostics defines network diagnostics configuration.\n\nTakes precedence over spec.disableNetworkDiagnostics in network.operator.openshift.io. If networkDiagnostics is not specified or is empty, and the spec.disableNetworkDiagnostics flag in network.operator.openshift.io is set to true, the network diagnostics feature will be disabled.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.NetworkDiagnostics" - }, - "networkObservability": { - "description": "networkObservability is an optional field that configures network observability installation during cluster deployment (day-0). When omitted, unless this is a SNO cluster, network observability will be installed if not already present, after that, no action taken.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.NetworkObservabilitySpec" - }, - "networkType": { - "description": "networkType is the plugin that is to be deployed (e.g. OVNKubernetes). This should match a value that the cluster-network-operator understands, or else no networking will be installed. Currently supported values are: - OVNKubernetes This field is immutable after installation.", - "type": "string", - "default": "" - }, - "serviceNetwork": { - "description": "IP address pool for services. Currently, we only support a single entry here. This field is immutable after installation.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "serviceNodePortRange": { - "description": "The port range allowed for Services of type NodePort. If not specified, the default of 30000-32767 will be used. Such Services without a NodePort specified will have one automatically allocated from this range. This parameter can be updated after the cluster is installed.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.NetworkStatus": { - "description": "NetworkStatus is the current network configuration.", - "type": "object", - "properties": { - "clusterNetwork": { - "description": "IP address pool to use for pod IPs.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterNetworkEntry" - }, - "x-kubernetes-list-type": "atomic" - }, - "clusterNetworkMTU": { - "description": "clusterNetworkMTU is the MTU for inter-pod networking.", - "type": "integer", - "format": "int32" - }, - "conditions": { - "description": "conditions represents the observations of a network.config current state. Known .status.conditions.type are: \"NetworkDiagnosticsAvailable\"", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "migration": { - "description": "migration contains the cluster network migration configuration.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.NetworkMigration" - }, - "networkType": { - "description": "networkType is the plugin that is deployed (e.g. OVNKubernetes).", - "type": "string" - }, - "serviceNetwork": { - "description": "IP address pool for services. Currently, we only support a single entry here.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.config.v1.Node": { - "description": "Node holds cluster-wide information about node specific features.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.NodeSpec" - }, - "status": { - "description": "status holds observed values.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.NodeStatus" - } - } - }, - "com.github.openshift.api.config.v1.NodeList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.Node" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.NodeSpec": { - "type": "object", - "properties": { - "cgroupMode": { - "description": "cgroupMode determines the cgroups version on the node", - "type": "string" - }, - "minimumKubeletVersion": { - "description": "minimumKubeletVersion is the lowest version of a kubelet that can join the cluster. Specifically, the apiserver will deny most authorization requests of kubelets that are older than the specified version, only allowing the kubelet to get and update its node object, and perform subjectaccessreviews. This means any kubelet that attempts to join the cluster will not be able to run any assigned workloads, and will eventually be marked as not ready. Its max length is 8, so maximum version allowed is either \"9.999.99\" or \"99.99.99\". Since the kubelet reports the version of the kubernetes release, not Openshift, this field references the underlying kubernetes version this version of Openshift is based off of. In other words: if an admin wishes to ensure no nodes run an older version than Openshift 4.17, then they should set the minimumKubeletVersion to 1.30.0. When comparing versions, the kubelet's version is stripped of any contents outside of major.minor.patch version. Thus, a kubelet with version \"1.0.0-ec.0\" will be compatible with minimumKubeletVersion \"1.0.0\" or earlier.", - "type": "string", - "default": "" - }, - "workerLatencyProfile": { - "description": "workerLatencyProfile determins the how fast the kubelet is updating the status and corresponding reaction of the cluster", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.NodeStatus": { - "type": "object", - "properties": { - "conditions": { - "description": "conditions contain the details and the current state of the nodes.config object", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1.NutanixFailureDomain": { - "description": "NutanixFailureDomain configures failure domain information for the Nutanix platform.", - "type": "object", - "required": [ - "name", - "cluster", - "subnets" - ], - "properties": { - "cluster": { - "description": "cluster is to identify the cluster (the Prism Element under management of the Prism Central), in which the Machine's VM will be created. The cluster identifier (uuid or name) can be obtained from the Prism Central console or using the prism_central API.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.NutanixResourceIdentifier" - }, - "name": { - "description": "name defines the unique name of a failure domain. Name is required and must be at most 64 characters in length. It must consist of only lower case alphanumeric characters and hyphens (-). It must start and end with an alphanumeric character. This value is arbitrary and is used to identify the failure domain within the platform.", - "type": "string", - "default": "" - }, - "subnets": { - "description": "subnets holds a list of identifiers (one or more) of the cluster's network subnets If the feature gate NutanixMultiSubnets is enabled, up to 32 subnets may be configured. for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be obtained from the Prism Central console or using the prism_central API.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.NutanixResourceIdentifier" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.config.v1.NutanixPlatformLoadBalancer": { - "description": "NutanixPlatformLoadBalancer defines the load balancer used by the cluster on Nutanix platform.", - "type": "object", - "properties": { - "type": { - "description": "type defines the type of load balancer used by the cluster on Nutanix platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", - "type": "string", - "default": "OpenShiftManagedDefault" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": {} - } - ] - }, - "com.github.openshift.api.config.v1.NutanixPlatformSpec": { - "description": "NutanixPlatformSpec holds the desired state of the Nutanix infrastructure provider. This only includes fields that can be modified in the cluster.", - "type": "object", - "required": [ - "prismCentral", - "prismElements" - ], - "properties": { - "failureDomains": { - "description": "failureDomains configures failure domains information for the Nutanix platform. When set, the failure domains defined here may be used to spread Machines across prism element clusters to improve fault tolerance of the cluster.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.NutanixFailureDomain" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "prismCentral": { - "description": "prismCentral holds the endpoint address and port to access the Nutanix Prism Central. When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy. Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the proxy spec.noProxy list.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.NutanixPrismEndpoint" - }, - "prismElements": { - "description": "prismElements holds one or more endpoint address and port data to access the Nutanix Prism Elements (clusters) of the Nutanix Prism Central. Currently we only support one Prism Element (cluster) for an OpenShift cluster, where all the Nutanix resources (VMs, subnets, volumes, etc.) used in the OpenShift cluster are located. In the future, we may support Nutanix resources (VMs, etc.) spread over multiple Prism Elements (clusters) of the Prism Central.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.NutanixPrismElementEndpoint" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1.NutanixPlatformStatus": { - "description": "NutanixPlatformStatus holds the current status of the Nutanix infrastructure provider.", - "type": "object", - "required": [ - "apiServerInternalIPs", - "ingressIPs" - ], - "properties": { - "apiServerInternalIP": { - "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", - "type": "string" - }, - "apiServerInternalIPs": { - "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "dnsRecordsType": { - "description": "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", - "type": "string", - "enum": [ - "External", - "Internal" - ] - }, - "ingressIP": { - "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", - "type": "string" - }, - "ingressIPs": { - "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "loadBalancer": { - "description": "loadBalancer defines how the load balancer used by the cluster is configured.", - "default": { - "type": "OpenShiftManagedDefault" - }, - "$ref": "#/definitions/com.github.openshift.api.config.v1.NutanixPlatformLoadBalancer" - } - } - }, - "com.github.openshift.api.config.v1.NutanixPrismElementEndpoint": { - "description": "NutanixPrismElementEndpoint holds the name and endpoint data for a Prism Element (cluster)", - "type": "object", - "required": [ - "name", - "endpoint" - ], - "properties": { - "endpoint": { - "description": "endpoint holds the endpoint address and port data of the Prism Element (cluster). When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy. Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the proxy spec.noProxy list.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.NutanixPrismEndpoint" - }, - "name": { - "description": "name is the name of the Prism Element (cluster). This value will correspond with the cluster field configured on other resources (eg Machines, PVCs, etc).", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.NutanixPrismEndpoint": { - "description": "NutanixPrismEndpoint holds the endpoint address and port to access the Nutanix Prism Central or Element (cluster)", - "type": "object", - "required": [ - "address", - "port" - ], - "properties": { - "address": { - "description": "address is the endpoint address (DNS name or IP address) of the Nutanix Prism Central or Element (cluster)", - "type": "string", - "default": "" - }, - "port": { - "description": "port is the port number to access the Nutanix Prism Central or Element (cluster)", - "type": "integer", - "format": "int32", - "default": 0 - } - } - }, - "com.github.openshift.api.config.v1.NutanixResourceIdentifier": { - "description": "NutanixResourceIdentifier holds the identity of a Nutanix PC resource (cluster, image, subnet, etc.)", - "type": "object", - "required": [ - "type" - ], - "properties": { - "name": { - "description": "name is the resource name in the PC. It cannot be empty if the type is Name.", - "type": "string" - }, - "type": { - "description": "type is the identifier type to use for this resource.", - "type": "string", - "default": "" - }, - "uuid": { - "description": "uuid is the UUID of the resource in the PC. It cannot be empty if the type is UUID.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "name": "Name", - "uuid": "UUID" - } - } - ] - }, - "com.github.openshift.api.config.v1.OAuth": { - "description": "OAuth holds cluster-wide information about OAuth. The canonical name is `cluster`. It is used to configure the integrated OAuth server. This configuration is only honored when the top level Authentication config has type set to IntegratedOAuth.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.OAuthSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.OAuthStatus" - } - } - }, - "com.github.openshift.api.config.v1.OAuthList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.OAuth" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.OAuthRemoteConnectionInfo": { - "description": "OAuthRemoteConnectionInfo holds information necessary for establishing a remote connection", - "type": "object", - "required": [ - "url" - ], - "properties": { - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "tlsClientCert": { - "description": "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - }, - "tlsClientKey": { - "description": "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - }, - "url": { - "description": "url is the remote URL to connect to", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.OAuthSpec": { - "description": "OAuthSpec contains desired cluster auth configuration", - "type": "object", - "required": [ - "tokenConfig" - ], - "properties": { - "identityProviders": { - "description": "identityProviders is an ordered list of ways for a user to identify themselves. When this list is empty, no identities are provisioned for users.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.IdentityProvider" - }, - "x-kubernetes-list-type": "atomic" - }, - "templates": { - "description": "templates allow you to customize pages like the login page.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.OAuthTemplates" - }, - "tokenConfig": { - "description": "tokenConfig contains options for authorization and access tokens", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.TokenConfig" - } - } - }, - "com.github.openshift.api.config.v1.OAuthStatus": { - "description": "OAuthStatus shows current known state of OAuth server in the cluster", - "type": "object" - }, - "com.github.openshift.api.config.v1.OAuthTemplates": { - "description": "OAuthTemplates allow for customization of pages like the login page", - "type": "object", - "properties": { - "error": { - "description": "error is the name of a secret that specifies a go template to use to render error pages during the authentication or grant flow. The key \"errors.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default error page is used. If the specified template is not valid, the default error page is used. If unspecified, the default error page is used. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - }, - "login": { - "description": "login is the name of a secret that specifies a go template to use to render the login page. The key \"login.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default login page is used. If the specified template is not valid, the default login page is used. If unspecified, the default login page is used. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - }, - "providerSelection": { - "description": "providerSelection is the name of a secret that specifies a go template to use to render the provider selection page. The key \"providers.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default provider selection page is used. If the specified template is not valid, the default provider selection page is used. If unspecified, the default provider selection page is used. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - } - } - }, - "com.github.openshift.api.config.v1.OIDCClientConfig": { - "description": "OIDCClientConfig configures how platform clients interact with identity providers as an authentication method.", - "type": "object", - "required": [ - "componentName", - "componentNamespace", - "clientID" - ], - "properties": { - "clientID": { - "description": "clientID is a required field that configures the client identifier, from the identity provider, that the platform component uses for authentication requests made to the identity provider. The identity provider must accept this identifier for platform components to be able to use the identity provider as an authentication mode.\n\nclientID must not be an empty string (\"\").", - "type": "string", - "default": "" - }, - "clientSecret": { - "description": "clientSecret is an optional field that configures the client secret used by the platform component when making authentication requests to the identity provider.\n\nWhen not specified, no client secret will be used when making authentication requests to the identity provider.\n\nWhen specified, clientSecret references a Secret in the 'openshift-config' namespace that contains the client secret in the 'clientSecret' key of the '.data' field.\n\nThe client secret will be used when making authentication requests to the identity provider.\n\nPublic clients do not require a client secret but private clients do require a client secret to work with the identity provider.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - }, - "componentName": { - "description": "componentName is a required field that specifies the name of the platform component being configured to use the identity provider as an authentication mode.\n\nIt is used in combination with componentNamespace as a unique identifier.\n\ncomponentName must not be an empty string (\"\") and must not exceed 256 characters in length.", - "type": "string", - "default": "" - }, - "componentNamespace": { - "description": "componentNamespace is a required field that specifies the namespace in which the platform component being configured to use the identity provider as an authentication mode is running.\n\nIt is used in combination with componentName as a unique identifier.\n\ncomponentNamespace must not be an empty string (\"\") and must not exceed 63 characters in length.", - "type": "string", - "default": "" - }, - "extraScopes": { - "description": "extraScopes is an optional field that configures the extra scopes that should be requested by the platform component when making authentication requests to the identity provider. This is useful if you have configured claim mappings that requires specific scopes to be requested beyond the standard OIDC scopes.\n\nWhen omitted, no additional scopes are requested.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - } - } - }, - "com.github.openshift.api.config.v1.OIDCClientReference": { - "description": "OIDCClientReference is a reference to a platform component client configuration.", - "type": "object", - "required": [ - "oidcProviderName", - "issuerURL", - "clientID" - ], - "properties": { - "clientID": { - "description": "clientID is a required field that specifies the client identifier, from the identity provider, that the platform component is using for authentication requests made to the identity provider.\n\nclientID must not be empty.", - "type": "string", - "default": "" - }, - "issuerURL": { - "description": "issuerURL is a required field that specifies the URL of the identity provider that this client is configured to make requests against.\n\nissuerURL must use the 'https' scheme.", - "type": "string", - "default": "" - }, - "oidcProviderName": { - "description": "oidcProviderName is a required reference to the 'name' of the identity provider configured in 'oidcProviders' that this client is associated with.\n\noidcProviderName must not be an empty string (\"\").", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.OIDCClientStatus": { - "description": "OIDCClientStatus represents the current state of platform components and how they interact with the configured identity providers.", - "type": "object", - "required": [ - "componentName", - "componentNamespace" - ], - "properties": { - "componentName": { - "description": "componentName is a required field that specifies the name of the platform component using the identity provider as an authentication mode. It is used in combination with componentNamespace as a unique identifier.\n\ncomponentName must not be an empty string (\"\") and must not exceed 256 characters in length.", - "type": "string", - "default": "" - }, - "componentNamespace": { - "description": "componentNamespace is a required field that specifies the namespace in which the platform component using the identity provider as an authentication mode is running.\n\nIt is used in combination with componentName as a unique identifier.\n\ncomponentNamespace must not be an empty string (\"\") and must not exceed 63 characters in length.", - "type": "string", - "default": "" - }, - "conditions": { - "description": "conditions are used to communicate the state of the `oidcClients` entry.\n\nSupported conditions include Available, Degraded and Progressing.\n\nIf Available is true, the component is successfully using the configured client. If Degraded is true, that means something has gone wrong trying to handle the client configuration. If Progressing is true, that means the component is taking some action related to the `oidcClients` entry.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "consumingUsers": { - "description": "consumingUsers is an optional list of ServiceAccounts requiring read permissions on the `clientSecret` secret.\n\nconsumingUsers must not exceed 5 entries.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "currentOIDCClients": { - "description": "currentOIDCClients is an optional list of clients that the component is currently using.\n\nEntries must have unique issuerURL/clientID pairs.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.OIDCClientReference" - }, - "x-kubernetes-list-map-keys": [ - "issuerURL", - "clientID" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1.OIDCProvider": { - "type": "object", - "required": [ - "name", - "issuer", - "claimMappings" - ], - "properties": { - "claimMappings": { - "description": "claimMappings is a required field that configures the rules to be used by the Kubernetes API server for translating claims in a JWT token, issued by the identity provider, to a cluster identity.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.TokenClaimMappings" - }, - "claimValidationRules": { - "description": "claimValidationRules is an optional field that configures the rules to be used by the Kubernetes API server for validating the claims in a JWT token issued by the identity provider.\n\nValidation rules are joined via an AND operation.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.TokenClaimValidationRule" - }, - "x-kubernetes-list-type": "atomic" - }, - "externalClaimsSources": { - "description": "externalClaimsSources is an optional field that can be used to configure sources, external to the token provided in a request, in which claims should be fetched from and made available to the claim mapping process that is used to build the identity of a token holder.\n\nFor example, fetching additional user metadata from an OIDC provider's UserInfo endpoint.\n\nWhen not specified, only claims present in the token itself will be available in the claim mapping process.\n\nWhen specified, at least one external claim source must be specified and no more than 5 sources may be specified. All external claim sources must have unique claim mappings. When an external source responds and resolves additional claims successfully, they will be made available as claims during the claim mapping process. Externally sourced claims with the same name as a claim existing within the token will overwrite the claim data from the token with the externally sourced information. If an external source does not respond, responds with an error, or the additional claim data cannot be resolved from the response successfully it will not be included in the claim data passed to the claim mapping process.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalClaimsSource" - }, - "x-kubernetes-list-type": "atomic" - }, - "issuer": { - "description": "issuer is a required field that configures how the platform interacts with the identity provider and how tokens issued from the identity provider are evaluated by the Kubernetes API server.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.TokenIssuer" - }, - "name": { - "description": "name is a required field that configures the unique human-readable identifier associated with the identity provider. It is used to distinguish between multiple identity providers and has no impact on token validation or authentication mechanics.\n\nname must not be an empty string (\"\").", - "type": "string", - "default": "" - }, - "oidcClients": { - "description": "oidcClients is an optional field that configures how on-cluster, platform clients should request tokens from the identity provider. oidcClients must not exceed 20 entries and entries must have unique namespace/name pairs.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.OIDCClientConfig" - }, - "x-kubernetes-list-map-keys": [ - "componentNamespace", - "componentName" - ], - "x-kubernetes-list-type": "map" - }, - "userValidationRules": { - "description": "userValidationRules is an optional field that configures the set of rules used to validate the cluster user identity that was constructed via mapping token claims to user identity attributes. Rules are CEL expressions that must evaluate to 'true' for authentication to succeed. If any rule in the chain of rules evaluates to 'false', authentication will fail. When specified, at least one rule must be specified and no more than 64 rules may be specified.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.TokenUserValidationRule" - }, - "x-kubernetes-list-map-keys": [ - "expression" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1.ObjectReference": { - "description": "ObjectReference contains enough information to let you inspect or modify the referred object.", - "type": "object", - "required": [ - "group", - "resource", - "name" - ], - "properties": { - "group": { - "description": "group of the referent.", - "type": "string", - "default": "" - }, - "name": { - "description": "name of the referent.", - "type": "string", - "default": "" - }, - "namespace": { - "description": "namespace of the referent.", - "type": "string" - }, - "resource": { - "description": "resource of the referent.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.OldTLSProfile": { - "description": "OldTLSProfile is a TLS security profile based on the \"old\" configuration of the Mozilla Server Side TLS configuration guidelines.", - "type": "object" - }, - "com.github.openshift.api.config.v1.OpenIDClaims": { - "description": "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider", - "type": "object", - "properties": { - "email": { - "description": "email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "groups": { - "description": "groups is the list of claims value of which should be used to synchronize groups from the OIDC provider to OpenShift for the user. If multiple claims are specified, the first one with a non-empty value is used.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "name": { - "description": "name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "preferredUsername": { - "description": "preferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the sub claim", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.config.v1.OpenIDIdentityProvider": { - "description": "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials", - "type": "object", - "required": [ - "clientID", - "clientSecret", - "issuer", - "claims" - ], - "properties": { - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "claims": { - "description": "claims mappings", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.OpenIDClaims" - }, - "clientID": { - "description": "clientID is the oauth client ID", - "type": "string", - "default": "" - }, - "clientSecret": { - "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - }, - "extraAuthorizeParameters": { - "description": "extraAuthorizeParameters are any custom parameters to add to the authorize request.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "extraScopes": { - "description": "extraScopes are any scopes to request in addition to the standard \"openid\" scope.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "issuer": { - "description": "issuer is the URL that the OpenID Provider asserts as its Issuer Identifier. It must use the https scheme with no query or fragment component.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.OpenStackPlatformLoadBalancer": { - "description": "OpenStackPlatformLoadBalancer defines the load balancer used by the cluster on OpenStack platform.", - "type": "object", - "properties": { - "type": { - "description": "type defines the type of load balancer used by the cluster on OpenStack platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", - "type": "string", - "default": "OpenShiftManagedDefault" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": {} - } - ] - }, - "com.github.openshift.api.config.v1.OpenStackPlatformSpec": { - "description": "OpenStackPlatformSpec holds the desired state of the OpenStack infrastructure provider. This only includes fields that can be modified in the cluster.", - "type": "object", - "properties": { - "apiServerInternalIPs": { - "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "ingressIPs": { - "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "machineNetworks": { - "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.config.v1.OpenStackPlatformStatus": { - "description": "OpenStackPlatformStatus holds the current status of the OpenStack infrastructure provider.", - "type": "object", - "required": [ - "apiServerInternalIPs", - "ingressIPs" - ], - "properties": { - "apiServerInternalIP": { - "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", - "type": "string" - }, - "apiServerInternalIPs": { - "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "cloudName": { - "description": "cloudName is the name of the desired OpenStack cloud in the client configuration file (`clouds.yaml`).", - "type": "string" - }, - "dnsRecordsType": { - "description": "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", - "type": "string", - "enum": [ - "External", - "Internal" - ] - }, - "ingressIP": { - "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", - "type": "string" - }, - "ingressIPs": { - "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "loadBalancer": { - "description": "loadBalancer defines how the load balancer used by the cluster is configured.", - "default": { - "type": "OpenShiftManagedDefault" - }, - "$ref": "#/definitions/com.github.openshift.api.config.v1.OpenStackPlatformLoadBalancer" - }, - "machineNetworks": { - "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "nodeDNSIP": { - "description": "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for OpenStack deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.OperandVersion": { - "type": "object", - "required": [ - "name", - "version" - ], - "properties": { - "name": { - "description": "name is the name of the particular operand this version is for. It usually matches container images, not operators.", - "type": "string", - "default": "" - }, - "version": { - "description": "version indicates which version of a particular operand is currently being managed. It must always match the Available operand. If 1.0.0 is Available, then this must indicate 1.0.0 even if the operator is trying to rollout 1.1.0", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.OperatorHub": { - "description": "OperatorHub is the Schema for the operatorhubs API. It can be used to change the state of the default hub sources for OperatorHub on the cluster from enabled to disabled and vice versa.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "spec", - "status" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.OperatorHubSpec" - }, - "status": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.OperatorHubStatus" - } - } - }, - "com.github.openshift.api.config.v1.OperatorHubList": { - "description": "OperatorHubList contains a list of OperatorHub\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.OperatorHub" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.OperatorHubSpec": { - "description": "OperatorHubSpec defines the desired state of OperatorHub", - "type": "object", - "properties": { - "disableAllDefaultSources": { - "description": "disableAllDefaultSources allows you to disable all the default hub sources. If this is true, a specific entry in sources can be used to enable a default source. If this is false, a specific entry in sources can be used to disable or enable a default source.", - "type": "boolean" - }, - "sources": { - "description": "sources is the list of default hub sources and their configuration. If the list is empty, it implies that the default hub sources are enabled on the cluster unless disableAllDefaultSources is true. If disableAllDefaultSources is true and sources is not empty, the configuration present in sources will take precedence. The list of default hub sources and their current state will always be reflected in the status block.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.HubSource" - } - } - } - }, - "com.github.openshift.api.config.v1.OperatorHubStatus": { - "description": "OperatorHubStatus defines the observed state of OperatorHub. The current state of the default hub sources will always be reflected here.", - "type": "object", - "properties": { - "sources": { - "description": "sources encapsulates the result of applying the configuration for each hub source", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.HubSourceStatus" - } - } - } - }, - "com.github.openshift.api.config.v1.OvirtPlatformLoadBalancer": { - "description": "OvirtPlatformLoadBalancer defines the load balancer used by the cluster on Ovirt platform.", - "type": "object", - "properties": { - "type": { - "description": "type defines the type of load balancer used by the cluster on Ovirt platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", - "type": "string", - "default": "OpenShiftManagedDefault" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": {} - } - ] - }, - "com.github.openshift.api.config.v1.OvirtPlatformSpec": { - "description": "OvirtPlatformSpec holds the desired state of the oVirt infrastructure provider. This only includes fields that can be modified in the cluster.", - "type": "object" - }, - "com.github.openshift.api.config.v1.OvirtPlatformStatus": { - "description": "OvirtPlatformStatus holds the current status of the oVirt infrastructure provider.", - "type": "object", - "required": [ - "apiServerInternalIPs", - "ingressIPs" - ], - "properties": { - "apiServerInternalIP": { - "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", - "type": "string" - }, - "apiServerInternalIPs": { - "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "dnsRecordsType": { - "description": "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", - "type": "string", - "enum": [ - "External", - "Internal" - ] - }, - "ingressIP": { - "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", - "type": "string" - }, - "ingressIPs": { - "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "loadBalancer": { - "description": "loadBalancer defines how the load balancer used by the cluster is configured.", - "default": { - "type": "OpenShiftManagedDefault" - }, - "$ref": "#/definitions/com.github.openshift.api.config.v1.OvirtPlatformLoadBalancer" - }, - "nodeDNSIP": { - "description": "deprecated: as of 4.6, this field is no longer set or honored. It will be removed in a future release.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.PKICertificateSubject": { - "description": "PKICertificateSubject defines the requirements imposed on the subject to which the certificate was issued.", - "type": "object", - "properties": { - "email": { - "description": "email specifies the expected email address imposed on the subject to which the certificate was issued, and must match the email address listed in the Subject Alternative Name (SAN) field of the certificate. The email must be a valid email address and at most 320 characters in length.", - "type": "string" - }, - "hostname": { - "description": "hostname specifies the expected hostname imposed on the subject to which the certificate was issued, and it must match the hostname listed in the Subject Alternative Name (SAN) DNS field of the certificate. The hostname must be a valid dns 1123 subdomain name, optionally prefixed by '*.', and at most 253 characters in length. It must consist only of lowercase alphanumeric characters, hyphens, periods and the optional preceding asterisk.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.PersistentVolumeClaimReference": { - "description": "PersistentVolumeClaimReference is a reference to a PersistentVolumeClaim.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is the name of the PersistentVolumeClaim that will be used to store the Insights data archive. It is a string that follows the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start and end with an alphanumeric character.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.PersistentVolumeConfig": { - "description": "PersistentVolumeConfig provides configuration options for PersistentVolume storage.", - "type": "object", - "required": [ - "claim" - ], - "properties": { - "claim": { - "description": "claim is a required field that specifies the configuration of the PersistentVolumeClaim that will be used to store the Insights data archive. The PersistentVolumeClaim must be created in the openshift-insights namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.PersistentVolumeClaimReference" - }, - "mountPath": { - "description": "mountPath is an optional field specifying the directory where the PVC will be mounted inside the Insights data gathering Pod. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default mount path is /var/lib/insights-operator The path may not exceed 1024 characters and must not contain a colon.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.PlatformSpec": { - "description": "PlatformSpec holds the desired state specific to the underlying infrastructure provider of the current cluster. Since these are used at spec-level for the underlying cluster, it is supposed that only one of the spec structs is set.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "alibabaCloud": { - "description": "alibabaCloud contains settings specific to the Alibaba Cloud infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.AlibabaCloudPlatformSpec" - }, - "aws": { - "description": "aws contains settings specific to the Amazon Web Services infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.AWSPlatformSpec" - }, - "azure": { - "description": "azure contains settings specific to the Azure infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.AzurePlatformSpec" - }, - "baremetal": { - "description": "baremetal contains settings specific to the BareMetal platform.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.BareMetalPlatformSpec" - }, - "equinixMetal": { - "description": "equinixMetal contains settings specific to the Equinix Metal infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.EquinixMetalPlatformSpec" - }, - "external": { - "description": "ExternalPlatformType represents generic infrastructure provider. Platform-specific components should be supplemented separately.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalPlatformSpec" - }, - "gcp": { - "description": "gcp contains settings specific to the Google Cloud Platform infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.GCPPlatformSpec" - }, - "ibmcloud": { - "description": "ibmcloud contains settings specific to the IBMCloud infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.IBMCloudPlatformSpec" - }, - "kubevirt": { - "description": "kubevirt contains settings specific to the kubevirt infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.KubevirtPlatformSpec" - }, - "nutanix": { - "description": "nutanix contains settings specific to the Nutanix infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.NutanixPlatformSpec" - }, - "openstack": { - "description": "openstack contains settings specific to the OpenStack infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.OpenStackPlatformSpec" - }, - "ovirt": { - "description": "ovirt contains settings specific to the oVirt infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.OvirtPlatformSpec" - }, - "powervs": { - "description": "powervs contains settings specific to the IBM Power Systems Virtual Servers infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.PowerVSPlatformSpec" - }, - "type": { - "description": "type is the underlying infrastructure provider for the cluster. This value controls whether infrastructure automation such as service load balancers, dynamic volume provisioning, machine creation and deletion, and other integrations are enabled. If None, no infrastructure automation is enabled. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"IBMCloud\", \"KubeVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\", \"External\", and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.", - "type": "string", - "default": "" - }, - "vsphere": { - "description": "vsphere contains settings specific to the VSphere infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.VSpherePlatformSpec" - } - } - }, - "com.github.openshift.api.config.v1.PlatformStatus": { - "description": "PlatformStatus holds the current status specific to the underlying infrastructure provider of the current cluster. Since these are used at status-level for the underlying cluster, it is supposed that only one of the status structs is set.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "alibabaCloud": { - "description": "alibabaCloud contains settings specific to the Alibaba Cloud infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.AlibabaCloudPlatformStatus" - }, - "aws": { - "description": "aws contains settings specific to the Amazon Web Services infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.AWSPlatformStatus" - }, - "azure": { - "description": "azure contains settings specific to the Azure infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.AzurePlatformStatus" - }, - "baremetal": { - "description": "baremetal contains settings specific to the BareMetal platform.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.BareMetalPlatformStatus" - }, - "equinixMetal": { - "description": "equinixMetal contains settings specific to the Equinix Metal infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.EquinixMetalPlatformStatus" - }, - "external": { - "description": "external contains settings specific to the generic External infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalPlatformStatus" - }, - "gcp": { - "description": "gcp contains settings specific to the Google Cloud Platform infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.GCPPlatformStatus" - }, - "ibmcloud": { - "description": "ibmcloud contains settings specific to the IBMCloud infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.IBMCloudPlatformStatus" - }, - "kubevirt": { - "description": "kubevirt contains settings specific to the kubevirt infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.KubevirtPlatformStatus" - }, - "nutanix": { - "description": "nutanix contains settings specific to the Nutanix infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.NutanixPlatformStatus" - }, - "openstack": { - "description": "openstack contains settings specific to the OpenStack infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.OpenStackPlatformStatus" - }, - "ovirt": { - "description": "ovirt contains settings specific to the oVirt infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.OvirtPlatformStatus" - }, - "powervs": { - "description": "powervs contains settings specific to the Power Systems Virtual Servers infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.PowerVSPlatformStatus" - }, - "type": { - "description": "type is the underlying infrastructure provider for the cluster. This value controls whether infrastructure automation such as service load balancers, dynamic volume provisioning, machine creation and deletion, and other integrations are enabled. If None, no infrastructure automation is enabled. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.\n\nThis value will be synced with to the `status.platform` and `status.platformStatus.type`. Currently this value cannot be changed once set.", - "type": "string", - "default": "" - }, - "vsphere": { - "description": "vsphere contains settings specific to the VSphere infrastructure provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.VSpherePlatformStatus" - } - } - }, - "com.github.openshift.api.config.v1.PolicyFulcioSubject": { - "description": "PolicyFulcioSubject defines the OIDC issuer and the email of the Fulcio authentication configuration.", - "type": "object", - "required": [ - "oidcIssuer", - "signedEmail" - ], - "properties": { - "oidcIssuer": { - "description": "oidcIssuer is a required filed contains the expected OIDC issuer. The oidcIssuer must be a valid URL and at most 2048 characters in length. It will be verified that the Fulcio-issued certificate contains a (Fulcio-defined) certificate extension pointing at this OIDC issuer URL. When Fulcio issues certificates, it includes a value based on an URL inside the client-provided ID token. Example: \"https://expected.OIDC.issuer/\"", - "type": "string", - "default": "" - }, - "signedEmail": { - "description": "signedEmail is a required field holds the email address that the Fulcio certificate is issued for. The signedEmail must be a valid email address and at most 320 characters in length. Example: \"expected-signing-user@example.com\"", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.PolicyIdentity": { - "description": "PolicyIdentity defines image identity the signature claims about the image. When omitted, the default matchPolicy is \"MatchRepoDigestOrExact\".", - "type": "object", - "required": [ - "matchPolicy" - ], - "properties": { - "exactRepository": { - "description": "exactRepository specifies the repository that must be exactly matched by the identity in the signature. exactRepository is required if matchPolicy is set to \"ExactRepository\". It is used to verify that the signature claims an identity matching this exact repository, rather than the original image identity.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.PolicyMatchExactRepository" - }, - "matchPolicy": { - "description": "matchPolicy is a required filed specifies matching strategy to verify the image identity in the signature against the image scope. Allowed values are \"MatchRepoDigestOrExact\", \"MatchRepository\", \"ExactRepository\", \"RemapIdentity\". When omitted, the default value is \"MatchRepoDigestOrExact\". When set to \"MatchRepoDigestOrExact\", the identity in the signature must be in the same repository as the image identity if the image identity is referenced by a digest. Otherwise, the identity in the signature must be the same as the image identity. When set to \"MatchRepository\", the identity in the signature must be in the same repository as the image identity. When set to \"ExactRepository\", the exactRepository must be specified. The identity in the signature must be in the same repository as a specific identity specified by \"repository\". When set to \"RemapIdentity\", the remapIdentity must be specified. The signature must be in the same as the remapped image identity. Remapped image identity is obtained by replacing the \"prefix\" with the specified “signedPrefix” if the the image identity matches the specified remapPrefix.", - "type": "string", - "default": "" - }, - "remapIdentity": { - "description": "remapIdentity specifies the prefix remapping rule for verifying image identity. remapIdentity is required if matchPolicy is set to \"RemapIdentity\". It is used to verify that the signature claims a different registry/repository prefix than the original image.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.PolicyMatchRemapIdentity" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "matchPolicy", - "fields-to-discriminateBy": { - "exactRepository": "PolicyMatchExactRepository", - "remapIdentity": "PolicyMatchRemapIdentity" - } - } - ] - }, - "com.github.openshift.api.config.v1.PolicyMatchExactRepository": { - "type": "object", - "required": [ - "repository" - ], - "properties": { - "repository": { - "description": "repository is the reference of the image identity to be matched. repository is required if matchPolicy is set to \"ExactRepository\". The value should be a repository name (by omitting the tag or digest) in a registry implementing the \"Docker Registry HTTP API V2\". For example, docker.io/library/busybox", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.PolicyMatchRemapIdentity": { - "type": "object", - "required": [ - "prefix", - "signedPrefix" - ], - "properties": { - "prefix": { - "description": "prefix is required if matchPolicy is set to \"RemapIdentity\". prefix is the prefix of the image identity to be matched. If the image identity matches the specified prefix, that prefix is replaced by the specified “signedPrefix” (otherwise it is used as unchanged and no remapping takes place). This is useful when verifying signatures for a mirror of some other repository namespace that preserves the vendor’s repository structure. The prefix and signedPrefix values can be either host[:port] values (matching exactly the same host[:port], string), repository namespaces, or repositories (i.e. they must not contain tags/digests), and match as prefixes of the fully expanded form. For example, docker.io/library/busybox (not busybox) to specify that single repository, or docker.io/library (not an empty string) to specify the parent namespace of docker.io/library/busybox.", - "type": "string", - "default": "" - }, - "signedPrefix": { - "description": "signedPrefix is required if matchPolicy is set to \"RemapIdentity\". signedPrefix is the prefix of the image identity to be matched in the signature. The format is the same as \"prefix\". The values can be either host[:port] values (matching exactly the same host[:port], string), repository namespaces, or repositories (i.e. they must not contain tags/digests), and match as prefixes of the fully expanded form. For example, docker.io/library/busybox (not busybox) to specify that single repository, or docker.io/library (not an empty string) to specify the parent namespace of docker.io/library/busybox.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.PolicyRootOfTrust": { - "description": "PolicyRootOfTrust defines the root of trust based on the selected policyType.", - "type": "object", - "required": [ - "policyType" - ], - "properties": { - "fulcioCAWithRekor": { - "description": "fulcioCAWithRekor defines the root of trust configuration based on the Fulcio certificate and the Rekor public key. fulcioCAWithRekor is required when policyType is FulcioCAWithRekor, and forbidden otherwise For more information about Fulcio and Rekor, please refer to the document at: https://github.com/sigstore/fulcio and https://github.com/sigstore/rekor", - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImagePolicyFulcioCAWithRekorRootOfTrust" - }, - "pki": { - "description": "pki defines the root of trust configuration based on Bring Your Own Public Key Infrastructure (BYOPKI) Root CA(s) and corresponding intermediate certificates. pki is required when policyType is PKI, and forbidden otherwise.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImagePolicyPKIRootOfTrust" - }, - "policyType": { - "description": "policyType is a required field specifies the type of the policy for verification. This field must correspond to how the policy was generated. Allowed values are \"PublicKey\", \"FulcioCAWithRekor\", and \"PKI\". When set to \"PublicKey\", the policy relies on a sigstore publicKey and may optionally use a Rekor verification. When set to \"FulcioCAWithRekor\", the policy is based on the Fulcio certification and incorporates a Rekor verification. When set to \"PKI\", the policy is based on the certificates from Bring Your Own Public Key Infrastructure (BYOPKI).", - "type": "string", - "default": "" - }, - "publicKey": { - "description": "publicKey defines the root of trust configuration based on a sigstore public key. Optionally include a Rekor public key for Rekor verification. publicKey is required when policyType is PublicKey, and forbidden otherwise.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.ImagePolicyPublicKeyRootOfTrust" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "policyType", - "fields-to-discriminateBy": { - "fulcioCAWithRekor": "FulcioCAWithRekor", - "pki": "PKI", - "publicKey": "PublicKey" - } - } - ] - }, - "com.github.openshift.api.config.v1.PowerVSPlatformSpec": { - "description": "PowerVSPlatformSpec holds the desired state of the IBM Power Systems Virtual Servers infrastructure provider. This only includes fields that can be modified in the cluster.", - "type": "object", - "properties": { - "serviceEndpoints": { - "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of a Power VS service.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.PowerVSServiceEndpoint" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1.PowerVSPlatformStatus": { - "description": "PowerVSPlatformStatus holds the current status of the IBM Power Systems Virtual Servers infrastrucutre provider.", - "type": "object", - "required": [ - "region", - "zone" - ], - "properties": { - "cisInstanceCRN": { - "description": "cisInstanceCRN is the CRN of the Cloud Internet Services instance managing the DNS zone for the cluster's base domain", - "type": "string" - }, - "dnsInstanceCRN": { - "description": "dnsInstanceCRN is the CRN of the DNS Services instance managing the DNS zone for the cluster's base domain", - "type": "string" - }, - "region": { - "description": "region holds the default Power VS region for new Power VS resources created by the cluster.", - "type": "string", - "default": "" - }, - "resourceGroup": { - "description": "resourceGroup is the resource group name for new IBMCloud resources created for a cluster. The resource group specified here will be used by cluster-image-registry-operator to set up a COS Instance in IBMCloud for the cluster registry. More about resource groups can be found here: https://cloud.ibm.com/docs/account?topic=account-rgs. When omitted, the image registry operator won't be able to configure storage, which results in the image registry cluster operator not being in an available state.", - "type": "string", - "default": "" - }, - "serviceEndpoints": { - "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of a Power VS service.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.PowerVSServiceEndpoint" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "zone": { - "description": "zone holds the default zone for the new Power VS resources created by the cluster. Note: Currently only single-zone OCP clusters are supported", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.PowerVSServiceEndpoint": { - "description": "PowervsServiceEndpoint stores the configuration of a custom url to override existing defaults of PowerVS Services.", - "type": "object", - "required": [ - "name", - "url" - ], - "properties": { - "name": { - "description": "name is the name of the Power VS service. Few of the services are IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api ResourceController - https://cloud.ibm.com/apidocs/resource-controller/resource-controller Power Cloud - https://cloud.ibm.com/apidocs/power-cloud", - "type": "string", - "default": "" - }, - "url": { - "description": "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.PrefixedClaimMapping": { - "description": "PrefixedClaimMapping configures a claim mapping that allows for an optional prefix.", - "type": "object", - "properties": { - "claim": { - "description": "claim is an optional field for specifying the JWT token claim that is used in the mapping. The value of this claim will be assigned to the field in which this mapping is associated. claim must not exceed 256 characters in length. When set to the empty string `\"\"`, this means that no named claim should be used for the group mapping. claim is required when the ExternalOIDCWithUpstreamParity feature gate is not enabled.", - "type": "string", - "default": "" - }, - "expression": { - "description": "expression is an optional CEL expression used to derive group values from JWT claims.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length .\n\nWhen specified, claim must not be set or be explicitly set to the empty string (`\"\"`).", - "type": "string" - }, - "prefix": { - "description": "prefix is an optional field that configures the prefix that will be applied to the cluster identity attribute during the process of mapping JWT claims to cluster identity attributes.\n\nWhen omitted or set to an empty string (\"\"), no prefix is applied to the cluster identity attribute. Must not be set to a non-empty value when expression is set.\n\nExample: if `prefix` is set to \"myoidc:\" and the `claim` in JWT contains an array of strings \"a\", \"b\" and \"c\", the mapping will result in an array of string \"myoidc:a\", \"myoidc:b\" and \"myoidc:c\".", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.ProfileCustomizations": { - "description": "ProfileCustomizations contains various parameters for modifying the default behavior of certain profiles", - "type": "object", - "properties": { - "dynamicResourceAllocation": { - "description": "dynamicResourceAllocation allows to enable or disable dynamic resource allocation within the scheduler. Dynamic resource allocation is an API for requesting and sharing resources between pods and containers inside a pod. Third-party resource drivers are responsible for tracking and allocating resources. Different kinds of resources support arbitrary parameters for defining requirements and initialization. Valid values are Enabled, Disabled and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is Disabled.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.Project": { - "description": "Project holds cluster-wide information about Project. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ProjectSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ProjectStatus" - } - } - }, - "com.github.openshift.api.config.v1.ProjectList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.Project" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.ProjectSpec": { - "description": "ProjectSpec holds the project creation configuration.", - "type": "object", - "properties": { - "projectRequestMessage": { - "description": "projectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint", - "type": "string", - "default": "" - }, - "projectRequestTemplate": { - "description": "projectRequestTemplate is the template to use for creating projects in response to projectrequest. This must point to a template in 'openshift-config' namespace. It is optional. If it is not specified, a default template is used.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.TemplateReference" - } - } - }, - "com.github.openshift.api.config.v1.ProjectStatus": { - "type": "object" - }, - "com.github.openshift.api.config.v1.PromQLClusterCondition": { - "description": "PromQLClusterCondition represents a cluster condition based on PromQL.", - "type": "object", - "required": [ - "promql" - ], - "properties": { - "promql": { - "description": "promql is a PromQL query classifying clusters. This query query should return a 1 in the match case and a 0 in the does-not-match case. Queries which return no time series, or which return values besides 0 or 1, are evaluation failures.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.Proxy": { - "description": "Proxy holds cluster-wide information on how to configure default proxies for the cluster. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user-settable values for the proxy configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ProxySpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ProxyStatus" - } - } - }, - "com.github.openshift.api.config.v1.ProxyList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.Proxy" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.ProxySpec": { - "description": "ProxySpec contains cluster proxy creation configuration.", - "type": "object", - "properties": { - "httpProxy": { - "description": "httpProxy is the URL of the proxy for HTTP requests. Empty means unset and will not result in an env var.", - "type": "string" - }, - "httpsProxy": { - "description": "httpsProxy is the URL of the proxy for HTTPS requests. Empty means unset and will not result in an env var.", - "type": "string" - }, - "noProxy": { - "description": "noProxy is a comma-separated list of hostnames and/or CIDRs and/or IPs for which the proxy should not be used. Empty means unset and will not result in an env var.", - "type": "string" - }, - "readinessEndpoints": { - "description": "readinessEndpoints is a list of endpoints used to verify readiness of the proxy.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "trustedCA": { - "description": "trustedCA is a reference to a ConfigMap containing a CA certificate bundle. The trustedCA field should only be consumed by a proxy validator. The validator is responsible for reading the certificate bundle from the required key \"ca-bundle.crt\", merging it with the system default trust bundle, and writing the merged trust bundle to a ConfigMap named \"trusted-ca-bundle\" in the \"openshift-config-managed\" namespace. Clients that expect to make proxy connections must use the trusted-ca-bundle for all HTTPS requests to the proxy, and may use the trusted-ca-bundle for non-proxy HTTPS requests as well.\n\nThe namespace for the ConfigMap referenced by trustedCA is \"openshift-config\". Here is an example ConfigMap (in yaml):\n\napiVersion: v1 kind: ConfigMap metadata:\n name: user-ca-bundle\n namespace: openshift-config\n data:\n ca-bundle.crt: |\n -----BEGIN CERTIFICATE-----\n Custom CA certificate bundle.\n -----END CERTIFICATE-----", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - } - } - }, - "com.github.openshift.api.config.v1.ProxyStatus": { - "description": "ProxyStatus shows current known state of the cluster proxy.", - "type": "object", - "properties": { - "httpProxy": { - "description": "httpProxy is the URL of the proxy for HTTP requests.", - "type": "string" - }, - "httpsProxy": { - "description": "httpsProxy is the URL of the proxy for HTTPS requests.", - "type": "string" - }, - "noProxy": { - "description": "noProxy is a comma-separated list of hostnames and/or CIDRs for which the proxy should not be used.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.RegistryLocation": { - "description": "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.", - "type": "object", - "required": [ - "domainName" - ], - "properties": { - "domainName": { - "description": "domainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.", - "type": "string", - "default": "" - }, - "insecure": { - "description": "insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.", - "type": "boolean" - } - } - }, - "com.github.openshift.api.config.v1.RegistrySources": { - "description": "RegistrySources holds cluster-wide information about how to handle the registries config.", - "type": "object", - "properties": { - "allowedRegistries": { - "description": "allowedRegistries are the only registries permitted for image pull and push actions. All other registries are denied. Each entry must be a valid registry scope in the format hostname[:port][/path], optionally prefixed with \"*.\" for wildcard subdomains (e.g., \"*.example.com\"). The hostname must consist of valid DNS labels separated by dots, where each label contains only alphanumeric characters and hyphens and does not start or end with a hyphen. Entries must not be empty, must not include tags (e.g., \":latest\") or digests (e.g., \"@sha256:...\"), and must be at most 256 characters in length. The list may contain at most 1024 entries.\n\nOnly one of BlockedRegistries or AllowedRegistries may be set.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "blockedRegistries": { - "description": "blockedRegistries cannot be used for image pull and push actions. All other registries are permitted. Each entry must be a valid registry scope in the format hostname[:port][/path], optionally prefixed with \"*.\" for wildcard subdomains (e.g., \"*.example.com\"). The hostname must consist of valid DNS labels separated by dots, where each label contains only alphanumeric characters and hyphens and does not start or end with a hyphen. Entries must not be empty, must not include tags (e.g., \":latest\") or digests (e.g., \"@sha256:...\"), and must be at most 256 characters in length. The list may contain at most 1024 entries.\n\nOnly one of BlockedRegistries or AllowedRegistries may be set.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "containerRuntimeSearchRegistries": { - "description": "containerRuntimeSearchRegistries are registries that will be searched when pulling images that do not have fully qualified domains in their pull specs. Registries will be searched in the order provided in the list. Note: this search list only works with the container runtime, i.e CRI-O. Will NOT work with builds or imagestream imports.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "insecureRegistries": { - "description": "insecureRegistries are registries which do not have a valid TLS certificates or only support HTTP connections. Each entry must be a valid registry scope in the format hostname[:port][/path], optionally prefixed with \"*.\" for wildcard subdomains (e.g., \"*.example.com\"). The hostname must consist of valid DNS labels separated by dots, where each label contains only alphanumeric characters and hyphens and does not start or end with a hyphen. Entries must not be empty, must not include tags (e.g., \":latest\") or digests (e.g., \"@sha256:...\"), and must be at most 256 characters in length. The list may contain at most 1024 entries.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.config.v1.Release": { - "description": "Release represents an OpenShift release image and associated metadata.", - "type": "object", - "required": [ - "version", - "image" - ], - "properties": { - "architecture": { - "description": "architecture is an optional field that indicates the value of the cluster architecture. In this context cluster architecture means either a single architecture or a multi architecture. Valid values are 'Multi' and empty.", - "type": "string" - }, - "channels": { - "description": "channels is the set of Cincinnati channels to which the release currently belongs.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "image": { - "description": "image is a container image location that contains the update. When this field is part of spec, image is optional if version is specified and the availableUpdates field contains a matching version.", - "type": "string", - "default": "" - }, - "url": { - "description": "url contains information about this release. This URL is set by the 'url' metadata property on a release or the metadata returned by the update API and should be displayed as a link in user interfaces. The URL field may not be set for test or nightly releases.", - "type": "string" - }, - "version": { - "description": "version is a semantic version identifying the update version. When this field is part of spec, version is optional if image is specified.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.RemoteConnectionInfo": { - "description": "RemoteConnectionInfo holds information necessary for establishing a remote connection", - "type": "object", - "required": [ - "url", - "ca", - "certFile", - "keyFile" - ], - "properties": { - "ca": { - "description": "ca is the CA for verifying TLS connections", - "type": "string", - "default": "" - }, - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - }, - "url": { - "description": "url is the remote URL to connect to", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.RepositoryDigestMirrors": { - "description": "RepositoryDigestMirrors holds cluster-wide information about how to handle mirrors in the registries config.", - "type": "object", - "required": [ - "source" - ], - "properties": { - "allowMirrorByTags": { - "description": "allowMirrorByTags if true, the mirrors can be used to pull the images that are referenced by their tags. Default is false, the mirrors only work when pulling the images that are referenced by their digests. Pulling images by tag can potentially yield different images, depending on which endpoint we pull from. Forcing digest-pulls for mirrors avoids that issue.", - "type": "boolean" - }, - "mirrors": { - "description": "mirrors is zero or more repositories that may also contain the same images. If the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec. No mirror will be configured. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. Other cluster configuration, including (but not limited to) other repositoryDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "source": { - "description": "source is the repository that users refer to, e.g. in image pull specifications.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.RequestHeaderIdentityProvider": { - "description": "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials", - "type": "object", - "required": [ - "loginURL", - "challengeURL", - "ca", - "headers", - "preferredUsernameHeaders", - "nameHeaders", - "emailHeaders" - ], - "properties": { - "ca": { - "description": "ca is a required reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. Specifically, it allows verification of incoming requests to prevent header spoofing. The key \"ca.crt\" is used to locate the data. If the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "challengeURL": { - "description": "challengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here. ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}\nRequired when challenge is set to true.", - "type": "string", - "default": "" - }, - "clientCommonNames": { - "description": "clientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "emailHeaders": { - "description": "emailHeaders is the set of headers to check for the email address", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "headers": { - "description": "headers is the set of headers to check for identity information", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "loginURL": { - "description": "loginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}\nRequired when login is set to true.", - "type": "string", - "default": "" - }, - "nameHeaders": { - "description": "nameHeaders is the set of headers to check for the display name", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "preferredUsernameHeaders": { - "description": "preferredUsernameHeaders is the set of headers to check for the preferred username", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.config.v1.RequiredHSTSPolicy": { - "type": "object", - "required": [ - "domainPatterns", - "maxAge" - ], - "properties": { - "domainPatterns": { - "description": "domainPatterns is a list of domains for which the desired HSTS annotations are required. If domainPatterns is specified and a route is created with a spec.host matching one of the domains, the route must specify the HSTS Policy components described in the matching RequiredHSTSPolicy.\n\nThe use of wildcards is allowed like this: *.foo.com matches everything under foo.com. foo.com only matches foo.com, so to cover foo.com and everything under it, you must specify *both*.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "includeSubDomainsPolicy": { - "description": "includeSubDomainsPolicy means the HSTS Policy should apply to any subdomains of the host's domain name. Thus, for the host bar.foo.com, if includeSubDomainsPolicy was set to RequireIncludeSubDomains: - the host app.bar.foo.com would inherit the HSTS Policy of bar.foo.com - the host bar.foo.com would inherit the HSTS Policy of bar.foo.com - the host foo.com would NOT inherit the HSTS Policy of bar.foo.com - the host def.foo.com would NOT inherit the HSTS Policy of bar.foo.com", - "type": "string" - }, - "maxAge": { - "description": "maxAge is the delta time range in seconds during which hosts are regarded as HSTS hosts. If set to 0, it negates the effect, and hosts are removed as HSTS hosts. If set to 0 and includeSubdomains is specified, all subdomains of the host are also removed as HSTS hosts. maxAge is a time-to-live value, and if this policy is not refreshed on a client, the HSTS policy will eventually expire on that client.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.MaxAgePolicy" - }, - "namespaceSelector": { - "description": "namespaceSelector specifies a label selector such that the policy applies only to those routes that are in namespaces with labels that match the selector, and are in one of the DomainPatterns. Defaults to the empty LabelSelector, which matches everything.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "preloadPolicy": { - "description": "preloadPolicy directs the client to include hosts in its host preload list so that it never needs to do an initial load to get the HSTS header (note that this is not defined in RFC 6797 and is therefore client implementation-dependent).", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.Scheduler": { - "description": "Scheduler holds cluster-wide config information to run the Kubernetes Scheduler and influence its placement decisions. The canonical name for this config is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SchedulerSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SchedulerStatus" - } - } - }, - "com.github.openshift.api.config.v1.SchedulerList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.Scheduler" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1.SchedulerSpec": { - "type": "object", - "properties": { - "defaultNodeSelector": { - "description": "defaultNodeSelector helps set the cluster-wide default node selector to restrict pod placement to specific nodes. This is applied to the pods created in all namespaces and creates an intersection with any existing nodeSelectors already set on a pod, additionally constraining that pod's selector. For example, defaultNodeSelector: \"type=user-node,region=east\" would set nodeSelector field in pod spec to \"type=user-node,region=east\" to all pods created in all namespaces. Namespaces having project-wide node selectors won't be impacted even if this field is set. This adds an annotation section to the namespace. For example, if a new namespace is created with node-selector='type=user-node,region=east', the annotation openshift.io/node-selector: type=user-node,region=east gets added to the project. When the openshift.io/node-selector annotation is set on the project the value is used in preference to the value we are setting for defaultNodeSelector field. For instance, openshift.io/node-selector: \"type=user-node,region=west\" means that the default of \"type=user-node,region=east\" set in defaultNodeSelector would not be applied.", - "type": "string" - }, - "mastersSchedulable": { - "description": "mastersSchedulable allows masters nodes to be schedulable. When this flag is turned on, all the master nodes in the cluster will be made schedulable, so that workload pods can run on them. The default value for this field is false, meaning none of the master nodes are schedulable. Important Note: Once the workload pods start running on the master nodes, extreme care must be taken to ensure that cluster-critical control plane components are not impacted. Please turn on this field after doing due diligence.", - "type": "boolean", - "default": false - }, - "policy": { - "description": "DEPRECATED: the scheduler Policy API has been deprecated and will be removed in a future release. policy is a reference to a ConfigMap containing scheduler policy which has user specified predicates and priorities. If this ConfigMap is not available scheduler will default to use DefaultAlgorithmProvider. The namespace for this configmap is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "profile": { - "description": "profile sets which scheduling profile should be set in order to configure scheduling decisions for new pods.\n\nValid values are \"LowNodeUtilization\", \"HighNodeUtilization\", \"NoScoring\" Defaults to \"LowNodeUtilization\"", - "type": "string" - }, - "profileCustomizations": { - "description": "profileCustomizations contains configuration for modifying the default behavior of existing scheduler profiles. Deprecated: no longer needed, since DRA is GA starting with 4.21, and is enabled by' default in the cluster, this field will be removed in 4.24.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ProfileCustomizations" - } - } - }, - "com.github.openshift.api.config.v1.SchedulerStatus": { - "type": "object" - }, - "com.github.openshift.api.config.v1.SecretNameReference": { - "description": "SecretNameReference references a secret in a specific namespace. The namespace must be specified at the point of use.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is the metadata.name of the referenced secret", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.ServingInfo": { - "description": "ServingInfo holds information about serving web pages", - "type": "object", - "required": [ - "bindAddress", - "bindNetwork", - "certFile", - "keyFile" - ], - "properties": { - "bindAddress": { - "description": "bindAddress is the ip:port to serve on", - "type": "string", - "default": "" - }, - "bindNetwork": { - "description": "bindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", - "type": "string", - "default": "" - }, - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "cipherSuites": { - "description": "cipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "clientCA": { - "description": "clientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", - "type": "string" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - }, - "minTLSVersion": { - "description": "minTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", - "type": "string" - }, - "namedCertificates": { - "description": "namedCertificates is a list of certificates to use to secure requests to specific hostnames", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.NamedCertificate" - } - } - } - }, - "com.github.openshift.api.config.v1.SignatureStore": { - "description": "SignatureStore represents the URL of custom Signature Store", - "type": "object", - "required": [ - "url" - ], - "properties": { - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the signature store is not honored. If the specified ca data is not valid, the signature store is not honored. If empty, we fall back to the CA configured via Proxy, which is appended to the default system roots. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "url": { - "description": "url contains the upstream custom signature store URL. url should be a valid absolute http/https URI of an upstream signature store as per rfc1738. This must be provided and cannot be empty.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.SourceURL": { - "description": "SourceURL configures the options used to build the URL that is queried for external claims.", - "type": "object", - "required": [ - "hostname", - "pathExpression" - ], - "properties": { - "hostname": { - "description": "hostname is a required hostname for which the external claims are located.\n\nIt must be a valid DNS subdomain name as per RFC1123.\n\nThis means that it must start and end with a lowercase alphanumeric character, must only consist of lowercase alphanumeric characters, '-', and '.'. hostname may optionally specify a port in the format ':{port}'. If a port is specified it must not exceed 65535.\n\nhostname must be at least 1 character in length. When specifying a port, hostname must not exceed 259 characters in length. When not specifying a port, hostname must not exceed 253 characters in length.", - "type": "string" - }, - "pathExpression": { - "description": "pathExpression is a required CEL expression that returns a list of string values used to construct the URL path. Claims from the token used for the request to the kube-apiserver are made available via the `claims` variable. expression must be at least 1 character in length and must not exceed 1024 characters in length.\n\nValues in the returned list will be joined with the hostname using a forward slash (`/`) as a separator. Values in the returned list do not need to include the forward slash. If a forward slash is included in a returned value, it will be encoded as `%2F`.\n\nExample of a static path configuration:\n\n pathExpression: ['realms', 'k8s', 'protocol', 'openid-connect', 'userinfo']\n\nThe above example would resolve to the path: '/realms/k8s/protocol/openid-connect/userinfo'\n\nExample of a dynamic path configuration:\n\n pathExpression: \"['admin', 'realms', 'k8s', 'users'] + [claims.sub] + ['groups']\"\n\nAssuming 'claims.sub' is set to '12345', the above example would resolve to the path: '/admin/realms/k8s/users/12345/groups'", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.SourcedClaimMapping": { - "description": "SourcedClaimMapping configures the mapping behavior for a single external claim from the response the apiserver received from the external claim source.", - "type": "object", - "required": [ - "name", - "expression" - ], - "properties": { - "expression": { - "description": "expression is a required CEL expression that will produce a value to be assigned to the claim. The full response body from the request to the external claim source is provided via the `response.body` variable.\n\nThe contents of the `response.body` variable varies based on the response received from the external source. It is the responsibility of those configuring this expression to understand what is returned from the external source.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length.", - "type": "string" - }, - "name": { - "description": "name is a required name of the claim that will be produced and made available during the claim-to-identity mapping process. name must consist of only lowercase alpha characters and underscores ('_'). name must be at least 1 character and must not exceed 256 characters in length.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.Storage": { - "description": "Storage provides persistent storage configuration options for gathering jobs. If the type is set to PersistentVolume, then the PersistentVolume must be defined. If the type is set to Ephemeral, then the PersistentVolume must not be defined.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "persistentVolume": { - "description": "persistentVolume is an optional field that specifies the PersistentVolume that will be used to store the Insights data archive. The PersistentVolume must be created in the openshift-insights namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.PersistentVolumeConfig" - }, - "type": { - "description": "type is a required field that specifies the type of storage that will be used to store the Insights data archive. Valid values are \"PersistentVolume\" and \"Ephemeral\". When set to Ephemeral, the Insights data archive is stored in the ephemeral storage of the gathering job. When set to PersistentVolume, the Insights data archive is stored in the PersistentVolume that is defined by the persistentVolume field.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "persistentVolume": "PersistentVolume" - } - } - ] - }, - "com.github.openshift.api.config.v1.StringSource": { - "description": "StringSource allows specifying a string inline, or externally via env var or file. When it contains only a string value, it marshals to a simple JSON string.", - "type": "object", - "required": [ - "value", - "env", - "file", - "keyFile" - ], - "properties": { - "env": { - "description": "env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", - "type": "string", - "default": "" - }, - "file": { - "description": "file references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile references a file containing the key to use to decrypt the value.", - "type": "string", - "default": "" - }, - "value": { - "description": "value specifies the cleartext value, or an encrypted value if keyFile is specified.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.StringSourceSpec": { - "description": "StringSourceSpec specifies a string value, or external location", - "type": "object", - "required": [ - "value", - "env", - "file", - "keyFile" - ], - "properties": { - "env": { - "description": "env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", - "type": "string", - "default": "" - }, - "file": { - "description": "file references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile references a file containing the key to use to decrypt the value.", - "type": "string", - "default": "" - }, - "value": { - "description": "value specifies the cleartext value, or an encrypted value if keyFile is specified.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.TLSProfileSpec": { - "description": "TLSProfileSpec is the desired behavior of a TLSSecurityProfile.", - "type": "object", - "required": [ - "ciphers", - "minTLSVersion" - ], - "properties": { - "ciphers": { - "description": "ciphers is used to specify the cipher algorithms that are negotiated during the TLS handshake. Operators may remove entries that their operands do not support. For example, to use only ECDHE-RSA-AES128-GCM-SHA256 (yaml):\n\n ciphers:\n - ECDHE-RSA-AES128-GCM-SHA256\n\nTLS 1.3 cipher suites (e.g. TLS_AES_128_GCM_SHA256) are not configurable and are always enabled when TLS 1.3 is negotiated.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "groups": { - "description": "groups is an optional, ordered field used to specify the supported groups (formerly known as elliptic curves) that are used during the TLS handshake. The order of the groups represents a suggested preference, with the most preferred group first. Note that not all platform components honor the ordering: Go-based components use Go's internal preference order and treat this list as a filter of allowed groups rather than an ordered preference. Operators may remove entries their operands do not support.\n\nWhen omitted, this means no opinion and the platform is left to choose reasonable defaults which are subject to change over time and may be different per platform component depending on the underlying TLS libraries they use. If specified, the list must contain at least one and at most 7 groups, and each group must be unique.\n\nFor example, to use X25519 and secp256r1 (yaml):\n\n groups:\n - X25519\n - secp256r1", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "minTLSVersion": { - "description": "minTLSVersion is used to specify the minimal version of the TLS protocol that is negotiated during the TLS handshake. For example, to use TLS versions 1.1, 1.2 and 1.3 (yaml):\n\n minTLSVersion: VersionTLS11", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.TLSSecurityProfile": { - "description": "TLSSecurityProfile defines the schema for a TLS security profile. This object is used by operators to apply TLS security settings to operands.", - "type": "object", - "properties": { - "custom": { - "description": "custom is a user-defined TLS security profile. Be extremely careful using a custom profile as invalid configurations can be catastrophic.\n\nThe supported groups list for this profile is empty by default.\n\nAn example custom profile looks like this:\n\n minTLSVersion: VersionTLS11\n ciphers:\n - ECDHE-ECDSA-CHACHA20-POLY1305\n - ECDHE-RSA-CHACHA20-POLY1305\n - ECDHE-RSA-AES128-GCM-SHA256\n - ECDHE-ECDSA-AES128-GCM-SHA256", - "$ref": "#/definitions/com.github.openshift.api.config.v1.CustomTLSProfile" - }, - "intermediate": { - "description": "intermediate is a TLS profile for use when you do not need compatibility with legacy clients and want to remain highly secure while being compatible with most clients currently in use.\n\nThe supported groups list includes by default the following groups in suggested preference order (ordering may not be honored by all implementations): X25519MLKEM768, X25519, secp256r1, secp384r1.\n\nThis profile is equivalent to a Custom profile specified as:\n minTLSVersion: VersionTLS12\n ciphers:\n - TLS_AES_128_GCM_SHA256\n - TLS_AES_256_GCM_SHA384\n - TLS_CHACHA20_POLY1305_SHA256\n - ECDHE-ECDSA-AES128-GCM-SHA256\n - ECDHE-RSA-AES128-GCM-SHA256\n - ECDHE-ECDSA-AES256-GCM-SHA384\n - ECDHE-RSA-AES256-GCM-SHA384\n - ECDHE-ECDSA-CHACHA20-POLY1305\n - ECDHE-RSA-CHACHA20-POLY1305", - "$ref": "#/definitions/com.github.openshift.api.config.v1.IntermediateTLSProfile" - }, - "modern": { - "description": "modern is a TLS security profile for use with clients that support TLS 1.3 and do not need backward compatibility for older clients. The supported groups list includes by default the following groups in suggested preference order (ordering may not be honored by all implementations): X25519MLKEM768, X25519, secp256r1, secp384r1. This profile is equivalent to a Custom profile specified as:\n minTLSVersion: VersionTLS13\n ciphers:\n - TLS_AES_128_GCM_SHA256\n - TLS_AES_256_GCM_SHA384\n - TLS_CHACHA20_POLY1305_SHA256", - "$ref": "#/definitions/com.github.openshift.api.config.v1.ModernTLSProfile" - }, - "old": { - "description": "old is a TLS profile for use when services need to be accessed by very old clients or libraries and should be used only as a last resort.\n\nThe supported groups list includes by default the following groups in suggested preference order (ordering may not be honored by all implementations): X25519MLKEM768, X25519, secp256r1, secp384r1.\n\nThis profile is equivalent to a Custom profile specified as:\n minTLSVersion: VersionTLS10\n ciphers:\n - TLS_AES_128_GCM_SHA256\n - TLS_AES_256_GCM_SHA384\n - TLS_CHACHA20_POLY1305_SHA256\n - ECDHE-ECDSA-AES128-GCM-SHA256\n - ECDHE-RSA-AES128-GCM-SHA256\n - ECDHE-ECDSA-AES256-GCM-SHA384\n - ECDHE-RSA-AES256-GCM-SHA384\n - ECDHE-ECDSA-CHACHA20-POLY1305\n - ECDHE-RSA-CHACHA20-POLY1305\n - ECDHE-ECDSA-AES128-SHA256\n - ECDHE-RSA-AES128-SHA256\n - ECDHE-ECDSA-AES128-SHA\n - ECDHE-RSA-AES128-SHA\n - ECDHE-ECDSA-AES256-SHA384\n - ECDHE-RSA-AES256-SHA384\n - ECDHE-ECDSA-AES256-SHA\n - ECDHE-RSA-AES256-SHA\n - AES128-GCM-SHA256\n - AES256-GCM-SHA384\n - AES128-SHA256\n - AES256-SHA256\n - AES128-SHA\n - AES256-SHA\n - DES-CBC3-SHA", - "$ref": "#/definitions/com.github.openshift.api.config.v1.OldTLSProfile" - }, - "type": { - "description": "type is one of Old, Intermediate, Modern or Custom. Custom provides the ability to specify individual TLS security profile parameters.\n\nThe cipher and groups lists in these profiles are based on version 5.8 of the Mozilla Server Side TLS configuration guidelines. See: https://ssl-config.mozilla.org/guidelines/5.8.json\n\nThe groups are listed in suggested preference order, with the most preferred group first. Note that not all platform components honor the ordering: Go-based components use Go's internal preference order and treat this list as a filter of allowed groups rather than an ordered preference. Note that X25519MLKEM768 is a post-quantum hybrid group that is not FIPS-approved and should be ignored by components running in FIPS mode.\n\nThe profiles are intent based, so they may change over time as new ciphers are developed and existing ciphers are found to be insecure. Depending on precisely which ciphers are available to a process, the list may be reduced.", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "custom": "Custom", - "intermediate": "Intermediate", - "modern": "Modern", - "old": "Old" - } - } - ] - }, - "com.github.openshift.api.config.v1.TemplateReference": { - "description": "TemplateReference references a template in a specific namespace. The namespace must be specified at the point of use.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is the metadata.name of the referenced project request template", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.TestDetails": { - "type": "object", - "required": [ - "testName" - ], - "properties": { - "testName": { - "description": "testName is the name of the test as it appears in junit XMLs. It does not include the suite name since the same test can be executed in many suites.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.TestReporting": { - "description": "TestReporting is used for origin (and potentially others) to report the test names for a given FeatureGate into the payload for later analysis on a per-payload basis. This doesn't need any CRD because it's never stored in the cluster.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.TestReportingSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.TestReportingStatus" - } - } - }, - "com.github.openshift.api.config.v1.TestReportingSpec": { - "type": "object", - "required": [ - "testsForFeatureGates" - ], - "properties": { - "testsForFeatureGates": { - "description": "testsForFeatureGates is a list, indexed by FeatureGate and includes information about testing.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.FeatureGateTests" - } - } - } - }, - "com.github.openshift.api.config.v1.TestReportingStatus": { - "type": "object" - }, - "com.github.openshift.api.config.v1.TokenClaimMapping": { - "description": "TokenClaimMapping allows specifying a JWT token claim to be used when mapping claims from an authentication token to cluster identities.", - "type": "object", - "properties": { - "claim": { - "description": "claim is an optional field for specifying the JWT token claim that is used in the mapping. The value of this claim will be assigned to the field in which this mapping is associated. claim must not exceed 256 characters in length. When set to the empty string `\"\"`, this means that no named claim should be used for the group mapping. claim is required when the ExternalOIDCWithUpstreamParity feature gate is not enabled.", - "type": "string", - "default": "" - }, - "expression": { - "description": "expression is an optional CEL expression used to derive group values from JWT claims.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length .\n\nWhen specified, claim must not be set or be explicitly set to the empty string (`\"\"`).", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.TokenClaimMappings": { - "type": "object", - "required": [ - "username" - ], - "properties": { - "extra": { - "description": "extra is an optional field for configuring the mappings used to construct the extra attribute for the cluster identity. When omitted, no extra attributes will be present on the cluster identity.\n\nkey values for extra mappings must be unique. A maximum of 32 extra attribute mappings may be provided.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ExtraMapping" - }, - "x-kubernetes-list-map-keys": [ - "key" - ], - "x-kubernetes-list-type": "map" - }, - "groups": { - "description": "groups is an optional field that configures how the groups of a cluster identity should be constructed from the claims in a JWT token issued by the identity provider.\n\nWhen referencing a claim, if the claim is present in the JWT token, its value must be a list of groups separated by a comma (',').\n\nFor example - '\"example\"' and '\"exampleOne\", \"exampleTwo\", \"exampleThree\"' are valid claim values.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.PrefixedClaimMapping" - }, - "uid": { - "description": "uid is an optional field for configuring the claim mapping used to construct the uid for the cluster identity.\n\nWhen using uid.claim to specify the claim it must be a single string value. When using uid.expression the expression must result in a single string value.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose a default, which is subject to change over time.\n\nThe current default is to use the 'sub' claim.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.TokenClaimOrExpressionMapping" - }, - "username": { - "description": "username is a required field that configures how the username of a cluster identity should be constructed from the claims in a JWT token issued by the identity provider.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.UsernameClaimMapping" - } - } - }, - "com.github.openshift.api.config.v1.TokenClaimOrExpressionMapping": { - "description": "TokenClaimOrExpressionMapping allows specifying either a JWT token claim or CEL expression to be used when mapping claims from an authentication token to cluster identities.", - "type": "object", - "properties": { - "claim": { - "description": "claim is an optional field for specifying the JWT token claim that is used in the mapping. The value of this claim will be assigned to the field in which this mapping is associated.\n\nPrecisely one of claim or expression must be set. claim must not be specified when expression is set. When specified, claim must be at least 1 character in length and must not exceed 256 characters in length.", - "type": "string" - }, - "expression": { - "description": "expression is an optional field for specifying a CEL expression that produces a string value from JWT token claims.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'. 'claims' is a map of claim names to claim values. For example, the 'sub' claim value can be accessed as 'claims.sub'. Nested claims can be accessed using dot notation ('claims.foo.bar').\n\nPrecisely one of claim or expression must be set. expression must not be specified when claim is set. When specified, expression must be at least 1 character in length and must not exceed 1024 characters in length.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.TokenClaimValidationCELRule": { - "type": "object", - "required": [ - "expression", - "message" - ], - "properties": { - "expression": { - "description": "expression is a CEL expression evaluated against token claims. expression is required, must be at least 1 character in length and must not exceed 1024 characters. The expression must return a boolean value where 'true' signals a valid token and 'false' an invalid one.", - "type": "string" - }, - "message": { - "description": "message is a required human-readable message to be logged by the Kubernetes API server if the CEL expression defined in 'expression' fails. message must be at least 1 character in length and must not exceed 256 characters.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.TokenClaimValidationRule": { - "description": "TokenClaimValidationRule represents a validation rule based on token claims. If type is RequiredClaim, requiredClaim must be set. If Type is CEL, CEL must be set and RequiredClaim must be omitted.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "cel": { - "description": "cel holds the CEL expression and message for validation. Must be set when Type is \"CEL\", and forbidden otherwise.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.TokenClaimValidationCELRule" - }, - "requiredClaim": { - "description": "requiredClaim allows configuring a required claim name and its expected value. This field is required when `type` is set to RequiredClaim, and must be omitted when `type` is set to any other value. The Kubernetes API server uses this field to validate if an incoming JWT is valid for this identity provider.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.TokenRequiredClaim" - }, - "type": { - "description": "type is an optional field that configures the type of the validation rule.\n\nAllowed values are \"RequiredClaim\" and \"CEL\".\n\nWhen set to 'RequiredClaim', the Kubernetes API server will be configured to validate that the incoming JWT contains the required claim and that its value matches the required value.\n\nWhen set to 'CEL', the Kubernetes API server will be configured to validate the incoming JWT against the configured CEL expression.\n\nPossible enum values:\n - `\"CEL\"` indicates that the token validation is defined via a CEL expression. Used as a value for TokenValidationRuleType.\n - `\"RequiredClaim\"` indicates that the token must contain a specific claim. Used as a value for TokenValidationRuleType.", - "type": "string", - "default": "", - "enum": [ - "CEL", - "RequiredClaim" - ] - } - } - }, - "com.github.openshift.api.config.v1.TokenConfig": { - "description": "TokenConfig holds the necessary configuration options for authorization and access tokens", - "type": "object", - "properties": { - "accessTokenInactivityTimeout": { - "description": "accessTokenInactivityTimeout defines the token inactivity timeout for tokens granted by any client. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Takes valid time duration string such as \"5m\", \"1.5h\" or \"2h45m\". The minimum allowed value for duration is 300s (5 minutes). If the timeout is configured per client, then that value takes precedence. If the timeout value is not specified and the client does not override the value, then tokens are valid until their lifetime.\n\nWARNING: existing tokens' timeout will not be affected (lowered) by changing this value", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "accessTokenInactivityTimeoutSeconds": { - "description": "accessTokenInactivityTimeoutSeconds - DEPRECATED: setting this field has no effect.", - "type": "integer", - "format": "int32" - }, - "accessTokenMaxAgeSeconds": { - "description": "accessTokenMaxAgeSeconds defines the maximum age of access tokens", - "type": "integer", - "format": "int32" - } - } - }, - "com.github.openshift.api.config.v1.TokenIssuer": { - "type": "object", - "required": [ - "issuerURL", - "audiences" - ], - "properties": { - "audiences": { - "description": "audiences is a required field that configures the acceptable audiences the JWT token, issued by the identity provider, must be issued to. At least one of the entries must match the 'aud' claim in the JWT token.\n\naudiences must contain at least one entry and must not exceed ten entries.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "discoveryURL": { - "description": "discoveryURL is an optional field that, if specified, overrides the default discovery endpoint used to retrieve OIDC configuration metadata. By default, the discovery URL is derived from `issuerURL` as \"{issuerURL}/.well-known/openid-configuration\".\n\nThe discoveryURL must be a valid absolute HTTPS URL. It must not contain query parameters, user information, or fragments. Additionally, it must differ from the value of `issuerURL` (ignoring trailing slashes). The discoveryURL value must be at least 1 character long and no longer than 2048 characters.", - "type": "string" - }, - "issuerCertificateAuthority": { - "description": "issuerCertificateAuthority is an optional field that configures the certificate authority, used by the Kubernetes API server, to validate the connection to the identity provider when fetching discovery information.\n\nWhen not specified, the system trust is used.\n\nWhen specified, it must reference a ConfigMap in the openshift-config namespace containing the PEM-encoded CA certificates under the 'ca-bundle.crt' key in the data field of the ConfigMap.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "issuerURL": { - "description": "issuerURL is a required field that configures the URL used to issue tokens by the identity provider. The Kubernetes API server determines how authentication tokens should be handled by matching the 'iss' claim in the JWT to the issuerURL of configured identity providers.\n\nMust be at least 1 character and must not exceed 512 characters in length. Must be a valid URL that uses the 'https' scheme and does not contain a query, fragment or user.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.TokenRequiredClaim": { - "type": "object", - "required": [ - "claim", - "requiredValue" - ], - "properties": { - "claim": { - "description": "claim is a required field that configures the name of the required claim. When taken from the JWT claims, claim must be a string value.\n\nclaim must not be an empty string (\"\").", - "type": "string", - "default": "" - }, - "requiredValue": { - "description": "requiredValue is a required field that configures the value that 'claim' must have when taken from the incoming JWT claims. If the value in the JWT claims does not match, the token will be rejected for authentication.\n\nrequiredValue must not be an empty string (\"\").", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.TokenUserValidationRule": { - "description": "TokenUserValidationRule provides a CEL-based rule used to validate a token subject. Each rule contains a CEL expression that is evaluated against the token’s claims.", - "type": "object", - "required": [ - "expression", - "message" - ], - "properties": { - "expression": { - "description": "expression is a required CEL expression that performs a validation on cluster user identity attributes like username, groups, etc.\n\nThe expression must evaluate to a boolean value. When the expression evaluates to 'true', the cluster user identity is considered valid. When the expression evaluates to 'false', the cluster user identity is not considered valid. expression must be at least 1 character in length and must not exceed 1024 characters.", - "type": "string" - }, - "message": { - "description": "message is a required human-readable message to be logged by the Kubernetes API server if the CEL expression defined in 'expression' fails. message must be at least 1 character in length and must not exceed 256 characters.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.Update": { - "description": "Update represents an administrator update request.", - "type": "object", - "properties": { - "acceptRisks": { - "description": "acceptRisks is an optional set of names of conditional update risks that are considered acceptable. A conditional update is performed only if all of its risks are acceptable. This list may contain entries that apply to current, previous or future updates. The entries therefore may not map directly to a risk in .status.conditionalUpdateRisks. acceptRisks must not contain more than 1000 entries. Entries in this list must be unique.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.AcceptRisk" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "architecture": { - "description": "architecture is an optional field that indicates the desired value of the cluster architecture. In this context cluster architecture means either a single architecture or a multi architecture. architecture can only be set to Multi thereby only allowing updates from single to multi architecture. If architecture is set, image cannot be set and version must be set. Valid values are 'Multi' and empty.", - "type": "string", - "default": "" - }, - "force": { - "description": "force allows an administrator to update to an image that has failed verification or upgradeable checks that are designed to keep your cluster safe. Only use this if: * you are testing unsigned release images in short-lived test clusters or * you are working around a known bug in the cluster-version\n operator and you have verified the authenticity of the provided\n image yourself.\nThe provided image will run with full administrative access to the cluster. Do not use this flag with images that come from unknown or potentially malicious sources.", - "type": "boolean", - "default": false - }, - "image": { - "description": "image is a container image location that contains the update. image should be used when the desired version does not exist in availableUpdates or history. When image is set, architecture cannot be specified. If both version and image are set, the version extracted from the referenced image must match the specified version.", - "type": "string", - "default": "" - }, - "mode": { - "description": "mode determines how an update should be processed. The only valid value is \"Preflight\". When omitted, the cluster performs a normal update by applying the specified version or image to the cluster. This is the standard update behavior. When set to \"Preflight\", the cluster runs compatibility checks against the target release without performing an actual update. Compatibility results, including any detected risks, are reported in status.conditionalUpdates and status.conditionalUpdateRisks alongside risks from the update recommendation service. This allows administrators to assess update readiness and address issues before committing to the update. Preflight mode is particularly useful for skip-level updates where upgrade compatibility needs to be verified across multiple minor versions. When mode is set to \"Preflight\", the same rules for version, image, and architecture apply as for normal updates.\n\nPossible enum values:\n - `\"Preflight\"` allows an update to be checked for compatibility without committing to updating the cluster.", - "type": "string", - "enum": [ - "Preflight" - ] - }, - "version": { - "description": "version is a semantic version identifying the update version. version is required if architecture is specified. If both version and image are set, the version extracted from the referenced image must match the specified version.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.UpdateHistory": { - "description": "UpdateHistory is a single attempted update to the cluster.", - "type": "object", - "required": [ - "state", - "startedTime", - "completionTime", - "image", - "verified" - ], - "properties": { - "acceptedRisks": { - "description": "acceptedRisks records risks which were accepted to initiate the update. For example, it may mention an Upgradeable=False or missing signature that was overridden via desiredUpdate.force, or an update that was initiated despite not being in the availableUpdates set of recommended update targets.", - "type": "string" - }, - "completionTime": { - "description": "completionTime, if set, is when the update was fully applied. The update that is currently being applied will have a null completion time. Completion time will always be set for entries that are not the current update (usually to the started time of the next update).", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "image": { - "description": "image is a container image location that contains the update. This value is always populated.", - "type": "string", - "default": "" - }, - "startedTime": { - "description": "startedTime is the time at which the update was started.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "state": { - "description": "state reflects whether the update was fully applied. The Partial state indicates the update is not fully applied, while the Completed state indicates the update was successfully rolled out at least once (all parts of the update successfully applied).", - "type": "string", - "default": "" - }, - "verified": { - "description": "verified indicates whether the provided update was properly verified before it was installed. If this is false the cluster may not be trusted. Verified does not cover upgradeable checks that depend on the cluster state at the time when the update target was accepted.", - "type": "boolean", - "default": false - }, - "version": { - "description": "version is a semantic version identifying the update version. If the requested image does not define a version, or if a failure occurs retrieving the image, this value may be empty.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.UsernameClaimMapping": { - "type": "object", - "properties": { - "claim": { - "description": "claim is an optional field that configures the JWT token claim whose value is assigned to the cluster identity field associated with this mapping. claim is required when the ExternalOIDCWithUpstreamParity feature gate is not enabled. When the ExternalOIDCWithUpstreamParity feature gate is enabled, claim must not be set when expression is set.\n\nclaim must not be an empty string (\"\") and must not exceed 256 characters.", - "type": "string" - }, - "expression": { - "description": "expression is an optional CEL expression used to derive the username from JWT claims.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length. expression must not be set when claim is set.", - "type": "string" - }, - "prefix": { - "description": "prefix configures the prefix that should be prepended to the value of the JWT claim.\n\nprefix must be set when prefixPolicy is set to 'Prefix' and must be unset otherwise.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.UsernamePrefix" - }, - "prefixPolicy": { - "description": "prefixPolicy is an optional field that configures how a prefix should be applied to the value of the JWT claim specified in the 'claim' field.\n\nAllowed values are 'Prefix', 'NoPrefix', and omitted (not provided or an empty string).\n\nWhen set to 'Prefix', the value specified in the prefix field will be prepended to the value of the JWT claim. The prefix field must be set when prefixPolicy is 'Prefix'. Must not be set to 'Prefix' when expression is set. When set to 'NoPrefix', no prefix will be prepended to the value of the JWT claim. When omitted, this means no opinion and the platform is left to choose any prefixes that are applied which is subject to change over time. Currently, the platform prepends `{issuerURL}#` to the value of the JWT claim when the claim is not 'email'.\n\nAs an example, consider the following scenario:\n\n `prefix` is unset, `issuerURL` is set to `https://myoidc.tld`,\n the JWT claims include \"username\":\"userA\" and \"email\":\"userA@myoidc.tld\",\n and `claim` is set to:\n - \"username\": the mapped value will be \"https://myoidc.tld#userA\"\n - \"email\": the mapped value will be \"userA@myoidc.tld\"\n\n\nPossible enum values:\n - `\"\"` let's the cluster assign prefixes. If the username claim is email, there is no prefix If the username claim is anything else, it is prefixed by the issuerURL\n - `\"NoPrefix\"` means the username claim value will not have any prefix\n - `\"Prefix\"` means the prefix value must be specified. It cannot be empty", - "type": "string", - "default": "", - "enum": [ - "", - "NoPrefix", - "Prefix" - ] - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "prefixPolicy", - "fields-to-discriminateBy": { - "claim": "Claim", - "expression": "Expression", - "prefix": "Prefix" - } - } - ] - }, - "com.github.openshift.api.config.v1.UsernamePrefix": { - "description": "UsernamePrefix configures the string that should be used as a prefix for username claim mappings.", - "type": "object", - "required": [ - "prefixString" - ], - "properties": { - "prefixString": { - "description": "prefixString is a required field that configures the prefix that will be applied to cluster identity username attribute during the process of mapping JWT claims to cluster identity attributes.\n\nprefixString must not be an empty string (\"\").", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.VSphereFailureDomainHostGroup": { - "description": "VSphereFailureDomainHostGroup holds the vmGroup and the hostGroup names in vCenter corresponds to a vm-host group of type Virtual Machine and Host respectively. Is also contains the vmHostRule which is an affinity vm-host rule in vCenter.", - "type": "object", - "required": [ - "vmGroup", - "hostGroup", - "vmHostRule" - ], - "properties": { - "hostGroup": { - "description": "hostGroup is the name of the vm-host group of type host within vCenter for this failure domain. hostGroup is limited to 80 characters. This field is required when the VSphereFailureDomain ZoneType is HostGroup", - "type": "string", - "default": "" - }, - "vmGroup": { - "description": "vmGroup is the name of the vm-host group of type virtual machine within vCenter for this failure domain. vmGroup is limited to 80 characters. This field is required when the VSphereFailureDomain ZoneType is HostGroup", - "type": "string", - "default": "" - }, - "vmHostRule": { - "description": "vmHostRule is the name of the affinity vm-host rule within vCenter for this failure domain. vmHostRule is limited to 80 characters. This field is required when the VSphereFailureDomain ZoneType is HostGroup", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.VSphereFailureDomainRegionAffinity": { - "description": "VSphereFailureDomainRegionAffinity contains the region type which is the string representation of the VSphereFailureDomainRegionType with available options of Datacenter and ComputeCluster.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "type": { - "description": "type determines the vSphere object type for a region within this failure domain. Available types are Datacenter and ComputeCluster. When set to Datacenter, this means the vCenter Datacenter defined is the region. When set to ComputeCluster, this means the vCenter cluster defined is the region.\n\nPossible enum values:\n - `\"ComputeCluster\"` is a failure domain region for a vCenter compute cluster.\n - `\"Datacenter\"` is a failure domain region for a vCenter datacenter.", - "type": "string", - "default": "", - "enum": [ - "ComputeCluster", - "Datacenter" - ] - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": {} - } - ] - }, - "com.github.openshift.api.config.v1.VSphereFailureDomainZoneAffinity": { - "description": "VSphereFailureDomainZoneAffinity contains the vCenter cluster vm-host group (virtual machine and host types) and the vm-host affinity rule that together creates an affinity configuration for vm-host based zonal. This configuration within vCenter creates the required association between a failure domain, virtual machines and ESXi hosts to create a vm-host based zone.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "hostGroup": { - "description": "hostGroup holds the vmGroup and the hostGroup names in vCenter corresponds to a vm-host group of type Virtual Machine and Host respectively. Is also contains the vmHostRule which is an affinity vm-host rule in vCenter.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.VSphereFailureDomainHostGroup" - }, - "type": { - "description": "type determines the vSphere object type for a zone within this failure domain. Available types are ComputeCluster and HostGroup. When set to ComputeCluster, this means the vCenter cluster defined is the zone. When set to HostGroup, hostGroup must be configured with hostGroup, vmGroup and vmHostRule and this means the zone is defined by the grouping of those fields.\n\nPossible enum values:\n - `\"ComputeCluster\"` is a failure domain zone for a vCenter compute cluster.\n - `\"HostGroup\"` is a failure domain zone for a vCenter vm-host group.", - "type": "string", - "default": "", - "enum": [ - "ComputeCluster", - "HostGroup" - ] - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "hostGroup": "HostGroup" - } - } - ] - }, - "com.github.openshift.api.config.v1.VSpherePlatformFailureDomainSpec": { - "description": "VSpherePlatformFailureDomainSpec holds the region and zone failure domain and the vCenter topology of that failure domain.", - "type": "object", - "required": [ - "name", - "region", - "zone", - "server", - "topology" - ], - "properties": { - "name": { - "description": "name defines the arbitrary but unique name of a failure domain.", - "type": "string", - "default": "" - }, - "region": { - "description": "region defines the name of a region tag that will be attached to a vCenter datacenter. The tag category in vCenter must be named openshift-region.", - "type": "string", - "default": "" - }, - "regionAffinity": { - "description": "regionAffinity holds the type of region, Datacenter or ComputeCluster. When set to Datacenter, this means the region is a vCenter Datacenter as defined in topology. When set to ComputeCluster, this means the region is a vCenter Cluster as defined in topology.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.VSphereFailureDomainRegionAffinity" - }, - "server": { - "description": "server is the fully-qualified domain name or the IP address of the vCenter server. This must match the server field of an entry in the vcenters list. The match is case-sensitive; the value must be specified exactly as it appears in the vcenters entry. The value must be between 1 and 255 characters long.", - "type": "string", - "default": "" - }, - "topology": { - "description": "topology describes a given failure domain using vSphere constructs", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.VSpherePlatformTopology" - }, - "zone": { - "description": "zone defines the name of a zone tag that will be attached to a vCenter cluster. The tag category in vCenter must be named openshift-zone.", - "type": "string", - "default": "" - }, - "zoneAffinity": { - "description": "zoneAffinity holds the type of the zone and the hostGroup which vmGroup and the hostGroup names in vCenter corresponds to a vm-host group of type Virtual Machine and Host respectively. Is also contains the vmHostRule which is an affinity vm-host rule in vCenter.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.VSphereFailureDomainZoneAffinity" - } - } - }, - "com.github.openshift.api.config.v1.VSpherePlatformLoadBalancer": { - "description": "VSpherePlatformLoadBalancer defines the load balancer used by the cluster on VSphere platform.", - "type": "object", - "properties": { - "type": { - "description": "type defines the type of load balancer used by the cluster on VSphere platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", - "type": "string", - "default": "OpenShiftManagedDefault" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": {} - } - ] - }, - "com.github.openshift.api.config.v1.VSpherePlatformNodeNetworking": { - "description": "VSpherePlatformNodeNetworking holds the external and internal node networking spec.", - "type": "object", - "properties": { - "external": { - "description": "external represents the network configuration of the node that is externally routable.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.VSpherePlatformNodeNetworkingSpec" - }, - "internal": { - "description": "internal represents the network configuration of the node that is routable only within the cluster.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.VSpherePlatformNodeNetworkingSpec" - } - } - }, - "com.github.openshift.api.config.v1.VSpherePlatformNodeNetworkingSpec": { - "description": "VSpherePlatformNodeNetworkingSpec holds the network CIDR(s) and port group name for including and excluding IP ranges in the cloud provider. This would be used for example when multiple network adapters are attached to a guest to help determine which IP address the cloud config manager should use for the external and internal node networking.", - "type": "object", - "properties": { - "excludeNetworkSubnetCidr": { - "description": "excludeNetworkSubnetCidr IP addresses in subnet ranges will be excluded when selecting the IP address from the VirtualMachine's VM for use in the status.addresses fields.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "network": { - "description": "network VirtualMachine's VM Network names that will be used to when searching for status.addresses fields. Note that if internal.networkSubnetCIDR and external.networkSubnetCIDR are not set, then the vNIC associated to this network must only have a single IP address assigned to it. The available networks (port groups) can be listed using `govc ls 'network/*'`", - "type": "string" - }, - "networkSubnetCidr": { - "description": "networkSubnetCidr IP address on VirtualMachine's network interfaces included in the fields' CIDRs that will be used in respective status.addresses fields.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - } - } - }, - "com.github.openshift.api.config.v1.VSpherePlatformSpec": { - "description": "VSpherePlatformSpec holds the desired state of the vSphere infrastructure provider. In the future the cloud provider operator, storage operator and machine operator will use these fields for configuration.", - "type": "object", - "properties": { - "apiServerInternalIPs": { - "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "failureDomains": { - "description": "failureDomains contains the definition of region, zone and the vCenter topology. If this is omitted failure domains (regions and zones) will not be used. Each failure domain's server must match the server field of an entry in the vcenters list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.VSpherePlatformFailureDomainSpec" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "ingressIPs": { - "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "machineNetworks": { - "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "nodeNetworking": { - "description": "nodeNetworking contains the definition of internal and external network constraints for assigning the node's networking. If this field is omitted, networking defaults to the legacy address selection behavior which is to only support a single address and return the first one found.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.VSpherePlatformNodeNetworking" - }, - "vcenters": { - "description": "vcenters holds the connection details for services to communicate with vCenter. Up to 3 vCenters are supported. Once the cluster has been installed, you are unable to change the current number of defined vCenters except when 1.) the cluster has been upgraded from a version of OpenShift where the vsphere platform spec was not present or 2.) in TechPreview you are able to add and remove vCenters but may not remove all vCenters. You may make modifications to the existing vCenters that are defined in the vcenters list in order to match with any added or modified failure domains.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.VSpherePlatformVCenterSpec" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.config.v1.VSpherePlatformStatus": { - "description": "VSpherePlatformStatus holds the current status of the vSphere infrastructure provider.", - "type": "object", - "required": [ - "apiServerInternalIPs", - "ingressIPs" - ], - "properties": { - "apiServerInternalIP": { - "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", - "type": "string" - }, - "apiServerInternalIPs": { - "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "dnsRecordsType": { - "description": "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", - "type": "string", - "enum": [ - "External", - "Internal" - ] - }, - "ingressIP": { - "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", - "type": "string" - }, - "ingressIPs": { - "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "loadBalancer": { - "description": "loadBalancer defines how the load balancer used by the cluster is configured.", - "default": { - "type": "OpenShiftManagedDefault" - }, - "$ref": "#/definitions/com.github.openshift.api.config.v1.VSpherePlatformLoadBalancer" - }, - "machineNetworks": { - "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "nodeDNSIP": { - "description": "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for vSphere deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.VSpherePlatformTopology": { - "description": "VSpherePlatformTopology holds the required and optional vCenter objects - datacenter, computeCluster, networks, datastore and resourcePool - to provision virtual machines.", - "type": "object", - "required": [ - "datacenter", - "computeCluster", - "networks", - "datastore" - ], - "properties": { - "computeCluster": { - "description": "computeCluster the absolute path of the vCenter cluster in which virtual machine will be located. The absolute path is of the form //host/. The maximum length of the path is 2048 characters.", - "type": "string", - "default": "" - }, - "datacenter": { - "description": "datacenter is the name of vCenter datacenter in which virtual machines will be located. The maximum length of the datacenter name is 80 characters.", - "type": "string", - "default": "" - }, - "datastore": { - "description": "datastore is the absolute path of the datastore in which the virtual machine is located. The absolute path is of the form //datastore/ The maximum length of the path is 2048 characters.", - "type": "string", - "default": "" - }, - "folder": { - "description": "folder is the absolute path of the folder where virtual machines are located. The absolute path is of the form //vm/. The maximum length of the path is 2048 characters.", - "type": "string" - }, - "networks": { - "description": "networks is the list of port group network names within this failure domain. If feature gate VSphereMultiNetworks is enabled, up to 10 network adapters may be defined. 10 is the maximum number of virtual network devices which may be attached to a VM as defined by: https://configmax.esp.vmware.com/guest?vmwareproduct=vSphere&release=vSphere%208.0&categories=1-0 The available networks (port groups) can be listed using `govc ls 'network/*'` Networks should be in the form of an absolute path: //network/.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "resourcePool": { - "description": "resourcePool is the absolute path of the resource pool where virtual machines will be created. The absolute path is of the form //host//Resources/. The maximum length of the path is 2048 characters.", - "type": "string" - }, - "template": { - "description": "template is the full inventory path of the virtual machine or template that will be cloned when creating new machines in this failure domain. The maximum length of the path is 2048 characters.\n\nWhen omitted, the template will be calculated by the control plane machineset operator based on the region and zone defined in VSpherePlatformFailureDomainSpec. For example, for zone=zonea, region=region1, and infrastructure name=test, the template path would be calculated as //vm/test-rhcos-region1-zonea.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.VSpherePlatformVCenterSpec": { - "description": "VSpherePlatformVCenterSpec stores the vCenter connection fields. This is used by the vSphere CCM.", - "type": "object", - "required": [ - "server", - "datacenters" - ], - "properties": { - "datacenters": { - "description": "The vCenter Datacenters in which the RHCOS vm guests are located. This field will be used by the Cloud Controller Manager. Each datacenter listed here should be used within a topology.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "port": { - "description": "port is the TCP port that will be used to communicate to the vCenter endpoint. When omitted, this means the user has no opinion and it is up to the platform to choose a sensible default, which is subject to change over time.", - "type": "integer", - "format": "int32" - }, - "server": { - "description": "server is the fully-qualified domain name or the IP address of the vCenter server.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1.VaultAppRoleAuthentication": { - "description": "VaultAppRoleAuthentication defines the configuration for AppRole authentication with Vault.", - "type": "object", - "required": [ - "secret" - ], - "properties": { - "secret": { - "description": "secret references a secret in the openshift-config namespace containing the AppRole credentials used to authenticate with Vault. The referenced Secret must contain two keys: \"role-id\" for the AppRole Role ID and \"secret-id\" for the AppRole Secret ID.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.VaultSecretReference" - } - } - }, - "com.github.openshift.api.config.v1.VaultAuthentication": { - "description": "VaultAuthentication defines the authentication method used to authenticate with Vault.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "appRole": { - "description": "appRole defines the configuration for AppRole authentication. This field must be set when type is AppRole, and must be unset otherwise.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.VaultAppRoleAuthentication" - }, - "type": { - "description": "type defines the authentication method used to authenticate with Vault. Allowed values are AppRole. When set to AppRole, the plugin uses AppRole credentials to authenticate with Vault.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "appRole": "AppRole" - } - } - ] - }, - "com.github.openshift.api.config.v1.VaultConfigMapReference": { - "description": "VaultConfigMapReference references a ConfigMap in the openshift-config namespace.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is the metadata.name of the referenced ConfigMap in the openshift-config namespace. The name must be a valid DNS subdomain name: it must contain no more than 253 characters, contain only lowercase alphanumeric characters, '-' or '.', and start and end with an alphanumeric character.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.VaultKMSPluginConfig": { - "description": "VaultKMSPluginConfig defines the KMS plugin configuration specific to Vault KMS", - "type": "object", - "required": [ - "kmsPluginImage", - "vaultAddress", - "authentication", - "vaultKeyPath" - ], - "properties": { - "authentication": { - "description": "authentication defines the authentication method used to authenticate with Vault.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.VaultAuthentication" - }, - "kmsPluginImage": { - "description": "kmsPluginImage specifies the container image for the HashiCorp Vault KMS plugin.\n\nThe image must be a fully qualified OCI image pull spec with a SHA256 digest. The format is: host[:port][/namespace]/name@sha256: where the digest must be 64 characters long and consist only of lowercase hexadecimal characters, a-f and 0-9. The total length must be between 75 and 447 characters.\n\nShort names (e.g., \"vault-plugin\" or \"hashicorp/vault-plugin\") are not allowed. The registry hostname must be included and must contain at least one dot. Image tags (e.g., \":latest\", \":v1.0.0\") are not allowed.\n\nConsult the OpenShift documentation for compatible plugin versions with your cluster version, then obtain the image digest for that version from HashiCorp's container registry.\n\nFor disconnected environments, mirror the plugin image to an accessible registry and reference the mirrored location with its digest.", - "type": "string" - }, - "tls": { - "description": "tls contains the TLS configuration for connecting to the Vault server. When this field is not set, system default TLS settings are used.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.VaultTLSConfig" - }, - "vaultAddress": { - "description": "vaultAddress specifies the address of the HashiCorp Vault instance. The value must be a valid HTTPS URL containing only scheme, host, and optional port. Paths, user info, query parameters, and fragments are not allowed.\n\nFormat: https://hostname[:port] Example: https://vault.example.com:8200\n\nThe value must be between 1 and 512 characters.", - "type": "string" - }, - "vaultAuthNamespace": { - "description": "vaultAuthNamespace specifies the Vault namespace to use for authentication. This is only applicable for Vault Enterprise installations where authentication and Transit operations may be in different namespaces. When this field is not set, the value of vaultNamespace is used for both authentication and Transit key operations.\n\nThe value must be between 1 and 4096 characters. The namespace cannot end with a forward slash, cannot contain spaces, and cannot be one of the reserved strings: root, sys, audit, auth, cubbyhole, or identity.", - "type": "string" - }, - "vaultKeyPath": { - "description": "vaultKeyPath specifies the full path to the encryption key in Vault's Transit secrets engine, combining the Transit engine mount path and the key name separated by \"/keys/\". Format: /keys/ (e.g., transit/keys/my-key, myteam/transit/keys/production-key).\n\nThe total path length must be between 8 and 1542 characters. The path cannot start or end with a forward slash, cannot contain consecutive forward slashes, must only contain RFC 3986 unreserved characters (alphanumeric, hyphen, period, underscore, tilde) and forward slashes as path separators, and must not contain \".\" or \"..\" path segments. The key name must start and end with an alphanumeric character or underscore, and may contain alphanumeric characters, underscores, hyphens, and periods in the middle.", - "type": "string" - }, - "vaultNamespace": { - "description": "vaultNamespace specifies the Vault namespace where the Transit secrets engine is mounted. This is only applicable for Vault Enterprise installations. When this field is not set, no namespace is used.\n\nThe value must be between 1 and 4096 characters. The namespace cannot end with a forward slash, cannot contain spaces, and cannot be one of the reserved strings: root, sys, audit, auth, cubbyhole, or identity.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.VaultSecretReference": { - "description": "VaultSecretReference references a secret in the openshift-config namespace.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is the metadata.name of the referenced secret in the openshift-config namespace. The name must be a valid DNS subdomain name: it must contain no more than 253 characters, contain only lowercase alphanumeric characters, '-' or '.', and start and end with an alphanumeric character.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.VaultTLSConfig": { - "description": "VaultTLSConfig contains TLS configuration for connecting to Vault.", - "type": "object", - "properties": { - "caBundle": { - "description": "caBundle references a ConfigMap in the openshift-config namespace containing the CA certificate bundle used to verify the TLS connection to the Vault server. The referenced ConfigMap must contain the CA bundle in the key \"ca-bundle.crt\". When this field is not set, the system's trusted CA certificates are used.\n\nThe namespace for the ConfigMap is openshift-config.\n\nExample ConfigMap:\n apiVersion: v1\n kind: ConfigMap\n metadata:\n name: vault-ca-bundle\n namespace: openshift-config\n data:\n ca-bundle.crt: |\n -----BEGIN CERTIFICATE-----\n ...\n -----END CERTIFICATE-----", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.VaultConfigMapReference" - }, - "serverName": { - "description": "serverName specifies the Server Name Indication (SNI) to use when connecting to Vault via TLS. This is useful when the Vault server's hostname doesn't match its TLS certificate. When this field is not set, the hostname from vaultAddress is used for SNI.\n\nThe value must be a valid DNS hostname: it must contain no more than 253 characters, contain only lowercase alphanumeric characters, '-' or '.', and start and end with an alphanumeric character.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1.WebhookTokenAuthenticator": { - "description": "webhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator", - "type": "object", - "required": [ - "kubeConfig" - ], - "properties": { - "kubeConfig": { - "description": "kubeConfig references a secret that contains kube config file data which describes how to access the remote webhook service. The namespace for the referenced secret is openshift-config.\n\nFor further details, see:\n\nhttps://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication\n\nThe key \"kubeConfig\" is used to locate the data. If the secret or expected key is not found, the webhook is not honored. If the specified kube config data is not valid, the webhook is not honored.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - } - } - }, - "com.github.openshift.api.config.v1alpha1.AdditionalAlertmanagerConfig": { - "description": "AdditionalAlertmanagerConfig represents configuration for additional Alertmanager instances. The `AdditionalAlertmanagerConfig` resource defines settings for how a component communicates with additional Alertmanager instances.", - "type": "object", - "required": [ - "name", - "staticConfigs" - ], - "properties": { - "authorization": { - "description": "authorization configures the authentication method for Alertmanager connections. Supports bearer token authentication. When omitted, no authentication is used.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.AuthorizationConfig" - }, - "name": { - "description": "name is a unique identifier for this Alertmanager configuration entry. The name must be a valid DNS subdomain (RFC 1123): lowercase alphanumeric characters, hyphens, or periods, and must start and end with an alphanumeric character. Minimum length is 1 character (empty string is invalid). Maximum length is 253 characters.", - "type": "string" - }, - "pathPrefix": { - "description": "pathPrefix defines an optional URL path prefix to prepend to the Alertmanager API endpoints. For example, if your Alertmanager is behind a reverse proxy at \"/alertmanager/\", set this to \"/alertmanager\" so requests go to \"/alertmanager/api/v1/alerts\" instead of \"/api/v1/alerts\". This is commonly needed when Alertmanager is deployed behind ingress controllers or load balancers. When no prefix is needed, omit this field; do not set it to \"/\" as that would produce paths with double slashes (e.g. \"//api/v1/alerts\"). Must start with \"/\", must not end with \"/\", and must not be exactly \"/\". Must not contain query strings (\"?\") or fragments (\"#\").", - "type": "string" - }, - "scheme": { - "description": "scheme defines the URL scheme to use when communicating with Alertmanager instances. Possible values are `HTTP` or `HTTPS`. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default value is `HTTP`.", - "type": "string" - }, - "staticConfigs": { - "description": "staticConfigs is a list of statically configured Alertmanager endpoints in the form of `:`. Each entry must be a valid hostname, IPv4 address, or IPv6 address (in brackets) followed by a colon and a valid port number (1-65535). Examples: \"alertmanager.example.com:9093\", \"192.168.1.100:9093\", \"[::1]:9093\" At least one endpoint must be specified (minimum 1, maximum 10 endpoints). Each entry must be unique and non-empty (empty string is invalid).", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "timeoutSeconds": { - "description": "timeoutSeconds defines the timeout in seconds for requests to Alertmanager. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. Currently the default is 10 seconds. Minimum value is 1 second. Maximum value is 600 seconds (10 minutes).", - "type": "integer", - "format": "int32" - }, - "tlsConfig": { - "description": "tlsConfig defines the TLS settings to use for Alertmanager connections. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.TLSConfig" - } - } - }, - "com.github.openshift.api.config.v1alpha1.AlertmanagerConfig": { - "description": "alertmanagerConfig provides configuration options for the default Alertmanager instance that runs in the `openshift-monitoring` namespace. Use this configuration to control whether the default Alertmanager is deployed, how it logs, and how its pods are scheduled.", - "type": "object", - "required": [ - "deploymentMode" - ], - "properties": { - "customConfig": { - "description": "customConfig must be set when deploymentMode is CustomConfig, and must be unset otherwise. When set to CustomConfig, the Alertmanager will be deployed with custom configuration.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.AlertmanagerCustomConfig" - }, - "deploymentMode": { - "description": "deploymentMode determines whether the default Alertmanager instance should be deployed as part of the monitoring stack. Allowed values are Disabled, DefaultConfig, and CustomConfig. When set to Disabled, the Alertmanager instance will not be deployed. When set to DefaultConfig, the platform will deploy Alertmanager with default settings. When set to CustomConfig, the Alertmanager will be deployed with custom configuration.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.AlertmanagerCustomConfig": { - "description": "AlertmanagerCustomConfig represents the configuration for a custom Alertmanager deployment. alertmanagerCustomConfig provides configuration options for the default Alertmanager instance that runs in the `openshift-monitoring` namespace. Use this configuration to control whether user-defined namespaces are selected for AlertmanagerConfig lookups, how it logs, and how its pods are scheduled.", - "type": "object", - "properties": { - "logLevel": { - "description": "logLevel defines the verbosity of logs emitted by Alertmanager. This field allows users to control the amount and severity of logs generated, which can be useful for debugging issues or reducing noise in production environments. Allowed values are Error, Warn, Info, and Debug. When set to Error, only errors will be logged. When set to Warn, both warnings and errors will be logged. When set to Info, general information, warnings, and errors will all be logged. When set to Debug, detailed debugging information will be logged. When omitted, this means no opinion and the platform is left to choose a reasonable default, that is subject to change over time. The current default value is `Info`.", - "type": "string" - }, - "nodeSelector": { - "description": "nodeSelector defines the nodes on which the Pods are scheduled nodeSelector is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default value is `kubernetes.io/os: linux`.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "resources": { - "description": "resources defines the compute resource requests and limits for the Alertmanager container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 4m\n limit: null\n - name: memory\n request: 40Mi\n limit: null\nMaximum length for this list is 5. Minimum length for this list is 1. Each resource name must be unique within this list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.ContainerResource" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "secrets": { - "description": "secrets defines a list of secrets that need to be mounted into the Alertmanager. The secrets must reside within the same namespace as the Alertmanager object. They will be added as volumes named secret- and mounted at /etc/alertmanager/secrets/ within the 'alertmanager' container of the Alertmanager Pods.\n\nThese secrets can be used to authenticate Alertmanager with endpoint receivers. For example, you can use secrets to: - Provide certificates for TLS authentication with receivers that require private CA certificates - Store credentials for Basic HTTP authentication with receivers that require password-based auth - Store any other authentication credentials needed by your alert receivers\n\nThis field is optional. Maximum length for this list is 10. Minimum length for this list is 1. Entries in this list must be unique.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "tolerations": { - "description": "tolerations defines tolerations for the pods. tolerations is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. Defaults are empty/unset. Maximum length for this list is 10. Minimum length for this list is 1.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - }, - "x-kubernetes-list-type": "atomic" - }, - "topologySpreadConstraints": { - "description": "topologySpreadConstraints defines rules for how Alertmanager Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nWhen omitted, this means no opinion and the platform is left to choose a default, which is subject to change over time. This field maps directly to the `topologySpreadConstraints` field in the Pod spec. Default is empty list. Maximum length for this list is 10. Minimum length for this list is 1. Entries must have unique topologyKey and whenUnsatisfiable pairs.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.TopologySpreadConstraint" - }, - "x-kubernetes-list-map-keys": [ - "topologyKey", - "whenUnsatisfiable" - ], - "x-kubernetes-list-type": "map" - }, - "userAlertmanagerConfigSelection": { - "description": "userAlertmanagerConfigSelection is an optional field that controls whether user-defined namespaces can be selected for AlertmanagerConfig lookups on the platform Alertmanager instance in the `openshift-monitoring` namespace. Valid values are Selectable and None. When set to Selectable, the platform Alertmanager discovers AlertmanagerConfig resources in user-defined namespaces. This is equivalent to `enableUserAlertmanagerConfig: true` in the cluster-monitoring-config ConfigMap. When set to None, user-defined namespaces are not selected for AlertmanagerConfig lookups on the platform Alertmanager. This is equivalent to `enableUserAlertmanagerConfig: false` in the cluster-monitoring-config ConfigMap. This setting only applies when the user-workload monitoring Alertmanager is not enabled. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default value is `None`.\n\nPossible enum values:\n - `\"None\"` disables user-defined namespaces from being selected for AlertmanagerConfig lookups on the platform Alertmanager.\n - `\"Selectable\"` enables user-defined namespaces to be selected for AlertmanagerConfig lookups on the platform Alertmanager.", - "type": "string", - "enum": [ - "None", - "Selectable" - ] - }, - "volumeClaimTemplate": { - "description": "volumeClaimTemplate defines persistent storage for Alertmanager. Use this setting to configure the persistent volume claim, including storage class and volume size. If omitted, the Pod uses ephemeral storage and alert data will not persist across restarts.", - "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" - } - } - }, - "com.github.openshift.api.config.v1alpha1.Audit": { - "description": "Audit profile configurations", - "type": "object", - "required": [ - "profile" - ], - "properties": { - "profile": { - "description": "profile is a required field for configuring the audit log level of the Kubernetes Metrics Server. Allowed values are None, Metadata, Request, or RequestResponse. When set to None, audit logging is disabled and no audit events are recorded. When set to Metadata, only request metadata (such as requesting user, timestamp, resource, verb, etc.) is logged, but not the request or response body. When set to Request, event metadata and the request body are logged, but not the response body. When set to RequestResponse, event metadata, request body, and response body are all logged, providing the most detailed audit information.\n\nSee: https://kubernetes.io/docs/tasks/debug-application-cluster/audit/#audit-policy for more information about auditing and log levels.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.AuthorizationConfig": { - "description": "AuthorizationConfig defines the authentication method for Alertmanager connections.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "bearerToken": { - "description": "bearerToken defines the secret reference containing the bearer token. Required when type is \"BearerToken\", and forbidden otherwise. The secret must exist in the openshift-monitoring namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.SecretKeySelector" - }, - "type": { - "description": "type specifies the authentication type to use. Valid value is \"BearerToken\" (bearer token authentication). When set to BearerToken, the bearerToken field must be specified.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "bearerToken": "BearerToken" - } - } - ] - }, - "com.github.openshift.api.config.v1alpha1.Backup": { - "description": "Backup provides configuration for performing backups of the openshift cluster.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.BackupSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.BackupStatus" - } - } - }, - "com.github.openshift.api.config.v1alpha1.BackupList": { - "description": "BackupList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.Backup" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1alpha1.BackupSpec": { - "type": "object", - "required": [ - "etcd" - ], - "properties": { - "etcd": { - "description": "etcd specifies the configuration for periodic backups of the etcd cluster", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.EtcdBackupSpec" - } - } - }, - "com.github.openshift.api.config.v1alpha1.BackupStatus": { - "type": "object" - }, - "com.github.openshift.api.config.v1alpha1.BasicAuth": { - "description": "BasicAuth defines basic authentication settings for the remote write endpoint URL.", - "type": "object", - "required": [ - "username", - "password" - ], - "properties": { - "password": { - "description": "password defines the secret reference containing the password for basic authentication. The secret must exist in the openshift-monitoring namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.SecretKeySelector" - }, - "username": { - "description": "username defines the secret reference containing the username for basic authentication. The secret must exist in the openshift-monitoring namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.SecretKeySelector" - } - } - }, - "com.github.openshift.api.config.v1alpha1.CRIOCredentialProviderConfig": { - "description": "CRIOCredentialProviderConfig holds cluster-wide singleton resource configurations for CRI-O credential provider, the name of this instance is \"cluster\". CRI-O credential provider is a binary shipped with CRI-O that provides a way to obtain container image pull credentials from external sources. For example, it can be used to fetch mirror registry credentials from secrets resources in the cluster within the same namespace the pod will be running in. CRIOCredentialProviderConfig configuration specifies the pod image sources registries that should trigger the CRI-O credential provider execution, which will resolve the CRI-O mirror configurations and obtain the necessary credentials for pod creation. Note: Configuration changes will only take effect after the kubelet restarts, which is automatically managed by the cluster during rollout.\n\nThe resource is a singleton named \"cluster\".\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec defines the desired configuration of the CRI-O Credential Provider. This field is required and must be provided when creating the resource.", - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.CRIOCredentialProviderConfigSpec" - }, - "status": { - "description": "status represents the current state of the CRIOCredentialProviderConfig. When omitted or nil, it indicates that the status has not yet been set by the controller. The controller will populate this field with validation conditions and operational state.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.CRIOCredentialProviderConfigStatus" - } - } - }, - "com.github.openshift.api.config.v1alpha1.CRIOCredentialProviderConfigList": { - "description": "CRIOCredentialProviderConfigList contains a list of CRIOCredentialProviderConfig resources\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.CRIOCredentialProviderConfig" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1alpha1.CRIOCredentialProviderConfigSpec": { - "description": "CRIOCredentialProviderConfigSpec defines the desired configuration of the CRI-O Credential Provider.", - "type": "object", - "properties": { - "matchImages": { - "description": "matchImages is a list of string patterns used to determine whether the CRI-O credential provider should be invoked for a given image. This list is passed to the kubelet CredentialProviderConfig, and if any pattern matches the requested image, CRI-O credential provider will be invoked to obtain credentials for pulling that image or its mirrors. Depending on the platform, the CRI-O credential provider may be installed alongside an existing platform specific provider. Conflicts between the existing platform specific provider image match configuration and this list will be handled by the following precedence rule: credentials from built-in kubelet providers (e.g., ECR, GCR, ACR) take precedence over those from the CRIOCredentialProviderConfig when both match the same image. To avoid uncertainty, it is recommended to avoid configuring your private image patterns to overlap with existing platform specific provider config(e.g., the entries from https://github.com/openshift/machine-config-operator/blob/main/templates/common/aws/files/etc-kubernetes-credential-providers-ecr-credential-provider.yaml). You can check the resource's Status conditions to see if any entries were ignored due to exact matches with known built-in provider patterns.\n\nThis field is optional, the items of the list must contain between 1 and 50 entries. The list is treated as a set, so duplicate entries are not allowed.\n\nFor more details, see: https://kubernetes.io/docs/tasks/administer-cluster/kubelet-credential-provider/ https://github.com/cri-o/crio-credential-provider#architecture\n\nEach entry in matchImages is a pattern which can optionally contain a port and a path. Each entry must be no longer than 512 characters. Wildcards ('*') are supported for full subdomain labels, such as '*.k8s.io' or 'k8s.*.io', and for top-level domains, such as 'k8s.*' (which matches 'k8s.io' or 'k8s.net'). A global wildcard '*' (matching any domain) is not allowed. Wildcards may replace an entire hostname label (e.g., *.example.com), but they cannot appear within a label (e.g., f*oo.example.com) and are not allowed in the port or path. For example, 'example.*.com' is valid, but 'exa*mple.*.com' is not. Each wildcard matches only a single domain label, so '*.io' does **not** match '*.k8s.io'.\n\nA match exists between an image and a matchImage when all of the below are true: Both contain the same number of domain parts and each part matches. The URL path of an matchImages must be a prefix of the target image URL path. If the matchImages contains a port, then the port must match in the image as well.\n\nExample values of matchImages: - 123456789.dkr.ecr.us-east-1.amazonaws.com - *.azurecr.io - gcr.io - *.*.registry.io - registry.io:8080/path", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - } - } - }, - "com.github.openshift.api.config.v1alpha1.CRIOCredentialProviderConfigStatus": { - "description": "CRIOCredentialProviderConfigStatus defines the observed state of CRIOCredentialProviderConfig", - "type": "object", - "properties": { - "conditions": { - "description": "conditions represent the latest available observations of the configuration state. When omitted, it indicates that no conditions have been reported yet. The maximum number of conditions is 16. Conditions are stored as a map keyed by condition type, ensuring uniqueness.\n\nExpected condition types include: \"Validated\": indicates whether the matchImages configuration is valid", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1alpha1.CertificateConfig": { - "description": "CertificateConfig specifies configuration parameters for certificates. At least one property must be specified.", - "type": "object", - "properties": { - "key": { - "description": "key specifies the cryptographic parameters for the certificate's key pair. Currently this is the only configurable parameter. When omitted in an overrides entry, the key configuration from defaults is used.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.KeyConfig" - } - } - }, - "com.github.openshift.api.config.v1alpha1.ClusterMonitoring": { - "description": "ClusterMonitoring is the Custom Resource object which holds the current status of Cluster Monitoring Operator. CMO is a central component of the monitoring stack.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. ClusterMonitoring is the Schema for the Cluster Monitoring Operators API", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user configuration for the Cluster Monitoring Operator", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.ClusterMonitoringSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.ClusterMonitoringStatus" - } - } - }, - "com.github.openshift.api.config.v1alpha1.ClusterMonitoringList": { - "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of ClusterMonitoring", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.ClusterMonitoring" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1alpha1.ClusterMonitoringSpec": { - "description": "ClusterMonitoringSpec defines the desired state of Cluster Monitoring Operator", - "type": "object", - "properties": { - "alertmanagerConfig": { - "description": "alertmanagerConfig allows users to configure how the default Alertmanager instance should be deployed in the `openshift-monitoring` namespace. alertmanagerConfig is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, that is subject to change over time. The current default value is `DefaultConfig`.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.AlertmanagerConfig" - }, - "kubeStateMetricsConfig": { - "description": "kubeStateMetricsConfig is an optional field that can be used to configure the kube-state-metrics agent that runs in the openshift-monitoring namespace. kube-state-metrics generates metrics about the state of Kubernetes objects such as Deployments, Nodes, and Pods. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.KubeStateMetricsConfig" - }, - "metricsServerConfig": { - "description": "metricsServerConfig is an optional field that can be used to configure the Kubernetes Metrics Server that runs in the openshift-monitoring namespace. Specifically, it can configure how the Metrics Server instance is deployed, pod scheduling, its audit policy and log verbosity. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.MetricsServerConfig" - }, - "monitoringPluginConfig": { - "description": "monitoringPluginConfig is an optional field that can be used to configure the monitoring plugin that runs as a dynamic plugin of the OpenShift web console. The monitoring plugin provides the monitoring UI in the OpenShift web console for visualizing metrics, alerts, and dashboards. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default deploys the monitoring-plugin as a single-replica Deployment on linux nodes with 10m CPU and 50Mi memory requests, and no custom tolerations or topology spread constraints. When set, at least one field must be specified within monitoringPluginConfig.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.MonitoringPluginConfig" - }, - "nodeExporterConfig": { - "description": "nodeExporterConfig is an optional field that can be used to configure the node-exporter agent that runs as a DaemonSet in the openshift-monitoring namespace. The node-exporter agent collects hardware and OS-level metrics from every node in the cluster. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.NodeExporterConfig" - }, - "openShiftStateMetricsConfig": { - "description": "openShiftStateMetricsConfig is an optional field that can be used to configure the openshift-state-metrics agent that runs in the openshift-monitoring namespace. The openshift-state-metrics agent generates metrics about the state of OpenShift-specific Kubernetes objects, such as routes, builds, and deployments. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.OpenShiftStateMetricsConfig" - }, - "prometheusConfig": { - "description": "prometheusConfig provides configuration options for the default platform Prometheus instance that runs in the `openshift-monitoring` namespace. This configuration applies only to the platform Prometheus instance; user-workload Prometheus instances are configured separately.\n\nThis field allows you to customize how the platform Prometheus is deployed and operated, including:\n - Pod scheduling (node selectors, tolerations, topology spread constraints)\n - Resource allocation (CPU, memory requests/limits)\n - Retention policies (how long metrics are stored)\n - External integrations (remote write, additional alertmanagers)\n\nThis field is optional. When omitted, the platform chooses reasonable defaults, which may change over time.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.PrometheusConfig" - }, - "prometheusOperatorAdmissionWebhookConfig": { - "description": "prometheusOperatorAdmissionWebhookConfig is an optional field that can be used to configure the admission webhook component of Prometheus Operator that runs in the openshift-monitoring namespace. The admission webhook validates PrometheusRule and AlertmanagerConfig objects to ensure they are semantically valid, mutates PrometheusRule annotations, and converts AlertmanagerConfig objects between API versions. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.PrometheusOperatorAdmissionWebhookConfig" - }, - "prometheusOperatorConfig": { - "description": "prometheusOperatorConfig is an optional field that can be used to configure the Prometheus Operator component. Specifically, it can configure how the Prometheus Operator instance is deployed, pod scheduling, and resource allocation. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.PrometheusOperatorConfig" - }, - "telemeterClientConfig": { - "description": "telemeterClientConfig is an optional field that can be used to configure the Telemeter Client component that runs in the openshift-monitoring namespace. The Telemeter Client collects selected monitoring metrics and forwards them to Red Hat for telemetry purposes. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. When set, at least one field must be specified within telemeterClientConfig.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.TelemeterClientConfig" - }, - "thanosQuerierConfig": { - "description": "thanosQuerierConfig is an optional field that can be used to configure the Thanos Querier component that runs in the openshift-monitoring namespace. The Thanos Querier provides a global query view by aggregating and deduplicating metrics from multiple Prometheus instances. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default deploys the Thanos Querier on linux nodes with 5m CPU and 12Mi memory requests, and no custom tolerations or topology spread constraints. When set, at least one field must be specified within thanosQuerierConfig.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.ThanosQuerierConfig" - }, - "userDefined": { - "description": "userDefined set the deployment mode for user-defined monitoring in addition to the default platform monitoring. userDefined is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default value is `Disabled`.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.UserDefinedMonitoring" - } - } - }, - "com.github.openshift.api.config.v1alpha1.ClusterMonitoringStatus": { - "description": "ClusterMonitoringStatus defines the observed state of ClusterMonitoring", - "type": "object" - }, - "com.github.openshift.api.config.v1alpha1.ContainerResource": { - "description": "ContainerResource defines a single resource requirement for a container.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "limit": { - "description": "limit is the maximum amount of the resource allowed (e.g. \"2Mi\", \"1Gi\"). This field is optional. When request is specified, limit cannot be less than request. The value must be greater than 0 when specified.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - }, - "name": { - "description": "name of the resource (e.g. \"cpu\", \"memory\", \"hugepages-2Mi\"). This field is required. name must consist only of alphanumeric characters, `-`, `_` and `.` and must start and end with an alphanumeric character.", - "type": "string" - }, - "request": { - "description": "request is the minimum amount of the resource required (e.g. \"2Mi\", \"1Gi\"). This field is optional. When limit is specified, request cannot be greater than limit. The value must be greater than 0 when specified.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } - } - }, - "com.github.openshift.api.config.v1alpha1.CustomPKIPolicy": { - "description": "CustomPKIPolicy contains administrator-specified cryptographic configuration. Administrators must specify defaults for all certificates and may optionally override specific categories of certificates.", - "type": "object", - "required": [ - "defaults" - ], - "properties": { - "clientCertificates": { - "description": "clientCertificates optionally overrides certificate parameters for client authentication certificates used to authenticate to servers. When set, these parameters take precedence over defaults for all client certificates. When omitted, the defaults are used for client certificates.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.CertificateConfig" - }, - "defaults": { - "description": "defaults specifies the default certificate configuration that applies to all certificates unless overridden by a category override.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.DefaultCertificateConfig" - }, - "servingCertificates": { - "description": "servingCertificates optionally overrides certificate parameters for TLS server certificates used to serve HTTPS endpoints. When set, these parameters take precedence over defaults for all serving certificates. When omitted, the defaults are used for serving certificates.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.CertificateConfig" - }, - "signerCertificates": { - "description": "signerCertificates optionally overrides certificate parameters for certificate authority (CA) certificates that sign other certificates. When set, these parameters take precedence over defaults for all signer certificates. When omitted, the defaults are used for signer certificates.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.CertificateConfig" - } - } - }, - "com.github.openshift.api.config.v1alpha1.DefaultCertificateConfig": { - "description": "DefaultCertificateConfig specifies the default certificate configuration parameters. All fields are required to ensure that defaults are fully specified for all certificates.", - "type": "object", - "required": [ - "key" - ], - "properties": { - "key": { - "description": "key specifies the cryptographic parameters for the certificate's key pair. This field is required in defaults to ensure all certificates have a well-defined key configuration.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.KeyConfig" - } - } - }, - "com.github.openshift.api.config.v1alpha1.DropEqualActionConfig": { - "description": "DropEqualActionConfig configures the DropEqual action. Drops targets for which the concatenated source_labels do match the value of target_label. Requires Prometheus >= v2.41.0.", - "type": "object", - "required": [ - "targetLabel" - ], - "properties": { - "targetLabel": { - "description": "targetLabel is the label name whose value is compared to the concatenated source_labels; targets that match are dropped. Must be between 1 and 128 characters in length.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.ECDSAKeyConfig": { - "description": "ECDSAKeyConfig specifies parameters for ECDSA key generation.", - "type": "object", - "required": [ - "curve" - ], - "properties": { - "curve": { - "description": "curve specifies the NIST elliptic curve for ECDSA keys. Valid values are \"P256\", \"P384\", and \"P521\".\n\nWhen set to P256, the NIST P-256 curve (also known as secp256r1) is used, providing 128-bit security.\n\nWhen set to P384, the NIST P-384 curve (also known as secp384r1) is used, providing 192-bit security.\n\nWhen set to P521, the NIST P-521 curve (also known as secp521r1) is used, providing 256-bit security.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.EtcdBackupSpec": { - "description": "EtcdBackupSpec provides configuration for automated etcd backups to the cluster-etcd-operator", - "type": "object", - "properties": { - "pvcName": { - "description": "pvcName specifies the name of the PersistentVolumeClaim (PVC) which binds a PersistentVolume where the etcd backup files would be saved The PVC itself must always be created in the \"openshift-etcd\" namespace If the PVC is left unspecified \"\" then the platform will choose a reasonable default location to save the backup. In the future this would be backups saved across the control-plane master nodes.", - "type": "string", - "default": "" - }, - "retentionPolicy": { - "description": "retentionPolicy defines the retention policy for retaining and deleting existing backups.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.RetentionPolicy" - }, - "schedule": { - "description": "schedule defines the recurring backup schedule in Cron format every 2 hours: 0 */2 * * * every day at 3am: 0 3 * * * Empty string means no opinion and the platform is left to choose a reasonable default which is subject to change without notice. The current default is \"no backups\", but will change in the future.", - "type": "string", - "default": "" - }, - "timeZone": { - "description": "The time zone name for the given schedule, see https://en.wikipedia.org/wiki/List_of_tz_database_time_zones. If not specified, this will default to the time zone of the kube-controller-manager process. See https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#time-zones", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1alpha1.GatherConfig": { - "description": "gatherConfig provides data gathering configuration options.", - "type": "object", - "properties": { - "dataPolicy": { - "description": "dataPolicy allows user to enable additional global obfuscation of the IP addresses and base domain in the Insights archive data. Valid values are \"None\" and \"ObfuscateNetworking\". When set to None the data is not obfuscated. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - "type": "string" - }, - "disabledGatherers": { - "description": "disabledGatherers is a list of gatherers to be excluded from the gathering. All the gatherers can be disabled by providing \"all\" value. If all the gatherers are disabled, the Insights operator does not gather any data. The format for the disabledGatherer should be: {gatherer}/{function} where the function is optional. Gatherer consists of a lowercase letters only that may include underscores (_). Function consists of a lowercase letters only that may include underscores (_) and is separated from the gatherer by a forward slash (/). The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\" An example of disabling gatherers looks like this: `disabledGatherers: [\"clusterconfig/machine_configs\", \"workloads/workload_info\"]`", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "storage": { - "description": "storage is an optional field that allows user to define persistent storage for gathering jobs to store the Insights data archive. If omitted, the gathering job will use ephemeral storage.", - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.Storage" - } - } - }, - "com.github.openshift.api.config.v1alpha1.HashModActionConfig": { - "description": "HashModActionConfig configures the HashMod action. target_label is set to the modulus of a hash of the concatenated source_labels (target = hash % modulus).", - "type": "object", - "required": [ - "targetLabel", - "modulus" - ], - "properties": { - "modulus": { - "description": "modulus is the divisor applied to the hash of the concatenated source label values (target = hash % modulus). Required when using the HashMod action so the intended behavior is explicit. Must be between 1 and 1000000.", - "type": "integer", - "format": "int64" - }, - "targetLabel": { - "description": "targetLabel is the label name where the hash modulus result is written. Must be between 1 and 128 characters in length.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.InsightsDataGather": { - "description": "InsightsDataGather provides data gather configuration options for the the Insights Operator.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.InsightsDataGatherSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.InsightsDataGatherStatus" - } - } - }, - "com.github.openshift.api.config.v1alpha1.InsightsDataGatherList": { - "description": "InsightsDataGatherList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.InsightsDataGather" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1alpha1.InsightsDataGatherSpec": { - "type": "object", - "properties": { - "gatherConfig": { - "description": "gatherConfig spec attribute includes all the configuration options related to gathering of the Insights data and its uploading to the ingress.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.GatherConfig" - } - } - }, - "com.github.openshift.api.config.v1alpha1.InsightsDataGatherStatus": { - "type": "object" - }, - "com.github.openshift.api.config.v1alpha1.KeepEqualActionConfig": { - "description": "KeepEqualActionConfig configures the KeepEqual action. Drops targets for which the concatenated source_labels do not match the value of target_label. Requires Prometheus >= v2.41.0.", - "type": "object", - "required": [ - "targetLabel" - ], - "properties": { - "targetLabel": { - "description": "targetLabel is the label name whose value is compared to the concatenated source_labels; targets that do not match are dropped. Must be between 1 and 128 characters in length.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.KeyConfig": { - "description": "KeyConfig specifies cryptographic parameters for key generation.", - "type": "object", - "required": [ - "algorithm" - ], - "properties": { - "algorithm": { - "description": "algorithm specifies the key generation algorithm. Valid values are \"RSA\" and \"ECDSA\".\n\nWhen set to RSA, the rsa field must be specified and the generated key will be an RSA key with the configured key size.\n\nWhen set to ECDSA, the ecdsa field must be specified and the generated key will be an ECDSA key using the configured elliptic curve.", - "type": "string" - }, - "ecdsa": { - "description": "ecdsa specifies ECDSA key parameters. Required when algorithm is ECDSA, and forbidden otherwise.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.ECDSAKeyConfig" - }, - "rsa": { - "description": "rsa specifies RSA key parameters. Required when algorithm is RSA, and forbidden otherwise.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.RSAKeyConfig" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "algorithm", - "fields-to-discriminateBy": { - "ecdsa": "ECDSA", - "rsa": "RSA" - } - } - ] - }, - "com.github.openshift.api.config.v1alpha1.KubeStateMetricsConfig": { - "description": "KubeStateMetricsConfig provides configuration options for the kube-state-metrics agent that runs in the `openshift-monitoring` namespace. kube-state-metrics generates metrics about the state of Kubernetes objects such as Deployments, Nodes, and Pods.", - "type": "object", - "properties": { - "additionalResourceLabels": { - "description": "additionalResourceLabels defines additional Kubernetes resource labels to expose as metrics in kube-state-metrics. Currently, only \"Job\" and \"CronJob\" resources are supported due to cardinality concerns. Each entry specifies a resource name and a list of Kubernetes label names to expose. Use \"*\" in the labels list to expose all labels for a given resource. additionalResourceLabels is optional. When omitted, no additional Kubernetes object labels are exposed as metrics by kube-state-metrics beyond its built-in metric labels (e.g. namespace, job_name). Use this field to opt in to exposing specific Kubernetes labels as metric labels for the supported resource types. Minimum length for this list is 1. Maximum length for this list is 2. Each resource name must be unique within this list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.KubeStateMetricsResourceLabels" - }, - "x-kubernetes-list-map-keys": [ - "resource" - ], - "x-kubernetes-list-type": "map" - }, - "nodeSelector": { - "description": "nodeSelector defines the nodes on which the Pods are scheduled. nodeSelector is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default value is `kubernetes.io/os: linux`. When specified, nodeSelector must contain at least 1 entry and must not contain more than 10 entries.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "resources": { - "description": "resources defines the compute resource requests and limits for the kube-state-metrics container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 4m\n limit: null\n - name: memory\n request: 40Mi\n limit: null\nMaximum length for this list is 5. Minimum length for this list is 1. Each resource name must be unique within this list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.ContainerResource" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "tolerations": { - "description": "tolerations defines tolerations for the pods. tolerations is optional.\n\nWhen omitted, no tolerations are applied. This default is subject to change over time. When specified, tolerations must contain at least 1 entry and must not contain more than 10 entries. Each toleration's operator, when specified, must be either \"Exists\" or \"Equal\". Each toleration's effect, when specified, must be one of \"NoSchedule\", \"PreferNoSchedule\", or \"NoExecute\". An empty or unset effect means match all effects.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - }, - "x-kubernetes-list-type": "atomic" - }, - "topologySpreadConstraints": { - "description": "topologySpreadConstraints defines rules for how kube-state-metrics Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nThis field maps directly to the `topologySpreadConstraints` field in the Pod spec. When omitted, no topology spread constraints are applied. This default is subject to change over time. When specified, topologySpreadConstraints must contain at least 1 entry and must not contain more than 10 entries. Entries must have unique topologyKey and whenUnsatisfiable pairs. Each entry's whenUnsatisfiable must be either \"DoNotSchedule\" or \"ScheduleAnyway\". Each entry's maxSkew must be at least 1. When minDomains is specified, it must be at least 1 and whenUnsatisfiable must be \"DoNotSchedule\".", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.TopologySpreadConstraint" - }, - "x-kubernetes-list-map-keys": [ - "topologyKey", - "whenUnsatisfiable" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1alpha1.KubeStateMetricsResourceLabels": { - "description": "KubeStateMetricsResourceLabels defines which Kubernetes labels to expose as metrics for a given resource type in kube-state-metrics.", - "type": "object", - "required": [ - "resource", - "labels" - ], - "properties": { - "labels": { - "description": "labels is the list of Kubernetes label names to expose as metrics for this resource. Use \"*\" to expose all labels for the specified resource. When \"*\" is specified, it must be the only entry in the list; mixing \"*\" with specific label names is not allowed. This field is required. Each label name must be unique within this list. Minimum length for this list is 1. Maximum length for this list is 50.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "resource": { - "description": "resource is the Kubernetes resource name whose labels should be exposed as metrics. Currently, only \"Job\" and \"CronJob\" are supported due to cardinality concerns. Valid values are \"Job\" and \"CronJob\". This field is required.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.Label": { - "description": "Label represents a key/value pair for external labels.", - "type": "object", - "required": [ - "key", - "value" - ], - "properties": { - "key": { - "description": "key is the name of the label. Prometheus supports UTF-8 label names, so any valid UTF-8 string is allowed. Must be between 1 and 128 characters in length.", - "type": "string" - }, - "value": { - "description": "value is the value of the label. Must be between 1 and 128 characters in length.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.LabelMapActionConfig": { - "description": "LabelMapActionConfig configures the LabelMap action. Regex is matched against all source label names (not just source_labels). Matching label values are copied to new label names given by replacement, with match group references (${1}, ${2}, ...) substituted.", - "type": "object", - "required": [ - "replacement" - ], - "properties": { - "replacement": { - "description": "replacement is the template for new label names; match group references (${1}, ${2}, ...) are substituted from the matched label name. Required when using the LabelMap action so the intended behavior is explicit and the platform does not need to apply defaults. Use \"$1\" for the first capture group, \"$2\" for the second, etc. Must be between 1 and 255 characters in length. Empty string is invalid as it would produce invalid label names.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.LowercaseActionConfig": { - "description": "LowercaseActionConfig configures the Lowercase action. Maps the concatenated source_labels to their lower case and writes to target_label. Requires Prometheus >= v2.36.0.", - "type": "object", - "required": [ - "targetLabel" - ], - "properties": { - "targetLabel": { - "description": "targetLabel is the label name where the lower-cased value is written. Must be between 1 and 128 characters in length.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.MetadataConfig": { - "description": "MetadataConfig defines whether and how to send series metadata to remote write storage.", - "type": "object", - "required": [ - "sendPolicy" - ], - "properties": { - "custom": { - "description": "custom defines custom metadata send settings. Required when sendPolicy is Custom (must have at least one property), and forbidden when sendPolicy is Default.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.MetadataConfigCustom" - }, - "sendPolicy": { - "description": "sendPolicy specifies whether to send metadata and how it is configured. Default: send metadata using platform-chosen defaults (e.g. send interval 30 seconds). Custom: send metadata using the settings in the custom field.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.MetadataConfigCustom": { - "description": "MetadataConfigCustom defines custom settings for sending series metadata when sendPolicy is Custom. At least one property must be set when sendPolicy is Custom (e.g. sendIntervalSeconds).", - "type": "object", - "properties": { - "sendIntervalSeconds": { - "description": "sendIntervalSeconds is the interval in seconds at which metadata is sent. When omitted, the platform chooses a reasonable default (e.g. 30 seconds). Minimum value is 1 second. Maximum value is 86400 seconds (24 hours).", - "type": "integer", - "format": "int32" - } - } - }, - "com.github.openshift.api.config.v1alpha1.MetricsServerConfig": { - "description": "MetricsServerConfig provides configuration options for the Metrics Server instance that runs in the `openshift-monitoring` namespace. Use this configuration to control how the Metrics Server instance is deployed, how it logs, and how its pods are scheduled.", - "type": "object", - "properties": { - "audit": { - "description": "audit defines the audit configuration used by the Metrics Server instance. audit is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, that is subject to change over time. The current default sets audit.profile to Metadata", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.Audit" - }, - "nodeSelector": { - "description": "nodeSelector defines the nodes on which the Pods are scheduled nodeSelector is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default value is `kubernetes.io/os: linux`.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "resources": { - "description": "resources defines the compute resource requests and limits for the Metrics Server container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 4m\n limit: null\n - name: memory\n request: 40Mi\n limit: null\nMaximum length for this list is 5. Minimum length for this list is 1. Each resource name must be unique within this list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.ContainerResource" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "tolerations": { - "description": "tolerations defines tolerations for the pods. tolerations is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. Defaults are empty/unset. Maximum length for this list is 10. Minimum length for this list is 1.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - }, - "x-kubernetes-list-type": "atomic" - }, - "topologySpreadConstraints": { - "description": "topologySpreadConstraints defines rules for how Metrics Server Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nWhen omitted, this means no opinion and the platform is left to choose a default, which is subject to change over time. This field maps directly to the `topologySpreadConstraints` field in the Pod spec. Default is empty list. Maximum length for this list is 10. Minimum length for this list is 1. Entries must have unique topologyKey and whenUnsatisfiable pairs.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.TopologySpreadConstraint" - }, - "x-kubernetes-list-map-keys": [ - "topologyKey", - "whenUnsatisfiable" - ], - "x-kubernetes-list-type": "map" - }, - "verbosity": { - "description": "verbosity defines the verbosity of log messages for Metrics Server. Valid values are Errors, Info, Trace, TraceAll and omitted. When set to Errors, only critical messages and errors are logged. When set to Info, only basic information messages are logged. When set to Trace, information useful for general debugging is logged. When set to TraceAll, detailed information about metric scraping is logged. When omitted, this means no opinion and the platform is left to choose a reasonable default, that is subject to change over time. The current default value is `Errors`", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.MonitoringPluginConfig": { - "description": "MonitoringPluginConfig provides configuration options for the monitoring plugin that runs as a dynamic plugin of the OpenShift web console. The monitoring plugin provides the monitoring UI in the OpenShift web console for visualizing metrics, alerts, and dashboards. At least one field must be specified; an empty monitoringPluginConfig object is not allowed.", - "type": "object", - "properties": { - "nodeSelector": { - "description": "nodeSelector defines the nodes on which the Pods are scheduled. nodeSelector is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default value is `kubernetes.io/os: linux`. When specified, nodeSelector must contain at least 1 entry and must not contain more than 10 entries.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "resources": { - "description": "resources defines the compute resource requests and limits for the monitoring-plugin container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 10m\n - name: memory\n request: 50Mi\n\nWhen specified, resources must contain at least 1 entry and must not exceed 5 entries.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.ContainerResource" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "tolerations": { - "description": "tolerations defines the tolerations required for the monitoring-plugin Pods. This field is optional.\n\nWhen omitted, the monitoring-plugin Pods will not have any tolerations, which means they will only be scheduled on nodes with no taints. When specified, tolerations must contain at least 1 entry and must not contain more than 10 entries.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - }, - "x-kubernetes-list-type": "atomic" - }, - "topologySpreadConstraints": { - "description": "topologySpreadConstraints defines rules for how monitoring-plugin Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nWhen omitted, this means no opinion and the platform is left to choose a default, which is subject to change over time. This field maps directly to the `topologySpreadConstraints` field in the Pod spec. Default is empty list. When specified, this list must contain at least 1 entry and must not exceed 10 entries.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.TopologySpreadConstraint" - }, - "x-kubernetes-list-map-keys": [ - "topologyKey", - "whenUnsatisfiable" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1alpha1.NodeExporterCollectorBuddyInfoConfig": { - "description": "NodeExporterCollectorBuddyInfoConfig provides configuration for the buddyinfo collector of the node-exporter agent. The buddyinfo collector collects statistics about memory fragmentation from the node_buddyinfo_blocks metric using data from /proc/buddyinfo. It is disabled by default.", - "type": "object", - "required": [ - "collectionPolicy" - ], - "properties": { - "collectionPolicy": { - "description": "collectionPolicy declares whether the buddyinfo collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the buddyinfo collector is active and memory fragmentation statistics are collected. When set to \"DoNotCollect\", the buddyinfo collector is inactive.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - "type": "string", - "enum": [ - "Collect", - "DoNotCollect" - ] - } - } - }, - "com.github.openshift.api.config.v1alpha1.NodeExporterCollectorConfig": { - "description": "NodeExporterCollectorConfig defines settings for individual collectors of the node-exporter agent. Each collector can be individually set to collect or not collect metrics. At least one collector must be specified.", - "type": "object", - "properties": { - "buddyInfo": { - "description": "buddyInfo configures the buddyinfo collector, which collects statistics about memory fragmentation from the node_buddyinfo_blocks metric. This metric collects data from /proc/buddyinfo. buddyInfo is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is disabled. Enable when investigating kernel memory fragmentation; typically for advanced troubleshooting only.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.NodeExporterCollectorBuddyInfoConfig" - }, - "cpuFreq": { - "description": "cpuFreq configures the cpufreq collector, which collects CPU frequency statistics. cpuFreq is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is disabled. Consider enabling when you need to observe CPU frequency scaling; expect higher CPU usage on many-core nodes when collectionPolicy is Collect.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.NodeExporterCollectorCpufreqConfig" - }, - "deviceMapperMultipath": { - "description": "deviceMapperMultipath configures the dmmultipath collector, which collects statistics about DM-Multipath devices. deviceMapperMultipath is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is enabled.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.NodeExporterCollectorDeviceMapperMultipathConfig" - }, - "ethtool": { - "description": "ethtool configures the ethtool collector, which collects ethernet device statistics. ethtool is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is disabled. Enable when you need NIC driver-level ethtool metrics beyond generic netdev counters.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.NodeExporterCollectorEthtoolConfig" - }, - "ksmd": { - "description": "ksmd configures the ksmd collector, which collects statistics from the kernel same-page merger daemon. ksmd is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is disabled. Enable on nodes where KSM is in use and you want visibility into merging activity.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.NodeExporterCollectorKSMDConfig" - }, - "mountStats": { - "description": "mountStats configures the mountstats collector, which collects statistics about NFS volume I/O activities. mountStats is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is disabled. Enabling this collector may produce metrics with high cardinality. If you enable this collector, closely monitor the prometheus-k8s deployment for excessive memory usage. Enable when you care about per-mount NFS client statistics.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.NodeExporterCollectorMountStatsConfig" - }, - "netClass": { - "description": "netClass configures the netclass collector, which collects information about network devices. netClass is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is enabled with netlink mode active. Use statsGatherer when sysfs vs netlink implementation matters or when matching node_exporter tuning.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.NodeExporterCollectorNetClassConfig" - }, - "netDev": { - "description": "netDev configures the netdev collector, which collects network device statistics. netDev is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is enabled. Turn off if you must reduce per-interface metric cardinality on hosts with many virtual interfaces.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.NodeExporterCollectorNetDevConfig" - }, - "nvmExpressSubsystem": { - "description": "nvmExpressSubsystem configures the nvmesubsystem collector, which collects statistics about NVM Express (NVMe) subsystem devices. nvmExpressSubsystem is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is enabled.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.NodeExporterCollectorNVMExpressSubsystemConfig" - }, - "processes": { - "description": "processes configures the processes collector, which collects statistics from processes and threads running in the system. processes is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is disabled. Enable for process/thread-level insight; can be expensive on busy nodes.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.NodeExporterCollectorProcessesConfig" - }, - "softirqs": { - "description": "softirqs configures the softirqs collector, which exposes detailed softirq statistics from /proc/softirqs. softirqs is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is disabled. Enable when you need visibility into kernel softirq processing across CPUs.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.NodeExporterCollectorSoftirqsConfig" - }, - "systemd": { - "description": "systemd configures the systemd collector, which collects statistics on the systemd daemon and its managed services. systemd is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is disabled. Enabling this collector with a long list of selected units may produce metrics with high cardinality. If you enable this collector, closely monitor the prometheus-k8s deployment for excessive memory usage. Enable when you need metrics for specific units; scope units carefully.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.NodeExporterCollectorSystemdConfig" - }, - "tcpStat": { - "description": "tcpStat configures the tcpstat collector, which collects TCP connection statistics. tcpStat is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is disabled. Enable when debugging TCP connection behavior or capacity at the node level.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.NodeExporterCollectorTcpStatConfig" - }, - "zoneinfo": { - "description": "zoneinfo configures the zoneinfo collector, which exposes per-zone memory page counts, watermarks, and protection thresholds from /proc/zoneinfo. zoneinfo is optional. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is to not collect zoneinfo metrics. Enable when you need visibility into kernel memory zone allocation and pressure.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.NodeExporterCollectorZoneinfoConfig" - } - } - }, - "com.github.openshift.api.config.v1alpha1.NodeExporterCollectorCpufreqConfig": { - "description": "NodeExporterCollectorCpufreqConfig provides configuration for the cpufreq collector of the node-exporter agent. The cpufreq collector collects CPU frequency statistics. It is disabled by default.", - "type": "object", - "required": [ - "collectionPolicy" - ], - "properties": { - "collectionPolicy": { - "description": "collectionPolicy declares whether the cpufreq collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the cpufreq collector is active and CPU frequency statistics are collected. When set to \"DoNotCollect\", the cpufreq collector is inactive.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - "type": "string", - "enum": [ - "Collect", - "DoNotCollect" - ] - } - } - }, - "com.github.openshift.api.config.v1alpha1.NodeExporterCollectorDeviceMapperMultipathConfig": { - "description": "NodeExporterCollectorDeviceMapperMultipathConfig provides configuration for the dmmultipath collector of the node-exporter agent. The dmmultipath collector collects statistics about DM-Multipath devices. It is enabled by default.", - "type": "object", - "required": [ - "collectionPolicy" - ], - "properties": { - "collectionPolicy": { - "description": "collectionPolicy declares whether the dmmultipath collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the dmmultipath collector is active and DM-Multipath device statistics are collected. When set to \"DoNotCollect\", the dmmultipath collector is inactive and the corresponding metrics become unavailable.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - "type": "string", - "enum": [ - "Collect", - "DoNotCollect" - ] - } - } - }, - "com.github.openshift.api.config.v1alpha1.NodeExporterCollectorEthtoolConfig": { - "description": "NodeExporterCollectorEthtoolConfig provides configuration for the ethtool collector of the node-exporter agent. The ethtool collector collects ethernet device statistics. It is disabled by default.", - "type": "object", - "required": [ - "collectionPolicy" - ], - "properties": { - "collectionPolicy": { - "description": "collectionPolicy declares whether the ethtool collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the ethtool collector is active and ethernet device statistics are collected. When set to \"DoNotCollect\", the ethtool collector is inactive.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - "type": "string", - "enum": [ - "Collect", - "DoNotCollect" - ] - } - } - }, - "com.github.openshift.api.config.v1alpha1.NodeExporterCollectorKSMDConfig": { - "description": "NodeExporterCollectorKSMDConfig provides configuration for the ksmd collector of the node-exporter agent. The ksmd collector collects statistics from the kernel same-page merger daemon. It is disabled by default.", - "type": "object", - "required": [ - "collectionPolicy" - ], - "properties": { - "collectionPolicy": { - "description": "collectionPolicy declares whether the ksmd collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the ksmd collector is active and kernel same-page merger statistics are collected. When set to \"DoNotCollect\", the ksmd collector is inactive.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - "type": "string", - "enum": [ - "Collect", - "DoNotCollect" - ] - } - } - }, - "com.github.openshift.api.config.v1alpha1.NodeExporterCollectorMountStatsConfig": { - "description": "NodeExporterCollectorMountStatsConfig provides configuration for the mountstats collector of the node-exporter agent. The mountstats collector collects statistics about NFS volume I/O activities. It is disabled by default. Enabling this collector may produce metrics with high cardinality. If you enable this collector, closely monitor the prometheus-k8s deployment for excessive memory usage.", - "type": "object", - "required": [ - "collectionPolicy" - ], - "properties": { - "collectionPolicy": { - "description": "collectionPolicy declares whether the mountstats collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the mountstats collector is active and NFS volume I/O statistics are collected. When set to \"DoNotCollect\", the mountstats collector is inactive.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - "type": "string", - "enum": [ - "Collect", - "DoNotCollect" - ] - } - } - }, - "com.github.openshift.api.config.v1alpha1.NodeExporterCollectorNVMExpressSubsystemConfig": { - "description": "NodeExporterCollectorNVMExpressSubsystemConfig provides configuration for the nvmesubsystem collector of the node-exporter agent. The nvmesubsystem collector collects statistics about NVM Express (NVMe) subsystem devices. It is enabled by default.", - "type": "object", - "required": [ - "collectionPolicy" - ], - "properties": { - "collectionPolicy": { - "description": "collectionPolicy declares whether the nvmesubsystem collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the nvmesubsystem collector is active and NVMe subsystem statistics are collected. When set to \"DoNotCollect\", the nvmesubsystem collector is inactive and the corresponding metrics become unavailable.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - "type": "string", - "enum": [ - "Collect", - "DoNotCollect" - ] - } - } - }, - "com.github.openshift.api.config.v1alpha1.NodeExporterCollectorNetClassCollectConfig": { - "description": "NodeExporterCollectorNetClassCollectConfig holds configuration options for the netclass collector when it is actively collecting metrics. At least one field must be specified.", - "type": "object", - "properties": { - "statsGatherer": { - "description": "statsGatherer selects which implementation the netclass collector uses to gather statistics (sysfs or netlink). statsGatherer is optional. Valid values are \"Sysfs\" and \"Netlink\". When set to \"Netlink\", the netlink implementation is used; when set to \"Sysfs\", the sysfs implementation is used. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is Netlink.\n\nPossible enum values:\n - `\"Netlink\"` uses the netlink-based implementation.\n - `\"Sysfs\"` uses the sysfs-based implementation.", - "type": "string", - "enum": [ - "Netlink", - "Sysfs" - ] - } - } - }, - "com.github.openshift.api.config.v1alpha1.NodeExporterCollectorNetClassConfig": { - "description": "NodeExporterCollectorNetClassConfig provides configuration for the netclass collector of the node-exporter agent. The netclass collector collects information about network devices such as network speed, MTU, and carrier status. It is enabled by default. When collectionPolicy is DoNotCollect, the collect field must not be set.", - "type": "object", - "required": [ - "collectionPolicy" - ], - "properties": { - "collect": { - "description": "collect contains configuration options that apply only when the netclass collector is actively collecting metrics (i.e. when collectionPolicy is Collect). collect is optional and may be omitted even when collectionPolicy is Collect. collect may only be set when collectionPolicy is Collect. When set, at least one field must be specified within collect.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.NodeExporterCollectorNetClassCollectConfig" - }, - "collectionPolicy": { - "description": "collectionPolicy declares whether the netclass collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the netclass collector is active and network class information is collected. When set to \"DoNotCollect\", the netclass collector is inactive and the corresponding metrics become unavailable. When set to \"DoNotCollect\", the collect field must not be set.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - "type": "string", - "enum": [ - "Collect", - "DoNotCollect" - ] - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "collectionPolicy", - "fields-to-discriminateBy": { - "collect": "Collect" - } - } - ] - }, - "com.github.openshift.api.config.v1alpha1.NodeExporterCollectorNetDevConfig": { - "description": "NodeExporterCollectorNetDevConfig provides configuration for the netdev collector of the node-exporter agent. The netdev collector collects network device statistics such as bytes, packets, errors, and drops per device. It is enabled by default.", - "type": "object", - "required": [ - "collectionPolicy" - ], - "properties": { - "collectionPolicy": { - "description": "collectionPolicy declares whether the netdev collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the netdev collector is active and network device statistics are collected. When set to \"DoNotCollect\", the netdev collector is inactive and the corresponding metrics become unavailable.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - "type": "string", - "enum": [ - "Collect", - "DoNotCollect" - ] - } - } - }, - "com.github.openshift.api.config.v1alpha1.NodeExporterCollectorProcessesConfig": { - "description": "NodeExporterCollectorProcessesConfig provides configuration for the processes collector of the node-exporter agent. The processes collector collects statistics from processes and threads running in the system. It is disabled by default.", - "type": "object", - "required": [ - "collectionPolicy" - ], - "properties": { - "collectionPolicy": { - "description": "collectionPolicy declares whether the processes collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the processes collector is active and process/thread statistics are collected. When set to \"DoNotCollect\", the processes collector is inactive.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - "type": "string", - "enum": [ - "Collect", - "DoNotCollect" - ] - } - } - }, - "com.github.openshift.api.config.v1alpha1.NodeExporterCollectorSoftirqsConfig": { - "description": "NodeExporterCollectorSoftirqsConfig provides configuration for the softirqs collector of the node-exporter agent. The softirqs collector exposes detailed softirq statistics from /proc/softirqs. It is disabled by default.", - "type": "object", - "required": [ - "collectionPolicy" - ], - "properties": { - "collectionPolicy": { - "description": "collectionPolicy declares whether the softirqs collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the softirqs collector is active and softirq statistics are collected. When set to \"DoNotCollect\", the softirqs collector is inactive.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - "type": "string", - "enum": [ - "Collect", - "DoNotCollect" - ] - } - } - }, - "com.github.openshift.api.config.v1alpha1.NodeExporterCollectorSystemdCollectConfig": { - "description": "NodeExporterCollectorSystemdCollectConfig holds configuration options for the systemd collector when it is actively collecting metrics. At least one field must be specified.", - "type": "object", - "properties": { - "units": { - "description": "units is a list of regular expression patterns that match systemd units to be included by the systemd collector. units is optional. By default, the list is empty, so the collector exposes no metrics for systemd units. Each entry is a regular expression pattern and must be at least 1 character and at most 1024 characters. Maximum length for this list is 50. Minimum length for this list is 1. Entries in this list must be unique.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - } - } - }, - "com.github.openshift.api.config.v1alpha1.NodeExporterCollectorSystemdConfig": { - "description": "NodeExporterCollectorSystemdConfig provides configuration for the systemd collector of the node-exporter agent. The systemd collector collects statistics on the systemd daemon and its managed services. It is disabled by default. Enabling this collector with a long list of selected units may produce metrics with high cardinality. If you enable this collector, closely monitor the prometheus-k8s deployment for excessive memory usage. When collectionPolicy is DoNotCollect, the collect field must not be set.", - "type": "object", - "required": [ - "collectionPolicy" - ], - "properties": { - "collect": { - "description": "collect contains configuration options that apply only when the systemd collector is actively collecting metrics (i.e. when collectionPolicy is Collect). collect is optional and may be omitted even when collectionPolicy is Collect. collect may only be set when collectionPolicy is Collect. When set, at least one field must be specified within collect.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.NodeExporterCollectorSystemdCollectConfig" - }, - "collectionPolicy": { - "description": "collectionPolicy declares whether the systemd collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the systemd collector is active and systemd unit statistics are collected. When set to \"DoNotCollect\", the systemd collector is inactive and the collect field must not be set.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - "type": "string", - "enum": [ - "Collect", - "DoNotCollect" - ] - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "collectionPolicy", - "fields-to-discriminateBy": { - "collect": "Collect" - } - } - ] - }, - "com.github.openshift.api.config.v1alpha1.NodeExporterCollectorTcpStatConfig": { - "description": "NodeExporterCollectorTcpStatConfig provides configuration for the tcpstat collector of the node-exporter agent. The tcpstat collector collects TCP connection statistics. It is disabled by default.", - "type": "object", - "required": [ - "collectionPolicy" - ], - "properties": { - "collectionPolicy": { - "description": "collectionPolicy declares whether the tcpstat collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the tcpstat collector is active and TCP connection statistics are collected. When set to \"DoNotCollect\", the tcpstat collector is inactive.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - "type": "string", - "enum": [ - "Collect", - "DoNotCollect" - ] - } - } - }, - "com.github.openshift.api.config.v1alpha1.NodeExporterCollectorZoneinfoConfig": { - "description": "NodeExporterCollectorZoneinfoConfig provides configuration for the zoneinfo collector of the node-exporter agent. The zoneinfo collector exposes per-zone memory page counts, watermarks, and protection thresholds from /proc/zoneinfo. By default, the zoneinfo collector does not collect metrics.", - "type": "object", - "required": [ - "collectionPolicy" - ], - "properties": { - "collectionPolicy": { - "description": "collectionPolicy declares whether the zoneinfo collector collects metrics. This field is required. Valid values are \"Collect\" and \"DoNotCollect\". When set to \"Collect\", the zoneinfo collector is active and zone memory statistics are collected. When set to \"DoNotCollect\", the zoneinfo collector is inactive.\n\nPossible enum values:\n - `\"Collect\"` means the collector is active and will produce metrics.\n - `\"DoNotCollect\"` means the collector is inactive and will not produce metrics.", - "type": "string", - "enum": [ - "Collect", - "DoNotCollect" - ] - } - } - }, - "com.github.openshift.api.config.v1alpha1.NodeExporterConfig": { - "description": "NodeExporterConfig provides configuration options for the node-exporter agent that runs as a DaemonSet in the `openshift-monitoring` namespace. The node-exporter agent collects hardware and OS-level metrics from every node in the cluster, including CPU, memory, disk, and network statistics. At least one field must be specified.", - "type": "object", - "properties": { - "collectors": { - "description": "collectors configures which node-exporter metric collectors are enabled. collectors is optional. Each collector can be individually enabled or disabled. Some collectors may have additional configuration options.\n\nWhen omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.NodeExporterCollectorConfig" - }, - "ignoredNetworkDevices": { - "description": "ignoredNetworkDevices is a list of regular expression patterns that match network devices to be excluded from the relevant collector configuration such as netdev, netclass, and ethtool. ignoredNetworkDevices is optional.\n\nWhen omitted, the Cluster Monitoring Operator uses a predefined list of devices to be excluded to minimize the impact on memory usage. When set as an empty list, no devices are excluded. If you modify this setting, monitor the prometheus-k8s deployment closely for excessive memory usage. Maximum length for this list is 50. Each entry must be at least 1 character and at most 1024 characters long.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "maxProcs": { - "description": "maxProcs sets the target number of CPUs on which the node-exporter process will run. maxProcs is optional. Use this setting to override the default value, which is set either to 4 or to the number of CPUs on the host, whichever is smaller. The default value is computed at runtime and set via the GOMAXPROCS environment variable before node-exporter is launched. If a kernel deadlock occurs or if performance degrades when reading from sysfs concurrently, you can change this value to 1, which limits node-exporter to running on one CPU. For nodes with a high CPU count, setting the limit to a low number saves resources by preventing Go routines from being scheduled to run on all CPUs. However, I/O performance degrades if the maxProcs value is set too low and there are many metrics to collect. The minimum value is 1 and the maximum value is 1024. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is min(4, number of host CPUs).", - "type": "integer", - "format": "int32" - }, - "resources": { - "description": "resources defines the compute resource requests and limits for the node-exporter container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 8m\n limit: null\n - name: memory\n request: 32Mi\n limit: null", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.ContainerResource" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1alpha1.OAuth2": { - "description": "OAuth2 defines OAuth2 authentication settings for the remote write endpoint.", - "type": "object", - "required": [ - "clientId", - "clientSecret", - "tokenUrl" - ], - "properties": { - "clientId": { - "description": "clientId defines the secret reference containing the OAuth2 client ID. The secret must exist in the openshift-monitoring namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.SecretKeySelector" - }, - "clientSecret": { - "description": "clientSecret defines the secret reference containing the OAuth2 client secret. The secret must exist in the openshift-monitoring namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.SecretKeySelector" - }, - "endpointParams": { - "description": "endpointParams defines additional parameters to append to the token URL. When omitted, no additional parameters are sent. Maximum of 20 parameters can be specified. Entries must have unique names (name is the list key).", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.OAuth2EndpointParam" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "scopes": { - "description": "scopes is a list of OAuth2 scopes to request. When omitted, no scopes are requested. Maximum of 20 scopes can be specified. Each scope must be between 1 and 256 characters.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "tokenUrl": { - "description": "tokenUrl is the URL to fetch the token from. Must be a valid URL with http or https scheme. Must be between 1 and 2048 characters in length.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.OAuth2EndpointParam": { - "description": "OAuth2EndpointParam defines a name/value parameter for the OAuth2 token URL.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is the parameter name. Must be between 1 and 256 characters.", - "type": "string" - }, - "value": { - "description": "value is the optional parameter value. When omitted, the query parameter is applied as ?name (no value). When set (including to the empty string), it is applied as ?name=value. Empty string may be used when the external system expects a parameter with an empty value (e.g. ?parameter=\"\"). Must be between 0 and 2048 characters when present (aligned with common URL length recommendations).", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.OpenShiftStateMetricsConfig": { - "description": "OpenShiftStateMetricsConfig provides configuration options for the openshift-state-metrics agent that runs in the `openshift-monitoring` namespace. The openshift-state-metrics agent generates metrics about the state of OpenShift-specific Kubernetes objects, such as routes, builds, and deployments.", - "type": "object", - "properties": { - "nodeSelector": { - "description": "nodeSelector defines the nodes on which the Pods are scheduled. nodeSelector is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default value is `kubernetes.io/os: linux`. When specified, nodeSelector must contain at least 1 entry and must not contain more than 10 entries.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "resources": { - "description": "resources defines the compute resource requests and limits for the openshift-state-metrics container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 1m\n limit: null\n - name: memory\n request: 32Mi\n limit: null\nMaximum length for this list is 5. Minimum length for this list is 1. Each resource name must be unique within this list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.ContainerResource" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "tolerations": { - "description": "tolerations defines tolerations for the pods. tolerations is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. Defaults are empty/unset. Maximum length for this list is 10. Minimum length for this list is 1.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - }, - "x-kubernetes-list-type": "atomic" - }, - "topologySpreadConstraints": { - "description": "topologySpreadConstraints defines rules for how openshift-state-metrics Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nWhen omitted, this means no opinion and the platform is left to choose a default, which is subject to change over time. This field maps directly to the `topologySpreadConstraints` field in the Pod spec. Default is empty list. Maximum length for this list is 10. Minimum length for this list is 1. Entries must have unique topologyKey and whenUnsatisfiable pairs.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.TopologySpreadConstraint" - }, - "x-kubernetes-list-map-keys": [ - "topologyKey", - "whenUnsatisfiable" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1alpha1.PKI": { - "description": "PKI configures cryptographic parameters for certificates generated internally by OpenShift components.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.PKISpec" - } - } - }, - "com.github.openshift.api.config.v1alpha1.PKICertificateManagement": { - "description": "PKICertificateManagement determines whether components use hardcoded defaults (Unmanaged), follow OpenShift best practices (Default), or use administrator-specified cryptographic parameters (Custom). This provides flexibility for organizations with specific compliance requirements or security policies while maintaining backwards compatibility for existing clusters.", - "type": "object", - "required": [ - "mode" - ], - "properties": { - "custom": { - "description": "custom contains administrator-specified cryptographic configuration. Use the defaults and category override fields to specify certificate generation parameters. Required when mode is Custom, and forbidden otherwise.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.CustomPKIPolicy" - }, - "mode": { - "description": "mode determines how PKI configuration is managed. Valid values are \"Unmanaged\", \"Default\", and \"Custom\".\n\nWhen set to Unmanaged, components use their existing hardcoded certificate generation behavior, exactly as if this feature did not exist. Each component generates certificates using whatever parameters it was using before this feature. While most components use RSA 2048, some may use different parameters. Use of this mode might prevent upgrading to the next major OpenShift release.\n\nWhen set to Default, OpenShift-recommended best practices for certificate generation are applied. The specific parameters may evolve across OpenShift releases to adopt improved cryptographic standards. In the initial release, this matches Unmanaged behavior for each component. In future releases, this may adopt ECDSA or larger RSA keys based on industry best practices. Recommended for most customers who want to benefit from security improvements automatically.\n\nWhen set to Custom, the certificate management parameters can be set explicitly. Use the custom field to specify certificate generation parameters.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "mode", - "fields-to-discriminateBy": { - "custom": "Custom" - } - } - ] - }, - "com.github.openshift.api.config.v1alpha1.PKIList": { - "description": "PKIList is a collection of PKI resources.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of PKI resources", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.PKI" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1alpha1.PKIProfile": { - "description": "PKIProfile defines the certificate generation parameters that OpenShift components use to create certificates. Category overrides take precedence over defaults.", - "type": "object", - "required": [ - "defaults" - ], - "properties": { - "clientCertificates": { - "description": "clientCertificates optionally overrides certificate parameters for client authentication certificates used to authenticate to servers. When set, these parameters take precedence over defaults for all client certificates. When omitted, the defaults are used for client certificates.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.CertificateConfig" - }, - "defaults": { - "description": "defaults specifies the default certificate configuration that applies to all certificates unless overridden by a category override.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.DefaultCertificateConfig" - }, - "servingCertificates": { - "description": "servingCertificates optionally overrides certificate parameters for TLS server certificates used to serve HTTPS endpoints. When set, these parameters take precedence over defaults for all serving certificates. When omitted, the defaults are used for serving certificates.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.CertificateConfig" - }, - "signerCertificates": { - "description": "signerCertificates optionally overrides certificate parameters for certificate authority (CA) certificates that sign other certificates. When set, these parameters take precedence over defaults for all signer certificates. When omitted, the defaults are used for signer certificates.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.CertificateConfig" - } - } - }, - "com.github.openshift.api.config.v1alpha1.PKISpec": { - "description": "PKISpec holds the specification for PKI configuration.", - "type": "object", - "required": [ - "certificateManagement" - ], - "properties": { - "certificateManagement": { - "description": "certificateManagement specifies how PKI configuration is managed for internally-generated certificates. This controls the certificate generation approach for all OpenShift components that create certificates internally, including certificate authorities, serving certificates, and client certificates.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.PKICertificateManagement" - } - } - }, - "com.github.openshift.api.config.v1alpha1.PersistentVolumeClaimReference": { - "description": "persistentVolumeClaimReference is a reference to a PersistentVolumeClaim.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is a string that follows the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start and end with an alphanumeric character.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1alpha1.PersistentVolumeConfig": { - "description": "persistentVolumeConfig provides configuration options for PersistentVolume storage.", - "type": "object", - "required": [ - "claim" - ], - "properties": { - "claim": { - "description": "claim is a required field that specifies the configuration of the PersistentVolumeClaim that will be used to store the Insights data archive. The PersistentVolumeClaim must be created in the openshift-insights namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.PersistentVolumeClaimReference" - }, - "mountPath": { - "description": "mountPath is an optional field specifying the directory where the PVC will be mounted inside the Insights data gathering Pod. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default mount path is /var/lib/insights-operator The path may not exceed 1024 characters and must not contain a colon.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.PrometheusConfig": { - "description": "PrometheusConfig provides configuration options for the Prometheus instance. Use this configuration to control Prometheus deployment, pod scheduling, resource allocation, retention policies, and external integrations.", - "type": "object", - "properties": { - "additionalAlertmanagerConfigs": { - "description": "additionalAlertmanagerConfigs configures additional Alertmanager instances that receive alerts from the Prometheus component. This is useful for organizations that need to:\n - Send alerts to external monitoring systems (like PagerDuty, Slack, or custom webhooks)\n - Route different types of alerts to different teams or systems\n - Integrate with existing enterprise alerting infrastructure\n - Maintain separate alert routing for compliance or organizational requirements\nWhen omitted, no additional Alertmanager instances are configured (default behavior). When provided, at least one configuration must be specified (minimum 1, maximum 10 items). Entries must have unique names (name is the list key).", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.AdditionalAlertmanagerConfig" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "collectionProfile": { - "description": "collectionProfile defines the metrics collection profile that Prometheus uses to collect metrics from the platform components. Supported values are `Full` or `Minimal`. In the `Full` profile (default), Prometheus collects all metrics that are exposed by the platform components. In the `Minimal` profile, Prometheus only collects metrics necessary for the default platform alerts, recording rules, telemetry and console dashboards. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default value is `Full`.", - "type": "string" - }, - "enforcedBodySizeLimitBytes": { - "description": "enforcedBodySizeLimitBytes enforces a body size limit (in bytes) for Prometheus scraped metrics. If a scraped target's body response is larger than the limit, the scrape will fail. This helps protect Prometheus from targets that return excessively large responses. The value is specified in bytes (e.g., 4194304 for 4MB, 1073741824 for 1GB). When omitted, the Cluster Monitoring Operator automatically calculates an appropriate limit based on cluster capacity. Set an explicit value to override the automatic calculation. Minimum value is 10240 (10kB). Maximum value is 1073741824 (1GB).", - "type": "integer", - "format": "int64" - }, - "externalLabels": { - "description": "externalLabels defines labels to be attached to time series and alerts when communicating with external systems such as federation, remote storage, and Alertmanager. These labels are not stored with metrics on disk; they are only added when data leaves Prometheus (e.g., during federation queries, remote write, or alert notifications). At least 1 label must be specified when set, with a maximum of 50 labels allowed. Each label key must be unique within this list. When omitted, no external labels are applied.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.Label" - }, - "x-kubernetes-list-map-keys": [ - "key" - ], - "x-kubernetes-list-type": "map" - }, - "logLevel": { - "description": "logLevel defines the verbosity of logs emitted by Prometheus. This field allows users to control the amount and severity of logs generated, which can be useful for debugging issues or reducing noise in production environments. Allowed values are Error, Warn, Info, and Debug. When set to Error, only errors will be logged. When set to Warn, both warnings and errors will be logged. When set to Info, general information, warnings, and errors will all be logged. When set to Debug, detailed debugging information will be logged. When omitted, this means no opinion and the platform is left to choose a reasonable default, that is subject to change over time. The current default value is `Info`.", - "type": "string" - }, - "nodeSelector": { - "description": "nodeSelector defines the nodes on which the Pods are scheduled. nodeSelector is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default value is `kubernetes.io/os: linux`. When specified, nodeSelector must contain at least one key-value pair (minimum of 1) and must not contain more than 10 entries.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "queryLogFile": { - "description": "queryLogFile specifies the file to which PromQL queries are logged. This setting can be either a filename, in which case the queries are saved to an `emptyDir` volume at `/var/log/prometheus`, or a full path to a location where an `emptyDir` volume will be mounted and the queries saved. Writing to `/dev/stderr`, `/dev/stdout` or `/dev/null` is supported, but writing to any other `/dev/` path is not supported. Relative paths are also not supported. By default, PromQL queries are not logged. Must be an absolute path starting with `/` or a simple filename without path separators. Must not contain consecutive slashes, end with a slash, or include '..' path traversal. Must contain only alphanumeric characters, '.', '_', '-', or '/'. Must be between 1 and 255 characters in length.", - "type": "string" - }, - "remoteWrite": { - "description": "remoteWrite defines the remote write configuration, including URL, authentication, and relabeling settings. Remote write allows Prometheus to send metrics it collects to external long-term storage systems. When omitted, no remote write endpoints are configured. When provided, at least one configuration must be specified (minimum 1, maximum 10 items). Entries must have unique names (name is the list key).", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.RemoteWriteSpec" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "resources": { - "description": "resources defines the compute resource requests and limits for the Prometheus container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 4m\n limit: null\n - name: memory\n request: 40Mi\n limit: null\nMaximum length for this list is 5. Minimum length for this list is 1. Each resource name must be unique within this list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.ContainerResource" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "retention": { - "description": "retention configures how long Prometheus retains metrics data and how much storage it can use. When omitted, the platform chooses reasonable defaults (currently 15d retention, no size limit).", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.Retention" - }, - "tolerations": { - "description": "tolerations defines tolerations for the pods. tolerations is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. Defaults are empty/unset. Maximum length for this list is 10 Minimum length for this list is 1", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - }, - "x-kubernetes-list-type": "atomic" - }, - "topologySpreadConstraints": { - "description": "topologySpreadConstraints defines rules for how Prometheus Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nWhen omitted, this means no opinion and the platform is left to choose a default, which is subject to change over time. This field maps directly to the `topologySpreadConstraints` field in the Pod spec. Default is empty list. Maximum length for this list is 10. Minimum length for this list is 1 Entries must have unique topologyKey and whenUnsatisfiable pairs.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.TopologySpreadConstraint" - }, - "x-kubernetes-list-map-keys": [ - "topologyKey", - "whenUnsatisfiable" - ], - "x-kubernetes-list-type": "map" - }, - "volumeClaimTemplate": { - "description": "volumeClaimTemplate defines persistent storage for Prometheus. Use this setting to configure the persistent volume claim, including storage class and volume size. If omitted, the Pod uses ephemeral storage and Prometheus data will not persist across restarts.", - "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" - } - } - }, - "com.github.openshift.api.config.v1alpha1.PrometheusOperatorAdmissionWebhookConfig": { - "description": "PrometheusOperatorAdmissionWebhookConfig provides configuration options for the admission webhook component of Prometheus Operator that runs in the `openshift-monitoring` namespace. The admission webhook validates PrometheusRule and AlertmanagerConfig objects, mutates PrometheusRule annotations, and converts AlertmanagerConfig objects between API versions.", - "type": "object", - "properties": { - "resources": { - "description": "resources defines the compute resource requests and limits for the prometheus-operator-admission-webhook container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 5m\n limit: null\n - name: memory\n request: 30Mi\n limit: null\nMaximum length for this list is 5. Minimum length for this list is 1. Each resource name must be unique within this list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.ContainerResource" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "topologySpreadConstraints": { - "description": "topologySpreadConstraints defines rules for how admission webhook Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nWhen omitted, this means no opinion and the platform is left to choose a default, which is subject to change over time. This field maps directly to the `topologySpreadConstraints` field in the Pod spec. Default is empty list. Maximum length for this list is 10. Minimum length for this list is 1. Entries must have unique topologyKey and whenUnsatisfiable pairs.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.TopologySpreadConstraint" - }, - "x-kubernetes-list-map-keys": [ - "topologyKey", - "whenUnsatisfiable" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1alpha1.PrometheusOperatorConfig": { - "description": "PrometheusOperatorConfig provides configuration options for the Prometheus Operator instance Use this configuration to control how the Prometheus Operator instance is deployed, how it logs, and how its pods are scheduled.", - "type": "object", - "properties": { - "logLevel": { - "description": "logLevel defines the verbosity of logs emitted by Prometheus Operator. This field allows users to control the amount and severity of logs generated, which can be useful for debugging issues or reducing noise in production environments. Allowed values are Error, Warn, Info, and Debug. When set to Error, only errors will be logged. When set to Warn, both warnings and errors will be logged. When set to Info, general information, warnings, and errors will all be logged. When set to Debug, detailed debugging information will be logged. When omitted, this means no opinion and the platform is left to choose a reasonable default, that is subject to change over time. The current default value is `Info`.", - "type": "string" - }, - "nodeSelector": { - "description": "nodeSelector defines the nodes on which the Pods are scheduled nodeSelector is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default value is `kubernetes.io/os: linux`. When specified, nodeSelector must contain at least 1 entry and must not contain more than 10 entries.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "resources": { - "description": "resources defines the compute resource requests and limits for the Prometheus Operator container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 4m\n limit: null\n - name: memory\n request: 40Mi\n limit: null\nMaximum length for this list is 5. Minimum length for this list is 1. Each resource name must be unique within this list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.ContainerResource" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "tolerations": { - "description": "tolerations defines tolerations for the pods. tolerations is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. Defaults are empty/unset. Maximum length for this list is 10. Minimum length for this list is 1.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - }, - "x-kubernetes-list-type": "atomic" - }, - "topologySpreadConstraints": { - "description": "topologySpreadConstraints defines rules for how Prometheus Operator Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nWhen omitted, this means no opinion and the platform is left to choose a default, which is subject to change over time. This field maps directly to the `topologySpreadConstraints` field in the Pod spec. Default is empty list. Maximum length for this list is 10. Minimum length for this list is 1. Entries must have unique topologyKey and whenUnsatisfiable pairs.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.TopologySpreadConstraint" - }, - "x-kubernetes-list-map-keys": [ - "topologyKey", - "whenUnsatisfiable" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1alpha1.PrometheusRemoteWriteHeader": { - "description": "PrometheusRemoteWriteHeader defines a custom HTTP header for remote write requests. The header name must not be one of the reserved headers set by Prometheus (Host, Authorization, Content-Encoding, Content-Type, X-Prometheus-Remote-Write-Version, User-Agent, Connection, Keep-Alive, Proxy-Authenticate, Proxy-Authorization, WWW-Authenticate). Header names must contain only case-insensitive alphanumeric characters, hyphens (-), and underscores (_); other characters (e.g. emoji) are rejected by validation. Validation is enforced on the Headers field in RemoteWriteSpec.", - "type": "object", - "required": [ - "name", - "value" - ], - "properties": { - "name": { - "description": "name is the HTTP header name. Must not be a reserved header (see type documentation). Must contain only alphanumeric characters, hyphens, and underscores; invalid characters are rejected. Must be between 1 and 256 characters.", - "type": "string" - }, - "value": { - "description": "value is the HTTP header value. Must be at most 4096 characters.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.QueueConfig": { - "description": "QueueConfig allows tuning configuration for remote write queue parameters. Configure this when you need to control throughput, backpressure, or retry behavior—for example to avoid overloading the remote endpoint, to reduce memory usage, or to tune for high-cardinality workloads. Consider capacity, maxShards, and batchSendDeadlineSeconds for throughput; minBackoffMilliseconds and maxBackoffMilliseconds for retries; and rateLimitedAction when the remote returns HTTP 429.", - "type": "object", - "properties": { - "batchSendDeadlineSeconds": { - "description": "batchSendDeadlineSeconds is the maximum time in seconds a sample will wait in buffer before being sent. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. Minimum value is 1 second. Maximum value is 3600 seconds (1 hour).", - "type": "integer", - "format": "int32" - }, - "capacity": { - "description": "capacity is the number of samples to buffer per shard before we start dropping them. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default value is 10000. Minimum value is 1. Maximum value is 1000000.", - "type": "integer", - "format": "int32" - }, - "maxBackoffMilliseconds": { - "description": "maxBackoffMilliseconds is the maximum retry delay in milliseconds. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. Minimum value is 1 millisecond. Maximum value is 3600000 milliseconds (1 hour).", - "type": "integer", - "format": "int32" - }, - "maxSamplesPerSend": { - "description": "maxSamplesPerSend is the maximum number of samples per send. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default value is 1000. Minimum value is 1. Maximum value is 100000.", - "type": "integer", - "format": "int32" - }, - "maxShards": { - "description": "maxShards is the maximum number of shards, i.e. amount of concurrency. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default value is 200. Minimum value is 1. Maximum value is 10000.", - "type": "integer", - "format": "int32" - }, - "minBackoffMilliseconds": { - "description": "minBackoffMilliseconds is the minimum retry delay in milliseconds. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. Minimum value is 1 millisecond. Maximum value is 3600000 milliseconds (1 hour).", - "type": "integer", - "format": "int32" - }, - "minShards": { - "description": "minShards is the minimum number of shards, i.e. amount of concurrency. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default value is 1. Minimum value is 1. Maximum value is 10000.", - "type": "integer", - "format": "int32" - }, - "rateLimitedAction": { - "description": "rateLimitedAction controls what to do when the remote write endpoint returns HTTP 429 (Too Many Requests). When omitted, no retries are performed on rate limit responses. When set to \"Retry\", Prometheus will retry such requests using the backoff settings above. Valid value when set is \"Retry\".", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.RSAKeyConfig": { - "description": "RSAKeyConfig specifies parameters for RSA key generation.", - "type": "object", - "required": [ - "keySize" - ], - "properties": { - "keySize": { - "description": "keySize specifies the size of RSA keys in bits. Valid values are multiples of 1024 from 2048 to 8192.", - "type": "integer", - "format": "int32" - } - } - }, - "com.github.openshift.api.config.v1alpha1.RelabelActionConfig": { - "description": "RelabelActionConfig represents the action to perform and its configuration. Exactly one action-specific configuration must be specified based on the action type.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "dropEqual": { - "description": "dropEqual configures the DropEqual action. Required when type is DropEqual, and forbidden otherwise. Requires Prometheus >= v2.41.0.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.DropEqualActionConfig" - }, - "hashMod": { - "description": "hashMod configures the HashMod action. Required when type is HashMod, and forbidden otherwise.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.HashModActionConfig" - }, - "keepEqual": { - "description": "keepEqual configures the KeepEqual action. Required when type is KeepEqual, and forbidden otherwise. Requires Prometheus >= v2.41.0.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.KeepEqualActionConfig" - }, - "labelMap": { - "description": "labelMap configures the LabelMap action. Required when type is LabelMap, and forbidden otherwise.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.LabelMapActionConfig" - }, - "lowercase": { - "description": "lowercase configures the Lowercase action. Required when type is Lowercase, and forbidden otherwise. Requires Prometheus >= v2.36.0.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.LowercaseActionConfig" - }, - "replace": { - "description": "replace configures the Replace action. Required when type is Replace, and forbidden otherwise.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.ReplaceActionConfig" - }, - "type": { - "description": "type specifies the action to perform on the matched labels. Allowed values are Replace, Lowercase, Uppercase, Keep, Drop, KeepEqual, DropEqual, HashMod, LabelMap, LabelDrop, LabelKeep.\n\nWhen set to Replace, regex is matched against the concatenated source_labels; target_label is set to replacement with match group references (${1}, ${2}, ...) substituted. If regex does not match, no replacement takes place.\n\nWhen set to Lowercase, the concatenated source_labels are mapped to their lower case. Requires Prometheus >= v2.36.0.\n\nWhen set to Uppercase, the concatenated source_labels are mapped to their upper case. Requires Prometheus >= v2.36.0.\n\nWhen set to Keep, targets for which regex does not match the concatenated source_labels are dropped.\n\nWhen set to Drop, targets for which regex matches the concatenated source_labels are dropped.\n\nWhen set to KeepEqual, targets for which the concatenated source_labels do not match target_label are dropped. Requires Prometheus >= v2.41.0.\n\nWhen set to DropEqual, targets for which the concatenated source_labels do match target_label are dropped. Requires Prometheus >= v2.41.0.\n\nWhen set to HashMod, target_label is set to the modulus of a hash of the concatenated source_labels.\n\nWhen set to LabelMap, regex is matched against all source label names (not just source_labels); matching label values are copied to new names given by replacement with ${1}, ${2}, ... substituted.\n\nWhen set to LabelDrop, regex is matched against all label names; any label that matches is removed.\n\nWhen set to LabelKeep, regex is matched against all label names; any label that does not match is removed.", - "type": "string" - }, - "uppercase": { - "description": "uppercase configures the Uppercase action. Required when type is Uppercase, and forbidden otherwise. Requires Prometheus >= v2.36.0.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.UppercaseActionConfig" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "dropEqual": "DropEqual", - "hashMod": "HashMod", - "keepEqual": "KeepEqual", - "labelMap": "LabelMap", - "lowercase": "Lowercase", - "replace": "Replace", - "uppercase": "Uppercase" - } - } - ] - }, - "com.github.openshift.api.config.v1alpha1.RelabelConfig": { - "description": "RelabelConfig represents a relabeling rule.", - "type": "object", - "required": [ - "name", - "action" - ], - "properties": { - "action": { - "description": "action defines the action to perform on the matched labels and its configuration. Exactly one action-specific configuration must be specified based on the action type.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.RelabelActionConfig" - }, - "name": { - "description": "name is a unique identifier for this relabel configuration. Must contain only alphanumeric characters, hyphens, and underscores. Must be between 1 and 63 characters in length.", - "type": "string" - }, - "regex": { - "description": "regex is the regular expression to match against the concatenated source label values. Must be a valid RE2 regular expression (https://github.com/google/re2/wiki/Syntax). When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default value is \"(.*)\" to match everything. Must be between 1 and 1000 characters in length when specified.", - "type": "string" - }, - "separator": { - "description": "separator is the character sequence used to join source label values. Common examples: \";\", \",\", \"::\", \"|||\". When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default value is \";\". Must be between 1 and 5 characters in length when specified.", - "type": "string" - }, - "sourceLabels": { - "description": "sourceLabels specifies which label names to extract from each series for this relabeling rule. The values of these labels are joined together using the configured separator, and the resulting string is then matched against the regular expression. If a referenced label does not exist on a series, Prometheus substitutes an empty string. When omitted, the rule operates without extracting source labels (useful for actions like labelmap). Minimum of 1 and maximum of 10 source labels can be specified, each between 1 and 128 characters. Each entry must be unique. Label names beginning with \"__\" (two underscores) are reserved for internal Prometheus use and are not allowed. Label names SHOULD start with a letter (a-z, A-Z) or underscore (_), followed by zero or more letters, digits (0-9), or underscores for best compatibility. While Prometheus supports UTF-8 characters in label names (since v3.0.0), using the recommended character set ensures better compatibility with the wider ecosystem (tooling, third-party instrumentation, etc.).", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - } - } - }, - "com.github.openshift.api.config.v1alpha1.RemoteWriteAuthorization": { - "description": "RemoteWriteAuthorization defines the authorization method for a remote write endpoint. Nested config requirements depend on the type discriminator: Authorization requires authorization, BasicAuth requires basicAuth, OAuth2 requires oauth2, SigV4 requires sigv4, and ServiceAccount forbids all nested configs.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "authorization": { - "description": "authorization defines the secret reference containing the authorization credentials (e.g. Bearer token). Required when type is \"Authorization\", and forbidden otherwise. The secret must exist in the openshift-monitoring namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.SecretKeySelector" - }, - "basicAuth": { - "description": "basicAuth defines HTTP basic authentication credentials. Required when type is \"BasicAuth\", and forbidden otherwise.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.BasicAuth" - }, - "oauth2": { - "description": "oauth2 defines OAuth2 client credentials authentication. Required when type is \"OAuth2\", and forbidden otherwise.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.OAuth2" - }, - "sigv4": { - "description": "sigv4 defines AWS Signature Version 4 authentication. Required when type is \"SigV4\", and forbidden otherwise.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.Sigv4" - }, - "type": { - "description": "type specifies the authorization method to use. Allowed values are Authorization, BasicAuth, OAuth2, SigV4, and ServiceAccount.\n\nWhen set to Authorization, credentials are read from a single Secret key. The secret key typically contains a Bearer token. Use the authorization field.\n\nWhen set to BasicAuth, HTTP basic authentication is used; the basicAuth field (username and password from Secrets) must be set.\n\nWhen set to OAuth2, OAuth2 client credentials flow is used; the oauth2 field (clientId, clientSecret, tokenUrl) must be set.\n\nWhen set to SigV4, AWS Signature Version 4 is used for authentication; the sigv4 field must be set.\n\nWhen set to ServiceAccount, the pod's service account token is used for machine identity. No additional field is required; the operator configures the token path.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "authorization": "Authorization", - "basicAuth": "BasicAuth", - "oauth2": "OAuth2", - "sigv4": "Sigv4" - } - } - ] - }, - "com.github.openshift.api.config.v1alpha1.RemoteWriteSpec": { - "description": "RemoteWriteSpec represents configuration for remote write endpoints.", - "type": "object", - "required": [ - "url", - "name" - ], - "properties": { - "authorization": { - "description": "authorization defines the authorization method for the remote write endpoint. When omitted, no authorization is performed. When set, type must be one of Authorization, BasicAuth, OAuth2, SigV4, or ServiceAccount; the corresponding nested config must be set (ServiceAccount has no config).", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.RemoteWriteAuthorization" - }, - "exemplarsMode": { - "description": "exemplarsMode controls whether exemplars are sent via remote write. Valid values are \"Send\", \"DoNotSend\" and omitted. When set to \"Send\", Prometheus is configured to store a maximum of 100,000 exemplars in memory and send them with remote write. Note that this setting only applies to user-defined monitoring. It is not applicable to default in-cluster monitoring. When omitted or set to \"DoNotSend\", exemplars are not sent.", - "type": "string" - }, - "headers": { - "description": "headers specifies the custom HTTP headers to be sent along with each remote write request. Sending custom headers makes the configuration of a proxy in between optional and helps the receiver recognize the given source better. Clients MAY allow users to send custom HTTP headers; they MUST NOT allow users to configure them in such a way as to send reserved headers. Headers set by Prometheus cannot be overwritten. When omitted, no custom headers are sent. Maximum of 50 headers can be specified. Each header name must be unique. Each header name must contain only alphanumeric characters, hyphens, and underscores, and must not be a reserved Prometheus header (Host, Authorization, Content-Encoding, Content-Type, X-Prometheus-Remote-Write-Version, User-Agent, Connection, Keep-Alive, Proxy-Authenticate, Proxy-Authorization, WWW-Authenticate).", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.PrometheusRemoteWriteHeader" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "messageVersion": { - "description": "messageVersion defines the Remote Write message's version to use when writing to the endpoint. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default value is \"V1.0\". When set to \"V1.0\", Prometheus uses the `prometheus.WriteRequest` protobuf message introduced in Remote Write 1.0. When set to \"V2.0\", Prometheus uses the `io.prometheus.write.v2.Request` protobuf message introduced in Remote Write 2.0.", - "type": "string" - }, - "metadataConfig": { - "description": "metadataConfig configures the sending of series metadata to remote storage. When omitted, no metadata is sent. When set to sendPolicy: Default, metadata is sent using platform-chosen defaults (e.g. send interval 30 seconds). When set to sendPolicy: Custom, metadata is sent using the settings in the custom field (e.g. custom.sendIntervalSeconds).", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.MetadataConfig" - }, - "name": { - "description": "name is a required identifier for this remote write configuration (name is the list key for the remoteWrite list). This name is used in metrics and logging to differentiate remote write queues. Must contain only alphanumeric characters, hyphens, and underscores. Must be between 1 and 63 characters in length.", - "type": "string" - }, - "proxyUrl": { - "description": "proxyUrl defines an optional proxy URL. If the cluster-wide proxy is enabled, it replaces the proxyUrl setting. The cluster-wide proxy supports both HTTP and HTTPS proxies, with HTTPS taking precedence. When omitted, no proxy is used. Must be a valid URL with http or https scheme. Must be between 1 and 2048 characters in length.", - "type": "string" - }, - "queueConfig": { - "description": "queueConfig allows tuning configuration for remote write queue parameters. When omitted, default queue configuration is used.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.QueueConfig" - }, - "remoteTimeoutSeconds": { - "description": "remoteTimeoutSeconds defines the timeout in seconds for requests to the remote write endpoint. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. Minimum value is 1 second. Maximum value is 600 seconds (10 minutes).", - "type": "integer", - "format": "int32" - }, - "tlsConfig": { - "description": "tlsConfig defines TLS authentication settings for the remote write endpoint. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.TLSConfig" - }, - "url": { - "description": "url is the URL of the remote write endpoint. Must be a valid URL with http or https scheme and a non-empty hostname. Query parameters, fragments, and user information (e.g. user:password@host) are not allowed. Empty string is invalid. Must be between 1 and 2048 characters in length.", - "type": "string" - }, - "writeRelabelConfigs": { - "description": "writeRelabelConfigs is a list of relabeling rules to apply before sending data to the remote endpoint. When omitted, no relabeling is performed and all metrics are sent as-is. Minimum of 1 and maximum of 10 relabeling rules can be specified. Each rule must have a unique name.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.RelabelConfig" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1alpha1.ReplaceActionConfig": { - "description": "ReplaceActionConfig configures the Replace action. Regex is matched against the concatenated source_labels; target_label is set to replacement with match group references (${1}, ${2}, ...) substituted. No replacement if regex does not match.", - "type": "object", - "required": [ - "targetLabel", - "replacement" - ], - "properties": { - "replacement": { - "description": "replacement is the value written to target_label when regex matches; match group references (${1}, ${2}, ...) are substituted. Required when using the Replace action so the intended behavior is explicit and the platform does not need to apply defaults. Use \"$1\" for the first capture group, \"$2\" for the second, etc. Use an empty string (\"\") to explicitly clear the target label value. Must be between 0 and 255 characters in length.", - "type": "string" - }, - "targetLabel": { - "description": "targetLabel is the label name where the replacement result is written. Must be between 1 and 128 characters in length.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.Retention": { - "description": "Retention configures how long Prometheus retains metrics data and how much storage it can use.", - "type": "object", - "properties": { - "duration": { - "description": "duration is an optional field that specifies how long Prometheus retains metrics data. Valid values are Prometheus-style duration strings with unit suffixes y, w, d, h, m, s, or ms (for example, \"15d\", \"24h\", or \"5d1h30m\"). Each unit value must be a positive integer. Composite durations must follow the fixed unit order y, w, d, h, m, s, ms. Must be at least 1 character and at most 64 characters. When set to \"0\", time-based retention is disabled. This is the only supported form for disabling time-based retention; other zero-duration representations such as \"0d\", \"0h\", or \"0y\" are rejected. Prometheus automatically deletes data older than this duration. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default value is `15d`.", - "type": "string" - }, - "size": { - "description": "size is an optional field that specifies the maximum storage size that Prometheus can use for data blocks and the write-ahead log (WAL). Valid values are byte-size strings with an optional decimal prefix and a unit suffix B, KB, MB, GB, TB, EB, PB, or their binary equivalents KiB, MiB, GiB, TiB, EiB, PiB (for example, \"500MiB\", \"10GiB\"). The numeric value must be greater than zero. Must be at least 1 character and at most 32 characters. When set to \"0\", no size limit is enforced. This is the only supported form for disabling size-based retention; other zero-size representations such as \"0B\" or \"0MiB\" are rejected. When the limit is reached, Prometheus deletes oldest data first. When omitted, no size limit is enforced and Prometheus uses available PersistentVolume capacity.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.RetentionNumberConfig": { - "description": "RetentionNumberConfig specifies the configuration of the retention policy on the number of backups", - "type": "object", - "required": [ - "maxNumberOfBackups" - ], - "properties": { - "maxNumberOfBackups": { - "description": "maxNumberOfBackups defines the maximum number of backups to retain. If the existing number of backups saved is equal to MaxNumberOfBackups then the oldest backup will be removed before a new backup is initiated.", - "type": "integer", - "format": "int32", - "default": 0 - } - } - }, - "com.github.openshift.api.config.v1alpha1.RetentionPolicy": { - "description": "RetentionPolicy defines the retention policy for retaining and deleting existing backups. This struct is a discriminated union that allows users to select the type of retention policy from the supported types.", - "type": "object", - "required": [ - "retentionType" - ], - "properties": { - "retentionNumber": { - "description": "retentionNumber configures the retention policy based on the number of backups", - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.RetentionNumberConfig" - }, - "retentionSize": { - "description": "retentionSize configures the retention policy based on the size of backups", - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.RetentionSizeConfig" - }, - "retentionType": { - "description": "retentionType sets the type of retention policy. Currently, the only valid policies are retention by number of backups (RetentionNumber), by the size of backups (RetentionSize). More policies or types may be added in the future. Empty string means no opinion and the platform is left to choose a reasonable default which is subject to change without notice. The current default is RetentionNumber with 15 backups kept.\n\nPossible enum values:\n - `\"RetentionNumber\"` sets the retention policy based on the number of backup files saved\n - `\"RetentionSize\"` sets the retention policy based on the total size of the backup files saved", - "type": "string", - "default": "", - "enum": [ - "RetentionNumber", - "RetentionSize" - ] - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "retentionType", - "fields-to-discriminateBy": { - "retentionNumber": "RetentionNumber", - "retentionSize": "RetentionSize" - } - } - ] - }, - "com.github.openshift.api.config.v1alpha1.RetentionSizeConfig": { - "description": "RetentionSizeConfig specifies the configuration of the retention policy on the total size of backups", - "type": "object", - "required": [ - "maxSizeOfBackupsGb" - ], - "properties": { - "maxSizeOfBackupsGb": { - "description": "maxSizeOfBackupsGb defines the total size in GB of backups to retain. If the current total size backups exceeds MaxSizeOfBackupsGb then the oldest backup will be removed before a new backup is initiated.", - "type": "integer", - "format": "int32", - "default": 0 - } - } - }, - "com.github.openshift.api.config.v1alpha1.SecretKeySelector": { - "description": "SecretKeySelector selects a key of a Secret in the `openshift-monitoring` namespace.", - "type": "object", - "required": [ - "name", - "key" - ], - "properties": { - "key": { - "description": "key is the key of the secret to select from. Must consist of alphanumeric characters, '-', '_', or '.'. Must be between 1 and 253 characters in length.", - "type": "string" - }, - "name": { - "description": "name is the name of the secret in the `openshift-monitoring` namespace to select from. Must be a valid Kubernetes secret name (lowercase alphanumeric, '-' or '.', start/end with alphanumeric). Must be between 1 and 253 characters in length.", - "type": "string" - } - }, - "x-kubernetes-map-type": "atomic" - }, - "com.github.openshift.api.config.v1alpha1.Sigv4": { - "description": "Sigv4 defines AWS Signature Version 4 authentication settings. At least one of region, accessKey/secretKey, profile, or roleArn must be set so the platform can perform authentication.", - "type": "object", - "properties": { - "accessKey": { - "description": "accessKey defines the secret reference containing the AWS access key ID. The secret must exist in the openshift-monitoring namespace. When omitted, the access key is derived from the environment or instance metadata.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.SecretKeySelector" - }, - "profile": { - "description": "profile is the named AWS profile used to authenticate. When omitted, the default profile is used. Must be between 1 and 128 characters.", - "type": "string" - }, - "region": { - "description": "region is the AWS region. When omitted, the region is derived from the environment or instance metadata. Must be between 1 and 128 characters.", - "type": "string" - }, - "roleArn": { - "description": "roleArn is the AWS Role ARN, an alternative to using AWS API keys. When omitted, API keys are used for authentication. Must be a valid AWS ARN format (e.g., \"arn:aws:iam::123456789012:role/MyRole\"). Must be between 1 and 512 characters.", - "type": "string" - }, - "secretKey": { - "description": "secretKey defines the secret reference containing the AWS secret access key. The secret must exist in the openshift-monitoring namespace. When omitted, the secret key is derived from the environment or instance metadata.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.SecretKeySelector" - } - } - }, - "com.github.openshift.api.config.v1alpha1.Storage": { - "description": "storage provides persistent storage configuration options for gathering jobs. If the type is set to PersistentVolume, then the PersistentVolume must be defined. If the type is set to Ephemeral, then the PersistentVolume must not be defined.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "persistentVolume": { - "description": "persistentVolume is an optional field that specifies the PersistentVolume that will be used to store the Insights data archive. The PersistentVolume must be created in the openshift-insights namespace.", - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.PersistentVolumeConfig" - }, - "type": { - "description": "type is a required field that specifies the type of storage that will be used to store the Insights data archive. Valid values are \"PersistentVolume\" and \"Ephemeral\". When set to Ephemeral, the Insights data archive is stored in the ephemeral storage of the gathering job. When set to PersistentVolume, the Insights data archive is stored in the PersistentVolume that is defined by the persistentVolume field.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1alpha1.TLSConfig": { - "description": "TLSConfig represents TLS configuration for Alertmanager connections. At least one TLS configuration option must be specified. For mutual TLS (mTLS), both cert and key must be specified together, or both omitted.", - "type": "object", - "properties": { - "ca": { - "description": "ca is an optional CA certificate to use for TLS connections. When omitted, the system's default CA bundle is used.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.SecretKeySelector" - }, - "cert": { - "description": "cert is an optional client certificate to use for mutual TLS connections. When omitted, no client certificate is presented.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.SecretKeySelector" - }, - "certificateVerification": { - "description": "certificateVerification determines the policy for TLS certificate verification. Allowed values are \"Verify\" (performs certificate verification, secure) and \"SkipVerify\" (skips verification, insecure). When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default value is \"Verify\".", - "type": "string" - }, - "key": { - "description": "key is an optional client key to use for mutual TLS connections. When omitted, no client key is used.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.SecretKeySelector" - }, - "serverName": { - "description": "serverName is an optional server name to use for TLS connections. When specified, must be a valid DNS subdomain as per RFC 1123. When omitted, the server name is derived from the URL. Must be between 1 and 253 characters in length.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.TelemeterClientConfig": { - "description": "TelemeterClientConfig provides configuration options for the Telemeter Client component that runs in the `openshift-monitoring` namespace. The Telemeter Client collects selected monitoring metrics and forwards them to Red Hat for telemetry purposes. At least one field must be specified.", - "type": "object", - "properties": { - "nodeSelector": { - "description": "nodeSelector defines the nodes on which the Pods are scheduled. nodeSelector is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default value is `kubernetes.io/os: linux`. When specified, nodeSelector must contain at least 1 entry and must not contain more than 10 entries.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "resources": { - "description": "resources defines the compute resource requests and limits for the Telemeter Client container. This includes CPU, memory and HugePages constraints to help control scheduling and resource usage. When not specified, defaults are used by the platform. Requests cannot exceed limits. This field is optional. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 1m\n limit: null\n - name: memory\n request: 40Mi\n limit: null\nMaximum length for this list is 5. Minimum length for this list is 1. Each resource name must be unique within this list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.ContainerResource" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "tolerations": { - "description": "tolerations defines tolerations for the pods. tolerations is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. Defaults are empty/unset. Maximum length for this list is 10. Minimum length for this list is 1.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - }, - "x-kubernetes-list-type": "atomic" - }, - "topologySpreadConstraints": { - "description": "topologySpreadConstraints defines rules for how Telemeter Client Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nWhen omitted, this means no opinion and the platform is left to choose a default, which is subject to change over time. This field maps directly to the `topologySpreadConstraints` field in the Pod spec. Default is empty list. Maximum length for this list is 10. Minimum length for this list is 1. Entries must have unique topologyKey and whenUnsatisfiable pairs.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.TopologySpreadConstraint" - }, - "x-kubernetes-list-map-keys": [ - "topologyKey", - "whenUnsatisfiable" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1alpha1.ThanosQuerierConfig": { - "description": "ThanosQuerierConfig provides configuration options for the Thanos Querier component that runs in the `openshift-monitoring` namespace. At least one field must be specified; an empty thanosQuerierConfig object is not allowed.", - "type": "object", - "properties": { - "crossOriginRequestPolicy": { - "description": "crossOriginRequestPolicy configures the CORS (Cross-Origin Resource Sharing) policy for Thanos Querier's HTTP endpoints. crossOriginRequestPolicy is optional. Valid values are \"AllowAll\" and \"DenyAll\". When set to \"AllowAll\", CORS headers are added to responses, allowing cross-origin requests from any domain. When set to \"DenyAll\", no CORS headers are added and cross-origin requests are rejected by the browser. When omitted, this means no opinion and the platform is left to choose a reasonable default, that is subject to change over time. The current default value is \"DenyAll\".", - "type": "string" - }, - "logLevel": { - "description": "logLevel defines the verbosity of logs emitted by Thanos Querier. logLevel is optional. Allowed values are Error, Warn, Info, and Debug. When set to Error, only errors will be logged. When set to Warn, both warnings and errors will be logged. When set to Info, general information, warnings, and errors will all be logged. When set to Debug, detailed debugging information will be logged. When omitted, this means no opinion and the platform is left to choose a reasonable default, that is subject to change over time. The current default value is `Info`.", - "type": "string" - }, - "nodeSelector": { - "description": "nodeSelector defines the nodes on which the Pods are scheduled. nodeSelector is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default value is `kubernetes.io/os: linux`. When specified, nodeSelector must contain at least 1 entry and must not contain more than 10 entries.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "requestLogging": { - "description": "requestLogging configures request logging for Thanos Querier. requestLogging is optional. When provided, the policy field within is required. When omitted, this means no opinion and the platform is left to choose a reasonable default, that is subject to change over time. The current default behavior is to not log any requests.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.ThanosQuerierRequestLoggingConfig" - }, - "resources": { - "description": "resources defines the compute resource requests and limits for the Thanos Querier container. resources is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. Requests cannot exceed limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ This is a simplified API that maps to Kubernetes ResourceRequirements. The current default values are:\n resources:\n - name: cpu\n request: 5m\n - name: memory\n request: 12Mi\nMaximum length for this list is 5. Minimum length for this list is 1. Each resource name must be unique within this list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha1.ContainerResource" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "tolerations": { - "description": "tolerations defines tolerations for the pods. tolerations is optional.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. Defaults are empty/unset. Maximum length for this list is 10. Minimum length for this list is 1.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - }, - "x-kubernetes-list-type": "atomic" - }, - "topologySpreadConstraints": { - "description": "topologySpreadConstraints defines rules for how Thanos Querier Pods should be distributed across topology domains such as zones, nodes, or other user-defined labels. topologySpreadConstraints is optional. This helps improve high availability and resource efficiency by avoiding placing too many replicas in the same failure domain.\n\nWhen omitted, this means no opinion and the platform is left to choose a default, which is subject to change over time. This field maps directly to the `topologySpreadConstraints` field in the Pod spec. Defaults are empty/unset. Maximum length for this list is 10. Minimum length for this list is 1. Entries must have unique topologyKey and whenUnsatisfiable pairs.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.TopologySpreadConstraint" - }, - "x-kubernetes-list-map-keys": [ - "topologyKey", - "whenUnsatisfiable" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1alpha1.ThanosQuerierRequestLoggingConfig": { - "description": "ThanosQuerierRequestLoggingConfig configures request logging for Thanos Querier.", - "type": "object", - "required": [ - "policy" - ], - "properties": { - "policy": { - "description": "policy determines which HTTP and gRPC requests are logged by Thanos Querier. Valid values are \"AllRequests\" and \"NoRequests\". When set to \"AllRequests\", every request received by Thanos Querier is logged with method, path, and response status. The log level for request logs is derived from the logLevel field. When set to \"NoRequests\", request logging is turned off.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.UppercaseActionConfig": { - "description": "UppercaseActionConfig configures the Uppercase action. Maps the concatenated source_labels to their upper case and writes to target_label. Requires Prometheus >= v2.36.0.", - "type": "object", - "required": [ - "targetLabel" - ], - "properties": { - "targetLabel": { - "description": "targetLabel is the label name where the upper-cased value is written. Must be between 1 and 128 characters in length.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha1.UserDefinedMonitoring": { - "description": "UserDefinedMonitoring config for user-defined projects.", - "type": "object", - "required": [ - "mode" - ], - "properties": { - "mode": { - "description": "mode defines the different configurations of UserDefinedMonitoring Valid values are Disabled and NamespaceIsolated Disabled disables monitoring for user-defined projects. This restricts the default monitoring stack, installed in the openshift-monitoring project, to monitor only platform namespaces, which prevents any custom monitoring configurations or resources from being applied to user-defined namespaces. NamespaceIsolated enables monitoring for user-defined projects with namespace-scoped tenancy. This ensures that metrics, alerts, and monitoring data are isolated at the namespace level. The current default value is `Disabled`.\n\nPossible enum values:\n - `\"Disabled\"` disables monitoring for user-defined projects. This restricts the default monitoring stack, installed in the openshift-monitoring project, to monitor only platform namespaces, which prevents any custom monitoring configurations or resources from being applied to user-defined namespaces.\n - `\"NamespaceIsolated\"` enables monitoring for user-defined projects with namespace-scoped tenancy. This ensures that metrics, alerts, and monitoring data are isolated at the namespace level.", - "type": "string", - "default": "", - "enum": [ - "Disabled", - "NamespaceIsolated" - ] - } - } - }, - "com.github.openshift.api.config.v1alpha2.Custom": { - "description": "custom provides the custom configuration of gatherers", - "type": "object", - "required": [ - "configs" - ], - "properties": { - "configs": { - "description": "configs is a required list of gatherers configurations that can be used to enable or disable specific gatherers. It may not exceed 100 items and each gatherer can be present only once. It is possible to disable an entire set of gatherers while allowing a specific function within that set. The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha2.GathererConfig" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.config.v1alpha2.GatherConfig": { - "description": "gatherConfig provides data gathering configuration options.", - "type": "object", - "required": [ - "gatherers" - ], - "properties": { - "dataPolicy": { - "description": "dataPolicy is an optional list of DataPolicyOptions that allows user to enable additional obfuscation of the Insights archive data. It may not exceed 2 items and must not contain duplicates. Valid values are ObfuscateNetworking and WorkloadNames. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When set to WorkloadNames, the gathered data about cluster resources will not contain the workload names for your deployments. Resources UIDs will be used instead. When omitted no obfuscation is applied.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "gatherers": { - "description": "gatherers is a required field that specifies the configuration of the gatherers.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha2.Gatherers" - }, - "storage": { - "description": "storage is an optional field that allows user to define persistent storage for gathering jobs to store the Insights data archive. If omitted, the gathering job will use ephemeral storage.", - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha2.Storage" - } - } - }, - "com.github.openshift.api.config.v1alpha2.GathererConfig": { - "description": "gathererConfig allows to configure specific gatherers", - "type": "object", - "required": [ - "name", - "state" - ], - "properties": { - "name": { - "description": "name is the required name of a specific gatherer It may not exceed 256 characters. The format for a gatherer name is: {gatherer}/{function} where the function is optional. Gatherer consists of a lowercase letters only that may include underscores (_). Function consists of a lowercase letters only that may include underscores (_) and is separated from the gatherer by a forward slash (/). The particular gatherers can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", - "type": "string", - "default": "" - }, - "state": { - "description": "state is a required field that allows you to configure specific gatherer. Valid values are \"Enabled\" and \"Disabled\". When set to Enabled the gatherer will run. When set to Disabled the gatherer will not run.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1alpha2.Gatherers": { - "type": "object", - "required": [ - "mode" - ], - "properties": { - "custom": { - "description": "custom provides gathering configuration. It is required when mode is Custom, and forbidden otherwise. Custom configuration allows user to disable only a subset of gatherers. Gatherers that are not explicitly disabled in custom configuration will run.", - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha2.Custom" - }, - "mode": { - "description": "mode is a required field that specifies the mode for gatherers. Allowed values are All, None, and Custom. When set to All, all gatherers wil run and gather data. When set to None, all gatherers will be disabled and no data will be gathered. When set to Custom, the custom configuration from the custom field will be applied.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1alpha2.InsightsDataGather": { - "description": "InsightsDataGather provides data gather configuration options for the the Insights Operator.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha2.InsightsDataGatherSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha2.InsightsDataGatherStatus" - } - } - }, - "com.github.openshift.api.config.v1alpha2.InsightsDataGatherList": { - "description": "InsightsDataGatherList is a collection of items Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is the required list of InsightsDataGather objects it may not exceed 100 items", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha2.InsightsDataGather" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the required standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.config.v1alpha2.InsightsDataGatherSpec": { - "type": "object", - "properties": { - "gatherConfig": { - "description": "gatherConfig is an optional spec attribute that includes all the configuration options related to gathering of the Insights data and its uploading to the ingress.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha2.GatherConfig" - } - } - }, - "com.github.openshift.api.config.v1alpha2.InsightsDataGatherStatus": { - "type": "object" - }, - "com.github.openshift.api.config.v1alpha2.PersistentVolumeClaimReference": { - "description": "persistentVolumeClaimReference is a reference to a PersistentVolumeClaim.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is a string that follows the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start and end with an alphanumeric character.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.config.v1alpha2.PersistentVolumeConfig": { - "description": "persistentVolumeConfig provides configuration options for PersistentVolume storage.", - "type": "object", - "required": [ - "claim" - ], - "properties": { - "claim": { - "description": "claim is a required field that specifies the configuration of the PersistentVolumeClaim that will be used to store the Insights data archive. The PersistentVolumeClaim must be created in the openshift-insights namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha2.PersistentVolumeClaimReference" - }, - "mountPath": { - "description": "mountPath is an optional field specifying the directory where the PVC will be mounted inside the Insights data gathering Pod. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default mount path is /var/lib/insights-operator The path may not exceed 1024 characters and must not contain a colon.", - "type": "string" - } - } - }, - "com.github.openshift.api.config.v1alpha2.Storage": { - "description": "storage provides persistent storage configuration options for gathering jobs. If the type is set to PersistentVolume, then the PersistentVolume must be defined. If the type is set to Ephemeral, then the PersistentVolume must not be defined.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "persistentVolume": { - "description": "persistentVolume is an optional field that specifies the PersistentVolume that will be used to store the Insights data archive. The PersistentVolume must be created in the openshift-insights namespace.", - "$ref": "#/definitions/com.github.openshift.api.config.v1alpha2.PersistentVolumeConfig" - }, - "type": { - "description": "type is a required field that specifies the type of storage that will be used to store the Insights data archive. Valid values are \"PersistentVolume\" and \"Ephemeral\". When set to Ephemeral, the Insights data archive is stored in the ephemeral storage of the gathering job. When set to PersistentVolume, the Insights data archive is stored in the PersistentVolume that is defined by the persistentVolume field.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.console.v1.ApplicationMenuSpec": { - "description": "ApplicationMenuSpec is the specification of the desired section and icon used for the link in the application menu.", - "type": "object", - "required": [ - "section" - ], - "properties": { - "imageURL": { - "description": "imageURL is the URL for the icon used in front of the link in the application menu. The URL must be an HTTPS URL or a Data URI. The image should be square and will be shown at 24x24 pixels.", - "type": "string" - }, - "section": { - "description": "section is the section of the application menu in which the link should appear. This can be any text that will appear as a subheading in the application menu dropdown. A new section will be created if the text does not match text of an existing section.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.console.v1.CLIDownloadLink": { - "type": "object", - "required": [ - "href" - ], - "properties": { - "href": { - "description": "href is the absolute secure URL for the link (must use https)", - "type": "string", - "default": "" - }, - "text": { - "description": "text is the display text for the link", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleCLIDownload": { - "description": "ConsoleCLIDownload is an extension for configuring openshift web console command line interface (CLI) downloads.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleCLIDownloadSpec" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleCLIDownloadList": { - "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleCLIDownload" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleCLIDownloadSpec": { - "description": "ConsoleCLIDownloadSpec is the desired cli download configuration.", - "type": "object", - "required": [ - "displayName", - "description", - "links" - ], - "properties": { - "description": { - "description": "description is the description of the CLI download (can include markdown).", - "type": "string", - "default": "" - }, - "displayName": { - "description": "displayName is the display name of the CLI download.", - "type": "string", - "default": "" - }, - "links": { - "description": "links is a list of objects that provide CLI download link details.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.CLIDownloadLink" - } - } - } - }, - "com.github.openshift.api.console.v1.ConsoleExternalLogLink": { - "description": "ConsoleExternalLogLink is an extension for customizing OpenShift web console log links.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleExternalLogLinkSpec" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleExternalLogLinkList": { - "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleExternalLogLink" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleExternalLogLinkSpec": { - "description": "ConsoleExternalLogLinkSpec is the desired log link configuration. The log link will appear on the logs tab of the pod details page.", - "type": "object", - "required": [ - "text", - "hrefTemplate" - ], - "properties": { - "hrefTemplate": { - "description": "hrefTemplate is an absolute secure URL (must use https) for the log link including variables to be replaced. Variables are specified in the URL with the format ${variableName}, for instance, ${containerName} and will be replaced with the corresponding values from the resource. Resource is a pod. Supported variables are: - ${resourceName} - name of the resource which containes the logs - ${resourceUID} - UID of the resource which contains the logs\n - e.g. `11111111-2222-3333-4444-555555555555`\n- ${containerName} - name of the resource's container that contains the logs - ${resourceNamespace} - namespace of the resource that contains the logs - ${resourceNamespaceUID} - namespace UID of the resource that contains the logs - ${podLabels} - JSON representation of labels matching the pod with the logs\n - e.g. `{\"key1\":\"value1\",\"key2\":\"value2\"}`\n\ne.g., https://example.com/logs?resourceName=${resourceName}&containerName=${containerName}&resourceNamespace=${resourceNamespace}&podLabels=${podLabels}", - "type": "string", - "default": "" - }, - "namespaceFilter": { - "description": "namespaceFilter is a regular expression used to restrict a log link to a matching set of namespaces (e.g., `^openshift-`). The string is converted into a regular expression using the JavaScript RegExp constructor. If not specified, links will be displayed for all the namespaces.", - "type": "string" - }, - "text": { - "description": "text is the display text for the link", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleLink": { - "description": "ConsoleLink is an extension for customizing OpenShift web console links.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleLinkSpec" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleLinkList": { - "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleLink" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleLinkSpec": { - "description": "ConsoleLinkSpec is the desired console link configuration.", - "type": "object", - "required": [ - "text", - "href", - "location" - ], - "properties": { - "applicationMenu": { - "description": "applicationMenu holds information about section and icon used for the link in the application menu, and it is applicable only when location is set to ApplicationMenu.", - "$ref": "#/definitions/com.github.openshift.api.console.v1.ApplicationMenuSpec" - }, - "href": { - "description": "href is the absolute URL for the link. Must use https:// for web URLs or mailto: for email links.", - "type": "string", - "default": "" - }, - "location": { - "description": "location determines which location in the console the link will be appended to (ApplicationMenu, HelpMenu, UserMenu, NamespaceDashboard).", - "type": "string", - "default": "" - }, - "namespaceDashboard": { - "description": "namespaceDashboard holds information about namespaces in which the dashboard link should appear, and it is applicable only when location is set to NamespaceDashboard. If not specified, the link will appear in all namespaces.", - "$ref": "#/definitions/com.github.openshift.api.console.v1.NamespaceDashboardSpec" - }, - "text": { - "description": "text is the display text for the link", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleNotification": { - "description": "ConsoleNotification is the extension for configuring openshift web console notifications.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleNotificationSpec" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleNotificationList": { - "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleNotification" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleNotificationSpec": { - "description": "ConsoleNotificationSpec is the desired console notification configuration.", - "type": "object", - "required": [ - "text" - ], - "properties": { - "backgroundColor": { - "description": "backgroundColor is the color of the background for the notification as CSS data type color.", - "type": "string" - }, - "color": { - "description": "color is the color of the text for the notification as CSS data type color.", - "type": "string" - }, - "link": { - "description": "link is an object that holds notification link details.", - "$ref": "#/definitions/com.github.openshift.api.console.v1.Link" - }, - "location": { - "description": "location is the location of the notification in the console. Valid values are: \"BannerTop\", \"BannerBottom\", \"BannerTopBottom\".", - "type": "string" - }, - "text": { - "description": "text is the visible text of the notification.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.console.v1.ConsolePlugin": { - "description": "ConsolePlugin is an extension for customizing OpenShift web console by dynamically loading code from another service running on the cluster.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec contains the desired configuration for the console plugin.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsolePluginSpec" - } - } - }, - "com.github.openshift.api.console.v1.ConsolePluginBackend": { - "description": "ConsolePluginBackend holds information about the endpoint which serves the console's plugin", - "type": "object", - "required": [ - "type" - ], - "properties": { - "service": { - "description": "service is a Kubernetes Service that exposes the plugin using a deployment with an HTTP server. The Service must use HTTPS and Service serving certificate. The console backend will proxy the plugins assets from the Service using the service CA bundle.", - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsolePluginService" - }, - "type": { - "description": "type is the backend type which servers the console's plugin. Currently only \"Service\" is supported.", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "service": "Service" - } - } - ] - }, - "com.github.openshift.api.console.v1.ConsolePluginCSP": { - "description": "ConsolePluginCSP holds configuration for a specific CSP directive", - "type": "object", - "required": [ - "directive", - "values" - ], - "properties": { - "directive": { - "description": "directive specifies which Content-Security-Policy directive to configure. Available directive types are DefaultSrc, ScriptSrc, StyleSrc, ImgSrc, FontSrc and ConnectSrc. DefaultSrc directive serves as a fallback for the other CSP fetch directives. For more information about the DefaultSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/default-src ScriptSrc directive specifies valid sources for JavaScript. For more information about the ScriptSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src StyleSrc directive specifies valid sources for stylesheets. For more information about the StyleSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/style-src ImgSrc directive specifies a valid sources of images and favicons. For more information about the ImgSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/img-src FontSrc directive specifies valid sources for fonts loaded using @font-face. For more information about the FontSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/font-src ConnectSrc directive restricts the URLs which can be loaded using script interfaces. For more information about the ConnectSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/connect-src\n\nPossible enum values:\n - `\"ConnectSrc\"` directive restricts the URLs which can be loaded using script interfaces. For more information about the ConnectSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/connect-src\n - `\"DefaultSrc\"` directive serves as a fallback for the other CSP fetch directives. For more information about the DefaultSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/default-src\n - `\"FontSrc\"` directive specifies valid sources for fonts loaded using @font-face. For more information about the FontSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/font-src\n - `\"ImgSrc\"` directive specifies a valid sources of images and favicons. For more information about the ImgSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/img-src\n - `\"ScriptSrc\"` directive specifies valid sources for JavaScript. For more information about the ScriptSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src\n - `\"StyleSrc\"` directive specifies valid sources for stylesheets. For more information about the StyleSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/style-src", - "type": "string", - "default": "", - "enum": [ - "ConnectSrc", - "DefaultSrc", - "FontSrc", - "ImgSrc", - "ScriptSrc", - "StyleSrc" - ] - }, - "values": { - "description": "values defines an array of values to append to the console defaults for this directive. Each ConsolePlugin may define their own directives with their values. These will be set by the OpenShift web console's backend, as part of its Content-Security-Policy header. The array can contain at most 16 values. Each directive value must have a maximum length of 1024 characters and must not contain whitespace, commas (,), semicolons (;) or single quotes ('). The value '*' is not permitted. Each value in the array must be unique.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.console.v1.ConsolePluginI18n": { - "description": "ConsolePluginI18n holds information on localization resources that are served by the dynamic plugin.", - "type": "object", - "required": [ - "loadType" - ], - "properties": { - "loadType": { - "description": "loadType indicates how the plugin's localization resource should be loaded. Valid values are Preload, Lazy and the empty string. When set to Preload, all localization resources are fetched when the plugin is loaded. When set to Lazy, localization resources are lazily loaded as and when they are required by the console. When omitted or set to the empty string, the behaviour is equivalent to Lazy type.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.console.v1.ConsolePluginList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsolePlugin" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.console.v1.ConsolePluginProxy": { - "description": "ConsolePluginProxy holds information on various service types to which console's backend will proxy the plugin's requests.", - "type": "object", - "required": [ - "endpoint", - "alias" - ], - "properties": { - "alias": { - "description": "alias is a proxy name that identifies the plugin's proxy. An alias name should be unique per plugin. The console backend exposes following proxy endpoint:\n\n/api/proxy/plugin///?\n\nRequest example path:\n\n/api/proxy/plugin/acm/search/pods?namespace=openshift-apiserver", - "type": "string", - "default": "" - }, - "authorization": { - "description": "authorization provides information about authorization type, which the proxied request should contain", - "type": "string" - }, - "caCertificate": { - "description": "caCertificate provides the cert authority certificate contents, in case the proxied Service is using custom service CA. By default, the service CA bundle provided by the service-ca operator is used.", - "type": "string" - }, - "endpoint": { - "description": "endpoint provides information about endpoint to which the request is proxied to.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsolePluginProxyEndpoint" - } - } - }, - "com.github.openshift.api.console.v1.ConsolePluginProxyEndpoint": { - "description": "ConsolePluginProxyEndpoint holds information about the endpoint to which request will be proxied to.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "service": { - "description": "service is an in-cluster Service that the plugin will connect to. The Service must use HTTPS. The console backend exposes an endpoint in order to proxy communication between the plugin and the Service. Note: service field is required for now, since currently only \"Service\" type is supported.", - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsolePluginProxyServiceConfig" - }, - "type": { - "description": "type is the type of the console plugin's proxy. Currently only \"Service\" is supported.", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "service": "Service" - } - } - ] - }, - "com.github.openshift.api.console.v1.ConsolePluginProxyServiceConfig": { - "description": "ProxyTypeServiceConfig holds information on Service to which console's backend will proxy the plugin's requests.", - "type": "object", - "required": [ - "name", - "namespace", - "port" - ], - "properties": { - "name": { - "description": "name of Service that the plugin needs to connect to.", - "type": "string", - "default": "" - }, - "namespace": { - "description": "namespace of Service that the plugin needs to connect to", - "type": "string", - "default": "" - }, - "port": { - "description": "port on which the Service that the plugin needs to connect to is listening on.", - "type": "integer", - "format": "int32", - "default": 0 - } - } - }, - "com.github.openshift.api.console.v1.ConsolePluginService": { - "description": "ConsolePluginService holds information on Service that is serving console dynamic plugin assets.", - "type": "object", - "required": [ - "name", - "namespace", - "port" - ], - "properties": { - "basePath": { - "description": "basePath is the path to the plugin's assets. The primary asset it the manifest file called `plugin-manifest.json`, which is a JSON document that contains metadata about the plugin and the extensions.", - "type": "string" - }, - "name": { - "description": "name of Service that is serving the plugin assets.", - "type": "string", - "default": "" - }, - "namespace": { - "description": "namespace of Service that is serving the plugin assets.", - "type": "string", - "default": "" - }, - "port": { - "description": "port on which the Service that is serving the plugin is listening to.", - "type": "integer", - "format": "int32", - "default": 0 - } - } - }, - "com.github.openshift.api.console.v1.ConsolePluginSpec": { - "description": "ConsolePluginSpec is the desired plugin configuration.", - "type": "object", - "required": [ - "displayName", - "backend" - ], - "properties": { - "backend": { - "description": "backend holds the configuration of backend which is serving console's plugin .", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsolePluginBackend" - }, - "contentSecurityPolicy": { - "description": "contentSecurityPolicy is a list of Content-Security-Policy (CSP) directives for the plugin. Each directive specifies a list of values, appropriate for the given directive type, for example a list of remote endpoints for fetch directives such as ScriptSrc. Console web application uses CSP to detect and mitigate certain types of attacks, such as cross-site scripting (XSS) and data injection attacks. Dynamic plugins should specify this field if need to load assets from outside the cluster or if violation reports are observed. Dynamic plugins should always prefer loading their assets from within the cluster, either by vendoring them, or fetching from a cluster service. CSP violation reports can be viewed in the browser's console logs during development and testing of the plugin in the OpenShift web console. Available directive types are DefaultSrc, ScriptSrc, StyleSrc, ImgSrc, FontSrc and ConnectSrc. Each of the available directives may be defined only once in the list. The value 'self' is automatically included in all fetch directives by the OpenShift web console's backend. For more information about the CSP directives, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy\n\nThe OpenShift web console server aggregates the CSP directives and values across its own default values and all enabled ConsolePlugin CRs, merging them into a single policy string that is sent to the browser via `Content-Security-Policy` HTTP response header.\n\nExample:\n ConsolePlugin A directives:\n script-src: https://script1.com/, https://script2.com/\n font-src: https://font1.com/\n\n ConsolePlugin B directives:\n script-src: https://script2.com/, https://script3.com/\n font-src: https://font2.com/\n img-src: https://img1.com/\n\n Unified set of CSP directives, passed to the OpenShift web console server:\n script-src: https://script1.com/, https://script2.com/, https://script3.com/\n font-src: https://font1.com/, https://font2.com/\n img-src: https://img1.com/\n\n OpenShift web console server CSP response header:\n Content-Security-Policy: default-src 'self'; base-uri 'self'; script-src 'self' https://script1.com/ https://script2.com/ https://script3.com/; font-src 'self' https://font1.com/ https://font2.com/; img-src 'self' https://img1.com/; style-src 'self'; frame-src 'none'; object-src 'none'", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsolePluginCSP" - }, - "x-kubernetes-list-map-keys": [ - "directive" - ], - "x-kubernetes-list-type": "map" - }, - "displayName": { - "description": "displayName is the display name of the plugin. The dispalyName should be between 1 and 128 characters.", - "type": "string", - "default": "" - }, - "i18n": { - "description": "i18n is the configuration of plugin's localization resources.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsolePluginI18n" - }, - "proxy": { - "description": "proxy is a list of proxies that describe various service type to which the plugin needs to connect to.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsolePluginProxy" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleQuickStart": { - "description": "ConsoleQuickStart is an extension for guiding user through various workflows in the OpenShift web console.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleQuickStartSpec" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleQuickStartList": { - "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleQuickStart" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleQuickStartSpec": { - "description": "ConsoleQuickStartSpec is the desired quick start configuration.", - "type": "object", - "required": [ - "displayName", - "durationMinutes", - "description", - "introduction", - "tasks" - ], - "properties": { - "accessReviewResources": { - "description": "accessReviewResources contains a list of resources that the user's access will be reviewed against in order for the user to complete the Quick Start. The Quick Start will be hidden if any of the access reviews fail.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceAttributes" - } - }, - "conclusion": { - "description": "conclusion sums up the Quick Start and suggests the possible next steps. (includes markdown)", - "type": "string" - }, - "description": { - "description": "description is the description of the Quick Start. (includes markdown)", - "type": "string", - "default": "" - }, - "displayName": { - "description": "displayName is the display name of the Quick Start.", - "type": "string", - "default": "" - }, - "durationMinutes": { - "description": "durationMinutes describes approximately how many minutes it will take to complete the Quick Start.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "icon": { - "description": "icon is a base64 encoded image that will be displayed beside the Quick Start display name. The icon should be an vector image for easy scaling. The size of the icon should be 40x40.", - "type": "string" - }, - "introduction": { - "description": "introduction describes the purpose of the Quick Start. (includes markdown)", - "type": "string", - "default": "" - }, - "nextQuickStart": { - "description": "nextQuickStart is a list of the following Quick Starts, suggested for the user to try.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "prerequisites": { - "description": "prerequisites contains all prerequisites that need to be met before taking a Quick Start. (includes markdown)", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "tags": { - "description": "tags is a list of strings that describe the Quick Start.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "tasks": { - "description": "tasks is the list of steps the user has to perform to complete the Quick Start.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleQuickStartTask" - } - } - } - }, - "com.github.openshift.api.console.v1.ConsoleQuickStartTask": { - "description": "ConsoleQuickStartTask is a single step in a Quick Start.", - "type": "object", - "required": [ - "title", - "description" - ], - "properties": { - "description": { - "description": "description describes the steps needed to complete the task. (includes markdown)", - "type": "string", - "default": "" - }, - "review": { - "description": "review contains instructions to validate the task is complete. The user will select 'Yes' or 'No'. using a radio button, which indicates whether the step was completed successfully.", - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleQuickStartTaskReview" - }, - "summary": { - "description": "summary contains information about the passed step.", - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleQuickStartTaskSummary" - }, - "title": { - "description": "title describes the task and is displayed as a step heading.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleQuickStartTaskReview": { - "description": "ConsoleQuickStartTaskReview contains instructions that validate a task was completed successfully.", - "type": "object", - "required": [ - "instructions", - "failedTaskHelp" - ], - "properties": { - "failedTaskHelp": { - "description": "failedTaskHelp contains suggestions for a failed task review and is shown at the end of task. (includes markdown)", - "type": "string", - "default": "" - }, - "instructions": { - "description": "instructions contains steps that user needs to take in order to validate his work after going through a task. (includes markdown)", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleQuickStartTaskSummary": { - "description": "ConsoleQuickStartTaskSummary contains information about a passed step.", - "type": "object", - "required": [ - "success", - "failed" - ], - "properties": { - "failed": { - "description": "failed briefly describes the unsuccessfully passed task. (includes markdown)", - "type": "string", - "default": "" - }, - "success": { - "description": "success describes the succesfully passed task.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleSample": { - "description": "ConsoleSample is an extension to customizing OpenShift web console by adding samples.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec contains configuration for a console sample.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleSampleSpec" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleSampleContainerImportSource": { - "description": "ConsoleSampleContainerImportSource let the user import a container image.", - "type": "object", - "required": [ - "image" - ], - "properties": { - "image": { - "description": "reference to a container image that provides a HTTP service. The service must be exposed on the default port (8080) unless otherwise configured with the port field.\n\nSupported formats:\n - /\n - docker.io//\n - quay.io//\n - quay.io//@sha256:\n - quay.io//:", - "type": "string", - "default": "" - }, - "service": { - "description": "service contains configuration for the Service resource created for this sample.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleSampleContainerImportSourceService" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleSampleContainerImportSourceService": { - "description": "ConsoleSampleContainerImportSourceService let the samples author define defaults for the Service created for this sample.", - "type": "object", - "properties": { - "targetPort": { - "description": "targetPort is the port that the service listens on for HTTP requests. This port will be used for Service and Route created for this sample. Port must be in the range 1 to 65535. Default port is 8080.", - "type": "integer", - "format": "int32" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleSampleGitImportSource": { - "description": "ConsoleSampleGitImportSource let the user import code from a public Git repository.", - "type": "object", - "required": [ - "repository" - ], - "properties": { - "repository": { - "description": "repository contains the reference to the actual Git repository.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleSampleGitImportSourceRepository" - }, - "service": { - "description": "service contains configuration for the Service resource created for this sample.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleSampleGitImportSourceService" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleSampleGitImportSourceRepository": { - "description": "ConsoleSampleGitImportSourceRepository let the user import code from a public git repository.", - "type": "object", - "required": [ - "url" - ], - "properties": { - "contextDir": { - "description": "contextDir is used to specify a directory within the repository to build the component. Must start with `/` and have a maximum length of 256 characters. When omitted, the default value is to build from the root of the repository.", - "type": "string", - "default": "" - }, - "revision": { - "description": "revision is the git revision at which to clone the git repository Can be used to clone a specific branch, tag or commit SHA. Must be at most 256 characters in length. When omitted the repository's default branch is used.", - "type": "string", - "default": "" - }, - "url": { - "description": "url of the Git repository that contains a HTTP service. The HTTP service must be exposed on the default port (8080) unless otherwise configured with the port field.\n\nOnly public repositories on GitHub, GitLab and Bitbucket are currently supported:\n\n - https://github.com//\n - https://gitlab.com//\n - https://bitbucket.org//\n\nThe url must have a maximum length of 256 characters.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleSampleGitImportSourceService": { - "description": "ConsoleSampleGitImportSourceService let the samples author define defaults for the Service created for this sample.", - "type": "object", - "properties": { - "targetPort": { - "description": "targetPort is the port that the service listens on for HTTP requests. This port will be used for Service created for this sample. Port must be in the range 1 to 65535. Default port is 8080.", - "type": "integer", - "format": "int32" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleSampleList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleSample" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleSampleSource": { - "description": "ConsoleSampleSource is the actual sample definition and can hold different sample types. Unsupported sample types will be ignored in the web console.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "containerImport": { - "description": "containerImport allows the user import a container image.", - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleSampleContainerImportSource" - }, - "gitImport": { - "description": "gitImport allows the user to import code from a git repository.", - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleSampleGitImportSource" - }, - "type": { - "description": "type of the sample, currently supported: \"GitImport\";\"ContainerImport\"\n\nPossible enum values:\n - `\"ContainerImport\"` A sample that let the user import a container image.\n - `\"GitImport\"` A sample that let the user import code from a git repository.", - "type": "string", - "default": "", - "enum": [ - "ContainerImport", - "GitImport" - ] - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "containerImport": "ContainerImport", - "gitImport": "GitImport" - } - } - ] - }, - "com.github.openshift.api.console.v1.ConsoleSampleSpec": { - "description": "ConsoleSampleSpec is the desired sample for the web console. Samples will appear with their title, descriptions and a badge in a samples catalog.", - "type": "object", - "required": [ - "title", - "abstract", - "description", - "source" - ], - "properties": { - "abstract": { - "description": "abstract is a short introduction to the sample.\n\nIt is required and must be no more than 100 characters in length.\n\nThe abstract is shown on the sample card tile below the title and provider and is limited to three lines of content.", - "type": "string", - "default": "" - }, - "description": { - "description": "description is a long form explanation of the sample.\n\nIt is required and can have a maximum length of **4096** characters.\n\nIt is a README.md-like content for additional information, links, pre-conditions, and other instructions. It will be rendered as Markdown so that it can contain line breaks, links, and other simple formatting.", - "type": "string", - "default": "" - }, - "icon": { - "description": "icon is an optional base64 encoded image and shown beside the sample title.\n\nThe format must follow the data: URL format and can have a maximum size of **10 KB**.\n\n data:[][;base64],\n\nFor example:\n\n data:image;base64, plus the base64 encoded image.\n\nVector images can also be used. SVG icons must start with:\n\n data:image/svg+xml;base64, plus the base64 encoded SVG image.\n\nAll sample catalog icons will be shown on a white background (also when the dark theme is used). The web console ensures that different aspect ratios work correctly. Currently, the surface of the icon is at most 40x100px.\n\nFor more information on the data URL format, please visit https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/Data_URLs.", - "type": "string", - "default": "" - }, - "provider": { - "description": "provider is an optional label to honor who provides the sample.\n\nIt is optional and must be no more than 50 characters in length.\n\nA provider can be a company like \"Red Hat\" or an organization like \"CNCF\" or \"Knative\".\n\nCurrently, the provider is only shown on the sample card tile below the title with the prefix \"Provided by \"", - "type": "string", - "default": "" - }, - "source": { - "description": "source defines where to deploy the sample service from. The sample may be sourced from an external git repository or container image.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleSampleSource" - }, - "tags": { - "description": "tags are optional string values that can be used to find samples in the samples catalog.\n\nExamples of common tags may be \"Java\", \"Quarkus\", etc.\n\nThey will be displayed on the samples details page.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "title": { - "description": "title is the display name of the sample.\n\nIt is required and must be no more than 50 characters in length.", - "type": "string", - "default": "" - }, - "type": { - "description": "type is an optional label to group multiple samples.\n\nIt is optional and must be no more than 20 characters in length.\n\nRecommendation is a singular term like \"Builder Image\", \"Devfile\" or \"Serverless Function\".\n\nCurrently, the type is shown a badge on the sample card tile in the top right corner.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleYAMLSample": { - "description": "ConsoleYAMLSample is an extension for customizing OpenShift web console YAML samples.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleYAMLSampleSpec" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleYAMLSampleList": { - "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.console.v1.ConsoleYAMLSample" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.console.v1.ConsoleYAMLSampleSpec": { - "description": "ConsoleYAMLSampleSpec is the desired YAML sample configuration. Samples will appear with their descriptions in a samples sidebar when creating a resources in the web console.", - "type": "object", - "required": [ - "targetResource", - "title", - "description", - "yaml" - ], - "properties": { - "description": { - "description": "description of the YAML sample.", - "type": "string", - "default": "" - }, - "snippet": { - "description": "snippet indicates that the YAML sample is not the full YAML resource definition, but a fragment that can be inserted into the existing YAML document at the user's cursor.", - "type": "boolean", - "default": false - }, - "targetResource": { - "description": "targetResource contains apiVersion and kind of the resource YAML sample is representating.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.TypeMeta" - }, - "title": { - "description": "title of the YAML sample.", - "type": "string", - "default": "" - }, - "yaml": { - "description": "yaml is the YAML sample to display.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.console.v1.Link": { - "description": "Represents a standard link that could be generated in HTML", - "type": "object", - "required": [ - "text", - "href" - ], - "properties": { - "href": { - "description": "href is the absolute URL for the link. Must use https:// for web URLs or mailto: for email links.", - "type": "string", - "default": "" - }, - "text": { - "description": "text is the display text for the link", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.console.v1.NamespaceDashboardSpec": { - "description": "NamespaceDashboardSpec is a specification of namespaces in which the dashboard link should appear. If both namespaces and namespaceSelector are specified, the link will appear in namespaces that match either", - "type": "object", - "properties": { - "namespaceSelector": { - "description": "namespaceSelector is used to select the Namespaces that should contain dashboard link by label. If the namespace labels match, dashboard link will be shown for the namespaces.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "namespaces": { - "description": "namespaces is an array of namespace names in which the dashboard link should appear.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.etcd.v1.PacemakerCluster": { - "description": "PacemakerCluster represents the current state of the pacemaker cluster as reported by the pcs status command. PacemakerCluster is a cluster-scoped singleton resource. The name of this instance is \"cluster\". This resource provides a view into the health and status of a pacemaker-managed cluster in Two Node OpenShift with Fencing deployments.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "status": { - "description": "status contains the actual pacemaker cluster status information collected from the cluster. The goal of this status is to be able to quickly identify if pacemaker is in a healthy state. In Two Node OpenShift with Fencing, a healthy pacemaker cluster has 2 nodes, both of which have healthy kubelet, etcd, and fencing resources. This field is optional on creation - the status collector populates it immediately after creating the resource via the status subresource.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.etcd.v1.PacemakerClusterStatus" - } - } - }, - "com.github.openshift.api.etcd.v1.PacemakerClusterFencingAgentStatus": { - "description": "PacemakerClusterFencingAgentStatus represents the status of a fencing agent that can fence a node. Fencing agents are STONITH (Shoot The Other Node In The Head) devices used to isolate failed nodes. Unlike regular pacemaker resources, fencing agents are mapped to their target node (the node they can fence), not the node where their monitoring operations are scheduled.", - "type": "object", - "required": [ - "conditions", - "name", - "method" - ], - "properties": { - "conditions": { - "description": "conditions represent the observations of the fencing agent's current state. Known condition types are: \"Healthy\", \"InService\", \"Managed\", \"Enabled\", \"Operational\", \"Active\", \"Started\", \"Schedulable\". The \"Healthy\" condition is an aggregate that tracks the overall health of the fencing agent. The \"InService\" condition tracks whether the fencing agent is in service (not in maintenance mode). The \"Managed\" condition tracks whether the fencing agent is managed by pacemaker. The \"Enabled\" condition tracks whether the fencing agent is enabled. The \"Operational\" condition tracks whether the fencing agent is operational (not failed). The \"Active\" condition tracks whether the fencing agent is active (available to be used). The \"Started\" condition tracks whether the fencing agent is started. The \"Schedulable\" condition tracks whether the fencing agent is schedulable (not blocked). Each of these conditions is required, so the array must contain at least 8 items.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "method": { - "description": "method is the fencing method used by this agent. Valid values are \"Redfish\" and \"IPMI\". Redfish is a standard RESTful API for server management. IPMI (Intelligent Platform Management Interface) is a hardware management interface.\n\nPossible enum values:\n - `\"IPMI\"` uses IPMI (Intelligent Platform Management Interface), a hardware management interface.\n - `\"Redfish\"` uses Redfish, a standard RESTful API for server management.", - "type": "string", - "enum": [ - "IPMI", - "Redfish" - ] - }, - "name": { - "description": "name is the unique identifier for this fencing agent (e.g., \"master-0_redfish\"). The name must be unique within the fencingAgents array for this node. It may contain alphanumeric characters, dots, hyphens, and underscores. Maximum length is 300 characters, providing headroom beyond the typical format of _ (253 for RFC 1123 node name + 1 underscore + type).", - "type": "string" - } - } - }, - "com.github.openshift.api.etcd.v1.PacemakerClusterList": { - "description": "PacemakerClusterList contains a list of PacemakerCluster objects. PacemakerCluster is a cluster-scoped singleton resource; only one instance named \"cluster\" may exist. This list type exists only to satisfy Kubernetes API conventions.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of PacemakerCluster objects.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.etcd.v1.PacemakerCluster" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.etcd.v1.PacemakerClusterNodeStatus": { - "description": "PacemakerClusterNodeStatus represents the status of a single node in the pacemaker cluster including the node's conditions and the health of critical resources running on that node.", - "type": "object", - "required": [ - "conditions", - "nodeName", - "addresses", - "resources", - "fencingAgents" - ], - "properties": { - "addresses": { - "description": "addresses is a list of IP addresses for the node. Pacemaker allows multiple IP addresses for Corosync communication between nodes. The first address in this list is used for IP-based peer URLs for etcd membership. Each address must be a valid global unicast IPv4 or IPv6 address in canonical form (e.g., \"192.168.1.1\" not \"192.168.001.001\", or \"2001:db8::1\" not \"2001:0db8::1\"). This excludes loopback, link-local, and multicast addresses.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.etcd.v1.PacemakerNodeAddress" - }, - "x-kubernetes-list-type": "atomic" - }, - "conditions": { - "description": "conditions represent the observations of the node's current state. Known condition types are: \"Healthy\", \"Online\", \"InService\", \"Active\", \"Ready\", \"Clean\", \"Member\", \"FencingAvailable\", \"FencingHealthy\". The \"Healthy\" condition is an aggregate that tracks the overall health of the node. The \"Online\" condition tracks whether the node is online. The \"InService\" condition tracks whether the node is in service (not in maintenance mode). The \"Active\" condition tracks whether the node is active (not in standby mode). The \"Ready\" condition tracks whether the node is ready (not in a pending state). The \"Clean\" condition tracks whether the node is in a clean (status known) state. The \"Member\" condition tracks whether the node is a member of the cluster. The \"FencingAvailable\" condition tracks whether this node can be fenced by at least one healthy agent. The \"FencingHealthy\" condition tracks whether all fencing agents for this node are healthy. Each of these conditions is required, so the array must contain at least 9 items.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "fencingAgents": { - "description": "fencingAgents contains the status of fencing agents that can fence this node. Unlike resources (which are scheduled to run on this node), fencing agents are mapped to the node they can fence (their target), not the node where monitoring operations run. Each fencing agent entry includes a unique name, fencing type, target node, and health conditions. A node is considered fence-capable if at least one fencing agent is healthy. A healthy node is expected to have at least 1 fencing agent, but the list may be empty when fencing agent discovery fails. Names must be unique within this array.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.etcd.v1.PacemakerClusterFencingAgentStatus" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "nodeName": { - "description": "nodeName is the name of the node. This is expected to match the Kubernetes node's name, which must be a lowercase RFC 1123 subdomain consisting of lowercase alphanumeric characters, '-' or '.', starting and ending with an alphanumeric character, and be at most 253 characters in length.", - "type": "string" - }, - "resources": { - "description": "resources contains the status of pacemaker resources scheduled on this node. Each resource entry includes the resource name and its health conditions. For Two Node OpenShift with Fencing, we track Kubelet and Etcd resources per node. Both resources are required to be present, so the array must contain at least 2 items. Valid resource names are \"Kubelet\" and \"Etcd\". Fencing agents are tracked separately in the fencingAgents field.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.etcd.v1.PacemakerClusterResourceStatus" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.etcd.v1.PacemakerClusterResourceStatus": { - "description": "PacemakerClusterResourceStatus represents the status of a pacemaker resource scheduled on a node. A pacemaker resource is a unit of work managed by pacemaker. In pacemaker terminology, resources are services or applications that pacemaker monitors, starts, stops, and moves between nodes to maintain high availability. For Two Node OpenShift with Fencing, we track two resources per node:\n - Kubelet (the Kubernetes node agent and a prerequisite for etcd)\n - Etcd (the distributed key-value store)\n\nFencing agents are tracked separately in the fencingAgents field because they are mapped to their target node (the node they can fence), not the node where monitoring operations are scheduled.", - "type": "object", - "required": [ - "conditions", - "name" - ], - "properties": { - "conditions": { - "description": "conditions represent the observations of the resource's current state. Known condition types are: \"Healthy\", \"InService\", \"Managed\", \"Enabled\", \"Operational\", \"Active\", \"Started\", \"Schedulable\". The \"Healthy\" condition is an aggregate that tracks the overall health of the resource. The \"InService\" condition tracks whether the resource is in service (not in maintenance mode). The \"Managed\" condition tracks whether the resource is managed by pacemaker. The \"Enabled\" condition tracks whether the resource is enabled. The \"Operational\" condition tracks whether the resource is operational (not failed). The \"Active\" condition tracks whether the resource is active (available to be used). The \"Started\" condition tracks whether the resource is started. The \"Schedulable\" condition tracks whether the resource is schedulable (not blocked). Each of these conditions is required, so the array must contain at least 8 items.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "name": { - "description": "name is the name of the pacemaker resource. Valid values are \"Kubelet\" and \"Etcd\". The Kubelet resource is a prerequisite for etcd in Two Node OpenShift with Fencing deployments. The Etcd resource may temporarily transition to stopped during pacemaker quorum-recovery operations. Fencing agents are tracked separately in the node's fencingAgents field.\n\nPossible enum values:\n - `\"Etcd\"` is the etcd pacemaker resource. The etcd resource may temporarily transition to stopped during pacemaker quorum-recovery operations.\n - `\"Kubelet\"` is the kubelet pacemaker resource. The kubelet resource is a prerequisite for etcd in Two Node OpenShift with Fencing deployments.", - "type": "string", - "enum": [ - "Etcd", - "Kubelet" - ] - } - } - }, - "com.github.openshift.api.etcd.v1.PacemakerClusterStatus": { - "description": "PacemakerClusterStatus contains the actual pacemaker cluster status information. As part of validating the status object, we need to ensure that the lastUpdated timestamp may not be set to an earlier timestamp than the current value. The validation rule checks if oldSelf has lastUpdated before comparing, to handle the initial status creation case.", - "type": "object", - "required": [ - "conditions", - "lastUpdated", - "nodes" - ], - "properties": { - "conditions": { - "description": "conditions represent the observations of the pacemaker cluster's current state. Known condition types are: \"Healthy\", \"InService\", \"NodeCountAsExpected\". The \"Healthy\" condition is an aggregate that tracks the overall health of the cluster. The \"InService\" condition tracks whether the cluster is in service (not in maintenance mode). The \"NodeCountAsExpected\" condition tracks whether the expected number of nodes are present. Each of these conditions is required, so the array must contain at least 3 items.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "lastUpdated": { - "description": "lastUpdated is the timestamp when this status was last updated. This is useful for identifying stale status reports. It must be a valid timestamp in RFC3339 format. Once set, this field cannot be removed and cannot be set to an earlier timestamp than the current value.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "nodes": { - "description": "nodes provides detailed status for each control-plane node in the Pacemaker cluster. While Pacemaker supports up to 32 nodes, the limit is set to 5 (max OpenShift control-plane nodes). For Two Node OpenShift with Fencing, exactly 2 nodes are expected in a healthy cluster. An empty list indicates a catastrophic failure where Pacemaker reports no nodes.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.etcd.v1.PacemakerClusterNodeStatus" - }, - "x-kubernetes-list-map-keys": [ - "nodeName" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.etcd.v1.PacemakerNodeAddress": { - "description": "PacemakerNodeAddress contains information for a node's address. This is similar to corev1.NodeAddress but adds validation for IP addresses.", - "type": "object", - "required": [ - "type", - "address" - ], - "properties": { - "address": { - "description": "address is the node address. For InternalIP, this must be a valid global unicast IPv4 or IPv6 address in canonical form. Canonical form means the shortest standard representation (e.g., \"192.168.1.1\" not \"192.168.001.001\", or \"2001:db8::1\" not \"2001:0db8::1\"). Maximum length is 39 characters (full IPv6 address). Global unicast includes private/RFC1918 addresses but excludes loopback, link-local, and multicast.", - "type": "string" - }, - "type": { - "description": "type is the type of node address. Currently only \"InternalIP\" is supported.\n\nPossible enum values:\n - `\"InternalIP\"` is an internal IP address assigned to the node. This is typically the IP address used for intra-cluster communication.", - "type": "string", - "enum": [ - "InternalIP" - ] - } - } - }, - "com.github.openshift.api.etcd.v1alpha1.PacemakerCluster": { - "description": "PacemakerCluster represents the current state of the pacemaker cluster as reported by the pcs status command. PacemakerCluster is a cluster-scoped singleton resource. The name of this instance is \"cluster\". This resource provides a view into the health and status of a pacemaker-managed cluster in Two Node OpenShift with Fencing deployments.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "metadata" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "status": { - "description": "status contains the actual pacemaker cluster status information collected from the cluster. The goal of this status is to be able to quickly identify if pacemaker is in a healthy state. In Two Node OpenShift with Fencing, a healthy pacemaker cluster has 2 nodes, both of which have healthy kubelet, etcd, and fencing resources. This field is optional on creation - the status collector populates it immediately after creating the resource via the status subresource.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.etcd.v1alpha1.PacemakerClusterStatus" - } - } - }, - "com.github.openshift.api.etcd.v1alpha1.PacemakerClusterFencingAgentStatus": { - "description": "PacemakerClusterFencingAgentStatus represents the status of a fencing agent that can fence a node. Fencing agents are STONITH (Shoot The Other Node In The Head) devices used to isolate failed nodes. Unlike regular pacemaker resources, fencing agents are mapped to their target node (the node they can fence), not the node where their monitoring operations are scheduled.", - "type": "object", - "required": [ - "conditions", - "name", - "method" - ], - "properties": { - "conditions": { - "description": "conditions represent the observations of the fencing agent's current state. Known condition types are: \"Healthy\", \"InService\", \"Managed\", \"Enabled\", \"Operational\", \"Active\", \"Started\", \"Schedulable\". The \"Healthy\" condition is an aggregate that tracks the overall health of the fencing agent. The \"InService\" condition tracks whether the fencing agent is in service (not in maintenance mode). The \"Managed\" condition tracks whether the fencing agent is managed by pacemaker. The \"Enabled\" condition tracks whether the fencing agent is enabled. The \"Operational\" condition tracks whether the fencing agent is operational (not failed). The \"Active\" condition tracks whether the fencing agent is active (available to be used). The \"Started\" condition tracks whether the fencing agent is started. The \"Schedulable\" condition tracks whether the fencing agent is schedulable (not blocked). Each of these conditions is required, so the array must contain at least 8 items.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "method": { - "description": "method is the fencing method used by this agent. Valid values are \"Redfish\" and \"IPMI\". Redfish is a standard RESTful API for server management. IPMI (Intelligent Platform Management Interface) is a hardware management interface.\n\nPossible enum values:\n - `\"IPMI\"` uses IPMI (Intelligent Platform Management Interface), a hardware management interface.\n - `\"Redfish\"` uses Redfish, a standard RESTful API for server management.", - "type": "string", - "enum": [ - "IPMI", - "Redfish" - ] - }, - "name": { - "description": "name is the unique identifier for this fencing agent (e.g., \"master-0_redfish\"). The name must be unique within the fencingAgents array for this node. It may contain alphanumeric characters, dots, hyphens, and underscores. Maximum length is 300 characters, providing headroom beyond the typical format of _ (253 for RFC 1123 node name + 1 underscore + type).", - "type": "string" - } - } - }, - "com.github.openshift.api.etcd.v1alpha1.PacemakerClusterList": { - "description": "PacemakerClusterList contains a list of PacemakerCluster objects. PacemakerCluster is a cluster-scoped singleton resource; only one instance named \"cluster\" may exist. This list type exists only to satisfy Kubernetes API conventions.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of PacemakerCluster objects.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.etcd.v1alpha1.PacemakerCluster" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.etcd.v1alpha1.PacemakerClusterNodeStatus": { - "description": "PacemakerClusterNodeStatus represents the status of a single node in the pacemaker cluster including the node's conditions and the health of critical resources running on that node.", - "type": "object", - "required": [ - "conditions", - "nodeName", - "addresses", - "resources", - "fencingAgents" - ], - "properties": { - "addresses": { - "description": "addresses is a list of IP addresses for the node. Pacemaker allows multiple IP addresses for Corosync communication between nodes. The first address in this list is used for IP-based peer URLs for etcd membership. Each address must be a valid global unicast IPv4 or IPv6 address in canonical form (e.g., \"192.168.1.1\" not \"192.168.001.001\", or \"2001:db8::1\" not \"2001:0db8::1\"). This excludes loopback, link-local, and multicast addresses.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.etcd.v1alpha1.PacemakerNodeAddress" - }, - "x-kubernetes-list-type": "atomic" - }, - "conditions": { - "description": "conditions represent the observations of the node's current state. Known condition types are: \"Healthy\", \"Online\", \"InService\", \"Active\", \"Ready\", \"Clean\", \"Member\", \"FencingAvailable\", \"FencingHealthy\". The \"Healthy\" condition is an aggregate that tracks the overall health of the node. The \"Online\" condition tracks whether the node is online. The \"InService\" condition tracks whether the node is in service (not in maintenance mode). The \"Active\" condition tracks whether the node is active (not in standby mode). The \"Ready\" condition tracks whether the node is ready (not in a pending state). The \"Clean\" condition tracks whether the node is in a clean (status known) state. The \"Member\" condition tracks whether the node is a member of the cluster. The \"FencingAvailable\" condition tracks whether this node can be fenced by at least one healthy agent. The \"FencingHealthy\" condition tracks whether all fencing agents for this node are healthy. Each of these conditions is required, so the array must contain at least 9 items.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "fencingAgents": { - "description": "fencingAgents contains the status of fencing agents that can fence this node. Unlike resources (which are scheduled to run on this node), fencing agents are mapped to the node they can fence (their target), not the node where monitoring operations run. Each fencing agent entry includes a unique name, fencing type, target node, and health conditions. A node is considered fence-capable if at least one fencing agent is healthy. A healthy node is expected to have at least 1 fencing agent, but the list may be empty when fencing agent discovery fails. Names must be unique within this array.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.etcd.v1alpha1.PacemakerClusterFencingAgentStatus" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "nodeName": { - "description": "nodeName is the name of the node. This is expected to match the Kubernetes node's name, which must be a lowercase RFC 1123 subdomain consisting of lowercase alphanumeric characters, '-' or '.', starting and ending with an alphanumeric character, and be at most 253 characters in length.", - "type": "string" - }, - "resources": { - "description": "resources contains the status of pacemaker resources scheduled on this node. Each resource entry includes the resource name and its health conditions. For Two Node OpenShift with Fencing, we track Kubelet and Etcd resources per node. Both resources are required to be present, so the array must contain at least 2 items. Valid resource names are \"Kubelet\" and \"Etcd\". Fencing agents are tracked separately in the fencingAgents field.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.etcd.v1alpha1.PacemakerClusterResourceStatus" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.etcd.v1alpha1.PacemakerClusterResourceStatus": { - "description": "PacemakerClusterResourceStatus represents the status of a pacemaker resource scheduled on a node. A pacemaker resource is a unit of work managed by pacemaker. In pacemaker terminology, resources are services or applications that pacemaker monitors, starts, stops, and moves between nodes to maintain high availability. For Two Node OpenShift with Fencing, we track two resources per node:\n - Kubelet (the Kubernetes node agent and a prerequisite for etcd)\n - Etcd (the distributed key-value store)\n\nFencing agents are tracked separately in the fencingAgents field because they are mapped to their target node (the node they can fence), not the node where monitoring operations are scheduled.", - "type": "object", - "required": [ - "conditions", - "name" - ], - "properties": { - "conditions": { - "description": "conditions represent the observations of the resource's current state. Known condition types are: \"Healthy\", \"InService\", \"Managed\", \"Enabled\", \"Operational\", \"Active\", \"Started\", \"Schedulable\". The \"Healthy\" condition is an aggregate that tracks the overall health of the resource. The \"InService\" condition tracks whether the resource is in service (not in maintenance mode). The \"Managed\" condition tracks whether the resource is managed by pacemaker. The \"Enabled\" condition tracks whether the resource is enabled. The \"Operational\" condition tracks whether the resource is operational (not failed). The \"Active\" condition tracks whether the resource is active (available to be used). The \"Started\" condition tracks whether the resource is started. The \"Schedulable\" condition tracks whether the resource is schedulable (not blocked). Each of these conditions is required, so the array must contain at least 8 items.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "name": { - "description": "name is the name of the pacemaker resource. Valid values are \"Kubelet\" and \"Etcd\". The Kubelet resource is a prerequisite for etcd in Two Node OpenShift with Fencing deployments. The Etcd resource may temporarily transition to stopped during pacemaker quorum-recovery operations. Fencing agents are tracked separately in the node's fencingAgents field.\n\nPossible enum values:\n - `\"Etcd\"` is the etcd pacemaker resource. The etcd resource may temporarily transition to stopped during pacemaker quorum-recovery operations.\n - `\"Kubelet\"` is the kubelet pacemaker resource. The kubelet resource is a prerequisite for etcd in Two Node OpenShift with Fencing deployments.", - "type": "string", - "enum": [ - "Etcd", - "Kubelet" - ] - } - } - }, - "com.github.openshift.api.etcd.v1alpha1.PacemakerClusterStatus": { - "description": "PacemakerClusterStatus contains the actual pacemaker cluster status information. As part of validating the status object, we need to ensure that the lastUpdated timestamp may not be set to an earlier timestamp than the current value. The validation rule checks if oldSelf has lastUpdated before comparing, to handle the initial status creation case.", - "type": "object", - "required": [ - "conditions", - "lastUpdated", - "nodes" - ], - "properties": { - "conditions": { - "description": "conditions represent the observations of the pacemaker cluster's current state. Known condition types are: \"Healthy\", \"InService\", \"NodeCountAsExpected\". The \"Healthy\" condition is an aggregate that tracks the overall health of the cluster. The \"InService\" condition tracks whether the cluster is in service (not in maintenance mode). The \"NodeCountAsExpected\" condition tracks whether the expected number of nodes are present. Each of these conditions is required, so the array must contain at least 3 items.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "lastUpdated": { - "description": "lastUpdated is the timestamp when this status was last updated. This is useful for identifying stale status reports. It must be a valid timestamp in RFC3339 format. Once set, this field cannot be removed and cannot be set to an earlier timestamp than the current value.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "nodes": { - "description": "nodes provides detailed status for each control-plane node in the Pacemaker cluster. While Pacemaker supports up to 32 nodes, the limit is set to 5 (max OpenShift control-plane nodes). For Two Node OpenShift with Fencing, exactly 2 nodes are expected in a healthy cluster. An empty list indicates a catastrophic failure where Pacemaker reports no nodes.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.etcd.v1alpha1.PacemakerClusterNodeStatus" - }, - "x-kubernetes-list-map-keys": [ - "nodeName" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.etcd.v1alpha1.PacemakerNodeAddress": { - "description": "PacemakerNodeAddress contains information for a node's address. This is similar to corev1.NodeAddress but adds validation for IP addresses.", - "type": "object", - "required": [ - "type", - "address" - ], - "properties": { - "address": { - "description": "address is the node address. For InternalIP, this must be a valid global unicast IPv4 or IPv6 address in canonical form. Canonical form means the shortest standard representation (e.g., \"192.168.1.1\" not \"192.168.001.001\", or \"2001:db8::1\" not \"2001:0db8::1\"). Maximum length is 39 characters (full IPv6 address). Global unicast includes private/RFC1918 addresses but excludes loopback, link-local, and multicast.", - "type": "string" - }, - "type": { - "description": "type is the type of node address. Currently only \"InternalIP\" is supported.\n\nPossible enum values:\n - `\"InternalIP\"` is an internal IP address assigned to the node. This is typically the IP address used for intra-cluster communication.", - "type": "string", - "enum": [ - "InternalIP" - ] - } - } - }, - "com.github.openshift.api.example.v1.CELUnion": { - "description": "CELUnion demonstrates how to use a discriminated union and how to validate it using CEL.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "optionalMember": { - "description": "optionalMember is a union member that is optional.", - "type": "string" - }, - "requiredMember": { - "description": "requiredMember is a union member that is required.", - "type": "string" - }, - "type": { - "description": "type determines which of the union members should be populated.", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "optionalMember": "OptionalMember", - "requiredMember": "RequiredMember" - } - } - ] - }, - "com.github.openshift.api.example.v1.EvolvingUnion": { - "type": "object", - "required": [ - "type" - ], - "properties": { - "type": { - "description": "type is the discriminator. It has different values for Default and for TechPreviewNoUpgrade", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.example.v1.FormatMarkerExamples": { - "description": "FormatMarkerExamples demonstrates all Kubebuilder Format markers supported as of Kubernetes 1.33. This struct provides a comprehensive reference for format marker validation. Each field uses a different format marker to validate its value.", - "type": "object", - "properties": { - "base64Data": { - "description": "base64Data must be valid base64-encoded data. Valid examples include aGVsbG8= (encodes \"hello\") or SGVsbG8gV29ybGQh (encodes \"Hello World!\").", - "type": "string" - }, - "cidrNotation": { - "description": "cidrNotation must be a valid CIDR notation IP address range. Valid examples include IPv4 CIDR (10.0.0.0/8, 192.168.1.0/24) or IPv6 CIDR (fd00::/8, 2001:db8::/32).\n\nUse of Format=cidr is not recommended due to CVE-2021-29923 and CVE-2024-24790. Instead, use the CEL expression `isCIDR(self)` to validate CIDR notation. Additionally, use `isCIDR(self) && cidr(self).ip().family() == X` to validate IPvX specifically.", - "type": "string" - }, - "dateField": { - "description": "dateField must be a valid date in RFC 3339 full-date format (YYYY-MM-DD). Valid examples include 2024-01-15 or 2023-12-31.", - "type": "string" - }, - "dateTimeField": { - "description": "dateTimeField must be a valid RFC 3339 date-time. Valid examples include 2024-01-15T14:30:00Z, 2024-01-15T14:30:00+00:00, or 2024-01-15T14:30:00.123Z.", - "type": "string" - }, - "durationField": { - "description": "durationField must be a valid duration string parseable by Go's time.ParseDuration. Valid time units are ns, us (or µs), ms, s, m, h. Valid examples include 30s, 5m, 1h30m, 100ms, or 1h.", - "type": "string" - }, - "emailAddress": { - "description": "emailAddress must be a valid email address. Valid examples include user@example.com or firstname.lastname@company.co.uk.", - "type": "string" - }, - "hostnameField": { - "description": "hostnameField must be a valid Internet hostname per RFC 1034. Valid examples include example.com, api.example.com, or my-service.", - "type": "string" - }, - "ipv4Address": { - "description": "ipv4Address must be a valid IPv4 address in dotted-quad notation. Valid values range from 0.0.0.0 to 255.255.255.255 (e.g., 192.168.1.1).\n\nUse of Format=ipv4 is not recommended due to CVE-2021-29923 and CVE-2024-24790. Instead, use the CEL expression `isIP(self) && ip(self).family() == 4` to validate IPv4 addresses.", - "type": "string" - }, - "ipv6Address": { - "description": "ipv6Address must be a valid IPv6 address. Valid examples include full form (2001:0db8:0000:0000:0000:0000:0000:0001) or compressed form (2001:db8::1 or ::1).\n\nUse of Format=ipv6 is not recommended due to CVE-2021-29923 and CVE-2024-24790. Instead, use the CEL expression `isIP(self) && ip(self).family() == 6` to validate IPv6 addresses.", - "type": "string" - }, - "macAddress": { - "description": "macAddress must be a valid MAC address. Valid examples include 00:1A:2B:3C:4D:5E or 00-1A-2B-3C-4D-5E.", - "type": "string" - }, - "passwordField": { - "description": "passwordField is a marker for sensitive data. Note that the password format marker does not perform any actual validation - it accepts any string value. This marker is primarily used to signal that the field contains sensitive information.", - "type": "string" - }, - "uriField": { - "description": "uriField must be a valid URI following RFC 3986 syntax. Valid examples include https://example.com/path?query=value or /absolute-path.", - "type": "string" - }, - "uuid3Field": { - "description": "uuid3Field must be a valid UUID version 3 (MD5 hash-based). Version 3 UUIDs are generated using MD5 hashing of a namespace and name. Valid example: a3bb189e-8bf9-3888-9912-ace4e6543002.", - "type": "string" - }, - "uuid4Field": { - "description": "uuid4Field must be a valid UUID version 4 (random). Version 4 UUIDs are randomly generated. Valid example: 550e8400-e29b-41d4-a716-446655440000.", - "type": "string" - }, - "uuid5Field": { - "description": "uuid5Field must be a valid UUID version 5 (SHA-1 hash-based). Version 5 UUIDs are generated using SHA-1 hashing of a namespace and name. Valid example: 74738ff5-5367-5958-9aee-98fffdcd1876.", - "type": "string" - }, - "uuidField": { - "description": "uuidField must be a valid UUID (any version) in 8-4-4-4-12 format. Valid examples include 550e8400-e29b-41d4-a716-446655440000 or 123e4567-e89b-12d3-a456-426614174000.", - "type": "string" - } - } - }, - "com.github.openshift.api.example.v1.StableConfigType": { - "description": "StableConfigType is a stable config type that may include TechPreviewNoUpgrade fields.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the specification of the desired behavior of the StableConfigType.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.example.v1.StableConfigTypeSpec" - }, - "status": { - "description": "status is the most recently observed status of the StableConfigType.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.example.v1.StableConfigTypeStatus" - } - } - }, - "com.github.openshift.api.example.v1.StableConfigTypeList": { - "description": "StableConfigTypeList contains a list of StableConfigTypes.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.example.v1.StableConfigType" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.example.v1.StableConfigTypeSpec": { - "description": "StableConfigTypeSpec is the desired state", - "type": "object", - "required": [ - "immutableField" - ], - "properties": { - "celUnion": { - "description": "celUnion demonstrates how to validate a discrminated union using CEL", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.example.v1.CELUnion" - }, - "coolNewField": { - "description": "coolNewField is a field that is for tech preview only. On normal clusters this shouldn't be present", - "type": "string", - "default": "" - }, - "evolvingCollection": { - "description": "evolvingCollection demonstrates how to have a collection where the maximum number of items varies on cluster type. For default clusters, this will be \"1\" but on TechPreview clusters, this value will be \"3\".", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "evolvingUnion": { - "description": "evolvingUnion demonstrates how to phase in new values into discriminated union", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.example.v1.EvolvingUnion" - }, - "formatMarkerExamples": { - "description": "formatMarkerExamples demonstrates all Kubebuilder Format markers supported as of Kubernetes 1.33. This field serves as a comprehensive reference for format marker validation.", - "$ref": "#/definitions/com.github.openshift.api.example.v1.FormatMarkerExamples" - }, - "immutableField": { - "description": "immutableField is a field that is immutable once the object has been created. It is required at all times.", - "type": "string", - "default": "" - }, - "nonZeroDefault": { - "description": "nonZeroDefault is a demonstration of creating an integer field that has a non zero default. It required two default tags (one for CRD generation, one for client generation) and must have `omitempty` and be optional. A minimum value is added to demonstrate that a zero value would not be accepted.", - "type": "integer", - "format": "int32", - "default": 8 - }, - "optionalImmutableField": { - "description": "optionalImmutableField is a field that is immutable once set. It is optional but may not be changed once set.", - "type": "string", - "default": "" - }, - "set": { - "description": "set demonstrates how to define and validate set of strings", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "stableField": { - "description": "stableField is a field that is present on default clusters and on tech preview clusters\n\nIf empty, the platform will choose a good default, which may change over time without notice.", - "type": "string", - "default": "" - }, - "subdomainNameField": { - "description": "subdomainNameField represents a kubenetes name field. The intention is that it validates the name in the same way metadata.Name is validated. That is, it is a DNS-1123 subdomain.", - "type": "string" - }, - "subnetsWithExclusions": { - "description": "subnetsWithExclusions demonstrates how to validate a list of subnets with exclusions", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.example.v1.SubnetsWithExclusions" - } - } - }, - "com.github.openshift.api.example.v1.StableConfigTypeStatus": { - "description": "StableConfigTypeStatus defines the observed status of the StableConfigType.", - "type": "object", - "properties": { - "conditions": { - "description": "Represents the observations of a foo's current state. Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\"", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "immutableField": { - "description": "immutableField is a field that is immutable once the object has been created. It is required at all times.", - "type": "string" - } - } - }, - "com.github.openshift.api.example.v1.SubnetsWithExclusions": { - "description": "SubnetsWithExclusions is used to validate a list of subnets with exclusions. It demonstrates how exclusions should be validated as subnetworks of the networks listed in the subnets field.", - "type": "object", - "required": [ - "subnets" - ], - "properties": { - "excludeSubnets": { - "description": "excludeSubnets is a list of CIDR exclusions. The subnets in this list must be subnetworks of the subnets in the subnets list.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "subnets": { - "description": "subnets is a list of subnets. It may contain up to 2 subnets. The list may be either 1 IPv4 subnet, 1 IPv6 subnet, or 1 of each.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.example.v1alpha1.NotStableConfigType": { - "description": "NotStableConfigType is a stable config type that is TechPreviewNoUpgrade only.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the specification of the desired behavior of the NotStableConfigType.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.example.v1alpha1.NotStableConfigTypeSpec" - }, - "status": { - "description": "status is the most recently observed status of the NotStableConfigType.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.example.v1alpha1.NotStableConfigTypeStatus" - } - } - }, - "com.github.openshift.api.example.v1alpha1.NotStableConfigTypeList": { - "description": "NotStableConfigTypeList contains a list of NotStableConfigTypes.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.example.v1alpha1.NotStableConfigType" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.example.v1alpha1.NotStableConfigTypeSpec": { - "description": "NotStableConfigTypeSpec is the desired state", - "type": "object", - "required": [ - "newField" - ], - "properties": { - "newField": { - "description": "newField is a field that is tech preview, but because the entire type is gated, there is no marker on the field.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.example.v1alpha1.NotStableConfigTypeStatus": { - "description": "NotStableConfigTypeStatus defines the observed status of the NotStableConfigType.", - "type": "object", - "properties": { - "conditions": { - "description": "Represents the observations of a foo's current state. Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\"", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.helm.v1beta1.ConnectionConfig": { - "type": "object", - "required": [ - "url" - ], - "properties": { - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca-bundle.crt\" is used to locate the data. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "tlsClientConfig": { - "description": "tlsClientConfig is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate and private key to present when connecting to the server. The key \"tls.crt\" is used to locate the client certificate. The key \"tls.key\" is used to locate the private key. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - }, - "url": { - "description": "Chart repository URL", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.helm.v1beta1.ConnectionConfigNamespaceScoped": { - "type": "object", - "required": [ - "url" - ], - "properties": { - "basicAuthConfig": { - "description": "basicAuthConfig is an optional reference to a secret by name that contains the basic authentication credentials to present when connecting to the server. The key \"username\" is used locate the username. The key \"password\" is used to locate the password. The namespace for this secret must be same as the namespace where the project helm chart repository is getting instantiated.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - }, - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca-bundle.crt\" is used to locate the data. If empty, the default system roots are used. The namespace for this configmap must be same as the namespace where the project helm chart repository is getting instantiated.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "tlsClientConfig": { - "description": "tlsClientConfig is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate and private key to present when connecting to the server. The key \"tls.crt\" is used to locate the client certificate. The key \"tls.key\" is used to locate the private key. The namespace for this secret must be same as the namespace where the project helm chart repository is getting instantiated.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - }, - "url": { - "description": "Chart repository URL", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.helm.v1beta1.HelmChartRepository": { - "description": "HelmChartRepository holds cluster-wide configuration for proxied Helm chart repository\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.helm.v1beta1.HelmChartRepositorySpec" - }, - "status": { - "description": "Observed status of the repository within the cluster..", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.helm.v1beta1.HelmChartRepositoryStatus" - } - } - }, - "com.github.openshift.api.helm.v1beta1.HelmChartRepositoryList": { - "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.helm.v1beta1.HelmChartRepository" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.helm.v1beta1.HelmChartRepositorySpec": { - "description": "Helm chart repository exposed within the cluster", - "type": "object", - "required": [ - "connectionConfig" - ], - "properties": { - "connectionConfig": { - "description": "Required configuration for connecting to the chart repo", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.helm.v1beta1.ConnectionConfig" - }, - "description": { - "description": "Optional human readable repository description, it can be used by UI for displaying purposes", - "type": "string" - }, - "disabled": { - "description": "If set to true, disable the repo usage in the cluster/namespace", - "type": "boolean" - }, - "name": { - "description": "Optional associated human readable repository name, it can be used by UI for displaying purposes", - "type": "string" - } - } - }, - "com.github.openshift.api.helm.v1beta1.HelmChartRepositoryStatus": { - "type": "object", - "properties": { - "conditions": { - "description": "conditions is a list of conditions and their statuses", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.helm.v1beta1.ProjectHelmChartRepository": { - "description": "ProjectHelmChartRepository holds namespace-wide configuration for proxied Helm chart repository\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.helm.v1beta1.ProjectHelmChartRepositorySpec" - }, - "status": { - "description": "Observed status of the repository within the namespace..", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.helm.v1beta1.HelmChartRepositoryStatus" - } - } - }, - "com.github.openshift.api.helm.v1beta1.ProjectHelmChartRepositoryList": { - "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.helm.v1beta1.ProjectHelmChartRepository" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.helm.v1beta1.ProjectHelmChartRepositorySpec": { - "description": "Project Helm chart repository exposed within a namespace", - "type": "object", - "required": [ - "connectionConfig" - ], - "properties": { - "connectionConfig": { - "description": "Required configuration for connecting to the chart repo", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.helm.v1beta1.ConnectionConfigNamespaceScoped" - }, - "description": { - "description": "Optional human readable repository description, it can be used by UI for displaying purposes", - "type": "string" - }, - "disabled": { - "description": "If set to true, disable the repo usage in the namespace", - "type": "boolean" - }, - "name": { - "description": "Optional associated human readable repository name, it can be used by UI for displaying purposes", - "type": "string" - } - } - }, - "com.github.openshift.api.image.v1.DockerImageReference": { - "description": "DockerImageReference points to a container image.", - "type": "object", - "required": [ - "Registry", - "Namespace", - "Name", - "Tag", - "ID" - ], - "properties": { - "ID": { - "description": "ID is the identifier for the container image", - "type": "string", - "default": "" - }, - "Name": { - "description": "Name is the name of the container image", - "type": "string", - "default": "" - }, - "Namespace": { - "description": "Namespace is the namespace that contains the container image", - "type": "string", - "default": "" - }, - "Registry": { - "description": "Registry is the registry that contains the container image", - "type": "string", - "default": "" - }, - "Tag": { - "description": "Tag is which tag of the container image is being referenced", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.image.v1.Image": { - "description": "Image is an immutable representation of a container image and its metadata at a point in time. Images are named by taking a hash of their contents (metadata and content) and any change in format, content, or metadata results in a new name. The images resource is primarily for use by cluster administrators and integrations like the cluster image registry - end users, instead, access images via the imagestreamtags or imagestreamimages resources. While image metadata is stored in the API, any integration that implements the container image registry API must provide its own storage for the raw manifest data, image config, and layer contents.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "dockerImageConfig": { - "description": "dockerImageConfig is a JSON blob that the runtime uses to set up the container. This is a part of manifest schema v2. Will not be set when the image represents a manifest list.", - "type": "string" - }, - "dockerImageLayers": { - "description": "dockerImageLayers represents the layers in the image. May not be set if the image does not define that data or if the image represents a manifest list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.ImageLayer" - } - }, - "dockerImageManifest": { - "description": "dockerImageManifest is the raw JSON of the manifest", - "type": "string" - }, - "dockerImageManifestMediaType": { - "description": "dockerImageManifestMediaType specifies the mediaType of manifest. This is a part of manifest schema v2.", - "type": "string" - }, - "dockerImageManifests": { - "description": "dockerImageManifests holds information about sub-manifests when the image represents a manifest list. When this field is present, no DockerImageLayers should be specified.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.ImageManifest" - } - }, - "dockerImageMetadata": { - "description": "dockerImageMetadata contains metadata about this image", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension", - "x-kubernetes-patch-strategy": "replace" - }, - "dockerImageMetadataVersion": { - "description": "dockerImageMetadataVersion conveys the version of the object, which if empty defaults to \"1.0\"", - "type": "string" - }, - "dockerImageReference": { - "description": "dockerImageReference is the string that can be used to pull this image.", - "type": "string" - }, - "dockerImageSignatures": { - "description": "dockerImageSignatures provides the signatures as opaque blobs. This is a part of manifest schema v1.", - "type": "array", - "items": { - "type": "string", - "format": "byte" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "signatures": { - "description": "signatures holds all signatures of the image.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.ImageSignature" - }, - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" - } - } - }, - "com.github.openshift.api.image.v1.ImageBlobReferences": { - "description": "ImageBlobReferences describes the blob references within an image.", - "type": "object", - "properties": { - "config": { - "description": "config, if set, is the blob that contains the image config. Some images do not have separate config blobs and this field will be set to nil if so.", - "type": "string" - }, - "imageMissing": { - "description": "imageMissing is true if the image is referenced by the image stream but the image object has been deleted from the API by an administrator. When this field is set, layers and config fields may be empty and callers that depend on the image metadata should consider the image to be unavailable for download or viewing.", - "type": "boolean", - "default": false - }, - "layers": { - "description": "layers is the list of blobs that compose this image, from base layer to top layer. All layers referenced by this array will be defined in the blobs map. Some images may have zero layers.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "manifests": { - "description": "manifests is the list of other image names that this image points to. For a single architecture image, it is empty. For a multi-arch image, it consists of the digests of single architecture images, such images shouldn't have layers nor config.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.image.v1.ImageImportSpec": { - "description": "ImageImportSpec describes a request to import a specific image.", - "type": "object", - "required": [ - "from" - ], - "properties": { - "from": { - "description": "from is the source of an image to import; only kind DockerImage is allowed", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "importPolicy": { - "description": "importPolicy is the policy controlling how the image is imported", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.TagImportPolicy" - }, - "includeManifest": { - "description": "includeManifest determines if the manifest for each image is returned in the response", - "type": "boolean" - }, - "referencePolicy": { - "description": "referencePolicy defines how other components should consume the image", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.TagReferencePolicy" - }, - "to": { - "description": "to is a tag in the current image stream to assign the imported image to, if name is not specified the default tag from from.name will be used", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - } - } - }, - "com.github.openshift.api.image.v1.ImageImportStatus": { - "description": "ImageImportStatus describes the result of an image import.", - "type": "object", - "required": [ - "status" - ], - "properties": { - "image": { - "description": "image is the metadata of that image, if the image was located", - "$ref": "#/definitions/com.github.openshift.api.image.v1.Image" - }, - "manifests": { - "description": "manifests holds sub-manifests metadata when importing a manifest list", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.Image" - } - }, - "status": { - "description": "status is the status of the image import, including errors encountered while retrieving the image", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" - }, - "tag": { - "description": "tag is the tag this image was located under, if any", - "type": "string" - } - } - }, - "com.github.openshift.api.image.v1.ImageLayer": { - "description": "ImageLayer represents a single layer of the image. Some images may have multiple layers. Some may have none.", - "type": "object", - "required": [ - "name", - "size", - "mediaType" - ], - "properties": { - "mediaType": { - "description": "mediaType of the referenced object.", - "type": "string", - "default": "" - }, - "name": { - "description": "name of the layer as defined by the underlying store.", - "type": "string", - "default": "" - }, - "size": { - "description": "size of the layer in bytes as defined by the underlying store.", - "type": "integer", - "format": "int64", - "default": 0 - } - } - }, - "com.github.openshift.api.image.v1.ImageLayerData": { - "description": "ImageLayerData contains metadata about an image layer.", - "type": "object", - "required": [ - "size", - "mediaType" - ], - "properties": { - "mediaType": { - "description": "mediaType of the referenced object.", - "type": "string", - "default": "" - }, - "size": { - "description": "size of the layer in bytes as defined by the underlying store. This field is optional if the necessary information about size is not available.", - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.image.v1.ImageList": { - "description": "ImageList is a list of Image objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of images", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.Image" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.image.v1.ImageLookupPolicy": { - "description": "ImageLookupPolicy describes how an image stream can be used to override the image references used by pods, builds, and other resources in a namespace.", - "type": "object", - "required": [ - "local" - ], - "properties": { - "local": { - "description": "local will change the docker short image references (like \"mysql\" or \"php:latest\") on objects in this namespace to the image ID whenever they match this image stream, instead of reaching out to a remote registry. The name will be fully qualified to an image ID if found. The tag's referencePolicy is taken into account on the replaced value. Only works within the current namespace.", - "type": "boolean", - "default": false - } - } - }, - "com.github.openshift.api.image.v1.ImageManifest": { - "description": "ImageManifest represents sub-manifests of a manifest list. The Digest field points to a regular Image object.", - "type": "object", - "required": [ - "digest", - "mediaType", - "manifestSize", - "architecture", - "os" - ], - "properties": { - "architecture": { - "description": "architecture specifies the supported CPU architecture, for example `amd64` or `ppc64le`.", - "type": "string", - "default": "" - }, - "digest": { - "description": "digest is the unique identifier for the manifest. It refers to an Image object.", - "type": "string", - "default": "" - }, - "manifestSize": { - "description": "manifestSize represents the size of the raw object contents, in bytes.", - "type": "integer", - "format": "int64", - "default": 0 - }, - "mediaType": { - "description": "mediaType defines the type of the manifest, possible values are application/vnd.oci.image.manifest.v1+json, application/vnd.docker.distribution.manifest.v2+json or application/vnd.docker.distribution.manifest.v1+json.", - "type": "string", - "default": "" - }, - "os": { - "description": "os specifies the operating system, for example `linux`.", - "type": "string", - "default": "" - }, - "variant": { - "description": "variant is an optional field repreenting a variant of the CPU, for example v6 to specify a particular CPU variant of the ARM CPU.", - "type": "string" - } - } - }, - "com.github.openshift.api.image.v1.ImageSignature": { - "description": "ImageSignature holds a signature of an image. It allows to verify image identity and possibly other claims as long as the signature is trusted. Based on this information it is possible to restrict runnable images to those matching cluster-wide policy. Mandatory fields should be parsed by clients doing image verification. The others are parsed from signature's content by the server. They serve just an informative purpose.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "type", - "content" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "conditions": { - "description": "conditions represent the latest available observations of a signature's current state.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.SignatureCondition" - }, - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "content": { - "description": "Required: An opaque binary string which is an image's signature.", - "type": "string", - "format": "byte" - }, - "created": { - "description": "If specified, it is the time of signature's creation.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "imageIdentity": { - "description": "A human readable string representing image's identity. It could be a product name and version, or an image pull spec (e.g. \"registry.access.redhat.com/rhel7/rhel:7.2\").", - "type": "string" - }, - "issuedBy": { - "description": "If specified, it holds information about an issuer of signing certificate or key (a person or entity who signed the signing certificate or key).", - "$ref": "#/definitions/com.github.openshift.api.image.v1.SignatureIssuer" - }, - "issuedTo": { - "description": "If specified, it holds information about a subject of signing certificate or key (a person or entity who signed the image).", - "$ref": "#/definitions/com.github.openshift.api.image.v1.SignatureSubject" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "signedClaims": { - "description": "Contains claims from the signature.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "type": { - "description": "Required: Describes a type of stored blob.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.image.v1.ImageStream": { - "description": "An ImageStream stores a mapping of tags to images, metadata overrides that are applied when images are tagged in a stream, and an optional reference to a container image repository on a registry. Users typically update the spec.tags field to point to external images which are imported from container registries using credentials in your namespace with the pull secret type, or to existing image stream tags and images which are immediately accessible for tagging or pulling. The history of images applied to a tag is visible in the status.tags field and any user who can view an image stream is allowed to tag that image into their own image streams. Access to pull images from the integrated registry is granted by having the \"get imagestreams/layers\" permission on a given image stream. Users may remove a tag by deleting the imagestreamtag resource, which causes both spec and status for that tag to be removed. Image stream history is retained until an administrator runs the prune operation, which removes references that are no longer in use. To preserve a historical image, ensure there is a tag in spec pointing to that image by its digest.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec describes the desired state of this stream", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.ImageStreamSpec" - }, - "status": { - "description": "status describes the current state of this stream", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.ImageStreamStatus" - } - } - }, - "com.github.openshift.api.image.v1.ImageStreamImage": { - "description": "ImageStreamImage represents an Image that is retrieved by image name from an ImageStream. User interfaces and regular users can use this resource to access the metadata details of a tagged image in the image stream history for viewing, since Image resources are not directly accessible to end users. A not found error will be returned if no such image is referenced by a tag within the ImageStream. Images are created when spec tags are set on an image stream that represent an image in an external registry, when pushing to the integrated registry, or when tagging an existing image from one image stream to another. The name of an image stream image is in the form \"@\", where the digest is the content addressible identifier for the image (sha256:xxxxx...). You can use ImageStreamImages as the from.kind of an image stream spec tag to reference an image exactly. The only operations supported on the imagestreamimage endpoint are retrieving the image.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "image" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "image": { - "description": "image associated with the ImageStream and image name.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.Image" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - } - } - }, - "com.github.openshift.api.image.v1.ImageStreamImport": { - "description": "The image stream import resource provides an easy way for a user to find and import container images from other container image registries into the server. Individual images or an entire image repository may be imported, and users may choose to see the results of the import prior to tagging the resulting images into the specified image stream.\n\nThis API is intended for end-user tools that need to see the metadata of the image prior to import (for instance, to generate an application from it). Clients that know the desired image can continue to create spec.tags directly into their image streams.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec", - "status" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is a description of the images that the user wishes to import", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.ImageStreamImportSpec" - }, - "status": { - "description": "status is the result of importing the image", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.ImageStreamImportStatus" - } - } - }, - "com.github.openshift.api.image.v1.ImageStreamImportSpec": { - "description": "ImageStreamImportSpec defines what images should be imported.", - "type": "object", - "required": [ - "import" - ], - "properties": { - "images": { - "description": "images are a list of individual images to import.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.ImageImportSpec" - } - }, - "import": { - "description": "import indicates whether to perform an import - if so, the specified tags are set on the spec and status of the image stream defined by the type meta.", - "type": "boolean", - "default": false - }, - "repository": { - "description": "repository is an optional import of an entire container image repository. A maximum limit on the number of tags imported this way is imposed by the server.", - "$ref": "#/definitions/com.github.openshift.api.image.v1.RepositoryImportSpec" - } - } - }, - "com.github.openshift.api.image.v1.ImageStreamImportStatus": { - "description": "ImageStreamImportStatus contains information about the status of an image stream import.", - "type": "object", - "properties": { - "images": { - "description": "images is set with the result of importing spec.images", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.ImageImportStatus" - } - }, - "import": { - "description": "import is the image stream that was successfully updated or created when 'to' was set.", - "$ref": "#/definitions/com.github.openshift.api.image.v1.ImageStream" - }, - "repository": { - "description": "repository is set if spec.repository was set to the outcome of the import", - "$ref": "#/definitions/com.github.openshift.api.image.v1.RepositoryImportStatus" - } - } - }, - "com.github.openshift.api.image.v1.ImageStreamLayers": { - "description": "ImageStreamLayers describes information about the layers referenced by images in this image stream.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "blobs", - "images" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "blobs": { - "description": "blobs is a map of blob name to metadata about the blob.", - "type": "object", - "additionalProperties": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.ImageLayerData" - } - }, - "images": { - "description": "images is a map between an image name and the names of the blobs and config that comprise the image.", - "type": "object", - "additionalProperties": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.ImageBlobReferences" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - } - } - }, - "com.github.openshift.api.image.v1.ImageStreamList": { - "description": "ImageStreamList is a list of ImageStream objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of imageStreams", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.ImageStream" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.image.v1.ImageStreamMapping": { - "description": "ImageStreamMapping represents a mapping from a single image stream tag to a container image as well as the reference to the container image stream the image came from. This resource is used by privileged integrators to create an image resource and to associate it with an image stream in the status tags field. Creating an ImageStreamMapping will allow any user who can view the image stream to tag or pull that image, so only create mappings where the user has proven they have access to the image contents directly. The only operation supported for this resource is create and the metadata name and namespace should be set to the image stream containing the tag that should be updated.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "image", - "tag" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "image": { - "description": "image is a container image.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.Image" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "tag": { - "description": "tag is a string value this image can be located with inside the stream.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.image.v1.ImageStreamSpec": { - "description": "ImageStreamSpec represents options for ImageStreams.", - "type": "object", - "properties": { - "dockerImageRepository": { - "description": "dockerImageRepository is optional, if specified this stream is backed by a container repository on this server Deprecated: This field is deprecated as of v3.7 and will be removed in a future release. Specify the source for the tags to be imported in each tag via the spec.tags.from reference instead.", - "type": "string" - }, - "lookupPolicy": { - "description": "lookupPolicy controls how other resources reference images within this namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.ImageLookupPolicy" - }, - "tags": { - "description": "tags map arbitrary string values to specific image locators", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.TagReference" - }, - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" - } - } - }, - "com.github.openshift.api.image.v1.ImageStreamStatus": { - "description": "ImageStreamStatus contains information about the state of this image stream.", - "type": "object", - "properties": { - "dockerImageRepository": { - "description": "dockerImageRepository represents the effective location this stream may be accessed at. May be empty until the server determines where the repository is located", - "type": "string", - "default": "" - }, - "publicDockerImageRepository": { - "description": "publicDockerImageRepository represents the public location from where the image can be pulled outside the cluster. This field may be empty if the administrator has not exposed the integrated registry externally.", - "type": "string" - }, - "tags": { - "description": "tags are a historical record of images associated with each tag. The first entry in the TagEvent array is the currently tagged image.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.NamedTagEventList" - }, - "x-kubernetes-patch-merge-key": "tag", - "x-kubernetes-patch-strategy": "merge" - } - } - }, - "com.github.openshift.api.image.v1.ImageStreamTag": { - "description": "ImageStreamTag represents an Image that is retrieved by tag name from an ImageStream. Use this resource to interact with the tags and images in an image stream by tag, or to see the image details for a particular tag. The image associated with this resource is the most recently successfully tagged, imported, or pushed image (as described in the image stream status.tags.items list for this tag). If an import is in progress or has failed the previous image will be shown. Deleting an image stream tag clears both the status and spec fields of an image stream. If no image can be retrieved for a given tag, a not found error will be returned.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "tag", - "generation", - "lookupPolicy", - "image" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "conditions": { - "description": "conditions is an array of conditions that apply to the image stream tag.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.TagEventCondition" - } - }, - "generation": { - "description": "generation is the current generation of the tagged image - if tag is provided and this value is not equal to the tag generation, a user has requested an import that has not completed, or conditions will be filled out indicating any error.", - "type": "integer", - "format": "int64", - "default": 0 - }, - "image": { - "description": "image associated with the ImageStream and tag.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.Image" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "lookupPolicy": { - "description": "lookupPolicy indicates whether this tag will handle image references in this namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.ImageLookupPolicy" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "tag": { - "description": "tag is the spec tag associated with this image stream tag, and it may be null if only pushes have occurred to this image stream.", - "$ref": "#/definitions/com.github.openshift.api.image.v1.TagReference" - } - } - }, - "com.github.openshift.api.image.v1.ImageStreamTagList": { - "description": "ImageStreamTagList is a list of ImageStreamTag objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is the list of image stream tags", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.ImageStreamTag" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.image.v1.ImageTag": { - "description": "ImageTag represents a single tag within an image stream and includes the spec, the status history, and the currently referenced image (if any) of the provided tag. This type replaces the ImageStreamTag by providing a full view of the tag. ImageTags are returned for every spec or status tag present on the image stream. If no tag exists in either form, a not found error will be returned by the API. A create operation will succeed if no spec tag has already been defined and the spec field is set. Delete will remove both spec and status elements from the image stream.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec", - "status", - "image" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "image": { - "description": "image is the details of the most recent image stream status tag, and it may be null if import has not completed or an administrator has deleted the image object. To verify this is the most recent image, you must verify the generation of the most recent status.items entry matches the spec tag (if a spec tag is set). This field will not be set when listing image tags.", - "$ref": "#/definitions/com.github.openshift.api.image.v1.Image" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the spec tag associated with this image stream tag, and it may be null if only pushes have occurred to this image stream.", - "$ref": "#/definitions/com.github.openshift.api.image.v1.TagReference" - }, - "status": { - "description": "status is the status tag details associated with this image stream tag, and it may be null if no push or import has been performed.", - "$ref": "#/definitions/com.github.openshift.api.image.v1.NamedTagEventList" - } - } - }, - "com.github.openshift.api.image.v1.ImageTagList": { - "description": "ImageTagList is a list of ImageTag objects. When listing image tags, the image field is not populated. Tags are returned in alphabetical order by image stream and then tag.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is the list of image stream tags", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.ImageTag" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.image.v1.NamedTagEventList": { - "description": "NamedTagEventList relates a tag to its image history.", - "type": "object", - "required": [ - "tag", - "items" - ], - "properties": { - "conditions": { - "description": "conditions is an array of conditions that apply to the tag event list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.TagEventCondition" - } - }, - "items": { - "description": "Standard object's metadata.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.TagEvent" - } - }, - "tag": { - "description": "tag is the tag for which the history is recorded", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.image.v1.RepositoryImportSpec": { - "description": "RepositoryImportSpec describes a request to import images from a container image repository.", - "type": "object", - "required": [ - "from" - ], - "properties": { - "from": { - "description": "from is the source for the image repository to import; only kind DockerImage and a name of a container image repository is allowed", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "importPolicy": { - "description": "importPolicy is the policy controlling how the image is imported", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.TagImportPolicy" - }, - "includeManifest": { - "description": "includeManifest determines if the manifest for each image is returned in the response", - "type": "boolean" - }, - "referencePolicy": { - "description": "referencePolicy defines how other components should consume the image", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.TagReferencePolicy" - } - } - }, - "com.github.openshift.api.image.v1.RepositoryImportStatus": { - "description": "RepositoryImportStatus describes the result of an image repository import", - "type": "object", - "properties": { - "additionalTags": { - "description": "additionalTags are tags that exist in the repository but were not imported because a maximum limit of automatic imports was applied.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "images": { - "description": "images is a list of images successfully retrieved by the import of the repository.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.ImageImportStatus" - } - }, - "status": { - "description": "status reflects whether any failure occurred during import", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" - } - } - }, - "com.github.openshift.api.image.v1.SecretList": { - "description": "SecretList is a list of Secret.", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "Items is a list of secret objects. More info: https://kubernetes.io/docs/concepts/configuration/secret", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Secret" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.image.v1.SignatureCondition": { - "description": "SignatureCondition describes an image signature condition of particular kind at particular probe time.", - "type": "object", - "required": [ - "type", - "status" - ], - "properties": { - "lastProbeTime": { - "description": "Last time the condition was checked.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "lastTransitionTime": { - "description": "Last time the condition transit from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "Human readable message indicating details about last transition.", - "type": "string" - }, - "reason": { - "description": "(brief) reason for the condition's last transition.", - "type": "string" - }, - "status": { - "description": "status of the condition, one of True, False, Unknown.", - "type": "string", - "default": "" - }, - "type": { - "description": "type of signature condition, Complete or Failed.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.image.v1.SignatureGenericEntity": { - "description": "SignatureGenericEntity holds a generic information about a person or entity who is an issuer or a subject of signing certificate or key.", - "type": "object", - "properties": { - "commonName": { - "description": "Common name (e.g. openshift-signing-service).", - "type": "string" - }, - "organization": { - "description": "organization name.", - "type": "string" - } - } - }, - "com.github.openshift.api.image.v1.SignatureIssuer": { - "description": "SignatureIssuer holds information about an issuer of signing certificate or key.", - "type": "object", - "properties": { - "commonName": { - "description": "Common name (e.g. openshift-signing-service).", - "type": "string" - }, - "organization": { - "description": "organization name.", - "type": "string" - } - } - }, - "com.github.openshift.api.image.v1.SignatureSubject": { - "description": "SignatureSubject holds information about a person or entity who created the signature.", - "type": "object", - "required": [ - "publicKeyID" - ], - "properties": { - "commonName": { - "description": "Common name (e.g. openshift-signing-service).", - "type": "string" - }, - "organization": { - "description": "organization name.", - "type": "string" - }, - "publicKeyID": { - "description": "If present, it is a human readable key id of public key belonging to the subject used to verify image signature. It should contain at least 64 lowest bits of public key's fingerprint (e.g. 0x685ebe62bf278440).", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.image.v1.TagEvent": { - "description": "TagEvent is used by ImageStreamStatus to keep a historical record of images associated with a tag.", - "type": "object", - "required": [ - "created", - "dockerImageReference", - "image", - "generation" - ], - "properties": { - "created": { - "description": "created holds the time the TagEvent was created", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "dockerImageReference": { - "description": "dockerImageReference is the string that can be used to pull this image", - "type": "string", - "default": "" - }, - "generation": { - "description": "generation is the spec tag generation that resulted in this tag being updated", - "type": "integer", - "format": "int64", - "default": 0 - }, - "image": { - "description": "image is the image", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.image.v1.TagEventCondition": { - "description": "TagEventCondition contains condition information for a tag event.", - "type": "object", - "required": [ - "type", - "status", - "generation" - ], - "properties": { - "generation": { - "description": "generation is the spec tag generation that this status corresponds to", - "type": "integer", - "format": "int64", - "default": 0 - }, - "lastTransitionTime": { - "description": "lastTransitionTime is the time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "message is a human readable description of the details about last transition, complementing reason.", - "type": "string" - }, - "reason": { - "description": "reason is a brief machine readable explanation for the condition's last transition.", - "type": "string" - }, - "status": { - "description": "status of the condition, one of True, False, Unknown.", - "type": "string", - "default": "" - }, - "type": { - "description": "type of tag event condition, currently only ImportSuccess", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.image.v1.TagImportPolicy": { - "description": "TagImportPolicy controls how images related to this tag will be imported.", - "type": "object", - "properties": { - "importMode": { - "description": "importMode describes how to import an image manifest.", - "type": "string" - }, - "insecure": { - "description": "insecure is true if the server may bypass certificate verification or connect directly over HTTP during image import.", - "type": "boolean" - }, - "scheduled": { - "description": "scheduled indicates to the server that this tag should be periodically checked to ensure it is up to date, and imported", - "type": "boolean" - } - } - }, - "com.github.openshift.api.image.v1.TagReference": { - "description": "TagReference specifies optional annotations for images using this tag and an optional reference to an ImageStreamTag, ImageStreamImage, or DockerImage this tag should track.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "annotations": { - "description": "Optional; if specified, annotations that are applied to images retrieved via ImageStreamTags.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "from": { - "description": "Optional; if specified, a reference to another image that this tag should point to. Valid values are ImageStreamTag, ImageStreamImage, and DockerImage. ImageStreamTag references can only reference a tag within this same ImageStream.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "generation": { - "description": "generation is a counter that tracks mutations to the spec tag (user intent). When a tag reference is changed the generation is set to match the current stream generation (which is incremented every time spec is changed). Other processes in the system like the image importer observe that the generation of spec tag is newer than the generation recorded in the status and use that as a trigger to import the newest remote tag. To trigger a new import, clients may set this value to zero which will reset the generation to the latest stream generation. Legacy clients will send this value as nil which will be merged with the current tag generation.", - "type": "integer", - "format": "int64" - }, - "importPolicy": { - "description": "importPolicy is information that controls how images may be imported by the server.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.TagImportPolicy" - }, - "name": { - "description": "name of the tag", - "type": "string", - "default": "" - }, - "reference": { - "description": "reference states if the tag will be imported. Default value is false, which means the tag will be imported.", - "type": "boolean" - }, - "referencePolicy": { - "description": "referencePolicy defines how other components should consume the image.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.image.v1.TagReferencePolicy" - } - } - }, - "com.github.openshift.api.image.v1.TagReferencePolicy": { - "description": "TagReferencePolicy describes how pull-specs for images in this image stream tag are generated when image change triggers in deployment configs or builds are resolved. This allows the image stream author to control how images are accessed.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "type": { - "description": "type determines how the image pull spec should be transformed when the image stream tag is used in deployment config triggers or new builds. The default value is `Source`, indicating the original location of the image should be used (if imported). The user may also specify `Local`, indicating that the pull spec should point to the integrated container image registry and leverage the registry's ability to proxy the pull to an upstream registry. `Local` allows the credentials used to pull this image to be managed from the image stream's namespace, so others on the platform can access a remote image but have no access to the remote secret. It also allows the image layers to be mirrored into the local registry which the images can still be pulled even if the upstream registry is unavailable.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.insights.v1.Custom": { - "description": "Custom provides the custom configuration of gatherers", - "type": "object", - "required": [ - "configs" - ], - "properties": { - "configs": { - "description": "configs is a required list of gatherers configurations that can be used to enable or disable specific gatherers. It may not exceed 100 items and each gatherer can be present only once. It is possible to disable an entire set of gatherers while allowing a specific function within that set. The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1.GathererConfig" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.insights.v1.DataGather": { - "description": "DataGather provides data gather configuration options and status for the particular Insights data gathering.\n\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1.DataGatherSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1.DataGatherStatus" - } - } - }, - "com.github.openshift.api.insights.v1.DataGatherList": { - "description": "DataGatherList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items contains a list of DataGather resources.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1.DataGather" - }, - "x-kubernetes-list-type": "atomic" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.insights.v1.DataGatherSpec": { - "description": "DataGatherSpec contains the configuration for the DataGather.", - "type": "object", - "required": [ - "gatherers" - ], - "properties": { - "dataPolicy": { - "description": "dataPolicy is an optional list of DataPolicyOptions that allows user to enable additional obfuscation of the Insights archive data. It may not exceed 2 items and must not contain duplicates. Valid values are ObfuscateNetworking and WorkloadNames. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When set to WorkloadNames, the gathered data about cluster resources will not contain the workload names for your deployments. Resources UIDs will be used instead. When omitted no obfuscation is applied.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "gatherers": { - "description": "gatherers is a required field that specifies the configuration of the gatherers.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1.Gatherers" - }, - "storage": { - "description": "storage is an optional field that allows user to define persistent storage for gathering jobs to store the Insights data archive. If omitted, the gathering job will use ephemeral storage.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1.Storage" - } - } - }, - "com.github.openshift.api.insights.v1.DataGatherStatus": { - "description": "DataGatherStatus contains information relating to the DataGather state.", - "type": "object", - "properties": { - "conditions": { - "description": "conditions is an optional field that provides details on the status of the gatherer job. It may not exceed 100 items and must not contain duplicates.\n\nThe current condition types are DataUploaded, DataRecorded, DataProcessed, RemoteConfigurationNotAvailable, RemoteConfigurationInvalid\n\nThe DataUploaded condition is used to represent whether or not the archive was successfully uploaded for further processing. When it has a status of True and a reason of Succeeded, the archive was successfully uploaded. When it has a status of Unknown and a reason of NoUploadYet, the upload has not occurred, or there was no data to upload. When it has a status of False and a reason Failed, the upload failed. The accompanying message will include the specific error encountered.\n\nThe DataRecorded condition is used to represent whether or not the archive was successfully recorded. When it has a status of True and a reason of Succeeded, the archive was recorded successfully. When it has a status of Unknown and a reason of NoDataGatheringYet, the data gathering process has not started yet. When it has a status of False and a reason of RecordingFailed, the recording failed and a message will include the specific error encountered.\n\nThe DataProcessed condition is used to represent whether or not the archive was processed by the processing service. When it has a status of True and a reason of Processed, the data was processed successfully. When it has a status of Unknown and a reason of NothingToProcessYet, there is no data to process at the moment. When it has a status of False and a reason of Failure, processing failed and a message will include the specific error encountered.\n\nThe RemoteConfigurationAvailable condition is used to represent whether the remote configuration is available. When it has a status of Unknown and a reason of Unknown or RemoteConfigNotRequestedYet, the state of the remote configuration is unknown—typically at startup. When it has a status of True and a reason of Succeeded, the configuration is available. When it has a status of False and a reason of NoToken, the configuration was disabled by removing the cloud.openshift.com field from the pull secret. When it has a status of False and a reason of DisabledByConfiguration, the configuration was disabled in insightsdatagather.config.openshift.io.\n\nThe RemoteConfigurationValid condition is used to represent whether the remote configuration is valid. When it has a status of Unknown and a reason of Unknown or NoValidationYet, the validity of the remote configuration is unknown—typically at startup. When it has a status of True and a reason of Succeeded, the configuration is valid. When it has a status of False and a reason of Invalid, the configuration is invalid.\n\nThe Progressing condition is used to represent the phase of gathering When it has a status of False and the reason is DataGatherPending, the gathering has not started yet. When it has a status of True and reason is Gathering, the gathering is running. When it has a status of False and reason is GatheringSucceeded, the gathering successfully finished. When it has a status of False and reason is GatheringFailed, the gathering failed.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "finishTime": { - "description": "finishTime is the time when Insights data gathering finished.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "gatherers": { - "description": "gatherers is a list of active gatherers (and their statuses) in the last gathering.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1.GathererStatus" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "insightsReport": { - "description": "insightsReport provides general Insights analysis results. When omitted, this means no data gathering has taken place yet or the corresponding Insights analysis (identified by \"insightsRequestID\") is not available.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1.InsightsReport" - }, - "insightsRequestID": { - "description": "insightsRequestID is an optional Insights request ID to track the status of the Insights analysis (in console.redhat.com processing pipeline) for the corresponding Insights data archive. It may not exceed 256 characters and is immutable once set.", - "type": "string" - }, - "relatedObjects": { - "description": "relatedObjects is an optional list of resources which are useful when debugging or inspecting the data gathering Pod It may not exceed 100 items and must not contain duplicates.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1.ObjectReference" - }, - "x-kubernetes-list-map-keys": [ - "name", - "namespace" - ], - "x-kubernetes-list-type": "map" - }, - "startTime": { - "description": "startTime is the time when Insights data gathering started.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - } - } - }, - "com.github.openshift.api.insights.v1.GathererConfig": { - "description": "GathererConfig allows to configure specific gatherers", - "type": "object", - "required": [ - "name", - "state" - ], - "properties": { - "name": { - "description": "name is the required name of a specific gatherer. It may not exceed 256 characters. The format for a gatherer name is: {gatherer}/{function} where the function is optional. Gatherer consists of a lowercase letters only that may include underscores (_). Function consists of a lowercase letters only that may include underscores (_) and is separated from the gatherer by a forward slash (/). The particular gatherers can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", - "type": "string" - }, - "state": { - "description": "state is a required field that allows you to configure specific gatherer. Valid values are \"Enabled\" and \"Disabled\". When set to Enabled the gatherer will run. When set to Disabled the gatherer will not run.", - "type": "string" - } - } - }, - "com.github.openshift.api.insights.v1.GathererStatus": { - "description": "GathererStatus represents information about a particular data gatherer.", - "type": "object", - "required": [ - "name", - "lastGatherSeconds" - ], - "properties": { - "conditions": { - "description": "conditions provide details on the status of each gatherer.\n\nThe current condition type is DataGathered\n\nThe DataGathered condition is used to represent whether or not the data was gathered by a gatherer specified by name. When it has a status of True and a reason of GatheredOK, the data has been successfully gathered as expected. When it has a status of False and a reason of NoData, no data was gathered—for example, when the resource is not present in the cluster. When it has a status of False and a reason of GatherError, an error occurred and no data was gathered. When it has a status of False and a reason of GatherPanic, a panic occurred during gathering and no data was collected. When it has a status of False and a reason of GatherWithErrorReason, data was partially gathered or gathered with an error message.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "lastGatherSeconds": { - "description": "lastGatherSeconds is required field that represents the time spent gathering in seconds", - "type": "integer", - "format": "int32" - }, - "name": { - "description": "name is the required name of the gatherer. It must contain at least 5 characters and may not exceed 256 characters.", - "type": "string" - } - } - }, - "com.github.openshift.api.insights.v1.Gatherers": { - "description": "Gatherers specifies the configuration of the gatherers", - "type": "object", - "required": [ - "mode" - ], - "properties": { - "custom": { - "description": "custom provides gathering configuration. It is required when mode is Custom, and forbidden otherwise. Custom configuration allows user to disable only a subset of gatherers. Gatherers that are not explicitly disabled in custom configuration will run.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1.Custom" - }, - "mode": { - "description": "mode is a required field that specifies the mode for gatherers. Allowed values are All and Custom. When set to All, all gatherers will run and gather data. When set to Custom, the custom configuration from the custom field will be applied.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "mode", - "fields-to-discriminateBy": { - "custom": "Custom" - } - } - ] - }, - "com.github.openshift.api.insights.v1.HealthCheck": { - "description": "HealthCheck represents an Insights health check attributes.", - "type": "object", - "required": [ - "description", - "totalRisk", - "advisorURI" - ], - "properties": { - "advisorURI": { - "description": "advisorURI is required field that provides the URL link to the Insights Advisor. The link must be a valid HTTPS URL and the maximum length is 2048 characters.", - "type": "string" - }, - "description": { - "description": "description is required field that provides basic description of the healthcheck. It must contain at least 10 characters and may not exceed 2048 characters.", - "type": "string" - }, - "totalRisk": { - "description": "totalRisk is the required field of the healthcheck. It is indicator of the total risk posed by the detected issue; combination of impact and likelihood. Allowed values are Low, Moderate, Important and Critical. The value represents the severity of the issue.", - "type": "string" - } - } - }, - "com.github.openshift.api.insights.v1.InsightsReport": { - "description": "InsightsReport provides Insights health check report based on the most recently sent Insights data.", - "type": "object", - "required": [ - "downloadedTime", - "uri" - ], - "properties": { - "downloadedTime": { - "description": "downloadedTime is a required field that specifies when the Insights report was last downloaded.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "healthChecks": { - "description": "healthChecks is an optional field that provides basic information about active Insights recommendations, which serve as proactive notifications for potential issues in the cluster. When omitted, it means that there are no active recommendations in the cluster.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1.HealthCheck" - }, - "x-kubernetes-list-map-keys": [ - "advisorURI", - "totalRisk", - "description" - ], - "x-kubernetes-list-type": "map" - }, - "uri": { - "description": "uri is a required field that provides the URL link from which the report was downloaded. The link must be a valid HTTPS URL and the maximum length is 2048 characters.", - "type": "string" - } - } - }, - "com.github.openshift.api.insights.v1.ObjectReference": { - "description": "ObjectReference contains enough information to let you inspect or modify the referred object.", - "type": "object", - "required": [ - "group", - "resource", - "name", - "namespace" - ], - "properties": { - "group": { - "description": "group is required field that specifies the API Group of the Resource. Enter empty string for the core group. This value is empty or it should follow the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start with an alphabetic character and end with an alphanumeric character. Example: \"\", \"apps\", \"build.openshift.io\", etc.", - "type": "string" - }, - "name": { - "description": "name is required field that specifies the referent that follows the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start with an alphabetic character and end with an alphanumeric character..", - "type": "string" - }, - "namespace": { - "description": "namespace if required field of the referent that follows the DNS1123 labels format. It must be at most 63 characters in length, and must must consist of only lowercase alphanumeric characters and hyphens, and must start with an alphabetic character and end with an alphanumeric character.", - "type": "string" - }, - "resource": { - "description": "resource is required field of the type that is being referenced and follows the DNS1035 format. It is normally the plural form of the resource kind in lowercase. It must be at most 63 characters in length, and must must consist of only lowercase alphanumeric characters and hyphens, and must start with an alphabetic character and end with an alphanumeric character. Example: \"deployments\", \"deploymentconfigs\", \"pods\", etc.", - "type": "string" - } - } - }, - "com.github.openshift.api.insights.v1.PersistentVolumeClaimReference": { - "description": "PersistentVolumeClaimReference is a reference to a PersistentVolumeClaim.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is the name of the PersistentVolumeClaim that will be used to store the Insights data archive. It is a string that follows the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start and end with an alphanumeric character.", - "type": "string" - } - } - }, - "com.github.openshift.api.insights.v1.PersistentVolumeConfig": { - "description": "PersistentVolumeConfig provides configuration options for PersistentVolume storage.", - "type": "object", - "required": [ - "claim" - ], - "properties": { - "claim": { - "description": "claim is a required field that specifies the configuration of the PersistentVolumeClaim that will be used to store the Insights data archive. The PersistentVolumeClaim must be created in the openshift-insights namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1.PersistentVolumeClaimReference" - }, - "mountPath": { - "description": "mountPath is an optional field specifying the directory where the PVC will be mounted inside the Insights data gathering Pod. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default mount path is /var/lib/insights-operator The path may not exceed 1024 characters and must not contain a colon.", - "type": "string" - } - } - }, - "com.github.openshift.api.insights.v1.Storage": { - "description": "Storage provides persistent storage configuration options for gathering jobs. If the type is set to PersistentVolume, then the PersistentVolume must be defined. If the type is set to Ephemeral, then the PersistentVolume must not be defined.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "persistentVolume": { - "description": "persistentVolume is an optional field that specifies the PersistentVolume that will be used to store the Insights data archive. The PersistentVolume must be created in the openshift-insights namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1.PersistentVolumeConfig" - }, - "type": { - "description": "type is a required field that specifies the type of storage that will be used to store the Insights data archive. Valid values are \"PersistentVolume\" and \"Ephemeral\". When set to Ephemeral, the Insights data archive is stored in the ephemeral storage of the gathering job. When set to PersistentVolume, the Insights data archive is stored in the PersistentVolume that is defined by the PersistentVolume field.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "persistentVolume": "PersistentVolume" - } - } - ] - }, - "com.github.openshift.api.insights.v1alpha1.DataGather": { - "description": "DataGather provides data gather configuration options and status for the particular Insights data gathering.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha1.DataGatherSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha1.DataGatherStatus" - } - } - }, - "com.github.openshift.api.insights.v1alpha1.DataGatherList": { - "description": "DataGatherList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items contains a list of DataGather resources.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha1.DataGather" - }, - "x-kubernetes-list-type": "atomic" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.insights.v1alpha1.DataGatherSpec": { - "description": "DataGatherSpec contains the configuration for the DataGather.", - "type": "object", - "properties": { - "dataPolicy": { - "description": "dataPolicy allows user to enable additional global obfuscation of the IP addresses and base domain in the Insights archive data. Valid values are \"ClearText\" and \"ObfuscateNetworking\". When set to ClearText the data is not obfuscated. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is ClearText.", - "type": "string", - "default": "" - }, - "gatherers": { - "description": "gatherers is an optional list of gatherers configurations. The list must not exceed 100 items. The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha1.GathererConfig" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "storage": { - "description": "storage is an optional field that allows user to define persistent storage for gathering jobs to store the Insights data archive. If omitted, the gathering job will use ephemeral storage.", - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha1.Storage" - } - } - }, - "com.github.openshift.api.insights.v1alpha1.DataGatherStatus": { - "description": "DataGatherStatus contains information relating to the DataGather state.", - "type": "object", - "properties": { - "conditions": { - "description": "conditions provide details on the status of the gatherer job.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "dataGatherState": { - "description": "dataGatherState reflects the current state of the data gathering process.", - "type": "string" - }, - "finishTime": { - "description": "finishTime is the time when Insights data gathering finished.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "gatherers": { - "description": "gatherers is a list of active gatherers (and their statuses) in the last gathering.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha1.GathererStatus" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "insightsReport": { - "description": "insightsReport provides general Insights analysis results. When omitted, this means no data gathering has taken place yet or the corresponding Insights analysis (identified by \"insightsRequestID\") is not available.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha1.InsightsReport" - }, - "insightsRequestID": { - "description": "insightsRequestID is an Insights request ID to track the status of the Insights analysis (in console.redhat.com processing pipeline) for the corresponding Insights data archive.", - "type": "string" - }, - "relatedObjects": { - "description": "relatedObjects is a list of resources which are useful when debugging or inspecting the data gathering Pod", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha1.ObjectReference" - }, - "x-kubernetes-list-map-keys": [ - "name", - "namespace" - ], - "x-kubernetes-list-type": "map" - }, - "startTime": { - "description": "startTime is the time when Insights data gathering started.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - } - } - }, - "com.github.openshift.api.insights.v1alpha1.GathererConfig": { - "description": "gathererConfig allows to configure specific gatherers", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is the required name of specific gatherer It must be at most 256 characters in length. The format for the gatherer name should be: {gatherer}/{function} where the function is optional. Gatherer consists of a lowercase letters only that may include underscores (_). Function consists of a lowercase letters only that may include underscores (_) and is separated from the gatherer by a forward slash (/). The particular gatherers can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md.", - "type": "string", - "default": "" - }, - "state": { - "description": "state allows you to configure specific gatherer. Valid values are \"Enabled\", \"Disabled\" and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default. The current default is Enabled.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.insights.v1alpha1.GathererStatus": { - "description": "gathererStatus represents information about a particular data gatherer.", - "type": "object", - "required": [ - "conditions", - "name", - "lastGatherDuration" - ], - "properties": { - "conditions": { - "description": "conditions provide details on the status of each gatherer.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "lastGatherDuration": { - "description": "lastGatherDuration represents the time spent gathering.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "name": { - "description": "name is the name of the gatherer.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.insights.v1alpha1.HealthCheck": { - "description": "healthCheck represents an Insights health check attributes.", - "type": "object", - "required": [ - "description", - "totalRisk", - "advisorURI", - "state" - ], - "properties": { - "advisorURI": { - "description": "advisorURI is required field that provides the URL link to the Insights Advisor. The link must be a valid HTTPS URL and the maximum length is 2048 characters.", - "type": "string", - "default": "" - }, - "description": { - "description": "description provides basic description of the healtcheck.", - "type": "string", - "default": "" - }, - "state": { - "description": "state determines what the current state of the health check is. Health check is enabled by default and can be disabled by the user in the Insights advisor user interface.", - "type": "string", - "default": "" - }, - "totalRisk": { - "description": "totalRisk of the healthcheck. Indicator of the total risk posed by the detected issue; combination of impact and likelihood. The values can be from 1 to 4, and the higher the number, the more important the issue.", - "type": "integer", - "format": "int32", - "default": 0 - } - } - }, - "com.github.openshift.api.insights.v1alpha1.InsightsReport": { - "description": "insightsReport provides Insights health check report based on the most recently sent Insights data.", - "type": "object", - "properties": { - "downloadedAt": { - "description": "downloadedAt is the time when the last Insights report was downloaded. An empty value means that there has not been any Insights report downloaded yet and it usually appears in disconnected clusters (or clusters when the Insights data gathering is disabled).", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "healthChecks": { - "description": "healthChecks provides basic information about active Insights health checks in a cluster.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha1.HealthCheck" - }, - "x-kubernetes-list-type": "atomic" - }, - "uri": { - "description": "uri is optional field that provides the URL link from which the report was downloaded. The link must be a valid HTTPS URL and the maximum length is 2048 characters.", - "type": "string" - } - } - }, - "com.github.openshift.api.insights.v1alpha1.ObjectReference": { - "description": "ObjectReference contains enough information to let you inspect or modify the referred object.", - "type": "object", - "required": [ - "group", - "resource", - "name", - "namespace" - ], - "properties": { - "group": { - "description": "group is the API Group of the Resource. Enter empty string for the core group. This value is empty or should follow the DNS1123 subdomain format and it must be at most 253 characters in length. Example: \"\", \"apps\", \"build.openshift.io\", etc.", - "type": "string", - "default": "" - }, - "name": { - "description": "name of the referent that follows the DNS1123 subdomain format. It must be at most 256 characters in length.", - "type": "string", - "default": "" - }, - "namespace": { - "description": "namespace of the referent that follows the DNS1123 subdomain format. It must be at most 253 characters in length.", - "type": "string", - "default": "" - }, - "resource": { - "description": "resource is required field of the type that is being referenced. It is normally the plural form of the resource kind in lowercase. This value should consist of only lowercase alphanumeric characters and hyphens. Example: \"deployments\", \"deploymentconfigs\", \"pods\", etc.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.insights.v1alpha1.PersistentVolumeClaimReference": { - "description": "persistentVolumeClaimReference is a reference to a PersistentVolumeClaim.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is a string that follows the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start and end with an alphanumeric character.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.insights.v1alpha1.PersistentVolumeConfig": { - "description": "persistentVolumeConfig provides configuration options for PersistentVolume storage.", - "type": "object", - "required": [ - "claim" - ], - "properties": { - "claim": { - "description": "claim is a required field that specifies the configuration of the PersistentVolumeClaim that will be used to store the Insights data archive. The PersistentVolumeClaim must be created in the openshift-insights namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha1.PersistentVolumeClaimReference" - }, - "mountPath": { - "description": "mountPath is an optional field specifying the directory where the PVC will be mounted inside the Insights data gathering Pod. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default mount path is /var/lib/insights-operator The path may not exceed 1024 characters and must not contain a colon.", - "type": "string" - } - } - }, - "com.github.openshift.api.insights.v1alpha1.Storage": { - "description": "storage provides persistent storage configuration options for gathering jobs. If the type is set to PersistentVolume, then the PersistentVolume must be defined. If the type is set to Ephemeral, then the PersistentVolume must not be defined.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "persistentVolume": { - "description": "persistentVolume is an optional field that specifies the PersistentVolume that will be used to store the Insights data archive. The PersistentVolume must be created in the openshift-insights namespace.", - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha1.PersistentVolumeConfig" - }, - "type": { - "description": "type is a required field that specifies the type of storage that will be used to store the Insights data archive. Valid values are \"PersistentVolume\" and \"Ephemeral\". When set to Ephemeral, the Insights data archive is stored in the ephemeral storage of the gathering job. When set to PersistentVolume, the Insights data archive is stored in the PersistentVolume that is defined by the PersistentVolume field.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.insights.v1alpha2.Custom": { - "description": "custom provides the custom configuration of gatherers", - "type": "object", - "required": [ - "configs" - ], - "properties": { - "configs": { - "description": "configs is a required list of gatherers configurations that can be used to enable or disable specific gatherers. It may not exceed 100 items and each gatherer can be present only once. It is possible to disable an entire set of gatherers while allowing a specific function within that set. The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha2.GathererConfig" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.insights.v1alpha2.DataGather": { - "description": "DataGather provides data gather configuration options and status for the particular Insights data gathering.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha2.DataGatherSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha2.DataGatherStatus" - } - } - }, - "com.github.openshift.api.insights.v1alpha2.DataGatherList": { - "description": "DataGatherList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items contains a list of DataGather resources.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha2.DataGather" - }, - "x-kubernetes-list-type": "atomic" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.insights.v1alpha2.DataGatherSpec": { - "description": "DataGatherSpec contains the configuration for the DataGather.", - "type": "object", - "properties": { - "dataPolicy": { - "description": "dataPolicy is an optional list of DataPolicyOptions that allows user to enable additional obfuscation of the Insights archive data. It may not exceed 2 items and must not contain duplicates. Valid values are ObfuscateNetworking and WorkloadNames. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When set to WorkloadNames, the gathered data about cluster resources will not contain the workload names for your deployments. Resources UIDs will be used instead. When omitted no obfuscation is applied.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "gatherers": { - "description": "gatherers is an optional field that specifies the configuration of the gatherers. If omitted, all gatherers will be run.", - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha2.Gatherers" - }, - "storage": { - "description": "storage is an optional field that allows user to define persistent storage for gathering jobs to store the Insights data archive. If omitted, the gathering job will use ephemeral storage.", - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha2.Storage" - } - } - }, - "com.github.openshift.api.insights.v1alpha2.DataGatherStatus": { - "description": "DataGatherStatus contains information relating to the DataGather state.", - "type": "object", - "properties": { - "conditions": { - "description": "conditions is an optional field that provides details on the status of the gatherer job. It may not exceed 100 items and must not contain duplicates.\n\nThe current condition types are DataUploaded, DataRecorded, DataProcessed, RemoteConfigurationNotAvailable, RemoteConfigurationInvalid\n\nThe DataUploaded condition is used to represent whether or not the archive was successfully uploaded for further processing. When it has a status of True and a reason of Succeeded, the archive was successfully uploaded. When it has a status of Unknown and a reason of NoUploadYet, the upload has not occurred, or there was no data to upload. When it has a status of False and a reason Failed, the upload failed. The accompanying message will include the specific error encountered.\n\nThe DataRecorded condition is used to represent whether or not the archive was successfully recorded. When it has a status of True and a reason of Succeeded, the archive was recorded successfully. When it has a status of Unknown and a reason of NoDataGatheringYet, the data gathering process has not started yet. When it has a status of False and a reason of RecordingFailed, the recording failed and a message will include the specific error encountered.\n\nThe DataProcessed condition is used to represent whether or not the archive was processed by the processing service. When it has a status of True and a reason of Processed, the data was processed successfully. When it has a status of Unknown and a reason of NothingToProcessYet, there is no data to process at the moment. When it has a status of False and a reason of Failure, processing failed and a message will include the specific error encountered.\n\nThe RemoteConfigurationAvailable condition is used to represent whether the remote configuration is available. When it has a status of Unknown and a reason of Unknown or RemoteConfigNotRequestedYet, the state of the remote configuration is unknown—typically at startup. When it has a status of True and a reason of Succeeded, the configuration is available. When it has a status of False and a reason of NoToken, the configuration was disabled by removing the cloud.openshift.com field from the pull secret. When it has a status of False and a reason of DisabledByConfiguration, the configuration was disabled in insightsdatagather.config.openshift.io.\n\nThe RemoteConfigurationValid condition is used to represent whether the remote configuration is valid. When it has a status of Unknown and a reason of Unknown or NoValidationYet, the validity of the remote configuration is unknown—typically at startup. When it has a status of True and a reason of Succeeded, the configuration is valid. When it has a status of False and a reason of Invalid, the configuration is invalid.\n\nThe Progressing condition is used to represent the phase of gathering When it has a status of False and the reason is DataGatherPending, the gathering has not started yet. When it has a status of True and reason is Gathering, the gathering is running. When it has a status of False and reason is GatheringSucceeded, the gathering succesfully finished. When it has a status of False and reason is GatheringFailed, the gathering failed.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "finishTime": { - "description": "finishTime is the time when Insights data gathering finished.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "gatherers": { - "description": "gatherers is a list of active gatherers (and their statuses) in the last gathering.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha2.GathererStatus" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "insightsReport": { - "description": "insightsReport provides general Insights analysis results. When omitted, this means no data gathering has taken place yet or the corresponding Insights analysis (identified by \"insightsRequestID\") is not available.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha2.InsightsReport" - }, - "insightsRequestID": { - "description": "insightsRequestID is an optional Insights request ID to track the status of the Insights analysis (in console.redhat.com processing pipeline) for the corresponding Insights data archive. It may not exceed 256 characters and is immutable once set.", - "type": "string" - }, - "relatedObjects": { - "description": "relatedObjects is an optional list of resources which are useful when debugging or inspecting the data gathering Pod It may not exceed 100 items and must not contain duplicates.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha2.ObjectReference" - }, - "x-kubernetes-list-map-keys": [ - "name", - "namespace" - ], - "x-kubernetes-list-type": "map" - }, - "startTime": { - "description": "startTime is the time when Insights data gathering started.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - } - } - }, - "com.github.openshift.api.insights.v1alpha2.GathererConfig": { - "description": "gathererConfig allows to configure specific gatherers", - "type": "object", - "required": [ - "name", - "state" - ], - "properties": { - "name": { - "description": "name is the required name of a specific gatherer It may not exceed 256 characters. The format for a gatherer name is: {gatherer}/{function} where the function is optional. Gatherer consists of a lowercase letters only that may include underscores (_). Function consists of a lowercase letters only that may include underscores (_) and is separated from the gatherer by a forward slash (/). The particular gatherers can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", - "type": "string", - "default": "" - }, - "state": { - "description": "state is a required field that allows you to configure specific gatherer. Valid values are \"Enabled\" and \"Disabled\". When set to Enabled the gatherer will run. When set to Disabled the gatherer will not run.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.insights.v1alpha2.GathererStatus": { - "description": "gathererStatus represents information about a particular data gatherer.", - "type": "object", - "required": [ - "name", - "lastGatherSeconds" - ], - "properties": { - "conditions": { - "description": "conditions provide details on the status of each gatherer.\n\nThe current condition type is DataGathered\n\nThe DataGathered condition is used to represent whether or not the data was gathered by a gatherer specified by name. When it has a status of True and a reason of GatheredOK, the data has been successfully gathered as expected. When it has a status of False and a reason of NoData, no data was gathered—for example, when the resource is not present in the cluster. When it has a status of False and a reason of GatherError, an error occurred and no data was gathered. When it has a status of False and a reason of GatherPanic, a panic occurred during gathering and no data was collected. When it has a status of False and a reason of GatherWithErrorReason, data was partially gathered or gathered with an error message.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "lastGatherSeconds": { - "description": "lastGatherSeconds is required field that represents the time spent gathering in seconds", - "type": "integer", - "format": "int32", - "default": 0 - }, - "name": { - "description": "name is the required name of the gatherer. It must contain at least 5 characters and may not exceed 256 characters.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.insights.v1alpha2.Gatherers": { - "description": "Gathereres specifies the configuration of the gatherers", - "type": "object", - "required": [ - "mode" - ], - "properties": { - "custom": { - "description": "custom provides gathering configuration. It is required when mode is Custom, and forbidden otherwise. Custom configuration allows user to disable only a subset of gatherers. Gatherers that are not explicitly disabled in custom configuration will run.", - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha2.Custom" - }, - "mode": { - "description": "mode is a required field that specifies the mode for gatherers. Allowed values are All and Custom. When set to All, all gatherers wil run and gather data. When set to Custom, the custom configuration from the custom field will be applied.", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "mode", - "fields-to-discriminateBy": { - "custom": "Custom" - } - } - ] - }, - "com.github.openshift.api.insights.v1alpha2.HealthCheck": { - "description": "healthCheck represents an Insights health check attributes.", - "type": "object", - "required": [ - "description", - "totalRisk", - "advisorURI" - ], - "properties": { - "advisorURI": { - "description": "advisorURI is required field that provides the URL link to the Insights Advisor. The link must be a valid HTTPS URL and the maximum length is 2048 characters.", - "type": "string", - "default": "" - }, - "description": { - "description": "description is required field that provides basic description of the healtcheck. It must contain at least 10 characters and may not exceed 2048 characters.", - "type": "string", - "default": "" - }, - "totalRisk": { - "description": "totalRisk is the required field of the healthcheck. It is indicator of the total risk posed by the detected issue; combination of impact and likelihood. Allowed values are Low, Medium, Important and Critical. The value represents the severity of the issue.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.insights.v1alpha2.InsightsReport": { - "description": "insightsReport provides Insights health check report based on the most recently sent Insights data.", - "type": "object", - "properties": { - "downloadedTime": { - "description": "downloadedTime is an optional time when the last Insights report was downloaded. An empty value means that there has not been any Insights report downloaded yet and it usually appears in disconnected clusters (or clusters when the Insights data gathering is disabled).", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "healthChecks": { - "description": "healthChecks provides basic information about active Insights health checks in a cluster.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha2.HealthCheck" - }, - "x-kubernetes-list-map-keys": [ - "advisorURI", - "totalRisk", - "description" - ], - "x-kubernetes-list-type": "map" - }, - "uri": { - "description": "uri is optional field that provides the URL link from which the report was downloaded. The link must be a valid HTTPS URL and the maximum length is 2048 characters.", - "type": "string" - } - } - }, - "com.github.openshift.api.insights.v1alpha2.ObjectReference": { - "description": "ObjectReference contains enough information to let you inspect or modify the referred object.", - "type": "object", - "required": [ - "group", - "resource", - "name", - "namespace" - ], - "properties": { - "group": { - "description": "group is required field that specifies the API Group of the Resource. Enter empty string for the core group. This value is empty or it should follow the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start with an alphabetic character and end with an alphanumeric character. Example: \"\", \"apps\", \"build.openshift.io\", etc.", - "type": "string", - "default": "" - }, - "name": { - "description": "name is required field that specifies the referent that follows the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start with an alphabetic character and end with an alphanumeric character..", - "type": "string", - "default": "" - }, - "namespace": { - "description": "namespace if required field of the referent that follows the DNS1123 labels format. It must be at most 63 characters in length, and must must consist of only lowercase alphanumeric characters and hyphens, and must start with an alphabetic character and end with an alphanumeric character.", - "type": "string", - "default": "" - }, - "resource": { - "description": "resource is required field of the type that is being referenced and follows the DNS1035 format. It is normally the plural form of the resource kind in lowercase. It must be at most 63 characters in length, and must must consist of only lowercase alphanumeric characters and hyphens, and must start with an alphabetic character and end with an alphanumeric character. Example: \"deployments\", \"deploymentconfigs\", \"pods\", etc.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.insights.v1alpha2.PersistentVolumeClaimReference": { - "description": "persistentVolumeClaimReference is a reference to a PersistentVolumeClaim.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is a string that follows the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start and end with an alphanumeric character.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.insights.v1alpha2.PersistentVolumeConfig": { - "description": "persistentVolumeConfig provides configuration options for PersistentVolume storage.", - "type": "object", - "required": [ - "claim" - ], - "properties": { - "claim": { - "description": "claim is a required field that specifies the configuration of the PersistentVolumeClaim that will be used to store the Insights data archive. The PersistentVolumeClaim must be created in the openshift-insights namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha2.PersistentVolumeClaimReference" - }, - "mountPath": { - "description": "mountPath is an optional field specifying the directory where the PVC will be mounted inside the Insights data gathering Pod. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default mount path is /var/lib/insights-operator The path may not exceed 1024 characters and must not contain a colon.", - "type": "string" - } - } - }, - "com.github.openshift.api.insights.v1alpha2.Storage": { - "description": "storage provides persistent storage configuration options for gathering jobs. If the type is set to PersistentVolume, then the PersistentVolume must be defined. If the type is set to Ephemeral, then the PersistentVolume must not be defined.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "persistentVolume": { - "description": "persistentVolume is an optional field that specifies the PersistentVolume that will be used to store the Insights data archive. The PersistentVolume must be created in the openshift-insights namespace.", - "$ref": "#/definitions/com.github.openshift.api.insights.v1alpha2.PersistentVolumeConfig" - }, - "type": { - "description": "type is a required field that specifies the type of storage that will be used to store the Insights data archive. Valid values are \"PersistentVolume\" and \"Ephemeral\". When set to Ephemeral, the Insights data archive is stored in the ephemeral storage of the gathering job. When set to PersistentVolume, the Insights data archive is stored in the PersistentVolume that is defined by the PersistentVolume field.", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "persistentVolume": "PersistentVolume" - } - } - ] - }, - "com.github.openshift.api.kubecontrolplane.v1.AggregatorConfig": { - "description": "AggregatorConfig holds information required to make the aggregator function.", - "type": "object", - "required": [ - "proxyClientInfo" - ], - "properties": { - "proxyClientInfo": { - "description": "proxyClientInfo specifies the client cert/key to use when proxying to aggregated API servers", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.CertInfo" - } - } - }, - "com.github.openshift.api.kubecontrolplane.v1.KubeAPIServerConfig": { - "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "servingInfo", - "corsAllowedOrigins", - "auditConfig", - "storageConfig", - "admission", - "kubeClientConfig", - "authConfig", - "aggregatorConfig", - "kubeletClientInfo", - "servicesSubnet", - "servicesNodePortRange", - "consolePublicURL", - "userAgentMatchingConfig", - "imagePolicyConfig", - "projectConfig", - "serviceAccountPublicKeyFiles", - "oauthConfig", - "apiServerArguments" - ], - "properties": { - "admission": { - "description": "admissionConfig holds information about how to configure admission.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.AdmissionConfig" - }, - "aggregatorConfig": { - "description": "aggregatorConfig has options for configuring the aggregator component of the API server.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.kubecontrolplane.v1.AggregatorConfig" - }, - "apiServerArguments": { - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "auditConfig": { - "description": "auditConfig describes how to configure audit information", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.AuditConfig" - }, - "authConfig": { - "description": "authConfig configures authentication options in addition to the standard oauth token and client certificate authenticators", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.kubecontrolplane.v1.MasterAuthConfig" - }, - "consolePublicURL": { - "description": "DEPRECATED: consolePublicURL has been deprecated and setting it has no effect.", - "type": "string", - "default": "" - }, - "corsAllowedOrigins": { - "description": "corsAllowedOrigins", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "imagePolicyConfig": { - "description": "imagePolicyConfig feeds the image policy admission plugin", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.kubecontrolplane.v1.KubeAPIServerImagePolicyConfig" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "kubeClientConfig": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.KubeClientConfig" - }, - "kubeletClientInfo": { - "description": "kubeletClientInfo contains information about how to connect to kubelets", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.kubecontrolplane.v1.KubeletConnectionInfo" - }, - "minimumKubeletVersion": { - "description": "minimumKubeletVersion is the lowest version of a kubelet that can join the cluster. Specifically, the apiserver will deny most authorization requests of kubelets that are older than the specified version, only allowing the kubelet to get and update its node object, and perform subjectaccessreviews. This means any kubelet that attempts to join the cluster will not be able to run any assigned workloads, and will eventually be marked as not ready. Its max length is 8, so maximum version allowed is either \"9.999.99\" or \"99.99.99\". Since the kubelet reports the version of the kubernetes release, not Openshift, this field references the underlying kubernetes version this version of Openshift is based off of. In other words: if an admin wishes to ensure no nodes run an older version than Openshift 4.17, then they should set the minimumKubeletVersion to 1.30.0. When comparing versions, the kubelet's version is stripped of any contents outside of major.minor.patch version. Thus, a kubelet with version \"1.0.0-ec.0\" will be compatible with minimumKubeletVersion \"1.0.0\" or earlier.", - "type": "string", - "default": "" - }, - "oauthConfig": { - "description": "oauthConfig, if present start the /oauth endpoint in this process", - "$ref": "#/definitions/com.github.openshift.api.osin.v1.OAuthConfig" - }, - "projectConfig": { - "description": "projectConfig feeds an admission plugin", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.kubecontrolplane.v1.KubeAPIServerProjectConfig" - }, - "serviceAccountPublicKeyFiles": { - "description": "serviceAccountPublicKeyFiles is a list of files, each containing a PEM-encoded public RSA key. (If any file contains a private key, the public portion of the key is used) The list of public keys is used to verify presented service account tokens. Each key is tried in order until the list is exhausted or verification succeeds. If no keys are specified, no service account authentication will be available.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "servicesNodePortRange": { - "description": "servicesNodePortRange is the range to use for assigning service public ports on a host.", - "type": "string", - "default": "" - }, - "servicesSubnet": { - "description": "servicesSubnet is the subnet to use for assigning service IPs", - "type": "string", - "default": "" - }, - "servingInfo": { - "description": "servingInfo describes how to start serving", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.HTTPServingInfo" - }, - "storageConfig": { - "description": "storageConfig contains information about how to use", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.EtcdStorageConfig" - }, - "userAgentMatchingConfig": { - "description": "userAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.kubecontrolplane.v1.UserAgentMatchingConfig" - } - } - }, - "com.github.openshift.api.kubecontrolplane.v1.KubeAPIServerImagePolicyConfig": { - "type": "object", - "required": [ - "internalRegistryHostname", - "externalRegistryHostnames" - ], - "properties": { - "externalRegistryHostnames": { - "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "internalRegistryHostname": { - "description": "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.kubecontrolplane.v1.KubeAPIServerProjectConfig": { - "type": "object", - "required": [ - "defaultNodeSelector" - ], - "properties": { - "defaultNodeSelector": { - "description": "defaultNodeSelector holds default project node label selector", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.kubecontrolplane.v1.KubeControllerManagerConfig": { - "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "serviceServingCert", - "projectConfig", - "extendedArguments" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "extendedArguments": { - "description": "extendedArguments is used to configure the kube-controller-manager", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "projectConfig": { - "description": "projectConfig is an optimization for the daemonset controller", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.kubecontrolplane.v1.KubeControllerManagerProjectConfig" - }, - "serviceServingCert": { - "description": "serviceServingCert provides support for the old alpha service serving cert signer CA bundle", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.kubecontrolplane.v1.ServiceServingCert" - } - } - }, - "com.github.openshift.api.kubecontrolplane.v1.KubeControllerManagerProjectConfig": { - "type": "object", - "required": [ - "defaultNodeSelector" - ], - "properties": { - "defaultNodeSelector": { - "description": "defaultNodeSelector holds default project node label selector", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.kubecontrolplane.v1.KubeletConnectionInfo": { - "description": "KubeletConnectionInfo holds information necessary for connecting to a kubelet", - "type": "object", - "required": [ - "port", - "ca", - "certFile", - "keyFile" - ], - "properties": { - "ca": { - "description": "ca is the CA for verifying TLS connections to kubelets", - "type": "string", - "default": "" - }, - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - }, - "port": { - "description": "port is the port to connect to kubelets on", - "type": "integer", - "format": "int64", - "default": 0 - } - } - }, - "com.github.openshift.api.kubecontrolplane.v1.MasterAuthConfig": { - "description": "MasterAuthConfig configures authentication options in addition to the standard oauth token and client certificate authenticators", - "type": "object", - "required": [ - "requestHeader", - "webhookTokenAuthenticators", - "oauthMetadataFile" - ], - "properties": { - "oauthMetadataFile": { - "description": "oauthMetadataFile is a path to a file containing the discovery endpoint for OAuth 2.0 Authorization Server Metadata for an external OAuth server. See IETF Draft: // https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This option is mutually exclusive with OAuthConfig", - "type": "string", - "default": "" - }, - "requestHeader": { - "description": "requestHeader holds options for setting up a front proxy against the API. It is optional.", - "$ref": "#/definitions/com.github.openshift.api.kubecontrolplane.v1.RequestHeaderAuthenticationOptions" - }, - "webhookTokenAuthenticators": { - "description": "webhookTokenAuthenticators, if present configures remote token reviewers", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.kubecontrolplane.v1.WebhookTokenAuthenticator" - } - } - } - }, - "com.github.openshift.api.kubecontrolplane.v1.RequestHeaderAuthenticationOptions": { - "description": "RequestHeaderAuthenticationOptions provides options for setting up a front proxy against the entire API instead of against the /oauth endpoint.", - "type": "object", - "required": [ - "clientCA", - "clientCommonNames", - "usernameHeaders", - "groupHeaders", - "extraHeaderPrefixes" - ], - "properties": { - "clientCA": { - "description": "clientCA is a file with the trusted signer certs. It is required.", - "type": "string", - "default": "" - }, - "clientCommonNames": { - "description": "clientCommonNames is a required list of common names to require a match from.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "extraHeaderPrefixes": { - "description": "extraHeaderPrefixes is the set of request header prefixes to inspect for user extra. X-Remote-Extra- is suggested.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "groupHeaders": { - "description": "groupHeaders is the set of headers to check for group information. All are unioned.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "usernameHeaders": { - "description": "usernameHeaders is the list of headers to check for user information. First hit wins.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.kubecontrolplane.v1.ServiceServingCert": { - "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.", - "type": "object", - "required": [ - "certFile" - ], - "properties": { - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.kubecontrolplane.v1.UserAgentDenyRule": { - "description": "UserAgentDenyRule adds a rejection message that can be used to help a user figure out how to get an approved client", - "type": "object", - "required": [ - "regex", - "httpVerbs", - "rejectionMessage" - ], - "properties": { - "httpVerbs": { - "description": "httpVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "regex": { - "description": "regex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f", - "type": "string", - "default": "" - }, - "rejectionMessage": { - "description": "rejectionMessage is the message shown when rejecting a client. If it is not a set, the default message is used.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.kubecontrolplane.v1.UserAgentMatchRule": { - "description": "UserAgentMatchRule describes how to match a given request based on User-Agent and HTTPVerb", - "type": "object", - "required": [ - "regex", - "httpVerbs" - ], - "properties": { - "httpVerbs": { - "description": "httpVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "regex": { - "description": "regex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.kubecontrolplane.v1.UserAgentMatchingConfig": { - "description": "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!", - "type": "object", - "required": [ - "requiredClients", - "deniedClients", - "defaultRejectionMessage" - ], - "properties": { - "defaultRejectionMessage": { - "description": "defaultRejectionMessage is the message shown when rejecting a client. If it is not a set, a generic message is given.", - "type": "string", - "default": "" - }, - "deniedClients": { - "description": "deniedClients if this list is non-empty, then a User-Agent must not match any of the UserAgentRegexes", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.kubecontrolplane.v1.UserAgentDenyRule" - } - }, - "requiredClients": { - "description": "requiredClients if this list is non-empty, then a User-Agent must match one of the UserAgentRegexes to be allowed", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.kubecontrolplane.v1.UserAgentMatchRule" - } - } - } - }, - "com.github.openshift.api.kubecontrolplane.v1.WebhookTokenAuthenticator": { - "description": "WebhookTokenAuthenticators holds the necessary configuation options for external token authenticators", - "type": "object", - "required": [ - "configFile", - "cacheTTL" - ], - "properties": { - "cacheTTL": { - "description": "cacheTTL indicates how long an authentication result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get a default timeout of 2 minutes. If zero (e.g. \"0m\"), caching is disabled", - "type": "string", - "default": "" - }, - "configFile": { - "description": "configFile is a path to a Kubeconfig file with the webhook configuration", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.ActiveDirectoryConfig": { - "description": "ActiveDirectoryConfig holds the necessary configuration options to define how an LDAP group sync interacts with an LDAP server using the Active Directory schema", - "type": "object", - "required": [ - "usersQuery", - "userNameAttributes", - "groupMembershipAttributes" - ], - "properties": { - "groupMembershipAttributes": { - "description": "groupMembershipAttributes defines which attributes on an LDAP user entry will be interpreted as the groups it is a member of", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "userNameAttributes": { - "description": "userNameAttributes defines which attributes on an LDAP user entry will be interpreted as its OpenShift user name.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "usersQuery": { - "description": "AllUsersQuery holds the template for an LDAP query that returns user entries.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.LDAPQuery" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.AdmissionConfig": { - "description": "AdmissionConfig holds the necessary configuration options for admission", - "type": "object", - "required": [ - "pluginConfig" - ], - "properties": { - "pluginConfig": { - "description": "pluginConfig allows specifying a configuration file per admission control plugin", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.AdmissionPluginConfig" - } - }, - "pluginOrderOverride": { - "description": "pluginOrderOverride is a list of admission control plugin names that will be installed on the master. Order is significant. If empty, a default list of plugins is used.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.legacyconfig.v1.AdmissionPluginConfig": { - "description": "AdmissionPluginConfig holds the necessary configuration options for admission plugins", - "type": "object", - "required": [ - "location", - "configuration" - ], - "properties": { - "configuration": { - "description": "configuration is an embedded configuration object to be used as the plugin's configuration. If present, it will be used instead of the path to the configuration file.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "location": { - "description": "location is the path to a configuration file that contains the plugin's configuration", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.AggregatorConfig": { - "description": "AggregatorConfig holds information required to make the aggregator function.", - "type": "object", - "required": [ - "proxyClientInfo" - ], - "properties": { - "proxyClientInfo": { - "description": "proxyClientInfo specifies the client cert/key to use when proxying to aggregated API servers", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.CertInfo" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.AllowAllPasswordIdentityProvider": { - "description": "AllowAllPasswordIdentityProvider provides identities for users authenticating using non-empty passwords\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.AuditConfig": { - "description": "AuditConfig holds configuration for the audit capabilities", - "type": "object", - "required": [ - "enabled", - "auditFilePath", - "maximumFileRetentionDays", - "maximumRetainedFiles", - "maximumFileSizeMegabytes", - "policyFile", - "policyConfiguration", - "logFormat", - "webHookKubeConfig", - "webHookMode" - ], - "properties": { - "auditFilePath": { - "description": "All requests coming to the apiserver will be logged to this file.", - "type": "string", - "default": "" - }, - "enabled": { - "description": "If this flag is set, audit log will be printed in the logs. The logs contains, method, user and a requested URL.", - "type": "boolean", - "default": false - }, - "logFormat": { - "description": "Format of saved audits (legacy or json).", - "type": "string", - "default": "" - }, - "maximumFileRetentionDays": { - "description": "Maximum number of days to retain old log files based on the timestamp encoded in their filename.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "maximumFileSizeMegabytes": { - "description": "Maximum size in megabytes of the log file before it gets rotated. Defaults to 100MB.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "maximumRetainedFiles": { - "description": "Maximum number of old log files to retain.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "policyConfiguration": { - "description": "policyConfiguration is an embedded policy configuration object to be used as the audit policy configuration. If present, it will be used instead of the path to the policy file.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "policyFile": { - "description": "policyFile is a path to the file that defines the audit policy configuration.", - "type": "string", - "default": "" - }, - "webHookKubeConfig": { - "description": "Path to a .kubeconfig formatted file that defines the audit webhook configuration.", - "type": "string", - "default": "" - }, - "webHookMode": { - "description": "Strategy for sending audit events (block or batch).", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.AugmentedActiveDirectoryConfig": { - "description": "AugmentedActiveDirectoryConfig holds the necessary configuration options to define how an LDAP group sync interacts with an LDAP server using the augmented Active Directory schema", - "type": "object", - "required": [ - "usersQuery", - "userNameAttributes", - "groupMembershipAttributes", - "groupsQuery", - "groupUIDAttribute", - "groupNameAttributes" - ], - "properties": { - "groupMembershipAttributes": { - "description": "groupMembershipAttributes defines which attributes on an LDAP user entry will be interpreted as the groups it is a member of", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "groupNameAttributes": { - "description": "groupNameAttributes defines which attributes on an LDAP group entry will be interpreted as its name to use for an OpenShift group", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "groupUIDAttribute": { - "description": "GroupUIDAttributes defines which attribute on an LDAP group entry will be interpreted as its unique identifier. (ldapGroupUID)", - "type": "string", - "default": "" - }, - "groupsQuery": { - "description": "AllGroupsQuery holds the template for an LDAP query that returns group entries.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.LDAPQuery" - }, - "userNameAttributes": { - "description": "userNameAttributes defines which attributes on an LDAP user entry will be interpreted as its OpenShift user name.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "usersQuery": { - "description": "AllUsersQuery holds the template for an LDAP query that returns user entries.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.LDAPQuery" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.BasicAuthPasswordIdentityProvider": { - "description": "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "url", - "ca", - "certFile", - "keyFile" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "ca": { - "description": "ca is the CA for verifying TLS connections", - "type": "string", - "default": "" - }, - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "url": { - "description": "url is the remote URL to connect to", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.BuildDefaultsConfig": { - "description": "BuildDefaultsConfig controls the default information for Builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "properties": { - "annotations": { - "description": "annotations are annotations that will be added to the build pod", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "env": { - "description": "env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } - }, - "gitHTTPProxy": { - "description": "gitHTTPProxy is the location of the HTTPProxy for Git source", - "type": "string" - }, - "gitHTTPSProxy": { - "description": "gitHTTPSProxy is the location of the HTTPSProxy for Git source", - "type": "string" - }, - "gitNoProxy": { - "description": "gitNoProxy is the list of domains for which the proxy should not be used", - "type": "string" - }, - "imageLabels": { - "description": "imageLabels is a list of labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.ImageLabel" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "nodeSelector": { - "description": "nodeSelector is a selector which must be true for the build pod to fit on a node", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "resources": { - "description": "resources defines resource requirements to execute the build.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" - }, - "sourceStrategyDefaults": { - "description": "sourceStrategyDefaults are default values that apply to builds using the source strategy.", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.SourceStrategyDefaultsConfig" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.BuildOverridesConfig": { - "description": "BuildOverridesConfig controls override settings for builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "forcePull" - ], - "properties": { - "annotations": { - "description": "annotations are annotations that will be added to the build pod", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "forcePull": { - "description": "forcePull indicates whether the build strategy should always be set to ForcePull=true", - "type": "boolean", - "default": false - }, - "imageLabels": { - "description": "imageLabels is a list of labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.ImageLabel" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "nodeSelector": { - "description": "nodeSelector is a selector which must be true for the build pod to fit on a node", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "tolerations": { - "description": "tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - } - } - } - }, - "com.github.openshift.api.legacyconfig.v1.CertInfo": { - "description": "CertInfo relates a certificate with a private key", - "type": "object", - "required": [ - "certFile", - "keyFile" - ], - "properties": { - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.ClientConnectionOverrides": { - "description": "ClientConnectionOverrides are a set of overrides to the default client connection settings.", - "type": "object", - "required": [ - "acceptContentTypes", - "contentType", - "qps", - "burst" - ], - "properties": { - "acceptContentTypes": { - "description": "acceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the default value of 'application/json'. This field will control all connections to the server used by a particular client.", - "type": "string", - "default": "" - }, - "burst": { - "description": "burst allows extra queries to accumulate when a client is exceeding its rate.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "contentType": { - "description": "contentType is the content type used when sending data to the server from this client.", - "type": "string", - "default": "" - }, - "qps": { - "description": "qps controls the number of queries per second allowed for this connection.", - "type": "number", - "format": "float", - "default": 0 - } - } - }, - "com.github.openshift.api.legacyconfig.v1.ClusterNetworkEntry": { - "description": "ClusterNetworkEntry defines an individual cluster network. The CIDRs cannot overlap with other cluster network CIDRs, CIDRs reserved for external ips, CIDRs reserved for service networks, and CIDRs reserved for ingress ips.", - "type": "object", - "required": [ - "cidr", - "hostSubnetLength" - ], - "properties": { - "cidr": { - "description": "cidr defines the total range of a cluster networks address space.", - "type": "string", - "default": "" - }, - "hostSubnetLength": { - "description": "hostSubnetLength is the number of bits of the accompanying CIDR address to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pod.", - "type": "integer", - "format": "int64", - "default": 0 - } - } - }, - "com.github.openshift.api.legacyconfig.v1.ControllerConfig": { - "description": "ControllerConfig holds configuration values for controllers", - "type": "object", - "required": [ - "controllers", - "election", - "serviceServingCert" - ], - "properties": { - "controllers": { - "description": "controllers is a list of controllers to enable. '*' enables all on-by-default controllers, 'foo' enables the controller \"+ named 'foo', '-foo' disables the controller named 'foo'. Defaults to \"*\".", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "election": { - "description": "election defines the configuration for electing a controller instance to make changes to the cluster. If unspecified, the ControllerTTL value is checked to determine whether the legacy direct etcd election code will be used.", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.ControllerElectionConfig" - }, - "serviceServingCert": { - "description": "serviceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.ServiceServingCert" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.ControllerElectionConfig": { - "description": "ControllerElectionConfig contains configuration values for deciding how a controller will be elected to act as leader.", - "type": "object", - "required": [ - "lockName", - "lockNamespace", - "lockResource" - ], - "properties": { - "lockName": { - "description": "lockName is the resource name used to act as the lock for determining which controller instance should lead.", - "type": "string", - "default": "" - }, - "lockNamespace": { - "description": "lockNamespace is the resource namespace used to act as the lock for determining which controller instance should lead. It defaults to \"kube-system\"", - "type": "string", - "default": "" - }, - "lockResource": { - "description": "lockResource is the group and resource name to use to coordinate for the controller lock. If unset, defaults to \"configmaps\".", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.GroupResource" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.DNSConfig": { - "description": "DNSConfig holds the necessary configuration options for DNS", - "type": "object", - "required": [ - "bindAddress", - "bindNetwork", - "allowRecursiveQueries" - ], - "properties": { - "allowRecursiveQueries": { - "description": "allowRecursiveQueries allows the DNS server on the master to answer queries recursively. Note that open resolvers can be used for DNS amplification attacks and the master DNS should not be made accessible to public networks.", - "type": "boolean", - "default": false - }, - "bindAddress": { - "description": "bindAddress is the ip:port to serve DNS on", - "type": "string", - "default": "" - }, - "bindNetwork": { - "description": "bindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.DefaultAdmissionConfig": { - "description": "DefaultAdmissionConfig can be used to enable or disable various admission plugins. When this type is present as the `configuration` object under `pluginConfig` and *if* the admission plugin supports it, this will cause an \"off by default\" admission plugin to be enabled\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "disable" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "disable": { - "description": "disable turns off an admission plugin that is enabled by default.", - "type": "boolean", - "default": false - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.DenyAllPasswordIdentityProvider": { - "description": "DenyAllPasswordIdentityProvider provides no identities for users\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.DockerConfig": { - "description": "DockerConfig holds Docker related configuration options.", - "type": "object", - "required": [ - "execHandlerName", - "dockerShimSocket", - "dockerShimRootDirectory" - ], - "properties": { - "dockerShimRootDirectory": { - "description": "dockerShimRootDirectory is the dockershim root directory.", - "type": "string", - "default": "" - }, - "dockerShimSocket": { - "description": "dockerShimSocket is the location of the dockershim socket the kubelet uses. Currently unix socket is supported on Linux, and tcp is supported on windows. Examples:'unix:///var/run/dockershim.sock', 'tcp://localhost:3735'", - "type": "string", - "default": "" - }, - "execHandlerName": { - "description": "execHandlerName is the name of the handler to use for executing commands in containers.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.EtcdConfig": { - "description": "EtcdConfig holds the necessary configuration options for connecting with an etcd database", - "type": "object", - "required": [ - "servingInfo", - "address", - "peerServingInfo", - "peerAddress", - "storageDirectory" - ], - "properties": { - "address": { - "description": "address is the advertised host:port for client connections to etcd", - "type": "string", - "default": "" - }, - "peerAddress": { - "description": "peerAddress is the advertised host:port for peer connections to etcd", - "type": "string", - "default": "" - }, - "peerServingInfo": { - "description": "peerServingInfo describes how to start serving the etcd peer", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.ServingInfo" - }, - "servingInfo": { - "description": "servingInfo describes how to start serving the etcd master", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.ServingInfo" - }, - "storageDirectory": { - "description": "StorageDir is the path to the etcd storage directory", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.EtcdConnectionInfo": { - "description": "EtcdConnectionInfo holds information necessary for connecting to an etcd server", - "type": "object", - "required": [ - "urls", - "ca", - "certFile", - "keyFile" - ], - "properties": { - "ca": { - "description": "ca is a file containing trusted roots for the etcd server certificates", - "type": "string", - "default": "" - }, - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - }, - "urls": { - "description": "urls are the URLs for etcd", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.legacyconfig.v1.EtcdStorageConfig": { - "description": "EtcdStorageConfig holds the necessary configuration options for the etcd storage underlying OpenShift and Kubernetes", - "type": "object", - "required": [ - "kubernetesStorageVersion", - "kubernetesStoragePrefix", - "openShiftStorageVersion", - "openShiftStoragePrefix" - ], - "properties": { - "kubernetesStoragePrefix": { - "description": "kubernetesStoragePrefix is the path within etcd that the Kubernetes resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located. The default value is 'kubernetes.io'.", - "type": "string", - "default": "" - }, - "kubernetesStorageVersion": { - "description": "kubernetesStorageVersion is the API version that Kube resources in etcd should be serialized to. This value should *not* be advanced until all clients in the cluster that read from etcd have code that allows them to read the new version.", - "type": "string", - "default": "" - }, - "openShiftStoragePrefix": { - "description": "openShiftStoragePrefix is the path within etcd that the OpenShift resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located. The default value is 'openshift.io'.", - "type": "string", - "default": "" - }, - "openShiftStorageVersion": { - "description": "openShiftStorageVersion is the API version that OS resources in etcd should be serialized to. This value should *not* be advanced until all clients in the cluster that read from etcd have code that allows them to read the new version.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.GitHubIdentityProvider": { - "description": "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "clientID", - "clientSecret", - "organizations", - "teams", - "hostname", - "ca" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "ca": { - "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value.", - "type": "string", - "default": "" - }, - "clientID": { - "description": "clientID is the oauth client ID", - "type": "string", - "default": "" - }, - "clientSecret": { - "description": "clientSecret is the oauth client secret", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.StringSource" - }, - "hostname": { - "description": "hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value that is configured at /setup/settings#hostname.", - "type": "string", - "default": "" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "organizations": { - "description": "organizations optionally restricts which organizations are allowed to log in", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "teams": { - "description": "teams optionally restricts which teams are allowed to log in. Format is /.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.legacyconfig.v1.GitLabIdentityProvider": { - "description": "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "ca", - "url", - "clientID", - "clientSecret" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "ca": { - "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", - "type": "string", - "default": "" - }, - "clientID": { - "description": "clientID is the oauth client ID", - "type": "string", - "default": "" - }, - "clientSecret": { - "description": "clientSecret is the oauth client secret", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.StringSource" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "legacy": { - "description": "legacy determines if OAuth2 or OIDC should be used If true, OAuth2 is used If false, OIDC is used If nil and the URL's host is gitlab.com, OIDC is used Otherwise, OAuth2 is used In a future release, nil will default to using OIDC Eventually this flag will be removed and only OIDC will be used", - "type": "boolean" - }, - "url": { - "description": "url is the oauth server base URL", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.GoogleIdentityProvider": { - "description": "GoogleIdentityProvider provides identities for users authenticating using Google credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "clientID", - "clientSecret", - "hostedDomain" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "clientID": { - "description": "clientID is the oauth client ID", - "type": "string", - "default": "" - }, - "clientSecret": { - "description": "clientSecret is the oauth client secret", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.StringSource" - }, - "hostedDomain": { - "description": "hostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to", - "type": "string", - "default": "" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.GrantConfig": { - "description": "GrantConfig holds the necessary configuration options for grant handlers", - "type": "object", - "required": [ - "method", - "serviceAccountMethod" - ], - "properties": { - "method": { - "description": "method determines the default strategy to use when an OAuth client requests a grant. This method will be used only if the specific OAuth client doesn't provide a strategy of their own. Valid grant handling methods are:\n - auto: always approves grant requests, useful for trusted clients\n - prompt: prompts the end user for approval of grant requests, useful for third-party clients\n - deny: always denies grant requests, useful for black-listed clients", - "type": "string", - "default": "" - }, - "serviceAccountMethod": { - "description": "serviceAccountMethod is used for determining client authorization for service account oauth client. It must be either: deny, prompt", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.GroupResource": { - "description": "GroupResource points to a resource by its name and API group.", - "type": "object", - "required": [ - "group", - "resource" - ], - "properties": { - "group": { - "description": "group is the name of an API group", - "type": "string", - "default": "" - }, - "resource": { - "description": "resource is the name of a resource.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.HTPasswdPasswordIdentityProvider": { - "description": "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "file" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "file": { - "description": "file is a reference to your htpasswd file", - "type": "string", - "default": "" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.HTTPServingInfo": { - "description": "HTTPServingInfo holds configuration for serving HTTP", - "type": "object", - "required": [ - "bindAddress", - "bindNetwork", - "certFile", - "keyFile", - "clientCA", - "namedCertificates", - "maxRequestsInFlight", - "requestTimeoutSeconds" - ], - "properties": { - "bindAddress": { - "description": "bindAddress is the ip:port to serve on", - "type": "string", - "default": "" - }, - "bindNetwork": { - "description": "bindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", - "type": "string", - "default": "" - }, - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "cipherSuites": { - "description": "cipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "clientCA": { - "description": "clientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - }, - "maxRequestsInFlight": { - "description": "maxRequestsInFlight is the number of concurrent requests allowed to the server. If zero, no limit.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "minTLSVersion": { - "description": "minTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", - "type": "string" - }, - "namedCertificates": { - "description": "namedCertificates is a list of certificates to use to secure requests to specific hostnames", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.NamedCertificate" - } - }, - "requestTimeoutSeconds": { - "description": "requestTimeoutSeconds is the number of seconds before requests are timed out. The default is 60 minutes, if -1 there is no limit on requests.", - "type": "integer", - "format": "int32", - "default": 0 - } - } - }, - "com.github.openshift.api.legacyconfig.v1.IdentityProvider": { - "description": "IdentityProvider provides identities for users authenticating using credentials", - "type": "object", - "required": [ - "name", - "challenge", - "login", - "mappingMethod", - "provider" - ], - "properties": { - "challenge": { - "description": "UseAsChallenger indicates whether to issue WWW-Authenticate challenges for this provider", - "type": "boolean", - "default": false - }, - "login": { - "description": "UseAsLogin indicates whether to use this identity provider for unauthenticated browsers to login against", - "type": "boolean", - "default": false - }, - "mappingMethod": { - "description": "mappingMethod determines how identities from this provider are mapped to users", - "type": "string", - "default": "" - }, - "name": { - "description": "name is used to qualify the identities returned by this provider", - "type": "string", - "default": "" - }, - "provider": { - "description": "provider contains the information about how to set up a specific identity provider", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.ImageConfig": { - "description": "ImageConfig holds the necessary configuration options for building image names for system components", - "type": "object", - "required": [ - "format", - "latest" - ], - "properties": { - "format": { - "description": "format is the format of the name to be built for the system component", - "type": "string", - "default": "" - }, - "latest": { - "description": "latest determines if the latest tag will be pulled from the registry", - "type": "boolean", - "default": false - } - } - }, - "com.github.openshift.api.legacyconfig.v1.ImagePolicyConfig": { - "description": "ImagePolicyConfig holds the necessary configuration options for limits and behavior for importing images", - "type": "object", - "required": [ - "maxImagesBulkImportedPerRepository", - "disableScheduledImport", - "scheduledImageImportMinimumIntervalSeconds", - "maxScheduledImageImportsPerMinute" - ], - "properties": { - "additionalTrustedCA": { - "description": "additionalTrustedCA is a path to a pem bundle file containing additional CAs that should be trusted during imagestream import.", - "type": "string" - }, - "allowedRegistriesForImport": { - "description": "allowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.RegistryLocation" - } - }, - "disableScheduledImport": { - "description": "disableScheduledImport allows scheduled background import of images to be disabled.", - "type": "boolean", - "default": false - }, - "externalRegistryHostname": { - "description": "externalRegistryHostname sets the hostname for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", - "type": "string" - }, - "internalRegistryHostname": { - "description": "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format.", - "type": "string" - }, - "maxImagesBulkImportedPerRepository": { - "description": "maxImagesBulkImportedPerRepository controls the number of images that are imported when a user does a bulk import of a container repository. This number defaults to 50 to prevent users from importing large numbers of images accidentally. Set -1 for no limit.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "maxScheduledImageImportsPerMinute": { - "description": "maxScheduledImageImportsPerMinute is the maximum number of scheduled image streams that will be imported in the background per minute. The default value is 60. Set to -1 for unlimited.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "scheduledImageImportMinimumIntervalSeconds": { - "description": "scheduledImageImportMinimumIntervalSeconds is the minimum number of seconds that can elapse between when image streams scheduled for background import are checked against the upstream repository. The default value is 15 minutes.", - "type": "integer", - "format": "int32", - "default": 0 - } - } - }, - "com.github.openshift.api.legacyconfig.v1.JenkinsPipelineConfig": { - "description": "JenkinsPipelineConfig holds configuration for the Jenkins pipeline strategy", - "type": "object", - "required": [ - "autoProvisionEnabled", - "templateNamespace", - "templateName", - "serviceName", - "parameters" - ], - "properties": { - "autoProvisionEnabled": { - "description": "autoProvisionEnabled determines whether a Jenkins server will be spawned from the provided template when the first build config in the project with type JenkinsPipeline is created. When not specified this option defaults to true.", - "type": "boolean" - }, - "parameters": { - "description": "parameters specifies a set of optional parameters to the Jenkins template.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "serviceName": { - "description": "serviceName is the name of the Jenkins service OpenShift uses to detect whether a Jenkins pipeline handler has already been installed in a project. This value *must* match a service name in the provided template.", - "type": "string", - "default": "" - }, - "templateName": { - "description": "templateName is the name of the default Jenkins template", - "type": "string", - "default": "" - }, - "templateNamespace": { - "description": "templateNamespace contains the namespace name where the Jenkins template is stored", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.KeystonePasswordIdentityProvider": { - "description": "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "url", - "ca", - "certFile", - "keyFile", - "domainName", - "useKeystoneIdentity" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "ca": { - "description": "ca is the CA for verifying TLS connections", - "type": "string", - "default": "" - }, - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "domainName": { - "description": "Domain Name is required for keystone v3", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "url": { - "description": "url is the remote URL to connect to", - "type": "string", - "default": "" - }, - "useKeystoneIdentity": { - "description": "useKeystoneIdentity flag indicates that user should be authenticated by keystone ID, not by username", - "type": "boolean", - "default": false - } - } - }, - "com.github.openshift.api.legacyconfig.v1.KubeletConnectionInfo": { - "description": "KubeletConnectionInfo holds information necessary for connecting to a kubelet", - "type": "object", - "required": [ - "port", - "ca", - "certFile", - "keyFile" - ], - "properties": { - "ca": { - "description": "ca is the CA for verifying TLS connections to kubelets", - "type": "string", - "default": "" - }, - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - }, - "port": { - "description": "port is the port to connect to kubelets on", - "type": "integer", - "format": "int32", - "default": 0 - } - } - }, - "com.github.openshift.api.legacyconfig.v1.KubernetesMasterConfig": { - "description": "KubernetesMasterConfig holds the necessary configuration options for the Kubernetes master", - "type": "object", - "required": [ - "apiLevels", - "disabledAPIGroupVersions", - "masterIP", - "masterEndpointReconcileTTL", - "servicesSubnet", - "servicesNodePortRange", - "schedulerConfigFile", - "podEvictionTimeout", - "proxyClientInfo", - "apiServerArguments", - "controllerArguments", - "schedulerArguments" - ], - "properties": { - "apiLevels": { - "description": "apiLevels is a list of API levels that should be enabled on startup: v1 as examples", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "apiServerArguments": { - "description": "apiServerArguments are key value pairs that will be passed directly to the Kube apiserver that match the apiservers's command line arguments. These are not migrated, but if you reference a value that does not exist the server will not start. These values may override other settings in KubernetesMasterConfig which may cause invalid configurations.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "controllerArguments": { - "description": "controllerArguments are key value pairs that will be passed directly to the Kube controller manager that match the controller manager's command line arguments. These are not migrated, but if you reference a value that does not exist the server will not start. These values may override other settings in KubernetesMasterConfig which may cause invalid configurations.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "disabledAPIGroupVersions": { - "description": "disabledAPIGroupVersions is a map of groups to the versions (or *) that should be disabled.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "masterEndpointReconcileTTL": { - "description": "masterEndpointReconcileTTL sets the time to live in seconds of an endpoint record recorded by each master. The endpoints are checked at an interval that is 2/3 of this value and this value defaults to 15s if unset. In very large clusters, this value may be increased to reduce the possibility that the master endpoint record expires (due to other load on the etcd server) and causes masters to drop in and out of the kubernetes service record. It is not recommended to set this value below 15s.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "masterIP": { - "description": "masterIP is the public IP address of kubernetes stuff. If empty, the first result from net.InterfaceAddrs will be used.", - "type": "string", - "default": "" - }, - "podEvictionTimeout": { - "description": "podEvictionTimeout controls grace period for deleting pods on failed nodes. It takes valid time duration string. If empty, you get the default pod eviction timeout.", - "type": "string", - "default": "" - }, - "proxyClientInfo": { - "description": "proxyClientInfo specifies the client cert/key to use when proxying to pods", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.CertInfo" - }, - "schedulerArguments": { - "description": "schedulerArguments are key value pairs that will be passed directly to the Kube scheduler that match the scheduler's command line arguments. These are not migrated, but if you reference a value that does not exist the server will not start. These values may override other settings in KubernetesMasterConfig which may cause invalid configurations.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "schedulerConfigFile": { - "description": "schedulerConfigFile points to a file that describes how to set up the scheduler. If empty, you get the default scheduling rules.", - "type": "string", - "default": "" - }, - "servicesNodePortRange": { - "description": "servicesNodePortRange is the range to use for assigning service public ports on a host.", - "type": "string", - "default": "" - }, - "servicesSubnet": { - "description": "servicesSubnet is the subnet to use for assigning service IPs", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.LDAPAttributeMapping": { - "description": "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields", - "type": "object", - "required": [ - "id", - "preferredUsername", - "name", - "email" - ], - "properties": { - "email": { - "description": "email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "id": { - "description": "id is the list of attributes whose values should be used as the user ID. Required. LDAP standard identity attribute is \"dn\"", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "name": { - "description": "name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "preferredUsername": { - "description": "preferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.legacyconfig.v1.LDAPPasswordIdentityProvider": { - "description": "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "url", - "bindDN", - "bindPassword", - "insecure", - "ca", - "attributes" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "attributes": { - "description": "attributes maps LDAP attributes to identities", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.LDAPAttributeMapping" - }, - "bindDN": { - "description": "bindDN is an optional DN to bind with during the search phase.", - "type": "string", - "default": "" - }, - "bindPassword": { - "description": "bindPassword is an optional password to bind with during the search phase.", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.StringSource" - }, - "ca": { - "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", - "type": "string", - "default": "" - }, - "insecure": { - "description": "Insecure, if true, indicates the connection should not use TLS. Cannot be set to true with a URL scheme of \"ldaps://\" If false, \"ldaps://\" URLs connect using TLS, and \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830", - "type": "boolean", - "default": false - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "url": { - "description": "url is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is\n ldap://host:port/basedn?attribute?scope?filter", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.LDAPQuery": { - "description": "LDAPQuery holds the options necessary to build an LDAP query", - "type": "object", - "required": [ - "baseDN", - "scope", - "derefAliases", - "timeout", - "filter", - "pageSize" - ], - "properties": { - "baseDN": { - "description": "The DN of the branch of the directory where all searches should start from", - "type": "string", - "default": "" - }, - "derefAliases": { - "description": "The (optional) behavior of the search with regards to alisases. Can be: never: never dereference aliases, search: only dereference in searching, base: only dereference in finding the base object, always: always dereference Defaults to always dereferencing if not set", - "type": "string", - "default": "" - }, - "filter": { - "description": "filter is a valid LDAP search filter that retrieves all relevant entries from the LDAP server with the base DN", - "type": "string", - "default": "" - }, - "pageSize": { - "description": "pageSize is the maximum preferred page size, measured in LDAP entries. A page size of 0 means no paging will be done.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "scope": { - "description": "The (optional) scope of the search. Can be: base: only the base object, one: all object on the base level, sub: the entire subtree Defaults to the entire subtree if not set", - "type": "string", - "default": "" - }, - "timeout": { - "description": "TimeLimit holds the limit of time in seconds that any request to the server can remain outstanding before the wait for a response is given up. If this is 0, no client-side limit is imposed", - "type": "integer", - "format": "int32", - "default": 0 - } - } - }, - "com.github.openshift.api.legacyconfig.v1.LDAPSyncConfig": { - "description": "LDAPSyncConfig holds the necessary configuration options to define an LDAP group sync\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "url", - "bindDN", - "bindPassword", - "insecure", - "ca", - "groupUIDNameMapping" - ], - "properties": { - "activeDirectory": { - "description": "ActiveDirectoryConfig holds the configuration for extracting data from an LDAP server set up in a fashion similar to that used in Active Directory: first-class user entries, with group membership determined by a multi-valued attribute on members listing groups they are a member of", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.ActiveDirectoryConfig" - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "augmentedActiveDirectory": { - "description": "AugmentedActiveDirectoryConfig holds the configuration for extracting data from an LDAP server set up in a fashion similar to that used in Active Directory as described above, with one addition: first-class group entries exist and are used to hold metadata but not group membership", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.AugmentedActiveDirectoryConfig" - }, - "bindDN": { - "description": "bindDN is an optional DN to bind to the LDAP server with", - "type": "string", - "default": "" - }, - "bindPassword": { - "description": "bindPassword is an optional password to bind with during the search phase.", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.StringSource" - }, - "ca": { - "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", - "type": "string", - "default": "" - }, - "groupUIDNameMapping": { - "description": "LDAPGroupUIDToOpenShiftGroupNameMapping is an optional direct mapping of LDAP group UIDs to OpenShift Group names", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "insecure": { - "description": "Insecure, if true, indicates the connection should not use TLS. Cannot be set to true with a URL scheme of \"ldaps://\" If false, \"ldaps://\" URLs connect using TLS, and \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830", - "type": "boolean", - "default": false - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "rfc2307": { - "description": "RFC2307Config holds the configuration for extracting data from an LDAP server set up in a fashion similar to RFC2307: first-class group and user entries, with group membership determined by a multi-valued attribute on the group entry listing its members", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.RFC2307Config" - }, - "url": { - "description": "Host is the scheme, host and port of the LDAP server to connect to: scheme://host:port", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.LocalQuota": { - "description": "LocalQuota contains options for controlling local volume quota on the node.", - "type": "object", - "required": [ - "perFSGroup" - ], - "properties": { - "perFSGroup": { - "description": "FSGroup can be specified to enable a quota on local storage use per unique FSGroup ID. At present this is only implemented for emptyDir volumes, and if the underlying volumeDirectory is on an XFS filesystem.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.MasterAuthConfig": { - "description": "MasterAuthConfig configures authentication options in addition to the standard oauth token and client certificate authenticators", - "type": "object", - "required": [ - "requestHeader", - "webhookTokenAuthenticators", - "oauthMetadataFile" - ], - "properties": { - "oauthMetadataFile": { - "description": "oauthMetadataFile is a path to a file containing the discovery endpoint for OAuth 2.0 Authorization Server Metadata for an external OAuth server. See IETF Draft: // https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This option is mutually exclusive with OAuthConfig", - "type": "string", - "default": "" - }, - "requestHeader": { - "description": "requestHeader holds options for setting up a front proxy against the API. It is optional.", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.RequestHeaderAuthenticationOptions" - }, - "webhookTokenAuthenticators": { - "description": "WebhookTokenAuthnConfig, if present configures remote token reviewers", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.WebhookTokenAuthenticator" - } - } - } - }, - "com.github.openshift.api.legacyconfig.v1.MasterClients": { - "description": "MasterClients holds references to `.kubeconfig` files that qualify master clients for OpenShift and Kubernetes", - "type": "object", - "required": [ - "openshiftLoopbackKubeConfig", - "openshiftLoopbackClientConnectionOverrides" - ], - "properties": { - "openshiftLoopbackClientConnectionOverrides": { - "description": "openshiftLoopbackClientConnectionOverrides specifies client overrides for system components to loop back to this master.", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.ClientConnectionOverrides" - }, - "openshiftLoopbackKubeConfig": { - "description": "openshiftLoopbackKubeConfig is a .kubeconfig filename for system components to loopback to this master", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.MasterConfig": { - "description": "MasterConfig holds the necessary configuration options for the OpenShift master\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "servingInfo", - "authConfig", - "aggregatorConfig", - "corsAllowedOrigins", - "apiLevels", - "masterPublicURL", - "controllers", - "admissionConfig", - "controllerConfig", - "etcdStorageConfig", - "etcdClientInfo", - "kubeletClientInfo", - "kubernetesMasterConfig", - "etcdConfig", - "oauthConfig", - "dnsConfig", - "serviceAccountConfig", - "masterClients", - "imageConfig", - "imagePolicyConfig", - "policyConfig", - "projectConfig", - "routingConfig", - "networkConfig", - "volumeConfig", - "jenkinsPipelineConfig", - "auditConfig" - ], - "properties": { - "admissionConfig": { - "description": "admissionConfig contains admission control plugin configuration.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.AdmissionConfig" - }, - "aggregatorConfig": { - "description": "aggregatorConfig has options for configuring the aggregator component of the API server.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.AggregatorConfig" - }, - "apiLevels": { - "description": "apiLevels is a list of API levels that should be enabled on startup: v1 as examples", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "auditConfig": { - "description": "auditConfig holds information related to auditing capabilities.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.AuditConfig" - }, - "authConfig": { - "description": "authConfig configures authentication options in addition to the standard oauth token and client certificate authenticators", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.MasterAuthConfig" - }, - "controllerConfig": { - "description": "controllerConfig holds configuration values for controllers", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.ControllerConfig" - }, - "controllers": { - "description": "controllers is a list of the controllers that should be started. If set to \"none\", no controllers will start automatically. The default value is \"*\" which will start all controllers. When using \"*\", you may exclude controllers by prepending a \"-\" in front of their name. No other values are recognized at this time.", - "type": "string", - "default": "" - }, - "corsAllowedOrigins": { - "description": "CORSAllowedOrigins", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "dnsConfig": { - "description": "DNSConfig, if present start the DNS server in this process", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.DNSConfig" - }, - "etcdClientInfo": { - "description": "etcdClientInfo contains information about how to connect to etcd", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.EtcdConnectionInfo" - }, - "etcdConfig": { - "description": "EtcdConfig, if present start etcd in this process", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.EtcdConfig" - }, - "etcdStorageConfig": { - "description": "etcdStorageConfig contains information about how API resources are stored in Etcd. These values are only relevant when etcd is the backing store for the cluster.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.EtcdStorageConfig" - }, - "imageConfig": { - "description": "imageConfig holds options that describe how to build image names for system components", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.ImageConfig" - }, - "imagePolicyConfig": { - "description": "imagePolicyConfig controls limits and behavior for importing images", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.ImagePolicyConfig" - }, - "jenkinsPipelineConfig": { - "description": "jenkinsPipelineConfig holds information about the default Jenkins template used for JenkinsPipeline build strategy.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.JenkinsPipelineConfig" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "kubeletClientInfo": { - "description": "kubeletClientInfo contains information about how to connect to kubelets", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.KubeletConnectionInfo" - }, - "kubernetesMasterConfig": { - "description": "KubernetesMasterConfig, if present start the kubernetes master in this process", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.KubernetesMasterConfig" - }, - "masterClients": { - "description": "masterClients holds all the client connection information for controllers and other system components", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.MasterClients" - }, - "masterPublicURL": { - "description": "masterPublicURL is how clients can access the OpenShift API server", - "type": "string", - "default": "" - }, - "networkConfig": { - "description": "networkConfig to be passed to the compiled in network plugin", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.MasterNetworkConfig" - }, - "oauthConfig": { - "description": "OAuthConfig, if present start the /oauth endpoint in this process", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.OAuthConfig" - }, - "policyConfig": { - "description": "policyConfig holds information about where to locate critical pieces of bootstrapping policy", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.PolicyConfig" - }, - "projectConfig": { - "description": "projectConfig holds information about project creation and defaults", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.ProjectConfig" - }, - "routingConfig": { - "description": "routingConfig holds information about routing and route generation", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.RoutingConfig" - }, - "serviceAccountConfig": { - "description": "serviceAccountConfig holds options related to service accounts", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.ServiceAccountConfig" - }, - "servingInfo": { - "description": "servingInfo describes how to start serving", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.HTTPServingInfo" - }, - "volumeConfig": { - "description": "MasterVolumeConfig contains options for configuring volume plugins in the master node.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.MasterVolumeConfig" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.MasterNetworkConfig": { - "description": "MasterNetworkConfig to be passed to the compiled in network plugin", - "type": "object", - "required": [ - "networkPluginName", - "clusterNetworks", - "serviceNetworkCIDR", - "externalIPNetworkCIDRs", - "ingressIPNetworkCIDR" - ], - "properties": { - "clusterNetworkCIDR": { - "description": "clusterNetworkCIDR is the CIDR string to specify the global overlay network's L3 space. Deprecated, but maintained for backwards compatibility, use ClusterNetworks instead.", - "type": "string" - }, - "clusterNetworks": { - "description": "clusterNetworks is a list of ClusterNetwork objects that defines the global overlay network's L3 space by specifying a set of CIDR and netmasks that the SDN can allocate addressed from. If this is specified, then ClusterNetworkCIDR and HostSubnetLength may not be set.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.ClusterNetworkEntry" - } - }, - "externalIPNetworkCIDRs": { - "description": "externalIPNetworkCIDRs controls what values are acceptable for the service external IP field. If empty, no externalIP may be set. It may contain a list of CIDRs which are checked for access. If a CIDR is prefixed with !, IPs in that CIDR will be rejected. Rejections will be applied first, then the IP checked against one of the allowed CIDRs. You should ensure this range does not overlap with your nodes, pods, or service CIDRs for security reasons.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "hostSubnetLength": { - "description": "hostSubnetLength is the number of bits to allocate to each host's subnet e.g. 8 would mean a /24 network on the host. Deprecated, but maintained for backwards compatibility, use ClusterNetworks instead.", - "type": "integer", - "format": "int64" - }, - "ingressIPNetworkCIDR": { - "description": "ingressIPNetworkCIDR controls the range to assign ingress ips from for services of type LoadBalancer on bare metal. If empty, ingress ips will not be assigned. It may contain a single CIDR that will be allocated from. For security reasons, you should ensure that this range does not overlap with the CIDRs reserved for external ips, nodes, pods, or services.", - "type": "string", - "default": "" - }, - "networkPluginName": { - "description": "networkPluginName is the name of the network plugin to use", - "type": "string", - "default": "" - }, - "serviceNetworkCIDR": { - "description": "ServiceNetwork is the CIDR string to specify the service networks", - "type": "string", - "default": "" - }, - "vxlanPort": { - "description": "vxlanPort is the VXLAN port used by the cluster defaults. If it is not set, 4789 is the default value", - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.MasterVolumeConfig": { - "description": "MasterVolumeConfig contains options for configuring volume plugins in the master node.", - "type": "object", - "required": [ - "dynamicProvisioningEnabled" - ], - "properties": { - "dynamicProvisioningEnabled": { - "description": "dynamicProvisioningEnabled is a boolean that toggles dynamic provisioning off when false, defaults to true", - "type": "boolean" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.NamedCertificate": { - "description": "NamedCertificate specifies a certificate/key, and the names it should be served for", - "type": "object", - "required": [ - "names", - "certFile", - "keyFile" - ], - "properties": { - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - }, - "names": { - "description": "names is a list of DNS names this certificate should be used to secure A name can be a normal DNS name, or can contain leading wildcard segments.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.legacyconfig.v1.NodeAuthConfig": { - "description": "NodeAuthConfig holds authn/authz configuration options", - "type": "object", - "required": [ - "authenticationCacheTTL", - "authenticationCacheSize", - "authorizationCacheTTL", - "authorizationCacheSize" - ], - "properties": { - "authenticationCacheSize": { - "description": "authenticationCacheSize indicates how many authentication results should be cached. If 0, the default cache size is used.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "authenticationCacheTTL": { - "description": "authenticationCacheTTL indicates how long an authentication result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get the default timeout. If zero (e.g. \"0m\"), caching is disabled", - "type": "string", - "default": "" - }, - "authorizationCacheSize": { - "description": "authorizationCacheSize indicates how many authorization results should be cached. If 0, the default cache size is used.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "authorizationCacheTTL": { - "description": "authorizationCacheTTL indicates how long an authorization result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get the default timeout. If zero (e.g. \"0m\"), caching is disabled", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.NodeConfig": { - "description": "NodeConfig is the fully specified config starting an OpenShift node\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "nodeName", - "nodeIP", - "servingInfo", - "masterKubeConfig", - "masterClientConnectionOverrides", - "dnsDomain", - "dnsIP", - "dnsBindAddress", - "dnsNameservers", - "dnsRecursiveResolvConf", - "networkConfig", - "volumeDirectory", - "imageConfig", - "allowDisabledDocker", - "podManifestConfig", - "authConfig", - "dockerConfig", - "iptablesSyncPeriod", - "enableUnidling", - "volumeConfig" - ], - "properties": { - "allowDisabledDocker": { - "description": "allowDisabledDocker if true, the Kubelet will ignore errors from Docker. This means that a node can start on a machine that doesn't have docker started.", - "type": "boolean", - "default": false - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "authConfig": { - "description": "authConfig holds authn/authz configuration options", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.NodeAuthConfig" - }, - "dnsBindAddress": { - "description": "dnsBindAddress is the ip:port to serve DNS on. If this is not set, the DNS server will not be started. Because most DNS resolvers will only listen on port 53, if you select an alternative port you will need a DNS proxy like dnsmasq to answer queries for containers. A common configuration is dnsmasq configured on a node IP listening on 53 and delegating queries for dnsDomain to this process, while sending other queries to the host environments nameservers.", - "type": "string", - "default": "" - }, - "dnsDomain": { - "description": "dnsDomain holds the domain suffix that will be used for the DNS search path inside each container. Defaults to 'cluster.local'.", - "type": "string", - "default": "" - }, - "dnsIP": { - "description": "dnsIP is the IP address that pods will use to access cluster DNS. Defaults to the service IP of the Kubernetes master. This IP must be listening on port 53 for compatibility with libc resolvers (which cannot be configured to resolve names from any other port). When running more complex local DNS configurations, this is often set to the local address of a DNS proxy like dnsmasq, which then will consult either the local DNS (see dnsBindAddress) or the master DNS.", - "type": "string", - "default": "" - }, - "dnsNameservers": { - "description": "dnsNameservers is a list of ip:port values of recursive nameservers to forward queries to when running a local DNS server if dnsBindAddress is set. If this value is empty, the DNS server will default to the nameservers listed in /etc/resolv.conf. If you have configured dnsmasq or another DNS proxy on the system, this value should be set to the upstream nameservers dnsmasq resolves with.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "dnsRecursiveResolvConf": { - "description": "dnsRecursiveResolvConf is a path to a resolv.conf file that contains settings for an upstream server. Only the nameservers and port fields are used. The file must exist and parse correctly. It adds extra nameservers to DNSNameservers if set.", - "type": "string", - "default": "" - }, - "dockerConfig": { - "description": "dockerConfig holds Docker related configuration options.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.DockerConfig" - }, - "enableUnidling": { - "description": "enableUnidling controls whether or not the hybrid unidling proxy will be set up", - "type": "boolean" - }, - "imageConfig": { - "description": "imageConfig holds options that describe how to build image names for system components", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.ImageConfig" - }, - "iptablesSyncPeriod": { - "description": "iptablesSyncPeriod is how often iptable rules are refreshed", - "type": "string", - "default": "" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "kubeletArguments": { - "description": "kubeletArguments are key value pairs that will be passed directly to the Kubelet that match the Kubelet's command line arguments. These are not migrated or validated, so if you use them they may become invalid. These values override other settings in NodeConfig which may cause invalid configurations.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "masterClientConnectionOverrides": { - "description": "masterClientConnectionOverrides provides overrides to the client connection used to connect to the master.", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.ClientConnectionOverrides" - }, - "masterKubeConfig": { - "description": "masterKubeConfig is a filename for the .kubeconfig file that describes how to connect this node to the master", - "type": "string", - "default": "" - }, - "networkConfig": { - "description": "networkConfig provides network options for the node", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.NodeNetworkConfig" - }, - "networkPluginName": { - "description": "Deprecated and maintained for backward compatibility, use NetworkConfig.NetworkPluginName instead", - "type": "string" - }, - "nodeIP": { - "description": "Node may have multiple IPs, specify the IP to use for pod traffic routing If not specified, network parse/lookup on the nodeName is performed and the first non-loopback address is used", - "type": "string", - "default": "" - }, - "nodeName": { - "description": "nodeName is the value used to identify this particular node in the cluster. If possible, this should be your fully qualified hostname. If you're describing a set of static nodes to the master, this value must match one of the values in the list", - "type": "string", - "default": "" - }, - "podManifestConfig": { - "description": "podManifestConfig holds the configuration for enabling the Kubelet to create pods based from a manifest file(s) placed locally on the node", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.PodManifestConfig" - }, - "proxyArguments": { - "description": "proxyArguments are key value pairs that will be passed directly to the Proxy that match the Proxy's command line arguments. These are not migrated or validated, so if you use them they may become invalid. These values override other settings in NodeConfig which may cause invalid configurations.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "servingInfo": { - "description": "servingInfo describes how to start serving", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.ServingInfo" - }, - "volumeConfig": { - "description": "volumeConfig contains options for configuring volumes on the node.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.NodeVolumeConfig" - }, - "volumeDirectory": { - "description": "volumeDirectory is the directory that volumes will be stored under", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.NodeNetworkConfig": { - "description": "NodeNetworkConfig provides network options for the node", - "type": "object", - "required": [ - "networkPluginName", - "mtu" - ], - "properties": { - "mtu": { - "description": "Maximum transmission unit for the network packets", - "type": "integer", - "format": "int64", - "default": 0 - }, - "networkPluginName": { - "description": "networkPluginName is a string specifying the networking plugin", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.NodeVolumeConfig": { - "description": "NodeVolumeConfig contains options for configuring volumes on the node.", - "type": "object", - "required": [ - "localQuota" - ], - "properties": { - "localQuota": { - "description": "localQuota contains options for controlling local volume quota on the node.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.LocalQuota" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.OAuthConfig": { - "description": "OAuthConfig holds the necessary configuration options for OAuth authentication", - "type": "object", - "required": [ - "masterCA", - "masterURL", - "masterPublicURL", - "assetPublicURL", - "alwaysShowProviderSelection", - "identityProviders", - "grantConfig", - "sessionConfig", - "tokenConfig", - "templates" - ], - "properties": { - "alwaysShowProviderSelection": { - "description": "alwaysShowProviderSelection will force the provider selection page to render even when there is only a single provider.", - "type": "boolean", - "default": false - }, - "assetPublicURL": { - "description": "assetPublicURL is used for building valid client redirect URLs for external access", - "type": "string", - "default": "" - }, - "grantConfig": { - "description": "grantConfig describes how to handle grants", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.GrantConfig" - }, - "identityProviders": { - "description": "identityProviders is an ordered list of ways for a user to identify themselves", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.IdentityProvider" - } - }, - "masterCA": { - "description": "masterCA is the CA for verifying the TLS connection back to the MasterURL.", - "type": "string" - }, - "masterPublicURL": { - "description": "masterPublicURL is used for building valid client redirect URLs for internal and external access", - "type": "string", - "default": "" - }, - "masterURL": { - "description": "masterURL is used for making server-to-server calls to exchange authorization codes for access tokens", - "type": "string", - "default": "" - }, - "sessionConfig": { - "description": "sessionConfig hold information about configuring sessions.", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.SessionConfig" - }, - "templates": { - "description": "templates allow you to customize pages like the login page.", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.OAuthTemplates" - }, - "tokenConfig": { - "description": "tokenConfig contains options for authorization and access tokens", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.TokenConfig" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.OAuthTemplates": { - "description": "OAuthTemplates allow for customization of pages like the login page", - "type": "object", - "required": [ - "login", - "providerSelection", - "error" - ], - "properties": { - "error": { - "description": "error is a path to a file containing a go template used to render error pages during the authentication or grant flow If unspecified, the default error page is used.", - "type": "string", - "default": "" - }, - "login": { - "description": "login is a path to a file containing a go template used to render the login page. If unspecified, the default login page is used.", - "type": "string", - "default": "" - }, - "providerSelection": { - "description": "providerSelection is a path to a file containing a go template used to render the provider selection page. If unspecified, the default provider selection page is used.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.OpenIDClaims": { - "description": "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider", - "type": "object", - "required": [ - "id", - "preferredUsername", - "name", - "email" - ], - "properties": { - "email": { - "description": "email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "id": { - "description": "id is the list of claims whose values should be used as the user ID. Required. OpenID standard identity claim is \"sub\"", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "name": { - "description": "name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "preferredUsername": { - "description": "preferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the id claim", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.legacyconfig.v1.OpenIDIdentityProvider": { - "description": "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "ca", - "clientID", - "clientSecret", - "extraScopes", - "extraAuthorizeParameters", - "urls", - "claims" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "ca": { - "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", - "type": "string", - "default": "" - }, - "claims": { - "description": "claims mappings", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.OpenIDClaims" - }, - "clientID": { - "description": "clientID is the oauth client ID", - "type": "string", - "default": "" - }, - "clientSecret": { - "description": "clientSecret is the oauth client secret", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.StringSource" - }, - "extraAuthorizeParameters": { - "description": "extraAuthorizeParameters are any custom parameters to add to the authorize request.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "extraScopes": { - "description": "extraScopes are any scopes to request in addition to the standard \"openid\" scope.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "urls": { - "description": "urls to use to authenticate", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.OpenIDURLs" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.OpenIDURLs": { - "description": "OpenIDURLs are URLs to use when authenticating with an OpenID identity provider", - "type": "object", - "required": [ - "authorize", - "token", - "userInfo" - ], - "properties": { - "authorize": { - "description": "authorize is the oauth authorization URL", - "type": "string", - "default": "" - }, - "token": { - "description": "token is the oauth token granting URL", - "type": "string", - "default": "" - }, - "userInfo": { - "description": "userInfo is the optional userinfo URL. If present, a granted access_token is used to request claims If empty, a granted id_token is parsed for claims", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.PodManifestConfig": { - "description": "PodManifestConfig holds the necessary configuration options for using pod manifests", - "type": "object", - "required": [ - "path", - "fileCheckIntervalSeconds" - ], - "properties": { - "fileCheckIntervalSeconds": { - "description": "fileCheckIntervalSeconds is the interval in seconds for checking the manifest file(s) for new data The interval needs to be a positive value", - "type": "integer", - "format": "int64", - "default": 0 - }, - "path": { - "description": "path specifies the path for the pod manifest file or directory If its a directory, its expected to contain on or more manifest files This is used by the Kubelet to create pods on the node", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.PolicyConfig": { - "description": "holds the necessary configuration options for", - "type": "object", - "required": [ - "userAgentMatchingConfig" - ], - "properties": { - "userAgentMatchingConfig": { - "description": "userAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.UserAgentMatchingConfig" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.ProjectConfig": { - "description": "holds the necessary configuration options for", - "type": "object", - "required": [ - "defaultNodeSelector", - "projectRequestMessage", - "projectRequestTemplate", - "securityAllocator" - ], - "properties": { - "defaultNodeSelector": { - "description": "defaultNodeSelector holds default project node label selector", - "type": "string", - "default": "" - }, - "projectRequestMessage": { - "description": "projectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint", - "type": "string", - "default": "" - }, - "projectRequestTemplate": { - "description": "projectRequestTemplate is the template to use for creating projects in response to projectrequest. It is in the format namespace/template and it is optional. If it is not specified, a default template is used.", - "type": "string", - "default": "" - }, - "securityAllocator": { - "description": "securityAllocator controls the automatic allocation of UIDs and MCS labels to a project. If nil, allocation is disabled.", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.SecurityAllocator" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.RFC2307Config": { - "description": "RFC2307Config holds the necessary configuration options to define how an LDAP group sync interacts with an LDAP server using the RFC2307 schema", - "type": "object", - "required": [ - "groupsQuery", - "groupUIDAttribute", - "groupNameAttributes", - "groupMembershipAttributes", - "usersQuery", - "userUIDAttribute", - "userNameAttributes", - "tolerateMemberNotFoundErrors", - "tolerateMemberOutOfScopeErrors" - ], - "properties": { - "groupMembershipAttributes": { - "description": "groupMembershipAttributes defines which attributes on an LDAP group entry will be interpreted as its members. The values contained in those attributes must be queryable by your UserUIDAttribute", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "groupNameAttributes": { - "description": "groupNameAttributes defines which attributes on an LDAP group entry will be interpreted as its name to use for an OpenShift group", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "groupUIDAttribute": { - "description": "GroupUIDAttributes defines which attribute on an LDAP group entry will be interpreted as its unique identifier. (ldapGroupUID)", - "type": "string", - "default": "" - }, - "groupsQuery": { - "description": "AllGroupsQuery holds the template for an LDAP query that returns group entries.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.LDAPQuery" - }, - "tolerateMemberNotFoundErrors": { - "description": "tolerateMemberNotFoundErrors determines the behavior of the LDAP sync job when missing user entries are encountered. If 'true', an LDAP query for users that doesn't find any will be tolerated and an only and error will be logged. If 'false', the LDAP sync job will fail if a query for users doesn't find any. The default value is 'false'. Misconfigured LDAP sync jobs with this flag set to 'true' can cause group membership to be removed, so it is recommended to use this flag with caution.", - "type": "boolean", - "default": false - }, - "tolerateMemberOutOfScopeErrors": { - "description": "tolerateMemberOutOfScopeErrors determines the behavior of the LDAP sync job when out-of-scope user entries are encountered. If 'true', an LDAP query for a user that falls outside of the base DN given for the all user query will be tolerated and only an error will be logged. If 'false', the LDAP sync job will fail if a user query would search outside of the base DN specified by the all user query. Misconfigured LDAP sync jobs with this flag set to 'true' can result in groups missing users, so it is recommended to use this flag with caution.", - "type": "boolean", - "default": false - }, - "userNameAttributes": { - "description": "userNameAttributes defines which attributes on an LDAP user entry will be used, in order, as its OpenShift user name. The first attribute with a non-empty value is used. This should match your PreferredUsername setting for your LDAPPasswordIdentityProvider", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "userUIDAttribute": { - "description": "userUIDAttribute defines which attribute on an LDAP user entry will be interpreted as its unique identifier. It must correspond to values that will be found from the GroupMembershipAttributes", - "type": "string", - "default": "" - }, - "usersQuery": { - "description": "AllUsersQuery holds the template for an LDAP query that returns user entries.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.LDAPQuery" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.RegistryLocation": { - "description": "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.", - "type": "object", - "required": [ - "domainName" - ], - "properties": { - "domainName": { - "description": "domainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.", - "type": "string", - "default": "" - }, - "insecure": { - "description": "insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.", - "type": "boolean" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.RemoteConnectionInfo": { - "description": "RemoteConnectionInfo holds information necessary for establishing a remote connection", - "type": "object", - "required": [ - "url", - "ca", - "certFile", - "keyFile" - ], - "properties": { - "ca": { - "description": "ca is the CA for verifying TLS connections", - "type": "string", - "default": "" - }, - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - }, - "url": { - "description": "url is the remote URL to connect to", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.RequestHeaderAuthenticationOptions": { - "description": "RequestHeaderAuthenticationOptions provides options for setting up a front proxy against the entire API instead of against the /oauth endpoint.", - "type": "object", - "required": [ - "clientCA", - "clientCommonNames", - "usernameHeaders", - "groupHeaders", - "extraHeaderPrefixes" - ], - "properties": { - "clientCA": { - "description": "clientCA is a file with the trusted signer certs. It is required.", - "type": "string", - "default": "" - }, - "clientCommonNames": { - "description": "clientCommonNames is a required list of common names to require a match from.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "extraHeaderPrefixes": { - "description": "extraHeaderPrefixes is the set of request header prefixes to inspect for user extra. X-Remote-Extra- is suggested.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "groupHeaders": { - "description": "GroupNameHeader is the set of headers to check for group information. All are unioned.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "usernameHeaders": { - "description": "usernameHeaders is the list of headers to check for user information. First hit wins.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.legacyconfig.v1.RequestHeaderIdentityProvider": { - "description": "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "loginURL", - "challengeURL", - "clientCA", - "clientCommonNames", - "headers", - "preferredUsernameHeaders", - "nameHeaders", - "emailHeaders" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "challengeURL": { - "description": "challengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}", - "type": "string", - "default": "" - }, - "clientCA": { - "description": "clientCA is a file with the trusted signer certs. If empty, no request verification is done, and any direct request to the OAuth server can impersonate any identity from this provider, merely by setting a request header.", - "type": "string", - "default": "" - }, - "clientCommonNames": { - "description": "clientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "emailHeaders": { - "description": "emailHeaders is the set of headers to check for the email address", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "headers": { - "description": "headers is the set of headers to check for identity information", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "loginURL": { - "description": "loginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}", - "type": "string", - "default": "" - }, - "nameHeaders": { - "description": "nameHeaders is the set of headers to check for the display name", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "preferredUsernameHeaders": { - "description": "preferredUsernameHeaders is the set of headers to check for the preferred username", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.legacyconfig.v1.RoutingConfig": { - "description": "RoutingConfig holds the necessary configuration options for routing to subdomains", - "type": "object", - "required": [ - "subdomain" - ], - "properties": { - "subdomain": { - "description": "subdomain is the suffix appended to $service.$namespace. to form the default route hostname DEPRECATED: This field is being replaced by routers setting their own defaults. This is the \"default\" route.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.SecurityAllocator": { - "description": "SecurityAllocator controls the automatic allocation of UIDs and MCS labels to a project. If nil, allocation is disabled.", - "type": "object", - "required": [ - "uidAllocatorRange", - "mcsAllocatorRange", - "mcsLabelsPerProject" - ], - "properties": { - "mcsAllocatorRange": { - "description": "mcsAllocatorRange defines the range of MCS categories that will be assigned to namespaces. The format is \"/[,]\". The default is \"s0/2\" and will allocate from c0 -> c1023, which means a total of 535k labels are available (1024 choose 2 ~ 535k). If this value is changed after startup, new projects may receive labels that are already allocated to other projects. Prefix may be any valid SELinux set of terms (including user, role, and type), although leaving them as the default will allow the server to set them automatically.\n\nExamples: * s0:/2 - Allocate labels from s0:c0,c0 to s0:c511,c511 * s0:/2,512 - Allocate labels from s0:c0,c0,c0 to s0:c511,c511,511", - "type": "string", - "default": "" - }, - "mcsLabelsPerProject": { - "description": "mcsLabelsPerProject defines the number of labels that should be reserved per project. The default is 5 to match the default UID and MCS ranges (100k namespaces, 535k/5 labels).", - "type": "integer", - "format": "int32", - "default": 0 - }, - "uidAllocatorRange": { - "description": "uidAllocatorRange defines the total set of Unix user IDs (UIDs) that will be allocated to projects automatically, and the size of the block each namespace gets. For example, 1000-1999/10 will allocate ten UIDs per namespace, and will be able to allocate up to 100 blocks before running out of space. The default is to allocate from 1 billion to 2 billion in 10k blocks (which is the expected size of the ranges container images will use once user namespaces are started).", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.ServiceAccountConfig": { - "description": "ServiceAccountConfig holds the necessary configuration options for a service account", - "type": "object", - "required": [ - "managedNames", - "limitSecretReferences", - "privateKeyFile", - "publicKeyFiles", - "masterCA" - ], - "properties": { - "limitSecretReferences": { - "description": "limitSecretReferences controls whether or not to allow a service account to reference any secret in a namespace without explicitly referencing them", - "type": "boolean", - "default": false - }, - "managedNames": { - "description": "managedNames is a list of service account names that will be auto-created in every namespace. If no names are specified, the ServiceAccountsController will not be started.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "masterCA": { - "description": "masterCA is the CA for verifying the TLS connection back to the master. The service account controller will automatically inject the contents of this file into pods so they can verify connections to the master.", - "type": "string", - "default": "" - }, - "privateKeyFile": { - "description": "privateKeyFile is a file containing a PEM-encoded private RSA key, used to sign service account tokens. If no private key is specified, the service account TokensController will not be started.", - "type": "string", - "default": "" - }, - "publicKeyFiles": { - "description": "publicKeyFiles is a list of files, each containing a PEM-encoded public RSA key. (If any file contains a private key, the public portion of the key is used) The list of public keys is used to verify presented service account tokens. Each key is tried in order until the list is exhausted or verification succeeds. If no keys are specified, no service account authentication will be available.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.legacyconfig.v1.ServiceServingCert": { - "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.", - "type": "object", - "required": [ - "signer" - ], - "properties": { - "signer": { - "description": "signer holds the signing information used to automatically sign serving certificates. If this value is nil, then certs are not signed automatically.", - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.CertInfo" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.ServingInfo": { - "description": "ServingInfo holds information about serving web pages", - "type": "object", - "required": [ - "bindAddress", - "bindNetwork", - "certFile", - "keyFile", - "clientCA", - "namedCertificates" - ], - "properties": { - "bindAddress": { - "description": "bindAddress is the ip:port to serve on", - "type": "string", - "default": "" - }, - "bindNetwork": { - "description": "bindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", - "type": "string", - "default": "" - }, - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "cipherSuites": { - "description": "cipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "clientCA": { - "description": "clientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - }, - "minTLSVersion": { - "description": "minTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", - "type": "string" - }, - "namedCertificates": { - "description": "namedCertificates is a list of certificates to use to secure requests to specific hostnames", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.NamedCertificate" - } - } - } - }, - "com.github.openshift.api.legacyconfig.v1.SessionConfig": { - "description": "SessionConfig specifies options for cookie-based sessions. Used by AuthRequestHandlerSession", - "type": "object", - "required": [ - "sessionSecretsFile", - "sessionMaxAgeSeconds", - "sessionName" - ], - "properties": { - "sessionMaxAgeSeconds": { - "description": "sessionMaxAgeSeconds specifies how long created sessions last. Used by AuthRequestHandlerSession", - "type": "integer", - "format": "int32", - "default": 0 - }, - "sessionName": { - "description": "sessionName is the cookie name used to store the session", - "type": "string", - "default": "" - }, - "sessionSecretsFile": { - "description": "sessionSecretsFile is a reference to a file containing a serialized SessionSecrets object If no file is specified, a random signing and encryption key are generated at each server start", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.SessionSecret": { - "description": "SessionSecret is a secret used to authenticate/decrypt cookie-based sessions", - "type": "object", - "required": [ - "authentication", - "encryption" - ], - "properties": { - "authentication": { - "description": "authentication is used to authenticate sessions using HMAC. Recommended to use a secret with 32 or 64 bytes.", - "type": "string", - "default": "" - }, - "encryption": { - "description": "encryption is used to encrypt sessions. Must be 16, 24, or 32 characters long, to select AES-128, AES-", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.SessionSecrets": { - "description": "SessionSecrets list the secrets to use to sign/encrypt and authenticate/decrypt created sessions.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "secrets" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "secrets": { - "description": "secrets is a list of secrets New sessions are signed and encrypted using the first secret. Existing sessions are decrypted/authenticated by each secret until one succeeds. This allows rotating secrets.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.SessionSecret" - } - } - } - }, - "com.github.openshift.api.legacyconfig.v1.SourceStrategyDefaultsConfig": { - "description": "SourceStrategyDefaultsConfig contains values that apply to builds using the source strategy.", - "type": "object", - "properties": { - "incremental": { - "description": "incremental indicates if s2i build strategies should perform an incremental build or not", - "type": "boolean" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.StringSource": { - "description": "StringSource allows specifying a string inline, or externally via env var or file. When it contains only a string value, it marshals to a simple JSON string.", - "type": "object", - "required": [ - "value", - "env", - "file", - "keyFile" - ], - "properties": { - "env": { - "description": "env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", - "type": "string", - "default": "" - }, - "file": { - "description": "file references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile references a file containing the key to use to decrypt the value.", - "type": "string", - "default": "" - }, - "value": { - "description": "value specifies the cleartext value, or an encrypted value if keyFile is specified.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.StringSourceSpec": { - "description": "StringSourceSpec specifies a string value, or external location", - "type": "object", - "required": [ - "value", - "env", - "file", - "keyFile" - ], - "properties": { - "env": { - "description": "env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", - "type": "string", - "default": "" - }, - "file": { - "description": "file references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile references a file containing the key to use to decrypt the value.", - "type": "string", - "default": "" - }, - "value": { - "description": "value specifies the cleartext value, or an encrypted value if keyFile is specified.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.TokenConfig": { - "description": "TokenConfig holds the necessary configuration options for authorization and access tokens", - "type": "object", - "required": [ - "authorizeTokenMaxAgeSeconds", - "accessTokenMaxAgeSeconds" - ], - "properties": { - "accessTokenInactivityTimeoutSeconds": { - "description": "accessTokenInactivityTimeoutSeconds defined the default token inactivity timeout for tokens granted by any client. Setting it to nil means the feature is completely disabled (default) The default setting can be overridden on OAuthClient basis. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Valid values are: - 0: Tokens never time out - X: Tokens time out if there is no activity for X seconds The current minimum allowed value for X is 300 (5 minutes)", - "type": "integer", - "format": "int32" - }, - "accessTokenMaxAgeSeconds": { - "description": "accessTokenMaxAgeSeconds defines the maximum age of access tokens", - "type": "integer", - "format": "int32", - "default": 0 - }, - "authorizeTokenMaxAgeSeconds": { - "description": "authorizeTokenMaxAgeSeconds defines the maximum age of authorize tokens", - "type": "integer", - "format": "int32", - "default": 0 - } - } - }, - "com.github.openshift.api.legacyconfig.v1.UserAgentDenyRule": { - "description": "UserAgentDenyRule adds a rejection message that can be used to help a user figure out how to get an approved client", - "type": "object", - "required": [ - "regex", - "httpVerbs", - "rejectionMessage" - ], - "properties": { - "httpVerbs": { - "description": "httpVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "regex": { - "description": "UserAgentRegex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f", - "type": "string", - "default": "" - }, - "rejectionMessage": { - "description": "rejectionMessage is the message shown when rejecting a client. If it is not a set, the default message is used.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.UserAgentMatchRule": { - "description": "UserAgentMatchRule describes how to match a given request based on User-Agent and HTTPVerb", - "type": "object", - "required": [ - "regex", - "httpVerbs" - ], - "properties": { - "httpVerbs": { - "description": "httpVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "regex": { - "description": "UserAgentRegex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.legacyconfig.v1.UserAgentMatchingConfig": { - "description": "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!", - "type": "object", - "required": [ - "requiredClients", - "deniedClients", - "defaultRejectionMessage" - ], - "properties": { - "defaultRejectionMessage": { - "description": "defaultRejectionMessage is the message shown when rejecting a client. If it is not a set, a generic message is given.", - "type": "string", - "default": "" - }, - "deniedClients": { - "description": "If this list is non-empty, then a User-Agent must not match any of the UserAgentRegexes", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.UserAgentDenyRule" - } - }, - "requiredClients": { - "description": "If this list is non-empty, then a User-Agent must match one of the UserAgentRegexes to be allowed", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.legacyconfig.v1.UserAgentMatchRule" - } - } - } - }, - "com.github.openshift.api.legacyconfig.v1.WebhookTokenAuthenticator": { - "description": "WebhookTokenAuthenticators holds the necessary configuation options for external token authenticators", - "type": "object", - "required": [ - "configFile", - "cacheTTL" - ], - "properties": { - "cacheTTL": { - "description": "cacheTTL indicates how long an authentication result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get a default timeout of 2 minutes. If zero (e.g. \"0m\"), caching is disabled", - "type": "string", - "default": "" - }, - "configFile": { - "description": "configFile is a path to a Kubeconfig file with the webhook configuration", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1.AWSFailureDomain": { - "description": "AWSFailureDomain configures failure domain information for the AWS platform.", - "type": "object", - "properties": { - "placement": { - "description": "placement configures the placement information for this instance.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.AWSFailureDomainPlacement" - }, - "subnet": { - "description": "subnet is a reference to the subnet to use for this instance.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1.AWSResourceReference" - } - } - }, - "com.github.openshift.api.machine.v1.AWSFailureDomainPlacement": { - "description": "AWSFailureDomainPlacement configures the placement information for the AWSFailureDomain.", - "type": "object", - "required": [ - "availabilityZone" - ], - "properties": { - "availabilityZone": { - "description": "availabilityZone is the availability zone of the instance.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1.AWSResourceFilter": { - "description": "AWSResourceFilter is a filter used to identify an AWS resource", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name of the filter. Filter names are case-sensitive.", - "type": "string", - "default": "" - }, - "values": { - "description": "values includes one or more filter values. Filter values are case-sensitive.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.machine.v1.AWSResourceReference": { - "description": "AWSResourceReference is a reference to a specific AWS resource by ID, ARN, or filters. Only one of ID, ARN or Filters may be specified. Specifying more than one will result in a validation error.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "arn": { - "description": "arn of resource.", - "type": "string" - }, - "filters": { - "description": "filters is a set of filters used to identify a resource.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.AWSResourceFilter" - }, - "x-kubernetes-list-type": "atomic" - }, - "id": { - "description": "id of resource.", - "type": "string" - }, - "type": { - "description": "type determines how the reference will fetch the AWS resource.", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "arn": "ARN", - "filters": "Filters", - "id": "ID" - } - } - ] - }, - "com.github.openshift.api.machine.v1.AlibabaCloudMachineProviderConfig": { - "description": "AlibabaCloudMachineProviderConfig is the Schema for the alibabacloudmachineproviderconfig API Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "instanceType", - "vpcId", - "regionId", - "zoneId", - "imageId", - "vSwitch", - "resourceGroup" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "bandwidth": { - "description": "bandwidth describes the internet bandwidth strategy for the instance", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.BandwidthProperties" - }, - "credentialsSecret": { - "description": "credentialsSecret is a reference to the secret with alibabacloud credentials. Otherwise, defaults to permissions provided by attached RAM role where the actuator is running.", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "dataDisk": { - "description": "DataDisks holds information regarding the extra disks attached to the instance", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.DataDiskProperties" - } - }, - "imageId": { - "description": "The ID of the image used to create the instance.", - "type": "string", - "default": "" - }, - "instanceType": { - "description": "The instance type of the instance.", - "type": "string", - "default": "" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "ramRoleName": { - "description": "ramRoleName is the name of the instance Resource Access Management (RAM) role. This allows the instance to perform API calls as this specified RAM role.", - "type": "string" - }, - "regionId": { - "description": "The ID of the region in which to create the instance. You can call the DescribeRegions operation to query the most recent region list.", - "type": "string", - "default": "" - }, - "resourceGroup": { - "description": "resourceGroup references the resource group to which to assign the instance. A reference holds either the resource group ID, the resource name, or the required tags to search. When more than one resource group are returned for a search, an error will be produced and the Machine will not be created. Resource Groups do not support searching by tags.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.AlibabaResourceReference" - }, - "securityGroups": { - "description": "securityGroups is a list of security group references to assign to the instance. A reference holds either the security group ID, the resource name, or the required tags to search. When more than one security group is returned for a tag search, all the groups are associated with the instance up to the maximum number of security groups to which an instance can belong. For more information, see the \"Security group limits\" section in Limits. https://www.alibabacloud.com/help/en/doc-detail/25412.htm", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.AlibabaResourceReference" - } - }, - "systemDisk": { - "description": "systemDisk holds the properties regarding the system disk for the instance", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.SystemDiskProperties" - }, - "tag": { - "description": "Tags are the set of metadata to add to an instance.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.Tag" - } - }, - "tenancy": { - "description": "tenancy specifies whether to create the instance on a dedicated host. Valid values:\n\ndefault: creates the instance on a non-dedicated host. host: creates the instance on a dedicated host. If you do not specify the DedicatedHostID parameter, Alibaba Cloud automatically selects a dedicated host for the instance. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `default`.", - "type": "string" - }, - "userDataSecret": { - "description": "userDataSecret contains a local reference to a secret that contains the UserData to apply to the instance", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "vSwitch": { - "description": "vSwitch is a reference to the vswitch to use for this instance. A reference holds either the vSwitch ID, the resource name, or the required tags to search. When more than one vSwitch is returned for a tag search, only the first vSwitch returned will be used. This parameter is required when you create an instance of the VPC type. You can call the DescribeVSwitches operation to query the created vSwitches.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.AlibabaResourceReference" - }, - "vpcId": { - "description": "The ID of the vpc", - "type": "string", - "default": "" - }, - "zoneId": { - "description": "The ID of the zone in which to create the instance. You can call the DescribeZones operation to query the most recent region list.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1.AlibabaCloudMachineProviderConfigList": { - "description": "AlibabaCloudMachineProviderConfigList contains a list of AlibabaCloudMachineProviderConfig Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.AlibabaCloudMachineProviderConfig" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.machine.v1.AlibabaCloudMachineProviderStatus": { - "description": "AlibabaCloudMachineProviderStatus is the Schema for the alibabacloudmachineproviderconfig API Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "conditions": { - "description": "conditions is a set of conditions associated with the Machine to indicate errors or other status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "instanceId": { - "description": "instanceId is the instance ID of the machine created in alibabacloud", - "type": "string" - }, - "instanceState": { - "description": "instanceState is the state of the alibabacloud instance for this machine", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - } - } - }, - "com.github.openshift.api.machine.v1.AlibabaResourceReference": { - "description": "ResourceTagReference is a reference to a specific AlibabaCloud resource by ID, or tags. Only one of ID or Tags may be specified. Specifying more than one will result in a validation error.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "id": { - "description": "id of resource", - "type": "string" - }, - "name": { - "description": "name of the resource", - "type": "string" - }, - "tags": { - "description": "tags is a set of metadata based upon ECS object tags used to identify a resource. For details about usage when multiple resources are found, please see the owning parent field documentation.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.Tag" - } - }, - "type": { - "description": "type identifies the resource reference type for this entry.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1.AzureFailureDomain": { - "description": "AzureFailureDomain configures failure domain information for the Azure platform.", - "type": "object", - "required": [ - "zone" - ], - "properties": { - "subnet": { - "description": "subnet is the name of the network subnet in which the VM will be created. When omitted, the subnet value from the machine providerSpec template will be used.", - "type": "string" - }, - "zone": { - "description": "Availability Zone for the virtual machine. If nil, the virtual machine should be deployed to no zone.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1.BandwidthProperties": { - "description": "Bandwidth describes the bandwidth strategy for the network of the instance", - "type": "object", - "properties": { - "internetMaxBandwidthIn": { - "description": "internetMaxBandwidthIn is the maximum inbound public bandwidth. Unit: Mbit/s. Valid values: When the purchased outbound public bandwidth is less than or equal to 10 Mbit/s, the valid values of this parameter are 1 to 10. Currently the default is `10` when outbound bandwidth is less than or equal to 10 Mbit/s. When the purchased outbound public bandwidth is greater than 10, the valid values are 1 to the InternetMaxBandwidthOut value. Currently the default is the value used for `InternetMaxBandwidthOut` when outbound public bandwidth is greater than 10.", - "type": "integer", - "format": "int64" - }, - "internetMaxBandwidthOut": { - "description": "internetMaxBandwidthOut is the maximum outbound public bandwidth. Unit: Mbit/s. Valid values: 0 to 100. When a value greater than 0 is used then a public IP address is assigned to the instance. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `0`", - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.machine.v1.ControlPlaneMachineSet": { - "description": "ControlPlaneMachineSet ensures that a specified number of control plane machine replicas are running at any given time. Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.ControlPlaneMachineSetSpec" - }, - "status": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.ControlPlaneMachineSetStatus" - } - } - }, - "com.github.openshift.api.machine.v1.ControlPlaneMachineSetList": { - "description": "ControlPlaneMachineSetList contains a list of ControlPlaneMachineSet Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.ControlPlaneMachineSet" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.machine.v1.ControlPlaneMachineSetSpec": { - "description": "ControlPlaneMachineSet represents the configuration of the ControlPlaneMachineSet.", - "type": "object", - "required": [ - "replicas", - "selector", - "template" - ], - "properties": { - "machineNamePrefix": { - "description": "machineNamePrefix is the prefix used when creating machine names. Each machine name will consist of this prefix, followed by a randomly generated string of 5 characters, and the index of the machine. It must be a lowercase RFC 1123 subdomain, consisting of lowercase alphanumeric characters, hyphens ('-'), and periods ('.'). Each block, separated by periods, must start and end with an alphanumeric character. Hyphens are not allowed at the start or end of a block, and consecutive periods are not permitted. The prefix must be between 1 and 245 characters in length. For example, if machineNamePrefix is set to 'control-plane', and three machines are created, their names might be: control-plane-abcde-0, control-plane-fghij-1, control-plane-klmno-2", - "type": "string" - }, - "replicas": { - "description": "replicas defines how many Control Plane Machines should be created by this ControlPlaneMachineSet. This field is immutable and cannot be changed after cluster installation. The ControlPlaneMachineSet only operates with 3 or 5 node control planes, 3 and 5 are the only valid values for this field.", - "type": "integer", - "format": "int32" - }, - "selector": { - "description": "Label selector for Machines. Existing Machines selected by this selector will be the ones affected by this ControlPlaneMachineSet. It must match the template's labels. This field is considered immutable after creation of the resource.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "state": { - "description": "state defines whether the ControlPlaneMachineSet is Active or Inactive. When Inactive, the ControlPlaneMachineSet will not take any action on the state of the Machines within the cluster. When Active, the ControlPlaneMachineSet will reconcile the Machines and will update the Machines as necessary. Once Active, a ControlPlaneMachineSet cannot be made Inactive. To prevent further action please remove the ControlPlaneMachineSet.", - "type": "string", - "default": "Inactive" - }, - "strategy": { - "description": "strategy defines how the ControlPlaneMachineSet will update Machines when it detects a change to the ProviderSpec.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.ControlPlaneMachineSetStrategy" - }, - "template": { - "description": "template describes the Control Plane Machines that will be created by this ControlPlaneMachineSet.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.ControlPlaneMachineSetTemplate" - } - } - }, - "com.github.openshift.api.machine.v1.ControlPlaneMachineSetStatus": { - "description": "ControlPlaneMachineSetStatus represents the status of the ControlPlaneMachineSet CRD.", - "type": "object", - "properties": { - "conditions": { - "description": "conditions represents the observations of the ControlPlaneMachineSet's current state. Known .status.conditions.type are: Available, Degraded and Progressing.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "observedGeneration": { - "description": "observedGeneration is the most recent generation observed for this ControlPlaneMachineSet. It corresponds to the ControlPlaneMachineSets's generation, which is updated on mutation by the API Server.", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas is the number of Control Plane Machines created by the ControlPlaneMachineSet controller which are ready. Note that this value may be higher than the desired number of replicas while rolling updates are in-progress.", - "type": "integer", - "format": "int32" - }, - "replicas": { - "description": "replicas is the number of Control Plane Machines created by the ControlPlaneMachineSet controller. Note that during update operations this value may differ from the desired replica count.", - "type": "integer", - "format": "int32" - }, - "unavailableReplicas": { - "description": "unavailableReplicas is the number of Control Plane Machines that are still required before the ControlPlaneMachineSet reaches the desired available capacity. When this value is non-zero, the number of ReadyReplicas is less than the desired Replicas.", - "type": "integer", - "format": "int32" - }, - "updatedReplicas": { - "description": "updatedReplicas is the number of non-terminated Control Plane Machines created by the ControlPlaneMachineSet controller that have the desired provider spec and are ready. This value is set to 0 when a change is detected to the desired spec. When the update strategy is RollingUpdate, this will also coincide with starting the process of updating the Machines. When the update strategy is OnDelete, this value will remain at 0 until a user deletes an existing replica and its replacement has become ready.", - "type": "integer", - "format": "int32" - } - } - }, - "com.github.openshift.api.machine.v1.ControlPlaneMachineSetStrategy": { - "description": "ControlPlaneMachineSetStrategy defines the strategy for applying updates to the Control Plane Machines managed by the ControlPlaneMachineSet.", - "type": "object", - "properties": { - "type": { - "description": "type defines the type of update strategy that should be used when updating Machines owned by the ControlPlaneMachineSet. Valid values are \"RollingUpdate\" and \"OnDelete\". The current default value is \"RollingUpdate\".", - "type": "string", - "default": "RollingUpdate" - } - } - }, - "com.github.openshift.api.machine.v1.ControlPlaneMachineSetTemplate": { - "description": "ControlPlaneMachineSetTemplate is a template used by the ControlPlaneMachineSet to create the Machines that it will manage in the future.", - "type": "object", - "required": [ - "machineType" - ], - "properties": { - "machineType": { - "description": "machineType determines the type of Machines that should be managed by the ControlPlaneMachineSet. Currently, the only valid value is machines_v1beta1_machine_openshift_io.", - "type": "string", - "default": "" - }, - "machines_v1beta1_machine_openshift_io": { - "description": "OpenShiftMachineV1Beta1Machine defines the template for creating Machines from the v1beta1.machine.openshift.io API group.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1.OpenShiftMachineV1Beta1MachineTemplate" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "machineType", - "fields-to-discriminateBy": { - "machines_v1beta1_machine_openshift_io": "OpenShiftMachineV1Beta1Machine" - } - } - ] - }, - "com.github.openshift.api.machine.v1.ControlPlaneMachineSetTemplateObjectMeta": { - "description": "ControlPlaneMachineSetTemplateObjectMeta is a subset of the metav1.ObjectMeta struct. It allows users to specify labels and annotations that will be copied onto Machines created from this template.", - "type": "object", - "required": [ - "labels" - ], - "properties": { - "annotations": { - "description": "annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "labels": { - "description": "Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels. This field must contain both the 'machine.openshift.io/cluster-api-machine-role' and 'machine.openshift.io/cluster-api-machine-type' labels, both with a value of 'master'. It must also contain a label with the key 'machine.openshift.io/cluster-api-cluster'.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.machine.v1.DataDiskProperties": { - "description": "DataDisk contains the information regarding the datadisk attached to an instance", - "type": "object", - "properties": { - "Category": { - "description": "Category describes the type of data disk N. Valid values: cloud_efficiency: ultra disk cloud_ssd: standard SSD cloud_essd: ESSD cloud: basic disk Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently for non-I/O optimized instances of retired instance types, the default is `cloud`. Currently for other instances, the default is `cloud_efficiency`.", - "type": "string", - "default": "" - }, - "DiskEncryption": { - "description": "DiskEncryption specifies whether to encrypt data disk N.\n\nEmpty value means the platform chooses a default, which is subject to change over time. Currently the default is `disabled`.", - "type": "string", - "default": "" - }, - "DiskPreservation": { - "description": "DiskPreservation specifies whether to release data disk N along with the instance. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `DeleteWithInstance`", - "type": "string", - "default": "" - }, - "KMSKeyID": { - "description": "KMSKeyID is the ID of the Key Management Service (KMS) key to be used by data disk N. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently the default is `\"\"` which is interpreted as do not use KMSKey encryption.", - "type": "string", - "default": "" - }, - "Name": { - "description": "Name is the name of data disk N. If the name is specified the name must be 2 to 128 characters in length. It must start with a letter and cannot start with http:// or https://. It can contain letters, digits, colons (:), underscores (_), and hyphens (-).\n\nEmpty value means the platform chooses a default, which is subject to change over time. Currently the default is `\"\"`.", - "type": "string", - "default": "" - }, - "PerformanceLevel": { - "description": "PerformanceLevel is the performance level of the ESSD used as as data disk N. The N value must be the same as that in DataDisk.N.Category when DataDisk.N.Category is set to cloud_essd. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is `PL1`. Valid values:\n\nPL0: A single ESSD can deliver up to 10,000 random read/write IOPS. PL1: A single ESSD can deliver up to 50,000 random read/write IOPS. PL2: A single ESSD can deliver up to 100,000 random read/write IOPS. PL3: A single ESSD can deliver up to 1,000,000 random read/write IOPS. For more information about ESSD performance levels, see ESSDs.", - "type": "string", - "default": "" - }, - "Size": { - "description": "Size of the data disk N. Valid values of N: 1 to 16. Unit: GiB. Valid values:\n\nValid values when DataDisk.N.Category is set to cloud_efficiency: 20 to 32768 Valid values when DataDisk.N.Category is set to cloud_ssd: 20 to 32768 Valid values when DataDisk.N.Category is set to cloud_essd: 20 to 32768 Valid values when DataDisk.N.Category is set to cloud: 5 to 2000 The value of this parameter must be greater than or equal to the size of the snapshot specified by the SnapshotID parameter.", - "type": "integer", - "format": "int64", - "default": 0 - }, - "SnapshotID": { - "description": "SnapshotID is the ID of the snapshot used to create data disk N. Valid values of N: 1 to 16.\n\nWhen the DataDisk.N.SnapshotID parameter is specified, the DataDisk.N.Size parameter is ignored. The data disk is created based on the size of the specified snapshot. Use snapshots created after July 15, 2013. Otherwise, an error is returned and your request is rejected.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1.FailureDomains": { - "description": "FailureDomain represents the different configurations required to spread Machines across failure domains on different platforms.", - "type": "object", - "required": [ - "platform" - ], - "properties": { - "aws": { - "description": "aws configures failure domain information for the AWS platform.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.AWSFailureDomain" - }, - "x-kubernetes-list-type": "atomic" - }, - "azure": { - "description": "azure configures failure domain information for the Azure platform.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.AzureFailureDomain" - }, - "x-kubernetes-list-type": "atomic" - }, - "gcp": { - "description": "gcp configures failure domain information for the GCP platform.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.GCPFailureDomain" - }, - "x-kubernetes-list-type": "atomic" - }, - "nutanix": { - "description": "nutanix configures failure domain information for the Nutanix platform.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.NutanixFailureDomainReference" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "openstack": { - "description": "openstack configures failure domain information for the OpenStack platform.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.OpenStackFailureDomain" - }, - "x-kubernetes-list-type": "atomic" - }, - "platform": { - "description": "platform identifies the platform for which the FailureDomain represents. Currently supported values are AWS, Azure, GCP, OpenStack, VSphere and Nutanix.", - "type": "string", - "default": "" - }, - "vsphere": { - "description": "vsphere configures failure domain information for the VSphere platform.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.VSphereFailureDomain" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "platform", - "fields-to-discriminateBy": { - "aws": "AWS", - "azure": "Azure", - "gcp": "GCP", - "nutanix": "Nutanix", - "openstack": "OpenStack", - "vsphere": "VSphere" - } - } - ] - }, - "com.github.openshift.api.machine.v1.GCPFailureDomain": { - "description": "GCPFailureDomain configures failure domain information for the GCP platform", - "type": "object", - "required": [ - "zone" - ], - "properties": { - "zone": { - "description": "zone is the zone in which the GCP machine provider will create the VM.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1.LoadBalancerReference": { - "description": "LoadBalancerReference is a reference to a load balancer on IBM Cloud virtual private cloud(VPC).", - "type": "object", - "required": [ - "name", - "type" - ], - "properties": { - "name": { - "description": "name of the LoadBalancer in IBM Cloud VPC. The name should be between 1 and 63 characters long and may consist of lowercase alphanumeric characters and hyphens only. The value must not end with a hyphen. It is a reference to existing LoadBalancer created by openshift installer component.", - "type": "string", - "default": "" - }, - "type": { - "description": "type of the LoadBalancer service supported by IBM Cloud VPC. Currently, only Application LoadBalancer is supported. More details about Application LoadBalancer https://cloud.ibm.com/docs/vpc?topic=vpc-load-balancers-about&interface=ui Supported values are Application.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1.NutanixCategory": { - "description": "NutanixCategory identifies a pair of prism category key and value", - "type": "object", - "required": [ - "key", - "value" - ], - "properties": { - "key": { - "description": "key is the prism category key name", - "type": "string", - "default": "" - }, - "value": { - "description": "value is the prism category value associated with the key", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1.NutanixFailureDomainReference": { - "description": "NutanixFailureDomainReference refers to the failure domain of the Nutanix platform.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name of the failure domain in which the nutanix machine provider will create the VM. Failure domains are defined in a cluster's config.openshift.io/Infrastructure resource.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1.NutanixGPU": { - "description": "NutanixGPU holds the identity of a Nutanix GPU resource in the Prism Central", - "type": "object", - "required": [ - "type" - ], - "properties": { - "deviceID": { - "description": "deviceID is the GPU device ID with the integer value.", - "type": "integer", - "format": "int32" - }, - "name": { - "description": "name is the GPU device name", - "type": "string" - }, - "type": { - "description": "type is the identifier type of the GPU device. Valid values are Name and DeviceID.", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "deviceID": "DeviceID", - "name": "Name" - } - } - ] - }, - "com.github.openshift.api.machine.v1.NutanixMachineProviderConfig": { - "description": "NutanixMachineProviderConfig is the Schema for the nutanixmachineproviderconfigs API Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "cluster", - "image", - "subnets", - "vcpusPerSocket", - "vcpuSockets", - "memorySize", - "systemDiskSize", - "credentialsSecret" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "bootType": { - "description": "bootType indicates the boot type (Legacy, UEFI or SecureBoot) the Machine's VM uses to boot. If this field is empty or omitted, the VM will use the default boot type \"Legacy\" to boot. \"SecureBoot\" depends on \"UEFI\" boot, i.e., enabling \"SecureBoot\" means that \"UEFI\" boot is also enabled.", - "type": "string", - "default": "" - }, - "categories": { - "description": "categories optionally adds one or more prism categories (each with key and value) for the Machine's VM to associate with. All the category key and value pairs specified must already exist in the prism central.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.NutanixCategory" - }, - "x-kubernetes-list-map-keys": [ - "key" - ], - "x-kubernetes-list-type": "map" - }, - "cluster": { - "description": "cluster is to identify the cluster (the Prism Element under management of the Prism Central), in which the Machine's VM will be created. The cluster identifier (uuid or name) can be obtained from the Prism Central console or using the prism_central API.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.NutanixResourceIdentifier" - }, - "credentialsSecret": { - "description": "credentialsSecret is a local reference to a secret that contains the credentials data to access Nutanix PC client", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "dataDisks": { - "description": "dataDisks holds information of the data disks to attach to the Machine's VM", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.NutanixVMDisk" - }, - "x-kubernetes-list-type": "set" - }, - "failureDomain": { - "description": "failureDomain refers to the name of the FailureDomain with which this Machine is associated. If this is configured, the Nutanix machine controller will use the prism_central endpoint and credentials defined in the referenced FailureDomain to communicate to the prism_central. It will also verify that the 'cluster' and subnets' configuration in the NutanixMachineProviderConfig is consistent with that in the referenced failureDomain.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1.NutanixFailureDomainReference" - }, - "gpus": { - "description": "gpus is a list of GPU devices to attach to the machine's VM. The GPU devices should already exist in Prism Central and associated with one of the Prism Element's hosts and available for the VM to attach (in \"UNUSED\" status).", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.NutanixGPU" - }, - "x-kubernetes-list-type": "set" - }, - "image": { - "description": "image is to identify the rhcos image uploaded to the Prism Central (PC) The image identifier (uuid or name) can be obtained from the Prism Central console or using the prism_central API.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.NutanixResourceIdentifier" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "memorySize": { - "description": "memorySize is the memory size (in Quantity format) of the VM The minimum memorySize is 2Gi bytes", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "project": { - "description": "project optionally identifies a Prism project for the Machine's VM to associate with.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.NutanixResourceIdentifier" - }, - "subnets": { - "description": "subnets holds a list of identifiers (one or more) of the cluster's network subnets for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be obtained from the Prism Central console or using the prism_central API.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.NutanixResourceIdentifier" - } - }, - "systemDiskSize": { - "description": "systemDiskSize is size (in Quantity format) of the system disk of the VM The minimum systemDiskSize is 20Gi bytes", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - }, - "userDataSecret": { - "description": "userDataSecret is a local reference to a secret that contains the UserData to apply to the VM", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "vcpuSockets": { - "description": "vcpuSockets is the number of vCPU sockets of the VM", - "type": "integer", - "format": "int32", - "default": 0 - }, - "vcpusPerSocket": { - "description": "vcpusPerSocket is the number of vCPUs per socket of the VM", - "type": "integer", - "format": "int32", - "default": 0 - } - } - }, - "com.github.openshift.api.machine.v1.NutanixMachineProviderStatus": { - "description": "NutanixMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains nutanix-specific status information. Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "conditions": { - "description": "conditions is a set of conditions associated with the Machine to indicate errors or other status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "vmUUID": { - "description": "vmUUID is the Machine associated VM's UUID The field is missing before the VM is created. Once the VM is created, the field is filled with the VM's UUID and it will not change. The vmUUID is used to find the VM when updating the Machine status, and to delete the VM when the Machine is deleted.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1.NutanixResourceIdentifier": { - "description": "NutanixResourceIdentifier holds the identity of a Nutanix PC resource (cluster, image, subnet, etc.)", - "type": "object", - "required": [ - "type" - ], - "properties": { - "name": { - "description": "name is the resource name in the PC", - "type": "string" - }, - "type": { - "description": "type is the identifier type to use for this resource.", - "type": "string", - "default": "" - }, - "uuid": { - "description": "uuid is the UUID of the resource in the PC.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "name": "Name", - "uuid": "UUID" - } - } - ] - }, - "com.github.openshift.api.machine.v1.NutanixStorageResourceIdentifier": { - "description": "NutanixStorageResourceIdentifier holds the identity of a Nutanix storage resource (storage_container, etc.)", - "type": "object", - "required": [ - "type" - ], - "properties": { - "type": { - "description": "type is the identifier type to use for this resource. The valid value is \"uuid\".", - "type": "string", - "default": "" - }, - "uuid": { - "description": "uuid is the UUID of the storage resource in the PC.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "uuid": "UUID" - } - } - ] - }, - "com.github.openshift.api.machine.v1.NutanixVMDisk": { - "description": "NutanixDataDisk specifies the VM data disk configuration parameters.", - "type": "object", - "required": [ - "diskSize" - ], - "properties": { - "dataSource": { - "description": "dataSource refers to a data source image for the VM disk.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1.NutanixResourceIdentifier" - }, - "deviceProperties": { - "description": "deviceProperties are the properties of the disk device.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1.NutanixVMDiskDeviceProperties" - }, - "diskSize": { - "description": "diskSize is size (in Quantity format) of the disk attached to the VM. See https://pkg.go.dev/k8s.io/apimachinery/pkg/api/resource#Format for the Quantity format and example documentation. The minimum diskSize is 1GB.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - }, - "storageConfig": { - "description": "storageConfig are the storage configuration parameters of the VM disks.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1.NutanixVMStorageConfig" - } - } - }, - "com.github.openshift.api.machine.v1.NutanixVMDiskDeviceProperties": { - "description": "NutanixVMDiskDeviceProperties specifies the disk device properties.", - "type": "object", - "required": [ - "deviceType", - "adapterType", - "deviceIndex" - ], - "properties": { - "adapterType": { - "description": "adapterType is the adapter type of the disk address. If the deviceType is \"Disk\", the valid adapterType can be \"SCSI\", \"IDE\", \"PCI\", \"SATA\" or \"SPAPR\". If the deviceType is \"CDRom\", the valid adapterType can be \"IDE\" or \"SATA\".", - "type": "string", - "default": "" - }, - "deviceIndex": { - "description": "deviceIndex is the index of the disk address. The valid values are non-negative integers, with the default value 0. For a Machine VM, the deviceIndex for the disks with the same deviceType.adapterType combination should start from 0 and increase consecutively afterwards. Note that for each Machine VM, the Disk.SCSI.0 and CDRom.IDE.0 are reserved to be used by the VM's system. So for dataDisks of Disk.SCSI and CDRom.IDE, the deviceIndex should start from 1.", - "type": "integer", - "format": "int32" - }, - "deviceType": { - "description": "deviceType specifies the disk device type. The valid values are \"Disk\" and \"CDRom\", and the default is \"Disk\".", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1.NutanixVMStorageConfig": { - "description": "NutanixVMStorageConfig specifies the storage configuration parameters for VM disks.", - "type": "object", - "required": [ - "diskMode" - ], - "properties": { - "diskMode": { - "description": "diskMode specifies the disk mode. The valid values are Standard and Flash, and the default is Standard.", - "type": "string", - "default": "" - }, - "storageContainer": { - "description": "storageContainer refers to the storage_container used by the VM disk.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1.NutanixStorageResourceIdentifier" - } - } - }, - "com.github.openshift.api.machine.v1.OpenShiftMachineV1Beta1MachineTemplate": { - "description": "OpenShiftMachineV1Beta1MachineTemplate is a template for the ControlPlaneMachineSet to create Machines from the v1beta1.machine.openshift.io API group.", - "type": "object", - "required": [ - "metadata", - "spec" - ], - "properties": { - "failureDomains": { - "description": "failureDomains is the list of failure domains (sometimes called availability zones) in which the ControlPlaneMachineSet should balance the Control Plane Machines. This will be merged into the ProviderSpec given in the template. This field is optional on platforms that do not require placement information.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1.FailureDomains" - }, - "metadata": { - "description": "ObjectMeta is the standard object metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata Labels are required to match the ControlPlaneMachineSet selector.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.ControlPlaneMachineSetTemplateObjectMeta" - }, - "spec": { - "description": "spec contains the desired configuration of the Control Plane Machines. The ProviderSpec within contains platform specific details for creating the Control Plane Machines. The ProviderSe should be complete apart from the platform specific failure domain field. This will be overridden when the Machines are created based on the FailureDomains field.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.MachineSpec" - } - } - }, - "com.github.openshift.api.machine.v1.OpenStackFailureDomain": { - "description": "OpenStackFailureDomain configures failure domain information for the OpenStack platform.", - "type": "object", - "properties": { - "availabilityZone": { - "description": "availabilityZone is the nova availability zone in which the OpenStack machine provider will create the VM. If not specified, the VM will be created in the default availability zone specified in the nova configuration. Availability zone names must NOT contain : since it is used by admin users to specify hosts where instances are launched in server creation. Also, it must not contain spaces otherwise it will lead to node that belongs to this availability zone register failure, see kubernetes/cloud-provider-openstack#1379 for further information. The maximum length of availability zone name is 63 as per labels limits.", - "type": "string" - }, - "rootVolume": { - "description": "rootVolume contains settings that will be used by the OpenStack machine provider to create the root volume attached to the VM. If not specified, no root volume will be created.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1.RootVolume" - } - } - }, - "com.github.openshift.api.machine.v1.PowerVSMachineProviderConfig": { - "description": "PowerVSMachineProviderConfig is the type that will be embedded in a Machine.Spec.ProviderSpec field for a PowerVS virtual machine. It is used by the PowerVS machine actuator to create a single Machine.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "serviceInstance", - "image", - "network", - "keyPairName" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "credentialsSecret": { - "description": "credentialsSecret is a reference to the secret with IBM Cloud credentials.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1.PowerVSSecretReference" - }, - "image": { - "description": "image is to identify the rhcos image uploaded to IBM COS bucket which is used to create the instance. supported image identifier in PowerVSResource are Name and ID and that can be obtained from IBM Cloud UI or IBM Cloud cli.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.PowerVSResource" - }, - "keyPairName": { - "description": "keyPairName is the name of the KeyPair to use for SSH. The key pair will be exposed to the instance via the instance metadata service. On boot, the OS will copy the public keypair into the authorized keys for the core user.", - "type": "string", - "default": "" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "loadBalancers": { - "description": "loadBalancers is the set of load balancers to which the new control plane instance should be added once it is created.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.LoadBalancerReference" - } - }, - "memoryGiB": { - "description": "memoryGiB is the size of a virtual machine's memory, in GiB. maximum value for the MemoryGiB depends on the selected SystemType. when SystemType is set to e880 maximum MemoryGiB value is 7463 GiB. when SystemType is set to e980 maximum MemoryGiB value is 15307 GiB. when SystemType is set to s922 maximum MemoryGiB value is 942 GiB. The minimum memory is 32 GiB. When omitted, this means the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 32.", - "type": "integer", - "format": "int32" - }, - "metadata": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "network": { - "description": "network is the reference to the Network to use for this instance. supported network identifier in PowerVSResource are Name, ID and RegEx and that can be obtained from IBM Cloud UI or IBM Cloud cli.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.PowerVSResource" - }, - "processorType": { - "description": "processorType is the VM instance processor type. It must be set to one of the following values: Dedicated, Capped or Shared. Dedicated: resources are allocated for a specific client, The hypervisor makes a 1:1 binding of a partition’s processor to a physical processor core. Shared: Shared among other clients. Capped: Shared, but resources do not expand beyond those that are requested, the amount of CPU time is Capped to the value specified for the entitlement. if the processorType is selected as Dedicated, then processors value cannot be fractional. When omitted, this means that the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is Shared.", - "type": "string" - }, - "processors": { - "description": "processors is the number of virtual processors in a virtual machine. when the processorType is selected as Dedicated the processors value cannot be fractional. maximum value for the Processors depends on the selected SystemType. when SystemType is set to e880 or e980 maximum Processors value is 143. when SystemType is set to s922 maximum Processors value is 15. minimum value for Processors depends on the selected ProcessorType. when ProcessorType is set as Shared or Capped, The minimum processors is 0.5. when ProcessorType is set as Dedicated, The minimum processors is 1. When omitted, this means that the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default is set based on the selected ProcessorType. when ProcessorType selected as Dedicated, the default is set to 1. when ProcessorType selected as Shared or Capped, the default is set to 0.5.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" - }, - "serviceInstance": { - "description": "serviceInstance is the reference to the Power VS service on which the server instance(VM) will be created. Power VS service is a container for all Power VS instances at a specific geographic region. serviceInstance can be created via IBM Cloud catalog or CLI. supported serviceInstance identifier in PowerVSResource are Name and ID and that can be obtained from IBM Cloud UI or IBM Cloud cli. More detail about Power VS service instance. https://cloud.ibm.com/docs/power-iaas?topic=power-iaas-creating-power-virtual-server", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1.PowerVSResource" - }, - "systemType": { - "description": "systemType is the System type used to host the instance. systemType determines the number of cores and memory that is available. Few of the supported SystemTypes are s922,e880,e980. e880 systemType available only in Dallas Datacenters. e980 systemType available in Datacenters except Dallas and Washington. When omitted, this means that the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is s922 which is generally available.", - "type": "string" - }, - "userDataSecret": { - "description": "userDataSecret contains a local reference to a secret that contains the UserData to apply to the instance.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1.PowerVSSecretReference" - } - } - }, - "com.github.openshift.api.machine.v1.PowerVSMachineProviderStatus": { - "description": "PowerVSMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains PowerVS-specific status information.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "conditions": { - "description": "conditions is a set of conditions associated with the Machine to indicate errors or other status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "instanceId": { - "description": "instanceId is the instance ID of the machine created in PowerVS instanceId uniquely identifies a Power VS server instance(VM) under a Power VS service. This will help in updating or deleting a VM in Power VS Cloud", - "type": "string" - }, - "instanceState": { - "description": "instanceState is the state of the PowerVS instance for this machine Possible instance states are Active, Build, ShutOff, Reboot This is used to display additional information to user regarding instance current state", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "serviceInstanceID": { - "description": "serviceInstanceID is the reference to the Power VS ServiceInstance on which the machine instance will be created. serviceInstanceID uniquely identifies the Power VS service By setting serviceInstanceID it will become easy and efficient to fetch a server instance(VM) within Power VS Cloud.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1.PowerVSResource": { - "description": "PowerVSResource is a reference to a specific PowerVS resource by ID, Name or RegEx Only one of ID, Name or RegEx may be specified. Specifying more than one will result in a validation error.", - "type": "object", - "properties": { - "id": { - "description": "id of resource", - "type": "string" - }, - "name": { - "description": "name of resource", - "type": "string" - }, - "regex": { - "description": "regex to find resource Regex contains the pattern to match to find a resource", - "type": "string" - }, - "type": { - "description": "type identifies the resource type for this entry. Valid values are ID, Name and RegEx", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "fields-to-discriminateBy": { - "id": "ID", - "name": "Name", - "regex": "RegEx", - "type": "Type" - } - } - ] - }, - "com.github.openshift.api.machine.v1.PowerVSSecretReference": { - "description": "PowerVSSecretReference contains enough information to locate the referenced secret inside the same namespace.", - "type": "object", - "properties": { - "name": { - "description": "name of the secret.", - "type": "string" - } - }, - "x-kubernetes-map-type": "atomic" - }, - "com.github.openshift.api.machine.v1.RootVolume": { - "description": "RootVolume represents the volume metadata to boot from. The original RootVolume struct is defined in the v1alpha1 but it's not best practice to use it directly here so we define a new one that should stay in sync with the original one.", - "type": "object", - "required": [ - "volumeType" - ], - "properties": { - "availabilityZone": { - "description": "availabilityZone specifies the Cinder availability zone where the root volume will be created. If not specifified, the root volume will be created in the availability zone specified by the volume type in the cinder configuration. If the volume type (configured in the OpenStack cluster) does not specify an availability zone, the root volume will be created in the default availability zone specified in the cinder configuration. See https://docs.openstack.org/cinder/latest/admin/availability-zone-type.html for more details. If the OpenStack cluster is deployed with the cross_az_attach configuration option set to false, the root volume will have to be in the same availability zone as the VM (defined by OpenStackFailureDomain.AvailabilityZone). Availability zone names must NOT contain spaces otherwise it will lead to volume that belongs to this availability zone register failure, see kubernetes/cloud-provider-openstack#1379 for further information. The maximum length of availability zone name is 63 as per labels limits.", - "type": "string" - }, - "volumeType": { - "description": "volumeType specifies the type of the root volume that will be provisioned. The maximum length of a volume type name is 255 characters, as per the OpenStack limit.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1.SystemDiskProperties": { - "description": "SystemDiskProperties contains the information regarding the system disk including performance, size, name, and category", - "type": "object", - "properties": { - "category": { - "description": "category is the category of the system disk. Valid values: cloud_essd: ESSD. When the parameter is set to this value, you can use the SystemDisk.PerformanceLevel parameter to specify the performance level of the disk. cloud_efficiency: ultra disk. cloud_ssd: standard SSD. cloud: basic disk. Empty value means no opinion and the platform chooses the a default, which is subject to change over time. Currently for non-I/O optimized instances of retired instance types, the default is `cloud`. Currently for other instances, the default is `cloud_efficiency`.", - "type": "string" - }, - "name": { - "description": "name is the name of the system disk. If the name is specified the name must be 2 to 128 characters in length. It must start with a letter and cannot start with http:// or https://. It can contain letters, digits, colons (:), underscores (_), and hyphens (-). Empty value means the platform chooses a default, which is subject to change over time. Currently the default is `\"\"`.", - "type": "string" - }, - "performanceLevel": { - "description": "performanceLevel is the performance level of the ESSD used as the system disk. Valid values:\n\nPL0: A single ESSD can deliver up to 10,000 random read/write IOPS. PL1: A single ESSD can deliver up to 50,000 random read/write IOPS. PL2: A single ESSD can deliver up to 100,000 random read/write IOPS. PL3: A single ESSD can deliver up to 1,000,000 random read/write IOPS. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is `PL1`. For more information about ESSD performance levels, see ESSDs.", - "type": "string" - }, - "size": { - "description": "size is the size of the system disk. Unit: GiB. Valid values: 20 to 500. The value must be at least 20 and greater than or equal to the size of the image. Empty value means the platform chooses a default, which is subject to change over time. Currently the default is `40` or the size of the image depending on whichever is greater.", - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.machine.v1.Tag": { - "description": "Tag The tags of ECS Instance", - "type": "object", - "required": [ - "Key", - "Value" - ], - "properties": { - "Key": { - "description": "Key is the name of the key pair", - "type": "string", - "default": "" - }, - "Value": { - "description": "Value is the value or data of the key pair", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1.VSphereFailureDomain": { - "description": "VSphereFailureDomain configures failure domain information for the vSphere platform", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name of the failure domain in which the vSphere machine provider will create the VM. Failure domains are defined in a cluster's config.openshift.io/Infrastructure resource. When balancing machines across failure domains, the control plane machine set will inject configuration from the Infrastructure resource into the machine providerSpec to allocate the machine to a failure domain.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1alpha1.AdditionalBlockDevice": { - "description": "additionalBlockDevice is a block device to attach to the server.", - "type": "object", - "required": [ - "name", - "sizeGiB", - "storage" - ], - "properties": { - "name": { - "description": "name of the block device in the context of a machine. If the block device is a volume, the Cinder volume will be named as a combination of the machine name and this name. Also, this name will be used for tagging the block device. Information about the block device tag can be obtained from the OpenStack metadata API or the config drive.", - "type": "string", - "default": "" - }, - "sizeGiB": { - "description": "sizeGiB is the size of the block device in gibibytes (GiB).", - "type": "integer", - "format": "int32", - "default": 0 - }, - "storage": { - "description": "storage specifies the storage type of the block device and additional storage options.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1alpha1.BlockDeviceStorage" - } - } - }, - "com.github.openshift.api.machine.v1alpha1.AddressPair": { - "type": "object", - "properties": { - "ipAddress": { - "type": "string" - }, - "macAddress": { - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1alpha1.BlockDeviceStorage": { - "description": "blockDeviceStorage is the storage type of a block device to create and contains additional storage options.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "type": { - "description": "type is the type of block device to create. This can be either \"Volume\" or \"Local\".", - "type": "string", - "default": "" - }, - "volume": { - "description": "volume contains additional storage options for a volume block device.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1alpha1.BlockDeviceVolume" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "volume": "Volume" - } - } - ] - }, - "com.github.openshift.api.machine.v1alpha1.BlockDeviceVolume": { - "description": "blockDeviceVolume contains additional storage options for a volume block device.", - "type": "object", - "properties": { - "availabilityZone": { - "description": "availabilityZone is the volume availability zone to create the volume in. If omitted, the availability zone of the server will be used. The availability zone must NOT contain spaces otherwise it will lead to volume that belongs to this availability zone register failure, see kubernetes/cloud-provider-openstack#1379 for further information.", - "type": "string" - }, - "type": { - "description": "type is the Cinder volume type of the volume. If omitted, the default Cinder volume type that is configured in the OpenStack cloud will be used.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1alpha1.Filter": { - "type": "object", - "properties": { - "adminStateUp": { - "description": "Deprecated: adminStateUp is silently ignored. It has no replacement.", - "type": "boolean" - }, - "description": { - "description": "description filters networks by description.", - "type": "string" - }, - "id": { - "description": "Deprecated: use NetworkParam.uuid instead. Ignored if NetworkParam.uuid is set.", - "type": "string" - }, - "limit": { - "description": "Deprecated: limit is silently ignored. It has no replacement.", - "type": "integer", - "format": "int32" - }, - "marker": { - "description": "Deprecated: marker is silently ignored. It has no replacement.", - "type": "string" - }, - "name": { - "description": "name filters networks by name.", - "type": "string" - }, - "notTags": { - "description": "notTags filters by networks which don't match all specified tags. NOT (t1 AND t2...) Multiple tags are comma separated.", - "type": "string" - }, - "notTagsAny": { - "description": "notTagsAny filters by networks which don't match any specified tags. NOT (t1 OR t2...) Multiple tags are comma separated.", - "type": "string" - }, - "projectId": { - "description": "projectId filters networks by project ID.", - "type": "string" - }, - "shared": { - "description": "Deprecated: shared is silently ignored. It has no replacement.", - "type": "boolean" - }, - "sortDir": { - "description": "Deprecated: sortDir is silently ignored. It has no replacement.", - "type": "string" - }, - "sortKey": { - "description": "Deprecated: sortKey is silently ignored. It has no replacement.", - "type": "string" - }, - "status": { - "description": "Deprecated: status is silently ignored. It has no replacement.", - "type": "string" - }, - "tags": { - "description": "tags filters by networks containing all specified tags. Multiple tags are comma separated.", - "type": "string" - }, - "tagsAny": { - "description": "tagsAny filters by networks containing any specified tags. Multiple tags are comma separated.", - "type": "string" - }, - "tenantId": { - "description": "tenantId filters networks by tenant ID. Deprecated: use projectId instead. tenantId will be ignored if projectId is set.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1alpha1.FixedIPs": { - "type": "object", - "required": [ - "subnetID" - ], - "properties": { - "ipAddress": { - "description": "ipAddress is a specific IP address to use in the given subnet. Port creation will fail if the address is not available. If not specified, an available IP from the given subnet will be selected automatically.", - "type": "string" - }, - "subnetID": { - "description": "subnetID specifies the ID of the subnet where the fixed IP will be allocated.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1alpha1.NetworkParam": { - "type": "object", - "properties": { - "filter": { - "description": "Filters for optional network query", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1alpha1.Filter" - }, - "fixedIp": { - "description": "A fixed IPv4 address for the NIC. Deprecated: fixedIP is silently ignored. Use subnets instead.", - "type": "string" - }, - "noAllowedAddressPairs": { - "description": "noAllowedAddressPairs disables creation of allowed address pairs for the network ports", - "type": "boolean" - }, - "portSecurity": { - "description": "portSecurity optionally enables or disables security on ports managed by OpenStack", - "type": "boolean" - }, - "portTags": { - "description": "portTags allows users to specify a list of tags to add to ports created in a given network", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "profile": { - "description": "A dictionary that enables the application running on the specified host to pass and receive virtual network interface (VIF) port-specific information to the plug-in.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "subnets": { - "description": "Subnet within a network to use", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1alpha1.SubnetParam" - } - }, - "uuid": { - "description": "The UUID of the network. Required if you omit the port attribute.", - "type": "string" - }, - "vnicType": { - "description": "The virtual network interface card (vNIC) type that is bound to the neutron port.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1alpha1.OpenstackProviderSpec": { - "description": "OpenstackProviderSpec is the type that will be embedded in a Machine.Spec.ProviderSpec field for an OpenStack Instance. It is used by the Openstack machine actuator to create a single machine instance. Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "cloudsSecret", - "cloudName", - "flavor", - "image" - ], - "properties": { - "additionalBlockDevices": { - "description": "additionalBlockDevices is a list of specifications for additional block devices to attach to the server instance", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1alpha1.AdditionalBlockDevice" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "availabilityZone": { - "description": "The availability zone from which to launch the server.", - "type": "string" - }, - "cloudName": { - "description": "The name of the cloud to use from the clouds secret", - "type": "string", - "default": "" - }, - "cloudsSecret": { - "description": "The name of the secret containing the openstack credentials", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" - }, - "configDrive": { - "description": "Config Drive support", - "type": "boolean" - }, - "flavor": { - "description": "The flavor reference for the flavor for your server instance.", - "type": "string", - "default": "" - }, - "floatingIP": { - "description": "floatingIP specifies a floating IP to be associated with the machine. Note that it is not safe to use this parameter in a MachineSet, as only one Machine may be assigned the same floating IP.\n\nDeprecated: floatingIP will be removed in a future release as it cannot be implemented correctly.", - "type": "string" - }, - "image": { - "description": "The name of the image to use for your server instance. If the RootVolume is specified, this will be ignored and use rootVolume directly.", - "type": "string", - "default": "" - }, - "keyName": { - "description": "The ssh key to inject in the instance", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "networks": { - "description": "A networks object. Required parameter when there are multiple networks defined for the tenant. When you do not specify the networks parameter, the server attaches to the only network created for the current tenant.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1alpha1.NetworkParam" - } - }, - "ports": { - "description": "Create and assign additional ports to instances", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1alpha1.PortOpts" - } - }, - "primarySubnet": { - "description": "The subnet that a set of machines will get ingress/egress traffic from Deprecated: primarySubnet is silently ignored. Use subnets instead.", - "type": "string" - }, - "rootVolume": { - "description": "The volume metadata to boot from", - "$ref": "#/definitions/com.github.openshift.api.machine.v1alpha1.RootVolume" - }, - "securityGroups": { - "description": "The names of the security groups to assign to the instance", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1alpha1.SecurityGroupParam" - } - }, - "serverGroupID": { - "description": "The server group to assign the machine to.", - "type": "string" - }, - "serverGroupName": { - "description": "The server group to assign the machine to. A server group with that name will be created if it does not exist. If both ServerGroupID and ServerGroupName are non-empty, they must refer to the same OpenStack resource.", - "type": "string" - }, - "serverMetadata": { - "description": "Metadata mapping. Allows you to create a map of key value pairs to add to the server instance.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "sshUserName": { - "description": "The machine ssh username Deprecated: sshUserName is silently ignored.", - "type": "string" - }, - "tags": { - "description": "Machine tags Requires Nova api 2.52 minimum!", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "trunk": { - "description": "Whether the server instance is created on a trunk port or not.", - "type": "boolean" - }, - "userDataSecret": { - "description": "The name of the secret containing the user data (startup script in most cases)", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" - } - } - }, - "com.github.openshift.api.machine.v1alpha1.PortOpts": { - "type": "object", - "required": [ - "networkID" - ], - "properties": { - "adminStateUp": { - "description": "adminStateUp sets the administrative state of the created port to up (true), or down (false).", - "type": "boolean" - }, - "allowedAddressPairs": { - "description": "allowedAddressPairs specifies a set of allowed address pairs to add to the port.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1alpha1.AddressPair" - } - }, - "description": { - "description": "description specifies the description of the created port.", - "type": "string" - }, - "fixedIPs": { - "description": "fixedIPs specifies a set of fixed IPs to assign to the port. They must all be valid for the port's network.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1alpha1.FixedIPs" - } - }, - "hostID": { - "description": "The ID of the host where the port is allocated. Do not use this field: it cannot be used correctly. Deprecated: hostID is silently ignored. It will be removed with no replacement.", - "type": "string" - }, - "macAddress": { - "description": "macAddress specifies the MAC address of the created port.", - "type": "string" - }, - "nameSuffix": { - "description": "If nameSuffix is specified the created port will be named -. If not specified the port will be named -.", - "type": "string" - }, - "networkID": { - "description": "networkID is the ID of the network the port will be created in. It is required.", - "type": "string", - "default": "" - }, - "portSecurity": { - "description": "enable or disable security on a given port incompatible with securityGroups and allowedAddressPairs", - "type": "boolean" - }, - "profile": { - "description": "A dictionary that enables the application running on the specified host to pass and receive virtual network interface (VIF) port-specific information to the plug-in.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "projectID": { - "description": "projectID specifies the project ID of the created port. Note that this requires OpenShift to have administrative permissions, which is typically not the case. Use of this field is not recommended. Deprecated: projectID is silently ignored.", - "type": "string" - }, - "securityGroups": { - "description": "securityGroups specifies a set of security group UUIDs to use instead of the machine's default security groups. The default security groups will be used if this is left empty or not specified.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "tags": { - "description": "tags species a set of tags to add to the port.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "tenantID": { - "description": "tenantID specifies the tenant ID of the created port. Note that this requires OpenShift to have administrative permissions, which is typically not the case. Use of this field is not recommended. Deprecated: tenantID is silently ignored.", - "type": "string" - }, - "trunk": { - "description": "Enables and disables trunk at port level. If not provided, openStackMachine.Spec.Trunk is inherited.", - "type": "boolean" - }, - "vnicType": { - "description": "The virtual network interface card (vNIC) type that is bound to the neutron port.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1alpha1.RootVolume": { - "type": "object", - "properties": { - "availabilityZone": { - "description": "availabilityZone specifies the Cinder availability where the root volume will be created.", - "type": "string" - }, - "deviceType": { - "description": "Deprecated: deviceType will be silently ignored. There is no replacement.", - "type": "string" - }, - "diskSize": { - "description": "diskSize specifies the size, in GiB, of the created root volume.", - "type": "integer", - "format": "int32" - }, - "sourceType": { - "description": "Deprecated: sourceType will be silently ignored. There is no replacement.", - "type": "string" - }, - "sourceUUID": { - "description": "sourceUUID specifies the UUID of a glance image used to populate the root volume. Deprecated: set image in the platform spec instead. This will be ignored if image is set in the platform spec.", - "type": "string" - }, - "volumeType": { - "description": "volumeType specifies a volume type to use when creating the root volume. If not specified the default volume type will be used.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1alpha1.SecurityGroupFilter": { - "type": "object", - "properties": { - "description": { - "description": "description filters security groups by description.", - "type": "string" - }, - "id": { - "description": "id specifies the ID of a security group to use. If set, id will not be validated before use. An invalid id will result in failure to create a server with an appropriate error message.", - "type": "string" - }, - "limit": { - "description": "Deprecated: limit is silently ignored. It has no replacement.", - "type": "integer", - "format": "int32" - }, - "marker": { - "description": "Deprecated: marker is silently ignored. It has no replacement.", - "type": "string" - }, - "name": { - "description": "name filters security groups by name.", - "type": "string" - }, - "notTags": { - "description": "notTags filters by security groups which don't match all specified tags. NOT (t1 AND t2...) Multiple tags are comma separated.", - "type": "string" - }, - "notTagsAny": { - "description": "notTagsAny filters by security groups which don't match any specified tags. NOT (t1 OR t2...) Multiple tags are comma separated.", - "type": "string" - }, - "projectId": { - "description": "projectId filters security groups by project ID.", - "type": "string" - }, - "sortDir": { - "description": "Deprecated: sortDir is silently ignored. It has no replacement.", - "type": "string" - }, - "sortKey": { - "description": "Deprecated: sortKey is silently ignored. It has no replacement.", - "type": "string" - }, - "tags": { - "description": "tags filters by security groups containing all specified tags. Multiple tags are comma separated.", - "type": "string" - }, - "tagsAny": { - "description": "tagsAny filters by security groups containing any specified tags. Multiple tags are comma separated.", - "type": "string" - }, - "tenantId": { - "description": "tenantId filters security groups by tenant ID. Deprecated: use projectId instead. tenantId will be ignored if projectId is set.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1alpha1.SecurityGroupParam": { - "type": "object", - "properties": { - "filter": { - "description": "Filters used to query security groups in openstack", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1alpha1.SecurityGroupFilter" - }, - "name": { - "description": "Security Group name", - "type": "string" - }, - "uuid": { - "description": "Security Group UUID", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1alpha1.SubnetFilter": { - "type": "object", - "properties": { - "cidr": { - "description": "cidr filters subnets by CIDR.", - "type": "string" - }, - "description": { - "description": "description filters subnets by description.", - "type": "string" - }, - "enableDhcp": { - "description": "Deprecated: enableDhcp is silently ignored. It has no replacement.", - "type": "boolean" - }, - "gateway_ip": { - "description": "gateway_ip filters subnets by gateway IP.", - "type": "string" - }, - "id": { - "description": "id is the uuid of a specific subnet to use. If specified, id will not be validated. Instead server creation will fail with an appropriate error.", - "type": "string" - }, - "ipVersion": { - "description": "ipVersion filters subnets by IP version.", - "type": "integer", - "format": "int32" - }, - "ipv6AddressMode": { - "description": "ipv6AddressMode filters subnets by IPv6 address mode.", - "type": "string" - }, - "ipv6RaMode": { - "description": "ipv6RaMode filters subnets by IPv6 router adversiement mode.", - "type": "string" - }, - "limit": { - "description": "Deprecated: limit is silently ignored. It has no replacement.", - "type": "integer", - "format": "int32" - }, - "marker": { - "description": "Deprecated: marker is silently ignored. It has no replacement.", - "type": "string" - }, - "name": { - "description": "name filters subnets by name.", - "type": "string" - }, - "networkId": { - "description": "Deprecated: networkId is silently ignored. Set uuid on the containing network definition instead.", - "type": "string" - }, - "notTags": { - "description": "notTags filters by subnets which don't match all specified tags. NOT (t1 AND t2...) Multiple tags are comma separated.", - "type": "string" - }, - "notTagsAny": { - "description": "notTagsAny filters by subnets which don't match any specified tags. NOT (t1 OR t2...) Multiple tags are comma separated.", - "type": "string" - }, - "projectId": { - "description": "projectId filters subnets by project ID.", - "type": "string" - }, - "sortDir": { - "description": "Deprecated: sortDir is silently ignored. It has no replacement.", - "type": "string" - }, - "sortKey": { - "description": "Deprecated: sortKey is silently ignored. It has no replacement.", - "type": "string" - }, - "subnetpoolId": { - "description": "subnetpoolId filters subnets by subnet pool ID. Deprecated: subnetpoolId is silently ignored.", - "type": "string" - }, - "tags": { - "description": "tags filters by subnets containing all specified tags. Multiple tags are comma separated.", - "type": "string" - }, - "tagsAny": { - "description": "tagsAny filters by subnets containing any specified tags. Multiple tags are comma separated.", - "type": "string" - }, - "tenantId": { - "description": "tenantId filters subnets by tenant ID. Deprecated: use projectId instead. tenantId will be ignored if projectId is set.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1alpha1.SubnetParam": { - "type": "object", - "properties": { - "filter": { - "description": "Filters for optional network query", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1alpha1.SubnetFilter" - }, - "portSecurity": { - "description": "portSecurity optionally enables or disables security on ports managed by OpenStack Deprecated: portSecurity is silently ignored. Set portSecurity on the parent network instead.", - "type": "boolean" - }, - "portTags": { - "description": "portTags are tags that are added to ports created on this subnet", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "uuid": { - "description": "The UUID of the network. Required if you omit the port attribute.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.AWSMachineProviderConfig": { - "description": "AWSMachineProviderConfig is the Schema for the awsmachineproviderconfigs API Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "ami", - "instanceType", - "deviceIndex", - "subnet", - "placement" - ], - "properties": { - "ami": { - "description": "ami is the reference to the AMI from which to create the machine instance.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.AWSResourceReference" - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "blockDevices": { - "description": "blockDevices is the set of block device mapping associated to this instance, block device without a name will be used as a root device and only one device without a name is allowed https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/block-device-mapping-concepts.html", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.BlockDeviceMappingSpec" - } - }, - "capacityReservationId": { - "description": "capacityReservationId specifies the target Capacity Reservation into which the instance should be launched. The field size should be greater than 0 and the field input must start with cr-***", - "type": "string", - "default": "" - }, - "cpuOptions": { - "description": "cpuOptions defines CPU-related settings for the instance, including the confidential computing policy. When omitted, this means no opinion and the AWS platform is left to choose a reasonable default. More info: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CpuOptionsRequest.html, https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cpu-options-supported-instances-values.html", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.CPUOptions" - }, - "credentialsSecret": { - "description": "credentialsSecret is a reference to the secret with AWS credentials. Otherwise, defaults to permissions provided by attached IAM role where the actuator is running.", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "deviceIndex": { - "description": "deviceIndex is the index of the device on the instance for the network interface attachment. Defaults to 0.", - "type": "integer", - "format": "int64", - "default": 0 - }, - "iamInstanceProfile": { - "description": "iamInstanceProfile is a reference to an IAM role to assign to the instance", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.AWSResourceReference" - }, - "instanceType": { - "description": "instanceType is the type of instance to create. Example: m4.xlarge", - "type": "string", - "default": "" - }, - "keyName": { - "description": "keyName is the name of the KeyPair to use for SSH", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "loadBalancers": { - "description": "loadBalancers is the set of load balancers to which the new instance should be added once it is created.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.LoadBalancerReference" - } - }, - "marketType": { - "description": "marketType specifies the type of market for the EC2 instance. Valid values are OnDemand, Spot, CapacityBlock and omitted.\n\nDefaults to OnDemand. When SpotMarketOptions is provided, the marketType defaults to \"Spot\".\n\nWhen set to OnDemand the instance runs as a standard OnDemand instance. When set to Spot the instance runs as a Spot instance. When set to CapacityBlock the instance utilizes pre-purchased compute capacity (capacity blocks) with AWS Capacity Reservations. If this value is selected, capacityReservationID must be specified to identify the target reservation.", - "type": "string" - }, - "metadata": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "metadataServiceOptions": { - "description": "metadataServiceOptions allows users to configure instance metadata service interaction options. If nothing specified, default AWS IMDS settings will be applied. https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_InstanceMetadataOptionsRequest.html", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.MetadataServiceOptions" - }, - "networkInterfaceType": { - "description": "networkInterfaceType specifies the type of network interface to be used for the primary network interface. Valid values are \"ENA\", \"EFA\", and omitted, which means no opinion and the platform chooses a good default which may change over time. The current default value is \"ENA\". Please visit https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html to learn more about the AWS Elastic Fabric Adapter interface option.", - "type": "string" - }, - "placement": { - "description": "placement specifies where to create the instance in AWS", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.Placement" - }, - "placementGroupName": { - "description": "placementGroupName specifies the name of the placement group in which to launch the instance. The placement group must already be created and may use any placement strategy. When omitted, no placement group is used when creating the EC2 instance.", - "type": "string" - }, - "placementGroupPartition": { - "description": "placementGroupPartition is the partition number within the placement group in which to launch the instance. This must be an integer value between 1 and 7. It is only valid if the placement group, referred in `PlacementGroupName` was created with strategy set to partition.", - "type": "integer", - "format": "int32" - }, - "publicIp": { - "description": "publicIp specifies whether the instance should get a public IP. If not present, it should use the default of its subnet.", - "type": "boolean" - }, - "securityGroups": { - "description": "securityGroups is an array of references to security groups that should be applied to the instance.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.AWSResourceReference" - } - }, - "spotMarketOptions": { - "description": "spotMarketOptions allows users to configure instances to be run using AWS Spot instances.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.SpotMarketOptions" - }, - "subnet": { - "description": "subnet is a reference to the subnet to use for this instance", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.AWSResourceReference" - }, - "tags": { - "description": "tags is the set of tags to add to apply to an instance, in addition to the ones added by default by the actuator. These tags are additive. The actuator will ensure these tags are present, but will not remove any other tags that may exist on the instance.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.TagSpecification" - } - }, - "userDataSecret": { - "description": "userDataSecret contains a local reference to a secret that contains the UserData to apply to the instance", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - } - } - }, - "com.github.openshift.api.machine.v1beta1.AWSMachineProviderConfigList": { - "description": "AWSMachineProviderConfigList contains a list of AWSMachineProviderConfig Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.AWSMachineProviderConfig" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.machine.v1beta1.AWSMachineProviderStatus": { - "description": "AWSMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains AWS-specific status information. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "conditions": { - "description": "conditions is a set of conditions associated with the Machine to indicate errors or other status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "dedicatedHost": { - "description": "dedicatedHost tracks the dynamically allocated dedicated host. This field is populated when allocationStrategy is Dynamic (with or without DynamicHostAllocation). When omitted, this indicates that the dedicated host has not yet been allocated, or allocation is in progress.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.DedicatedHostStatus" - }, - "instanceId": { - "description": "instanceId is the instance ID of the machine created in AWS", - "type": "string" - }, - "instanceState": { - "description": "instanceState is the state of the AWS instance for this machine", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.AWSResourceReference": { - "description": "AWSResourceReference is a reference to a specific AWS resource by ID, ARN, or filters. Only one of ID, ARN or Filters may be specified. Specifying more than one will result in a validation error.", - "type": "object", - "properties": { - "arn": { - "description": "arn of resource", - "type": "string" - }, - "filters": { - "description": "filters is a set of filters used to identify a resource", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.Filter" - } - }, - "id": { - "description": "id of resource", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.AddressesFromPool": { - "description": "AddressesFromPool is an IPAddressPool that will be used to create IPAddressClaims for fulfillment by an external controller.", - "type": "object", - "required": [ - "group", - "resource", - "name" - ], - "properties": { - "group": { - "description": "group of the IP address pool type known to an external IPAM controller. This should be a fully qualified domain name, for example, externalipam.controller.io.", - "type": "string", - "default": "" - }, - "name": { - "description": "name of an IP address pool, for example, pool-config-1.", - "type": "string", - "default": "" - }, - "resource": { - "description": "resource of the IP address pool type known to an external IPAM controller. It is normally the plural form of the resource kind in lowercase, for example, ippools.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1beta1.AzureBootDiagnostics": { - "description": "AzureBootDiagnostics configures the boot diagnostics settings for the virtual machine. This allows you to configure capturing serial output from the virtual machine on boot. This is useful for debugging software based launch issues.", - "type": "object", - "required": [ - "storageAccountType" - ], - "properties": { - "customerManaged": { - "description": "customerManaged provides reference to the customer manager storage account.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.AzureCustomerManagedBootDiagnostics" - }, - "storageAccountType": { - "description": "storageAccountType determines if the storage account for storing the diagnostics data should be provisioned by Azure (AzureManaged) or by the customer (CustomerManaged).", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "storageAccountType", - "fields-to-discriminateBy": { - "customerManaged": "CustomerManaged" - } - } - ] - }, - "com.github.openshift.api.machine.v1beta1.AzureCustomerManagedBootDiagnostics": { - "description": "AzureCustomerManagedBootDiagnostics provides reference to a customer managed storage account.", - "type": "object", - "required": [ - "storageAccountURI" - ], - "properties": { - "storageAccountURI": { - "description": "storageAccountURI is the URI of the customer managed storage account. The URI typically will be `https://.blob.core.windows.net/` but may differ if you are using Azure DNS zone endpoints. You can find the correct endpoint by looking for the Blob Primary Endpoint in the endpoints tab in the Azure console.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1beta1.AzureDiagnostics": { - "description": "AzureDiagnostics is used to configure the diagnostic settings of the virtual machine.", - "type": "object", - "properties": { - "boot": { - "description": "AzureBootDiagnostics configures the boot diagnostics settings for the virtual machine. This allows you to configure capturing serial output from the virtual machine on boot. This is useful for debugging software based launch issues.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.AzureBootDiagnostics" - } - } - }, - "com.github.openshift.api.machine.v1beta1.AzureMachineProviderSpec": { - "description": "AzureMachineProviderSpec is the type that will be embedded in a Machine.Spec.ProviderSpec field for an Azure virtual machine. It is used by the Azure machine actuator to create a single Machine. Required parameters such as location that are not specified by this configuration, will be defaulted by the actuator. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "image", - "osDisk", - "publicIP", - "subnet" - ], - "properties": { - "acceleratedNetworking": { - "description": "acceleratedNetworking enables or disables Azure accelerated networking feature. Set to false by default. If true, then this will depend on whether the requested VMSize is supported. If set to true with an unsupported VMSize, Azure will return an error.", - "type": "boolean" - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "applicationSecurityGroups": { - "description": "Application Security Groups that need to be attached to the machine's interface. No application security groups will be attached if zero-length.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "availabilitySet": { - "description": "availabilitySet specifies the availability set to use for this instance. Availability set should be precreated, before using this field.", - "type": "string" - }, - "capacityReservationGroupID": { - "description": "capacityReservationGroupID specifies the capacity reservation group resource id that should be used for allocating the virtual machine. The field size should be greater than 0 and the field input must start with '/'. The input for capacityReservationGroupID must be similar to '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/capacityReservationGroups/{capacityReservationGroupName}'. The keys which are used should be among 'subscriptions', 'providers' and 'resourcegroups' followed by valid ID or names respectively.", - "type": "string" - }, - "credentialsSecret": { - "description": "credentialsSecret is a reference to the secret with Azure credentials.", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" - }, - "dataDisks": { - "description": "DataDisk specifies the parameters that are used to add one or more data disks to the machine.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.DataDisk" - } - }, - "diagnostics": { - "description": "diagnostics configures the diagnostics settings for the virtual machine. This allows you to configure boot diagnostics such as capturing serial output from the virtual machine on boot. This is useful for debugging software based launch issues.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.AzureDiagnostics" - }, - "image": { - "description": "image is the OS image to use to create the instance.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.Image" - }, - "internalLoadBalancer": { - "description": "InternalLoadBalancerName to use for this instance", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "location": { - "description": "location is the region to use to create the instance", - "type": "string" - }, - "managedIdentity": { - "description": "managedIdentity to set managed identity name", - "type": "string" - }, - "metadata": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "natRule": { - "description": "natRule to set inbound NAT rule of the load balancer", - "type": "integer", - "format": "int64" - }, - "networkResourceGroup": { - "description": "networkResourceGroup is the resource group for the virtual machine's network", - "type": "string" - }, - "osDisk": { - "description": "osDisk represents the parameters for creating the OS disk.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.OSDisk" - }, - "publicIP": { - "description": "publicIP if true a public IP will be used", - "type": "boolean", - "default": false - }, - "publicLoadBalancer": { - "description": "publicLoadBalancer to use for this instance", - "type": "string" - }, - "resourceGroup": { - "description": "resourceGroup is the resource group for the virtual machine", - "type": "string" - }, - "securityGroup": { - "description": "Network Security Group that needs to be attached to the machine's interface. No security group will be attached if empty.", - "type": "string" - }, - "securityProfile": { - "description": "securityProfile specifies the Security profile settings for a virtual machine.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.SecurityProfile" - }, - "spotVMOptions": { - "description": "spotVMOptions allows the ability to specify the Machine should use a Spot VM", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.SpotVMOptions" - }, - "sshPublicKey": { - "description": "sshPublicKey is the public key to use to SSH to the virtual machine.", - "type": "string" - }, - "subnet": { - "description": "subnet to use for this instance", - "type": "string", - "default": "" - }, - "tags": { - "description": "tags is a list of tags to apply to the machine.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "ultraSSDCapability": { - "description": "ultraSSDCapability enables or disables Azure UltraSSD capability for a virtual machine. This can be used to allow/disallow binding of Azure UltraSSD to the Machine both as Data Disks or via Persistent Volumes. This Azure feature is subject to a specific scope and certain limitations. More informations on this can be found in the official Azure documentation for Ultra Disks: (https://docs.microsoft.com/en-us/azure/virtual-machines/disks-enable-ultra-ssd?tabs=azure-portal#ga-scope-and-limitations).\n\nWhen omitted, if at least one Data Disk of type UltraSSD is specified, the platform will automatically enable the capability. If a Perisistent Volume backed by an UltraSSD is bound to a Pod on the Machine, when this field is ommitted, the platform will *not* automatically enable the capability (unless already enabled by the presence of an UltraSSD as Data Disk). This may manifest in the Pod being stuck in `ContainerCreating` phase. This defaulting behaviour may be subject to change in future.\n\nWhen set to \"Enabled\", if the capability is available for the Machine based on the scope and limitations described above, the capability will be set on the Machine. This will thus allow UltraSSD both as Data Disks and Persistent Volumes. If set to \"Enabled\" when the capability can't be available due to scope and limitations, the Machine will go into \"Failed\" state.\n\nWhen set to \"Disabled\", UltraSSDs will not be allowed either as Data Disks nor as Persistent Volumes. In this case if any UltraSSDs are specified as Data Disks on a Machine, the Machine will go into a \"Failed\" state. If instead any UltraSSDs are backing the volumes (via Persistent Volumes) of any Pods scheduled on a Node which is backed by the Machine, the Pod may get stuck in `ContainerCreating` phase.", - "type": "string" - }, - "userDataSecret": { - "description": "userDataSecret contains a local reference to a secret that contains the UserData to apply to the instance", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" - }, - "vmSize": { - "description": "vmSize is the size of the VM to create.", - "type": "string" - }, - "vnet": { - "description": "vnet to set virtual network name", - "type": "string" - }, - "zone": { - "description": "Availability Zone for the virtual machine. If nil, the virtual machine should be deployed to no zone", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.AzureMachineProviderStatus": { - "description": "AzureMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains Azure-specific status information. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "conditions": { - "description": "conditions is a set of conditions associated with the Machine to indicate errors or other status.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "vmId": { - "description": "vmId is the ID of the virtual machine created in Azure.", - "type": "string" - }, - "vmState": { - "description": "vmState is the provisioning state of the Azure virtual machine.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.BlockDeviceMappingSpec": { - "description": "BlockDeviceMappingSpec describes a block device mapping", - "type": "object", - "properties": { - "deviceName": { - "description": "The device name exposed to the machine (for example, /dev/sdh or xvdh).", - "type": "string" - }, - "ebs": { - "description": "Parameters used to automatically set up EBS volumes when the machine is launched.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.EBSBlockDeviceSpec" - }, - "noDevice": { - "description": "Suppresses the specified device included in the block device mapping of the AMI.", - "type": "string" - }, - "virtualName": { - "description": "The virtual device name (ephemeralN). Machine store volumes are numbered starting from 0. An machine type with 2 available machine store volumes can specify mappings for ephemeral0 and ephemeral1.The number of available machine store volumes depends on the machine type. After you connect to the machine, you must mount the volume.\n\nConstraints: For M3 machines, you must specify machine store volumes in the block device mapping for the machine. When you launch an M3 machine, we ignore any machine store volumes specified in the block device mapping for the AMI.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.CPUOptions": { - "description": "CPUOptions defines CPU-related settings for the instance, including the confidential computing policy. If provided, it must not be empty — at least one field must be set.", - "type": "object", - "properties": { - "confidentialCompute": { - "description": "confidentialCompute specifies whether confidential computing should be enabled for the instance, and, if so, which confidential computing technology to use. Valid values are: Disabled, AMDEncryptedVirtualizationNestedPaging and omitted. When set to Disabled, confidential computing will be disabled for the instance. When set to AMDEncryptedVirtualizationNestedPaging, AMD SEV-SNP will be used as the confidential computing technology for the instance. In this case, ensure the following conditions are met: 1) The selected instance type supports AMD SEV-SNP. 2) The selected AWS region supports AMD SEV-SNP. 3) The selected AMI supports AMD SEV-SNP. More details can be checked at https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sev-snp.html When omitted, this means no opinion and the AWS platform is left to choose a reasonable default, which is subject to change without notice. The current default is Disabled.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.Condition": { - "description": "Condition defines an observation of a Machine API resource operational state.", - "type": "object", - "required": [ - "type", - "status", - "lastTransitionTime" - ], - "properties": { - "lastTransitionTime": { - "description": "Last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "A human readable message indicating details about the transition. This field may be empty.", - "type": "string" - }, - "reason": { - "description": "The reason for the condition's last transition in CamelCase. The specific API may choose whether or not this field is considered a guaranteed API. This field may not be empty.", - "type": "string" - }, - "severity": { - "description": "severity provides an explicit classification of Reason code, so the users or machines can immediately understand the current situation and act accordingly. The Severity field MUST be set only when Status=False.", - "type": "string" - }, - "status": { - "description": "status of the condition, one of True, False, Unknown.", - "type": "string", - "default": "" - }, - "type": { - "description": "type of condition in CamelCase or in foo.example.com/CamelCase. Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1beta1.ConfidentialVM": { - "description": "ConfidentialVM defines the UEFI settings for the virtual machine.", - "type": "object", - "required": [ - "uefiSettings" - ], - "properties": { - "uefiSettings": { - "description": "uefiSettings specifies the security settings like secure boot and vTPM used while creating the virtual machine.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.UEFISettings" - } - } - }, - "com.github.openshift.api.machine.v1beta1.DataDisk": { - "description": "DataDisk specifies the parameters that are used to add one or more data disks to the machine. A Data Disk is a managed disk that's attached to a virtual machine to store application data. It differs from an OS Disk as it doesn't come with a pre-installed OS, and it cannot contain the boot volume. It is registered as SCSI drive and labeled with the chosen `lun`. e.g. for `lun: 0` the raw disk device will be available at `/dev/disk/azure/scsi1/lun0`.\n\nAs the Data Disk disk device is attached raw to the virtual machine, it will need to be partitioned, formatted with a filesystem and mounted, in order for it to be usable. This can be done by creating a custom userdata Secret with custom Ignition configuration to achieve the desired initialization. At this stage the previously defined `lun` is to be used as the \"device\" key for referencing the raw disk device to be initialized. Once the custom userdata Secret has been created, it can be referenced in the Machine's `.providerSpec.userDataSecret`. For further guidance and examples, please refer to the official OpenShift docs.", - "type": "object", - "required": [ - "nameSuffix", - "diskSizeGB", - "lun", - "deletionPolicy" - ], - "properties": { - "cachingType": { - "description": "cachingType specifies the caching requirements. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is CachingTypeNone.", - "type": "string" - }, - "deletionPolicy": { - "description": "deletionPolicy specifies the data disk deletion policy upon Machine deletion. Possible values are \"Delete\",\"Detach\". When \"Delete\" is used the data disk is deleted when the Machine is deleted. When \"Detach\" is used the data disk is detached from the Machine and retained when the Machine is deleted.", - "type": "string", - "default": "" - }, - "diskSizeGB": { - "description": "diskSizeGB is the size in GB to assign to the data disk.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "lun": { - "description": "lun Specifies the logical unit number of the data disk. This value is used to identify data disks within the VM and therefore must be unique for each data disk attached to a VM. This value is also needed for referencing the data disks devices within userdata to perform disk initialization through Ignition (e.g. partition/format/mount). The value must be between 0 and 63.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "managedDisk": { - "description": "managedDisk specifies the Managed Disk parameters for the data disk. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is a ManagedDisk with with storageAccountType: \"Premium_LRS\" and diskEncryptionSet.id: \"Default\".", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.DataDiskManagedDiskParameters" - }, - "nameSuffix": { - "description": "nameSuffix is the suffix to be appended to the machine name to generate the disk name. Each disk name will be in format _. NameSuffix name must start and finish with an alphanumeric character and can only contain letters, numbers, underscores, periods or hyphens. The overall disk name must not exceed 80 chars in length.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1beta1.DataDiskManagedDiskParameters": { - "description": "DataDiskManagedDiskParameters is the parameters of a DataDisk managed disk.", - "type": "object", - "required": [ - "storageAccountType" - ], - "properties": { - "diskEncryptionSet": { - "description": "diskEncryptionSet is the disk encryption set properties. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is a DiskEncryptionSet with id: \"Default\".", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.DiskEncryptionSetParameters" - }, - "storageAccountType": { - "description": "storageAccountType is the storage account type to use. Possible values include \"Standard_LRS\", \"Premium_LRS\" and \"UltraSSD_LRS\".", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1beta1.DedicatedHost": { - "description": "DedicatedHost represents the configuration for the usage of dedicated host.", - "type": "object", - "properties": { - "allocationStrategy": { - "description": "allocationStrategy specifies if the dedicated host will be provided by the admin through the id field or if the host will be dynamically allocated. Valid values are UserProvided and Dynamic. When omitted, the value defaults to \"UserProvided\", which requires the id field to be set. When allocationStrategy is set to UserProvided, an ID of the dedicated host to assign must be provided. When allocationStrategy is set to Dynamic, a dedicated host will be allocated and used to assign instances. When allocationStrategy is set to Dynamic, and dynamicHostAllocation is configured, a dedicated host will be allocated and the tags in dynamicHostAllocation will be assigned to that host.\n\nPossible enum values:\n - `\"Dynamic\"` specifies that the system should dynamically allocate a dedicated host for instances.\n - `\"UserProvided\"` specifies that the system should assign instances to a user-provided dedicated host.", - "type": "string", - "default": "UserProvided", - "enum": [ - "Dynamic", - "UserProvided" - ] - }, - "dynamicHostAllocation": { - "description": "dynamicHostAllocation specifies tags to apply to a dynamically allocated dedicated host. This field is only allowed when allocationStrategy is Dynamic, and is mutually exclusive with id. When specified, a dedicated host will be allocated with the provided tags applied. When omitted (and allocationStrategy is Dynamic), a dedicated host will be allocated without any additional tags.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.DynamicHostAllocationSpec" - }, - "id": { - "description": "id identifies the AWS Dedicated Host on which the instance must run. The value must start with \"h-\" followed by either 8 or 17 lowercase hexadecimal characters (0-9 and a-f). The use of 8 lowercase hexadecimal characters is for older legacy hosts that may not have been migrated to newer format. Must be either 10 or 19 characters in length. This field is required when allocationStrategy is UserProvided, and forbidden otherwise. When omitted with allocationStrategy set to Dynamic, the platform will dynamically allocate a dedicated host.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "allocationStrategy", - "fields-to-discriminateBy": { - "dynamicHostAllocation": "DynamicHostAllocation", - "id": "ID" - } - } - ] - }, - "com.github.openshift.api.machine.v1beta1.DedicatedHostStatus": { - "description": "DedicatedHostStatus defines the observed state of a dynamically allocated dedicated host associated with an AWSMachine. This struct is used to track the ID of the dedicated host.", - "type": "object", - "required": [ - "id" - ], - "properties": { - "id": { - "description": "id tracks the dynamically allocated dedicated host ID. This field is populated when allocationStrategy is Dynamic (with or without DynamicHostAllocation). The value must start with \"h-\" followed by either 8 or 17 lowercase hexadecimal characters (0-9 and a-f). The use of 8 lowercase hexadecimal characters is for older legacy hosts that may not have been migrated to newer format. Must be either 10 or 19 characters in length.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.DiskEncryptionSetParameters": { - "description": "DiskEncryptionSetParameters is the disk encryption set properties", - "type": "object", - "properties": { - "id": { - "description": "id is the disk encryption set ID Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is: \"Default\".", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.DiskSettings": { - "description": "DiskSettings describe ephemeral disk settings for the os disk.", - "type": "object", - "properties": { - "ephemeralStorageLocation": { - "description": "ephemeralStorageLocation enables ephemeral OS when set to 'Local'. Possible values include: 'Local'. See https://docs.microsoft.com/en-us/azure/virtual-machines/ephemeral-os-disks for full details. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is that disks are saved to remote Azure storage.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.DynamicHostAllocationSpec": { - "description": "DynamicHostAllocationSpec defines the configuration for dynamic dedicated host allocation. This specification always allocates exactly one dedicated host per machine. At least one property must be specified when this struct is used. Currently only Tags are available for configuring, but in the future more configs may become available.", - "type": "object", - "properties": { - "tags": { - "description": "tags specifies a set of key-value pairs to apply to the allocated dedicated host. When omitted, no additional user-defined tags will be applied to the allocated host. A maximum of 50 tags can be specified.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.TagSpecification" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.machine.v1beta1.EBSBlockDeviceSpec": { - "description": "EBSBlockDeviceSpec describes a block device for an EBS volume. https://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/EbsBlockDevice", - "type": "object", - "properties": { - "deleteOnTermination": { - "description": "Indicates whether the EBS volume is deleted on machine termination.\n\nDeprecated: setting this field has no effect.", - "type": "boolean" - }, - "encrypted": { - "description": "Indicates whether the EBS volume is encrypted. Encrypted Amazon EBS volumes may only be attached to machines that support Amazon EBS encryption.", - "type": "boolean" - }, - "iops": { - "description": "The number of I/O operations per second (IOPS) that the volume supports. For io1, this represents the number of IOPS that are provisioned for the volume. For gp2, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting. For more information about General Purpose SSD baseline performance, I/O credits, and bursting, see Amazon EBS Volume Types (http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html) in the Amazon Elastic Compute Cloud User Guide.\n\nMinimal and maximal IOPS for io1 and gp2 are constrained. Please, check https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html for precise boundaries for individual volumes.\n\nCondition: This parameter is required for requests to create io1 volumes; it is not used in requests to create gp2, st1, sc1, or standard volumes.", - "type": "integer", - "format": "int64" - }, - "kmsKey": { - "description": "Indicates the KMS key that should be used to encrypt the Amazon EBS volume.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.AWSResourceReference" - }, - "throughputMib": { - "description": "throughputMib to provision in MiB/s supported for the volume type. Not applicable to all types.\n\nThis parameter is valid only for gp3 volumes. Valid Range: Minimum value of 125. Maximum value of 2000.\n\nWhen omitted, this means no opinion, and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 125.", - "type": "integer", - "format": "int32" - }, - "volumeSize": { - "description": "The size of the volume, in GiB.\n\nConstraints: 1-16384 for General Purpose SSD (gp2), 4-16384 for Provisioned IOPS SSD (io1), 500-16384 for Throughput Optimized HDD (st1), 500-16384 for Cold HDD (sc1), and 1-1024 for Magnetic (standard) volumes. If you specify a snapshot, the volume size must be equal to or larger than the snapshot size.\n\nDefault: If you're creating the volume from a snapshot and don't specify a volume size, the default is the snapshot size.", - "type": "integer", - "format": "int64" - }, - "volumeType": { - "description": "volumeType can be of type gp2, gp3, io1, st1, sc1, or standard. Default: standard", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.Filter": { - "description": "Filter is a filter used to identify an AWS resource", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name of the filter. Filter names are case-sensitive.", - "type": "string", - "default": "" - }, - "values": { - "description": "values includes one or more filter values. Filter values are case-sensitive.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.machine.v1beta1.GCPDisk": { - "description": "GCPDisk describes disks for GCP.", - "type": "object", - "required": [ - "autoDelete", - "boot", - "sizeGb", - "type", - "image", - "labels" - ], - "properties": { - "autoDelete": { - "description": "autoDelete indicates if the disk will be auto-deleted when the instance is deleted (default false).", - "type": "boolean", - "default": false - }, - "boot": { - "description": "boot indicates if this is a boot disk (default false).", - "type": "boolean", - "default": false - }, - "encryptionKey": { - "description": "encryptionKey is the customer-supplied encryption key of the disk.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.GCPEncryptionKeyReference" - }, - "image": { - "description": "image is the source image to create this disk.", - "type": "string", - "default": "" - }, - "labels": { - "description": "labels list of labels to apply to the disk.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "sizeGb": { - "description": "sizeGb is the size of the disk (in GB).", - "type": "integer", - "format": "int64", - "default": 0 - }, - "type": { - "description": "type is the type of the disk (eg: pd-standard).", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1beta1.GCPEncryptionKeyReference": { - "description": "GCPEncryptionKeyReference describes the encryptionKey to use for a disk's encryption.", - "type": "object", - "properties": { - "kmsKey": { - "description": "KMSKeyName is the reference KMS key, in the format", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.GCPKMSKeyReference" - }, - "kmsKeyServiceAccount": { - "description": "kmsKeyServiceAccount is the service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used. See https://cloud.google.com/compute/docs/access/service-accounts#compute_engine_service_account for details on the default service account.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.GCPGPUConfig": { - "description": "GCPGPUConfig describes type and count of GPUs attached to the instance on GCP.", - "type": "object", - "required": [ - "count", - "type" - ], - "properties": { - "count": { - "description": "count is the number of GPUs to be attached to an instance.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "type": { - "description": "type is the type of GPU to be attached to an instance. Supported GPU types are: nvidia-tesla-k80, nvidia-tesla-p100, nvidia-tesla-v100, nvidia-tesla-p4, nvidia-tesla-t4", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1beta1.GCPKMSKeyReference": { - "description": "GCPKMSKeyReference gathers required fields for looking up a GCP KMS Key", - "type": "object", - "required": [ - "name", - "keyRing", - "location" - ], - "properties": { - "keyRing": { - "description": "keyRing is the name of the KMS Key Ring which the KMS Key belongs to.", - "type": "string", - "default": "" - }, - "location": { - "description": "location is the GCP location in which the Key Ring exists.", - "type": "string", - "default": "" - }, - "name": { - "description": "name is the name of the customer managed encryption key to be used for the disk encryption.", - "type": "string", - "default": "" - }, - "projectID": { - "description": "projectID is the ID of the Project in which the KMS Key Ring exists. Defaults to the VM ProjectID if not set.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.GCPMachineProviderSpec": { - "description": "GCPMachineProviderSpec is the type that will be embedded in a Machine.Spec.ProviderSpec field for an GCP virtual machine. It is used by the GCP machine actuator to create a single Machine. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "canIPForward", - "deletionProtection", - "serviceAccounts", - "machineType", - "region", - "zone" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "canIPForward": { - "description": "canIPForward Allows this instance to send and receive packets with non-matching destination or source IPs. This is required if you plan to use this instance to forward routes.", - "type": "boolean", - "default": false - }, - "confidentialCompute": { - "description": "confidentialCompute is an optional field defining whether the instance should have confidential compute enabled or not, and the confidential computing technology of choice. Allowed values are omitted, Disabled, Enabled, AMDEncryptedVirtualization, AMDEncryptedVirtualizationNestedPaging, and IntelTrustedDomainExtensions When set to Disabled, the machine will not be configured to be a confidential computing instance. When set to Enabled, the machine will be configured as a confidential computing instance with no preference on the confidential compute policy used. In this mode, the platform chooses a default that is subject to change over time. Currently, the default is to use AMD Secure Encrypted Virtualization. When set to AMDEncryptedVirtualization, the machine will be configured as a confidential computing instance with AMD Secure Encrypted Virtualization (AMD SEV) as the confidential computing technology. When set to AMDEncryptedVirtualizationNestedPaging, the machine will be configured as a confidential computing instance with AMD Secure Encrypted Virtualization Secure Nested Paging (AMD SEV-SNP) as the confidential computing technology. When set to IntelTrustedDomainExtensions, the machine will be configured as a confidential computing instance with Intel Trusted Domain Extensions (Intel TDX) as the confidential computing technology. If any value other than Disabled is set the selected machine type must support that specific confidential computing technology. The machine series supporting confidential computing technologies can be checked at https://cloud.google.com/confidential-computing/confidential-vm/docs/supported-configurations#all-confidential-vm-instances Currently, AMDEncryptedVirtualization is supported in c2d, n2d, and c3d machines. AMDEncryptedVirtualizationNestedPaging is supported in n2d machines. IntelTrustedDomainExtensions is supported in c3 machines. If any value other than Disabled is set, the selected region must support that specific confidential computing technology. The list of regions supporting confidential computing technologies can be checked at https://cloud.google.com/confidential-computing/confidential-vm/docs/supported-configurations#supported-zones If any value other than Disabled is set onHostMaintenance is required to be set to \"Terminate\". If omitted, the platform chooses a default, which is subject to change over time, currently that default is Disabled.", - "type": "string" - }, - "credentialsSecret": { - "description": "credentialsSecret is a reference to the secret with GCP credentials.", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "deletionProtection": { - "description": "deletionProtection whether the resource should be protected against deletion.", - "type": "boolean", - "default": false - }, - "disks": { - "description": "disks is a list of disks to be attached to the VM.", - "type": "array", - "items": { - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.GCPDisk" - } - }, - "gcpMetadata": { - "description": "Metadata key/value pairs to apply to the VM.", - "type": "array", - "items": { - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.GCPMetadata" - } - }, - "gpus": { - "description": "gpus is a list of GPUs to be attached to the VM.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.GCPGPUConfig" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "labels": { - "description": "labels list of labels to apply to the VM.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "machineType": { - "description": "machineType is the machine type to use for the VM.", - "type": "string", - "default": "" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "networkInterfaces": { - "description": "networkInterfaces is a list of network interfaces to be attached to the VM.", - "type": "array", - "items": { - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.GCPNetworkInterface" - } - }, - "onHostMaintenance": { - "description": "onHostMaintenance determines the behavior when a maintenance event occurs that might cause the instance to reboot. This is required to be set to \"Terminate\" if you want to provision machine with attached GPUs. Otherwise, allowed values are \"Migrate\" and \"Terminate\". If omitted, the platform chooses a default, which is subject to change over time, currently that default is \"Migrate\".", - "type": "string" - }, - "preemptible": { - "description": "preemptible indicates if created instance is preemptible.", - "type": "boolean" - }, - "projectID": { - "description": "projectID is the project in which the GCP machine provider will create the VM.", - "type": "string" - }, - "provisioningModel": { - "description": "provisioningModel is an optional field that determines the provisioning model for the GCP machine instance. Valid values are \"Spot\" and omitted. When set to Spot, the instance runs as a Google Cloud Spot instance which provides significant cost savings but may be preempted by Google Cloud Platform when resources are needed elsewhere. When omitted, the machine will be provisioned as a standard on-demand instance. This field cannot be used together with the preemptible field.", - "type": "string" - }, - "region": { - "description": "region is the region in which the GCP machine provider will create the VM.", - "type": "string", - "default": "" - }, - "resourceManagerTags": { - "description": "resourceManagerTags is an optional list of tags to apply to the GCP resources created for the cluster. See https://cloud.google.com/resource-manager/docs/tags/tags-overview for information on tagging GCP resources. GCP supports a maximum of 50 tags per resource.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.ResourceManagerTag" - }, - "x-kubernetes-list-map-keys": [ - "key" - ], - "x-kubernetes-list-type": "map" - }, - "restartPolicy": { - "description": "restartPolicy determines the behavior when an instance crashes or the underlying infrastructure provider stops the instance as part of a maintenance event (default \"Always\"). Cannot be \"Always\" with preemptible instances. Otherwise, allowed values are \"Always\" and \"Never\". If omitted, the platform chooses a default, which is subject to change over time, currently that default is \"Always\". RestartPolicy represents AutomaticRestart in GCP compute api", - "type": "string" - }, - "serviceAccounts": { - "description": "serviceAccounts is a list of GCP service accounts to be used by the VM.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.GCPServiceAccount" - } - }, - "shieldedInstanceConfig": { - "description": "shieldedInstanceConfig is the Shielded VM configuration for the VM", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.GCPShieldedInstanceConfig" - }, - "tags": { - "description": "tags list of network tags to apply to the VM.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "targetPools": { - "description": "targetPools are used for network TCP/UDP load balancing. A target pool references member instances, an associated legacy HttpHealthCheck resource, and, optionally, a backup target pool", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "userDataSecret": { - "description": "userDataSecret contains a local reference to a secret that contains the UserData to apply to the instance", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "zone": { - "description": "zone is the zone in which the GCP machine provider will create the VM.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1beta1.GCPMachineProviderStatus": { - "description": "GCPMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains GCP-specific status information. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "conditions": { - "description": "conditions is a set of conditions associated with the Machine to indicate errors or other status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "instanceId": { - "description": "instanceId is the ID of the instance in GCP", - "type": "string" - }, - "instanceState": { - "description": "instanceState is the provisioning state of the GCP Instance.", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - } - } - }, - "com.github.openshift.api.machine.v1beta1.GCPMetadata": { - "description": "GCPMetadata describes metadata for GCP.", - "type": "object", - "required": [ - "key", - "value" - ], - "properties": { - "key": { - "description": "key is the metadata key.", - "type": "string", - "default": "" - }, - "value": { - "description": "value is the metadata value.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.GCPNetworkInterface": { - "description": "GCPNetworkInterface describes network interfaces for GCP", - "type": "object", - "properties": { - "network": { - "description": "network is the network name.", - "type": "string" - }, - "projectID": { - "description": "projectID is the project in which the GCP machine provider will create the VM.", - "type": "string" - }, - "publicIP": { - "description": "publicIP indicates if true a public IP will be used", - "type": "boolean" - }, - "subnetwork": { - "description": "subnetwork is the subnetwork name.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.GCPServiceAccount": { - "description": "GCPServiceAccount describes service accounts for GCP.", - "type": "object", - "required": [ - "email", - "scopes" - ], - "properties": { - "email": { - "description": "email is the service account email.", - "type": "string", - "default": "" - }, - "scopes": { - "description": "scopes list of scopes to be assigned to the service account.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.machine.v1beta1.GCPShieldedInstanceConfig": { - "description": "GCPShieldedInstanceConfig describes the shielded VM configuration of the instance on GCP. Shielded VM configuration allow users to enable and disable Secure Boot, vTPM, and Integrity Monitoring.", - "type": "object", - "properties": { - "integrityMonitoring": { - "description": "integrityMonitoring determines whether the instance should have integrity monitoring that verify the runtime boot integrity. Compares the most recent boot measurements to the integrity policy baseline and return a pair of pass/fail results depending on whether they match or not. If omitted, the platform chooses a default, which is subject to change over time, currently that default is Enabled.", - "type": "string" - }, - "secureBoot": { - "description": "secureBoot Defines whether the instance should have secure boot enabled. Secure Boot verify the digital signature of all boot components, and halting the boot process if signature verification fails. If omitted, the platform chooses a default, which is subject to change over time, currently that default is Disabled.", - "type": "string" - }, - "virtualizedTrustedPlatformModule": { - "description": "virtualizedTrustedPlatformModule enable virtualized trusted platform module measurements to create a known good boot integrity policy baseline. The integrity policy baseline is used for comparison with measurements from subsequent VM boots to determine if anything has changed. This is required to be set to \"Enabled\" if IntegrityMonitoring is enabled. If omitted, the platform chooses a default, which is subject to change over time, currently that default is Enabled.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.HostPlacement": { - "description": "HostPlacement is the type that will be used to configure the placement of AWS instances.", - "type": "object", - "required": [ - "affinity" - ], - "properties": { - "affinity": { - "description": "affinity specifies the affinity setting for the instance. Allowed values are AnyAvailable and DedicatedHost. When Affinity is set to DedicatedHost, an instance started onto a specific host always restarts on the same host if stopped. In this scenario, the `dedicatedHost` field must be set. When Affinity is set to AnyAvailable, and you stop and restart the instance, it can be restarted on any available host. When Affinity is set to AnyAvailable and the `dedicatedHost` field is defined, it runs on specified Dedicated Host, but may move if stopped.", - "type": "string" - }, - "dedicatedHost": { - "description": "dedicatedHost specifies the exact host that an instance should be restarted on if stopped. dedicatedHost is required when 'affinity' is set to DedicatedHost, and optional otherwise.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.DedicatedHost" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "affinity", - "fields-to-discriminateBy": { - "dedicatedHost": "DedicatedHost" - } - } - ] - }, - "com.github.openshift.api.machine.v1beta1.Image": { - "description": "Image is a mirror of azure sdk compute.ImageReference", - "type": "object", - "required": [ - "publisher", - "offer", - "sku", - "version", - "resourceID" - ], - "properties": { - "offer": { - "description": "offer specifies the name of a group of related images created by the publisher. For example, UbuntuServer, WindowsServer", - "type": "string", - "default": "" - }, - "publisher": { - "description": "publisher is the name of the organization that created the image", - "type": "string", - "default": "" - }, - "resourceID": { - "description": "resourceID specifies an image to use by ID", - "type": "string", - "default": "" - }, - "sku": { - "description": "sku specifies an instance of an offer, such as a major release of a distribution. For example, 18.04-LTS, 2019-Datacenter", - "type": "string", - "default": "" - }, - "type": { - "description": "type identifies the source of the image and related information, such as purchase plans. Valid values are \"ID\", \"MarketplaceWithPlan\", \"MarketplaceNoPlan\", and omitted, which means no opinion and the platform chooses a good default which may change over time. Currently that default is \"MarketplaceNoPlan\" if publisher data is supplied, or \"ID\" if not. For more information about purchase plans, see: https://docs.microsoft.com/en-us/azure/virtual-machines/linux/cli-ps-findimage#check-the-purchase-plan-information", - "type": "string" - }, - "version": { - "description": "version specifies the version of an image sku. The allowed formats are Major.Minor.Build or 'latest'. Major, Minor, and Build are decimal numbers. Specify 'latest' to use the latest version of an image available at deploy time. Even if you use 'latest', the VM image will not automatically update after deploy time even if a new version becomes available.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1beta1.LastOperation": { - "description": "LastOperation represents the detail of the last performed operation on the MachineObject.", - "type": "object", - "properties": { - "description": { - "description": "description is the human-readable description of the last operation.", - "type": "string" - }, - "lastUpdated": { - "description": "lastUpdated is the timestamp at which LastOperation API was last-updated.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "state": { - "description": "state is the current status of the last performed operation. E.g. Processing, Failed, Successful etc", - "type": "string" - }, - "type": { - "description": "type is the type of operation which was last performed. E.g. Create, Delete, Update etc", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.LifecycleHook": { - "description": "LifecycleHook represents a single instance of a lifecycle hook", - "type": "object", - "required": [ - "name", - "owner" - ], - "properties": { - "name": { - "description": "name defines a unique name for the lifcycle hook. The name should be unique and descriptive, ideally 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase. Names must be unique and should only be managed by a single entity.", - "type": "string", - "default": "" - }, - "owner": { - "description": "owner defines the owner of the lifecycle hook. This should be descriptive enough so that users can identify who/what is responsible for blocking the lifecycle. This could be the name of a controller (e.g. clusteroperator/etcd) or an administrator managing the hook.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1beta1.LifecycleHooks": { - "description": "LifecycleHooks allow users to pause operations on the machine at certain prefedined points within the machine lifecycle.", - "type": "object", - "properties": { - "preDrain": { - "description": "preDrain hooks prevent the machine from being drained. This also blocks further lifecycle events, such as termination.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.LifecycleHook" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "preTerminate": { - "description": "preTerminate hooks prevent the machine from being terminated. PreTerminate hooks be actioned after the Machine has been drained.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.LifecycleHook" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.machine.v1beta1.LoadBalancerReference": { - "description": "LoadBalancerReference is a reference to a load balancer on AWS.", - "type": "object", - "required": [ - "name", - "type" - ], - "properties": { - "name": { - "type": "string", - "default": "" - }, - "type": { - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1beta1.Machine": { - "description": "Machine is the Schema for the machines API Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.MachineSpec" - }, - "status": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.MachineStatus" - } - } - }, - "com.github.openshift.api.machine.v1beta1.MachineHealthCheck": { - "description": "MachineHealthCheck is the Schema for the machinehealthchecks API Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "Specification of machine health check policy", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.MachineHealthCheckSpec" - }, - "status": { - "description": "Most recently observed status of MachineHealthCheck resource", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.MachineHealthCheckStatus" - } - } - }, - "com.github.openshift.api.machine.v1beta1.MachineHealthCheckList": { - "description": "MachineHealthCheckList contains a list of MachineHealthCheck Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.MachineHealthCheck" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.machine.v1beta1.MachineHealthCheckSpec": { - "description": "MachineHealthCheckSpec defines the desired state of MachineHealthCheck", - "type": "object", - "required": [ - "selector", - "unhealthyConditions" - ], - "properties": { - "maxUnhealthy": { - "description": "Any farther remediation is only allowed if at most \"MaxUnhealthy\" machines selected by \"selector\" are not healthy. Expects either a postive integer value or a percentage value. Percentage values must be positive whole numbers and are capped at 100%. Both 0 and 0% are valid and will block all remediation. Defaults to 100% if not set.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" - }, - "nodeStartupTimeout": { - "description": "Machines older than this duration without a node will be considered to have failed and will be remediated. To prevent Machines without Nodes from being removed, disable startup checks by setting this value explicitly to \"0\". Expects an unsigned duration string of decimal numbers each with optional fraction and a unit suffix, eg \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "remediationTemplate": { - "description": "remediationTemplate is a reference to a remediation template provided by an infrastructure provider.\n\nThis field is completely optional, when filled, the MachineHealthCheck controller creates a new object from the template referenced and hands off remediation of the machine to a controller that lives outside of Machine API Operator.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "selector": { - "description": "Label selector to match machines whose health will be exercised. Note: An empty selector will match all machines.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "unhealthyConditions": { - "description": "unhealthyConditions contains a list of the conditions that determine whether a node is considered unhealthy. The conditions are combined in a logical OR, i.e. if any of the conditions is met, the node is unhealthy.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.UnhealthyCondition" - } - } - } - }, - "com.github.openshift.api.machine.v1beta1.MachineHealthCheckStatus": { - "description": "MachineHealthCheckStatus defines the observed state of MachineHealthCheck", - "type": "object", - "properties": { - "conditions": { - "description": "conditions defines the current state of the MachineHealthCheck", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "currentHealthy": { - "description": "total number of machines counted by this machine health check", - "type": "integer", - "format": "int32" - }, - "expectedMachines": { - "description": "total number of machines counted by this machine health check", - "type": "integer", - "format": "int32" - }, - "remediationsAllowed": { - "description": "remediationsAllowed is the number of further remediations allowed by this machine health check before maxUnhealthy short circuiting will be applied", - "type": "integer", - "format": "int32", - "default": 0 - } - } - }, - "com.github.openshift.api.machine.v1beta1.MachineList": { - "description": "MachineList contains a list of Machine Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.Machine" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.machine.v1beta1.MachineSet": { - "description": "MachineSet ensures that a specified number of machines replicas are running at any given time. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.MachineSetSpec" - }, - "status": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.MachineSetStatus" - } - } - }, - "com.github.openshift.api.machine.v1beta1.MachineSetList": { - "description": "MachineSetList contains a list of MachineSet Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.MachineSet" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.machine.v1beta1.MachineSetSpec": { - "description": "MachineSetSpec defines the desired state of MachineSet", - "type": "object", - "required": [ - "selector" - ], - "properties": { - "authoritativeAPI": { - "description": "authoritativeAPI is the API that is authoritative for this resource. Valid values are MachineAPI and ClusterAPI. When set to MachineAPI, writes to the spec of the machine.openshift.io copy of this resource will be reflected into the cluster.x-k8s.io copy. When set to ClusterAPI, writes to the spec of the cluster.x-k8s.io copy of this resource will be reflected into the machine.openshift.io copy. Updates to the status will be reflected in both copies of the resource, based on the controller implementing the functionality of the API. Currently the authoritative API determines which controller will manage the resource, this will change in a future release. To ensure the change has been accepted, please verify that the `status.authoritativeAPI` field has been updated to the desired value and that the `Synchronized` condition is present and set to `True`.", - "type": "string", - "default": "MachineAPI" - }, - "deletePolicy": { - "description": "deletePolicy defines the policy used to identify nodes to delete when downscaling. Defaults to \"Random\". Valid values are \"Random, \"Newest\", \"Oldest\"", - "type": "string" - }, - "minReadySeconds": { - "description": "minReadySeconds is the minimum number of seconds for which a newly created machine should be ready. Defaults to 0 (machine will be considered available as soon as it is ready)", - "type": "integer", - "format": "int32" - }, - "replicas": { - "description": "replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1.", - "type": "integer", - "format": "int32" - }, - "selector": { - "description": "selector is a label query over machines that should match the replica count. Label keys and values that must match in order to be controlled by this MachineSet. It must match the machine template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "template": { - "description": "template is the object that describes the machine that will be created if insufficient replicas are detected.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.MachineTemplateSpec" - } - } - }, - "com.github.openshift.api.machine.v1beta1.MachineSetStatus": { - "description": "MachineSetStatus defines the observed state of MachineSet", - "type": "object", - "properties": { - "authoritativeAPI": { - "description": "authoritativeAPI is the API that is authoritative for this resource. Valid values are MachineAPI, ClusterAPI and Migrating. This value is updated by the migration controller to reflect the authoritative API. Machine API and Cluster API controllers use this value to determine whether or not to reconcile the resource. When set to Migrating, the migration controller is currently performing the handover of authority from one API to the other.", - "type": "string" - }, - "availableReplicas": { - "description": "The number of available replicas (ready for at least minReadySeconds) for this MachineSet.", - "type": "integer", - "format": "int32" - }, - "conditions": { - "description": "conditions defines the current state of the MachineSet", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "errorMessage": { - "type": "string" - }, - "errorReason": { - "description": "In the event that there is a terminal problem reconciling the replicas, both ErrorReason and ErrorMessage will be set. ErrorReason will be populated with a succinct value suitable for machine interpretation, while ErrorMessage will contain a more verbose string suitable for logging and human consumption.\n\nThese fields should not be set for transitive errors that a controller faces that are expected to be fixed automatically over time (like service outages), but instead indicate that something is fundamentally wrong with the MachineTemplate's spec or the configuration of the machine controller, and that manual intervention is required. Examples of terminal errors would be invalid combinations of settings in the spec, values that are unsupported by the machine controller, or the responsible machine controller itself being critically misconfigured.\n\nAny transient errors that occur during the reconciliation of Machines can be added as events to the MachineSet object and/or logged in the controller's output.", - "type": "string" - }, - "fullyLabeledReplicas": { - "description": "The number of replicas that have labels matching the labels of the machine template of the MachineSet.", - "type": "integer", - "format": "int32" - }, - "labelSelector": { - "description": "labelSelector is a label selector, in string format, for Machines corresponding to the MachineSet. It is exposed via the scale subresource as status.selector. When omitted, the MachineSet controller has not yet reconciled spec.selector into status.labelSelector. When present, it must not be empty and must not exceed 4096 characters.", - "type": "string" - }, - "observedGeneration": { - "description": "observedGeneration reflects the generation of the most recently observed MachineSet.", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "The number of ready replicas for this MachineSet. A machine is considered ready when the node has been created and is \"Ready\".", - "type": "integer", - "format": "int32" - }, - "replicas": { - "description": "replicas is the most recently observed number of replicas.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "synchronizedAPI": { - "description": "synchronizedAPI holds the last stable value of authoritativeAPI. It is used to detect migration cancellation requests and to restore the resource to its previous state. Valid values are \"MachineAPI\" and \"ClusterAPI\". When omitted, the resource has not yet been reconciled by the migration controller.", - "type": "string" - }, - "synchronizedGeneration": { - "description": "synchronizedGeneration is the generation of the authoritative resource that the non-authoritative resource is synchronised with. This field is set when the authoritative resource is updated and the sync controller has updated the non-authoritative resource to match.", - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.machine.v1beta1.MachineSpec": { - "description": "MachineSpec defines the desired state of Machine", - "type": "object", - "properties": { - "authoritativeAPI": { - "description": "authoritativeAPI is the API that is authoritative for this resource. Valid values are MachineAPI and ClusterAPI. When set to MachineAPI, writes to the spec of the machine.openshift.io copy of this resource will be reflected into the cluster.x-k8s.io copy. When set to ClusterAPI, writes to the spec of the cluster.x-k8s.io copy of this resource will be reflected into the machine.openshift.io copy. Updates to the status will be reflected in both copies of the resource, based on the controller implementing the functionality of the API. Currently the authoritative API determines which controller will manage the resource, this will change in a future release. To ensure the change has been accepted, please verify that the `status.authoritativeAPI` field has been updated to the desired value and that the `Synchronized` condition is present and set to `True`.", - "type": "string", - "default": "MachineAPI" - }, - "lifecycleHooks": { - "description": "lifecycleHooks allow users to pause operations on the machine at certain predefined points within the machine lifecycle.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.LifecycleHooks" - }, - "metadata": { - "description": "ObjectMeta will autopopulate the Node created. Use this to indicate what labels, annotations, name prefix, etc., should be used when creating the Node.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.ObjectMeta" - }, - "providerID": { - "description": "providerID is the identification ID of the machine provided by the provider. This field must match the provider ID as seen on the node object corresponding to this machine. This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a generic out-of-tree provider for autoscaler, this field is required by autoscaler to be able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver and then a comparison is done to find out unregistered machines and are marked for delete. This field will be set by the actuators and consumed by higher level entities like autoscaler that will be interfacing with cluster-api as generic provider.", - "type": "string" - }, - "providerSpec": { - "description": "providerSpec details Provider-specific configuration to use during node creation.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.ProviderSpec" - }, - "taints": { - "description": "The list of the taints to be applied to the corresponding Node in additive manner. This list will not overwrite any other taints added to the Node on an ongoing basis by other entities. These taints should be actively reconciled e.g. if you ask the machine controller to apply a taint and then manually remove the taint the machine controller will put it back) but not have the machine controller remove any taints", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Taint" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.machine.v1beta1.MachineStatus": { - "description": "MachineStatus defines the observed state of Machine", - "type": "object", - "properties": { - "addresses": { - "description": "addresses is a list of addresses assigned to the machine. Queried from cloud provider, if available.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.NodeAddress" - }, - "x-kubernetes-list-type": "atomic" - }, - "authoritativeAPI": { - "description": "authoritativeAPI is the API that is authoritative for this resource. Valid values are MachineAPI, ClusterAPI and Migrating. This value is updated by the migration controller to reflect the authoritative API. Machine API and Cluster API controllers use this value to determine whether or not to reconcile the resource. When set to Migrating, the migration controller is currently performing the handover of authority from one API to the other.", - "type": "string" - }, - "conditions": { - "description": "conditions defines the current state of the Machine", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "errorMessage": { - "description": "errorMessage will be set in the event that there is a terminal problem reconciling the Machine and will contain a more verbose string suitable for logging and human consumption.\n\nThis field should not be set for transitive errors that a controller faces that are expected to be fixed automatically over time (like service outages), but instead indicate that something is fundamentally wrong with the Machine's spec or the configuration of the controller, and that manual intervention is required. Examples of terminal errors would be invalid combinations of settings in the spec, values that are unsupported by the controller, or the responsible controller itself being critically misconfigured.\n\nAny transient errors that occur during the reconciliation of Machines can be added as events to the Machine object and/or logged in the controller's output.", - "type": "string" - }, - "errorReason": { - "description": "errorReason will be set in the event that there is a terminal problem reconciling the Machine and will contain a succinct value suitable for machine interpretation.\n\nThis field should not be set for transitive errors that a controller faces that are expected to be fixed automatically over time (like service outages), but instead indicate that something is fundamentally wrong with the Machine's spec or the configuration of the controller, and that manual intervention is required. Examples of terminal errors would be invalid combinations of settings in the spec, values that are unsupported by the controller, or the responsible controller itself being critically misconfigured.\n\nAny transient errors that occur during the reconciliation of Machines can be added as events to the Machine object and/or logged in the controller's output.", - "type": "string" - }, - "lastOperation": { - "description": "lastOperation describes the last-operation performed by the machine-controller. This API should be useful as a history in terms of the latest operation performed on the specific machine. It should also convey the state of the latest-operation for example if it is still on-going, failed or completed successfully.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.LastOperation" - }, - "lastUpdated": { - "description": "lastUpdated identifies when this status was last observed.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "nodeRef": { - "description": "nodeRef will point to the corresponding Node if it exists.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "phase": { - "description": "phase represents the current phase of machine actuation. One of: Failed, Provisioning, Provisioned, Running, Deleting", - "type": "string" - }, - "providerStatus": { - "description": "providerStatus details a Provider-specific status. It is recommended that providers maintain their own versioned API types that should be serialized/deserialized from this field.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "synchronizedAPI": { - "description": "synchronizedAPI holds the last stable value of authoritativeAPI. It is used to detect migration cancellation requests and to restore the resource to its previous state. Valid values are \"MachineAPI\" and \"ClusterAPI\". When omitted, the resource has not yet been reconciled by the migration controller.", - "type": "string" - }, - "synchronizedGeneration": { - "description": "synchronizedGeneration is the generation of the authoritative resource that the non-authoritative resource is synchronised with. This field is set when the authoritative resource is updated and the sync controller has updated the non-authoritative resource to match.", - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.machine.v1beta1.MachineTemplateSpec": { - "description": "MachineTemplateSpec describes the data needed to create a Machine from a template", - "type": "object", - "properties": { - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.ObjectMeta" - }, - "spec": { - "description": "Specification of the desired behavior of the machine. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.MachineSpec" - } - } - }, - "com.github.openshift.api.machine.v1beta1.MetadataServiceOptions": { - "description": "MetadataServiceOptions defines the options available to a user when configuring Instance Metadata Service (IMDS) Options.", - "type": "object", - "properties": { - "authentication": { - "description": "authentication determines whether or not the host requires the use of authentication when interacting with the metadata service. When using authentication, this enforces v2 interaction method (IMDSv2) with the metadata service. When omitted, this means the user has no opinion and the value is left to the platform to choose a good default, which is subject to change over time. The current default is optional. At this point this field represents `HttpTokens` parameter from `InstanceMetadataOptionsRequest` structure in AWS EC2 API https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_InstanceMetadataOptionsRequest.html", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.NetworkDeviceSpec": { - "description": "NetworkDeviceSpec defines the network configuration for a virtual machine's network device.", - "type": "object", - "properties": { - "addressesFromPools": { - "description": "addressesFromPools is a list of references to IP pool types and instances which are handled by an external controller. addressesFromPool configurations provided via addressesFromPools defer IP address assignment to an external controller. IP addresses provided via ipAddrs, however, are intended to allow explicit assignment of a machine's IP address. If both addressesFromPool and ipAddrs are empty or not defined, DHCP will assign an IP address. If both ipAddrs and addressesFromPools are defined, the IP addresses associated with ipAddrs will be applied first followed by IP addresses from addressesFromPools.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.AddressesFromPool" - } - }, - "gateway": { - "description": "gateway is an IPv4 or IPv6 address which represents the subnet gateway, for example, 192.168.1.1.", - "type": "string" - }, - "ipAddrs": { - "description": "ipAddrs is a list of one or more IPv4 and/or IPv6 addresses and CIDR to assign to this device, for example, 192.168.1.100/24. IP addresses provided via ipAddrs are intended to allow explicit assignment of a machine's IP address. IP pool configurations provided via addressesFromPool, however, defer IP address assignment to an external controller. If both addressesFromPool and ipAddrs are empty or not defined, DHCP will be used to assign an IP address. If both ipAddrs and addressesFromPools are defined, the IP addresses associated with ipAddrs will be applied first followed by IP addresses from addressesFromPools.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "nameservers": { - "description": "nameservers is a list of IPv4 and/or IPv6 addresses used as DNS nameservers, for example, 8.8.8.8. a nameserver is not provided by a fulfilled IPAddressClaim. If DHCP is not the source of IP addresses for this network device, nameservers should include a valid nameserver.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "networkName": { - "description": "networkName is the name of the vSphere network or port group to which the network device will be connected, for example, port-group-1. When not provided, the vCenter API will attempt to select a default network. The available networks (port groups) can be listed using `govc ls 'network/*'`", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.NetworkSpec": { - "description": "NetworkSpec defines the virtual machine's network configuration.", - "type": "object", - "required": [ - "devices" - ], - "properties": { - "devices": { - "description": "devices defines the virtual machine's network interfaces.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.NetworkDeviceSpec" - } - } - } - }, - "com.github.openshift.api.machine.v1beta1.OSDisk": { - "type": "object", - "required": [ - "osType", - "managedDisk", - "diskSizeGB" - ], - "properties": { - "cachingType": { - "description": "cachingType specifies the caching requirements. Possible values include: 'None', 'ReadOnly', 'ReadWrite'. Empty value means no opinion and the platform chooses a default, which is subject to change over time. Currently the default is `None`.", - "type": "string" - }, - "diskSettings": { - "description": "diskSettings describe ephemeral disk settings for the os disk.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.DiskSettings" - }, - "diskSizeGB": { - "description": "diskSizeGB is the size in GB to assign to the data disk.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "managedDisk": { - "description": "managedDisk specifies the Managed Disk parameters for the OS disk.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.OSDiskManagedDiskParameters" - }, - "osType": { - "description": "osType is the operating system type of the OS disk. Possible values include \"Linux\" and \"Windows\".", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1beta1.OSDiskManagedDiskParameters": { - "description": "OSDiskManagedDiskParameters is the parameters of a OSDisk managed disk.", - "type": "object", - "required": [ - "storageAccountType" - ], - "properties": { - "diskEncryptionSet": { - "description": "diskEncryptionSet is the disk encryption set properties", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.DiskEncryptionSetParameters" - }, - "securityProfile": { - "description": "securityProfile specifies the security profile for the managed disk.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.VMDiskSecurityProfile" - }, - "storageAccountType": { - "description": "storageAccountType is the storage account type to use. Possible values include \"Standard_LRS\", \"Premium_LRS\".", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1beta1.ObjectMeta": { - "description": "ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create. This is a copy of customizable fields from metav1.ObjectMeta.\n\nObjectMeta is embedded in `Machine.Spec`, `MachineDeployment.Template` and `MachineSet.Template`, which are not top-level Kubernetes objects. Given that metav1.ObjectMeta has lots of special cases and read-only fields which end up in the generated CRD validation, having it as a subset simplifies the API and some issues that can impact user experience.\n\nDuring the [upgrade to controller-tools@v2](https://github.com/kubernetes-sigs/cluster-api/pull/1054) for v1alpha2, we noticed a failure would occur running Cluster API test suite against the new CRDs, specifically `spec.metadata.creationTimestamp in body must be of type string: \"null\"`. The investigation showed that `controller-tools@v2` behaves differently than its previous version when handling types from [metav1](k8s.io/apimachinery/pkg/apis/meta/v1) package.\n\nIn more details, we found that embedded (non-top level) types that embedded `metav1.ObjectMeta` had validation properties, including for `creationTimestamp` (metav1.Time). The `metav1.Time` type specifies a custom json marshaller that, when IsZero() is true, returns `null` which breaks validation because the field isn't marked as nullable.\n\nIn future versions, controller-tools@v2 might allow overriding the type and validation for embedded types. When that happens, this hack should be revisited.", - "type": "object", - "properties": { - "annotations": { - "description": "annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "generateName": { - "description": "generateName is an optional prefix, used by the server, to generate a unique name ONLY IF the Name field has not been provided. If this field is used, the name returned to the client will be different than the name passed. This value will also be combined with a unique suffix. The provided value has the same validation rules as the Name field, and may be truncated by the length of the suffix required to make the value unique on the server.\n\nIf this field is specified and the generated name exists, the server will NOT return a 409 - instead, it will either return 201 Created or 500 with Reason ServerTimeout indicating a unique name could not be found in the time allotted, and the client should retry (optionally after the time indicated in the Retry-After header).\n\nApplied only if Name is not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency", - "type": "string" - }, - "labels": { - "description": "Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "name": { - "description": "name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names", - "type": "string" - }, - "namespace": { - "description": "namespace defines the space within each name must be unique. An empty namespace is equivalent to the \"default\" namespace, but \"default\" is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.\n\nMust be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces", - "type": "string" - }, - "ownerReferences": { - "description": "List of objects depended by this object. If ALL objects in the list have been deleted, this object will be garbage collected. If this object is managed by a controller, then an entry in this list will point to this controller, with the controller field set to true. There cannot be more than one managing controller.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.OwnerReference" - }, - "x-kubernetes-list-map-keys": [ - "uid" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "uid", - "x-kubernetes-patch-strategy": "merge" - } - } - }, - "com.github.openshift.api.machine.v1beta1.Placement": { - "description": "Placement indicates where to create the instance in AWS", - "type": "object", - "properties": { - "availabilityZone": { - "description": "availabilityZone is the availability zone of the instance", - "type": "string" - }, - "host": { - "description": "host configures placement on AWS Dedicated Hosts. This allows admins to assign instances to specific host for a variety of needs including for regulatory compliance, to leverage existing per-socket or per-core software licenses (BYOL), and to gain visibility and control over instance placement on a physical server. When omitted, the instance is not constrained to a dedicated host.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.HostPlacement" - }, - "region": { - "description": "region is the region to use to create the instance", - "type": "string" - }, - "tenancy": { - "description": "tenancy indicates if instance should run on shared or single-tenant hardware. There are supported 3 options: default, dedicated and host. When set to default Runs on shared multi-tenant hardware. When dedicated Runs on single-tenant hardware (any dedicated instance hardware). When host and the host object is not provided: Runs on Dedicated Host; best-effort restart on same host. When `host` and `host` object is provided with affinity `dedicatedHost` defined: Runs on specified Dedicated Host.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.ProviderSpec": { - "description": "ProviderSpec defines the configuration to use during node creation.", - "type": "object", - "properties": { - "value": { - "description": "value is an inlined, serialized representation of the resource configuration. It is recommended that providers maintain their own versioned API types that should be serialized/deserialized from this field, akin to component config.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.machine.v1beta1.ResourceManagerTag": { - "description": "ResourceManagerTag is a tag to apply to GCP resources created for the cluster.", - "type": "object", - "required": [ - "parentID", - "key", - "value" - ], - "properties": { - "key": { - "description": "key is the key part of the tag. A tag key can have a maximum of 63 characters and cannot be empty. Tag key must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `._-`.", - "type": "string", - "default": "" - }, - "parentID": { - "description": "parentID is the ID of the hierarchical resource where the tags are defined e.g. at the Organization or the Project level. To find the Organization or Project ID ref https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects An OrganizationID can have a maximum of 32 characters and must consist of decimal numbers, and cannot have leading zeroes. A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters, numbers, and hyphens, and must start with a letter, and cannot end with a hyphen.", - "type": "string", - "default": "" - }, - "value": { - "description": "value is the value part of the tag. A tag value can have a maximum of 63 characters and cannot be empty. Tag value must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `_-.@%=+:,*#&(){}[]` and spaces.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1beta1.SecurityProfile": { - "description": "SecurityProfile specifies the Security profile settings for a virtual machine or virtual machine scale set.", - "type": "object", - "properties": { - "encryptionAtHost": { - "description": "encryptionAtHost indicates whether Host Encryption should be enabled or disabled for a virtual machine or virtual machine scale set. This should be disabled when SecurityEncryptionType is set to DiskWithVMGuestState. Default is disabled.", - "type": "boolean" - }, - "settings": { - "description": "settings specify the security type and the UEFI settings of the virtual machine. This field can be set for Confidential VMs and Trusted Launch for VMs.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.SecuritySettings" - } - } - }, - "com.github.openshift.api.machine.v1beta1.SecuritySettings": { - "description": "SecuritySettings define the security type and the UEFI settings of the virtual machine.", - "type": "object", - "required": [ - "securityType" - ], - "properties": { - "confidentialVM": { - "description": "confidentialVM specifies the security configuration of the virtual machine. For more information regarding Confidential VMs, please refer to: https://learn.microsoft.com/azure/confidential-computing/confidential-vm-overview", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.ConfidentialVM" - }, - "securityType": { - "description": "securityType specifies the SecurityType of the virtual machine. It has to be set to any specified value to enable UEFISettings. The default behavior is: UEFISettings will not be enabled unless this property is set.", - "type": "string", - "default": "" - }, - "trustedLaunch": { - "description": "trustedLaunch specifies the security configuration of the virtual machine. For more information regarding TrustedLaunch for VMs, please refer to: https://learn.microsoft.com/azure/virtual-machines/trusted-launch", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.TrustedLaunch" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "securityType", - "fields-to-discriminateBy": { - "confidentialVM": "ConfidentialVM", - "trustedLaunch": "TrustedLaunch" - } - } - ] - }, - "com.github.openshift.api.machine.v1beta1.SpotMarketOptions": { - "description": "SpotMarketOptions defines the options available to a user when configuring Machines to run on Spot instances. Most users should provide an empty struct.", - "type": "object", - "properties": { - "maxPrice": { - "description": "The maximum price the user is willing to pay for their instances Default: On-Demand price", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.SpotVMOptions": { - "description": "SpotVMOptions defines the options relevant to running the Machine on Spot VMs", - "type": "object", - "properties": { - "maxPrice": { - "description": "maxPrice defines the maximum price the user is willing to pay for Spot VM instances", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } - } - }, - "com.github.openshift.api.machine.v1beta1.TagSpecification": { - "description": "TagSpecification is the name/value pair for a tag", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name of the tag. This field is required and must be a non-empty string. Must be between 1 and 128 characters in length.", - "type": "string", - "default": "" - }, - "value": { - "description": "value of the tag. When omitted, this creates a tag with an empty string as the value.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1beta1.TrustedLaunch": { - "description": "TrustedLaunch defines the UEFI settings for the virtual machine.", - "type": "object", - "required": [ - "uefiSettings" - ], - "properties": { - "uefiSettings": { - "description": "uefiSettings specifies the security settings like secure boot and vTPM used while creating the virtual machine.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.UEFISettings" - } - } - }, - "com.github.openshift.api.machine.v1beta1.UEFISettings": { - "description": "UEFISettings specifies the security settings like secure boot and vTPM used while creating the virtual machine.", - "type": "object", - "properties": { - "secureBoot": { - "description": "secureBoot specifies whether secure boot should be enabled on the virtual machine. Secure Boot verifies the digital signature of all boot components and halts the boot process if signature verification fails. If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.", - "type": "string" - }, - "virtualizedTrustedPlatformModule": { - "description": "virtualizedTrustedPlatformModule specifies whether vTPM should be enabled on the virtual machine. When enabled the virtualized trusted platform module measurements are used to create a known good boot integrity policy baseline. The integrity policy baseline is used for comparison with measurements from subsequent VM boots to determine if anything has changed. This is required to be enabled if SecurityEncryptionType is defined. If omitted, the platform chooses a default, which is subject to change over time, currently that default is disabled.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.UnhealthyCondition": { - "description": "UnhealthyCondition represents a Node condition type and value with a timeout specified as a duration. When the named condition has been in the given status for at least the timeout value, a node is considered unhealthy.", - "type": "object", - "required": [ - "type", - "status", - "timeout" - ], - "properties": { - "status": { - "type": "string", - "default": "" - }, - "timeout": { - "description": "Expects an unsigned duration string of decimal numbers each with optional fraction and a unit suffix, eg \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "type": { - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.machine.v1beta1.VMDiskSecurityProfile": { - "description": "VMDiskSecurityProfile specifies the security profile settings for the managed disk. It can be set only for Confidential VMs.", - "type": "object", - "properties": { - "diskEncryptionSet": { - "description": "diskEncryptionSet specifies the customer managed disk encryption set resource id for the managed disk that is used for Customer Managed Key encrypted ConfidentialVM OS Disk and VMGuest blob.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.DiskEncryptionSetParameters" - }, - "securityEncryptionType": { - "description": "securityEncryptionType specifies the encryption type of the managed disk. It is set to DiskWithVMGuestState to encrypt the managed disk along with the VMGuestState blob, and to VMGuestStateOnly to encrypt the VMGuestState blob only. When set to VMGuestStateOnly, the vTPM should be enabled. When set to DiskWithVMGuestState, both SecureBoot and vTPM should be enabled. If the above conditions are not fulfilled, the VM will not be created and the respective error will be returned. It can be set only for Confidential VMs. Confidential VMs are defined by their SecurityProfile.SecurityType being set to ConfidentialVM, the SecurityEncryptionType of their OS disk being set to one of the allowed values and by enabling the respective SecurityProfile.UEFISettings of the VM (i.e. vTPM and SecureBoot), depending on the selected SecurityEncryptionType. For further details on Azure Confidential VMs, please refer to the respective documentation: https://learn.microsoft.com/azure/confidential-computing/confidential-vm-overview", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.VSphereDisk": { - "description": "VSphereDisk describes additional disks for vSphere.", - "type": "object", - "required": [ - "name", - "sizeGiB" - ], - "properties": { - "name": { - "description": "name is used to identify the disk definition. name is required needs to be unique so that it can be used to clearly identify purpose of the disk. It must be at most 80 characters in length and must consist only of alphanumeric characters, hyphens and underscores, and must start and end with an alphanumeric character.", - "type": "string", - "default": "" - }, - "provisioningMode": { - "description": "provisioningMode is an optional field that specifies the provisioning type to be used by this vSphere data disk. Allowed values are \"Thin\", \"Thick\", \"EagerlyZeroed\", and omitted. When set to Thin, the disk will be made using thin provisioning allocating the bare minimum space. When set to Thick, the full disk size will be allocated when disk is created. When set to EagerlyZeroed, the disk will be created using eager zero provisioning. An eager zeroed thick disk has all space allocated and wiped clean of any previous contents on the physical media at creation time. Such disks may take longer time during creation compared to other disk formats. When omitted, no setting will be applied to the data disk and the provisioning mode for the disk will be determined by the default storage policy configured for the datastore in vSphere.", - "type": "string" - }, - "sizeGiB": { - "description": "sizeGiB is the size of the disk in GiB. The maximum supported size 16384 GiB.", - "type": "integer", - "format": "int32", - "default": 0 - } - } - }, - "com.github.openshift.api.machine.v1beta1.VSphereMachineProviderSpec": { - "description": "VSphereMachineProviderSpec is the type that will be embedded in a Machine.Spec.ProviderSpec field for an VSphere virtual machine. It is used by the vSphere machine actuator to create a single Machine. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "template", - "network" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "cloneMode": { - "description": "cloneMode specifies the type of clone operation. The LinkedClone mode is only support for templates that have at least one snapshot. If the template has no snapshots, then CloneMode defaults to FullClone. When LinkedClone mode is enabled the DiskGiB field is ignored as it is not possible to expand disks of linked clones. Defaults to FullClone. When using LinkedClone, if no snapshots exist for the source template, falls back to FullClone.", - "type": "string" - }, - "credentialsSecret": { - "description": "credentialsSecret is a reference to the secret with vSphere credentials.", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "dataDisks": { - "description": "dataDisks is a list of non OS disks to be created and attached to the VM. The max number of disk allowed to be attached is currently 29. The max number of disks for any controller is 30, but VM template will always have OS disk so that will leave 29 disks on any controller type.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.VSphereDisk" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "diskGiB": { - "description": "diskGiB is the size of a virtual machine's disk, in GiB. Defaults to the analogue property value in the template from which this machine is cloned. This parameter will be ignored if 'LinkedClone' CloneMode is set.", - "type": "integer", - "format": "int32" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "memoryMiB": { - "description": "memoryMiB is the size of a virtual machine's memory, in MiB. Defaults to the analogue property value in the template from which this machine is cloned.", - "type": "integer", - "format": "int64" - }, - "metadata": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "network": { - "description": "network is the network configuration for this machine's VM.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.NetworkSpec" - }, - "numCPUs": { - "description": "numCPUs is the number of virtual processors in a virtual machine. Defaults to the analogue property value in the template from which this machine is cloned.", - "type": "integer", - "format": "int32" - }, - "numCoresPerSocket": { - "description": "NumCPUs is the number of cores among which to distribute CPUs in this virtual machine. Defaults to the analogue property value in the template from which this machine is cloned.", - "type": "integer", - "format": "int32" - }, - "snapshot": { - "description": "snapshot is the name of the snapshot from which the VM was cloned", - "type": "string", - "default": "" - }, - "tagIDs": { - "description": "tagIDs is an optional set of tags to add to an instance. Specified tagIDs must use URN-notation instead of display names. A maximum of 10 tag IDs may be specified.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "template": { - "description": "template is the name, inventory path, or instance UUID of the template used to clone new machines.", - "type": "string", - "default": "" - }, - "userDataSecret": { - "description": "userDataSecret contains a local reference to a secret that contains the UserData to apply to the instance", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "workspace": { - "description": "workspace describes the workspace to use for the machine.", - "$ref": "#/definitions/com.github.openshift.api.machine.v1beta1.Workspace" - } - } - }, - "com.github.openshift.api.machine.v1beta1.VSphereMachineProviderStatus": { - "description": "VSphereMachineProviderStatus is the type that will be embedded in a Machine.Status.ProviderStatus field. It contains VSphere-specific status information. Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "conditions": { - "description": "conditions is a set of conditions associated with the Machine to indicate errors or other status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "instanceId": { - "description": "instanceId is the ID of the instance in VSphere", - "type": "string" - }, - "instanceState": { - "description": "instanceState is the provisioning state of the VSphere Instance.", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "taskRef": { - "description": "taskRef is a managed object reference to a Task related to the machine. This value is set automatically at runtime and should not be set or modified by users.", - "type": "string" - } - } - }, - "com.github.openshift.api.machine.v1beta1.Workspace": { - "description": "WorkspaceConfig defines a workspace configuration for the vSphere cloud provider.", - "type": "object", - "properties": { - "datacenter": { - "description": "datacenter is the datacenter in which VMs are created/located.", - "type": "string" - }, - "datastore": { - "description": "datastore is the datastore in which VMs are created/located.", - "type": "string" - }, - "folder": { - "description": "folder is the folder in which VMs are created/located.", - "type": "string" - }, - "resourcePool": { - "description": "resourcePool is the resource pool in which VMs are created/located.", - "type": "string" - }, - "server": { - "description": "server is the IP address or FQDN of the vSphere endpoint.", - "type": "string" - }, - "vmGroup": { - "description": "vmGroup is the cluster vm group in which virtual machines will be added for vm host group based zonal.", - "type": "string" - } - } - }, - "com.github.openshift.api.machineconfiguration.v1alpha1.InternalReleaseImage": { - "description": "InternalReleaseImage is used to keep track and manage a set of release bundles (OCP and OLM operators images) that are stored into the control planes nodes.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "metadata", - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec describes the configuration of this internal release image.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machineconfiguration.v1alpha1.InternalReleaseImageSpec" - }, - "status": { - "description": "status describes the last observed state of this internal release image.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machineconfiguration.v1alpha1.InternalReleaseImageStatus" - } - } - }, - "com.github.openshift.api.machineconfiguration.v1alpha1.InternalReleaseImageBundleStatus": { - "type": "object", - "required": [ - "name" - ], - "properties": { - "conditions": { - "description": "conditions represent the observations of an internal release image current state. Valid types are: Mounted, Installing, Available, Removing and Degraded.\n\nIf Mounted is true, that means that a valid ISO has been discovered and mounted on one of the cluster nodes. If Installing is true, that means that a new release bundle is currently being copied on one (or more) cluster nodes, and not yet completed. If Available is true, it means that the release has been previously installed on all the cluster nodes, and it can be used. If Removing is true, it means that a release deletion is in progress on one (or more) cluster nodes, and not yet completed. If Degraded is true, that means something has gone wrong (possibly on one or more cluster nodes).\n\nIn general, after installing a new release bundle, it is required to wait for the Conditions \"Available\" to become \"True\" (and all the other conditions to be equal to \"False\") before being able to pull its content.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "image": { - "description": "image is an OCP release image referenced by digest. The format of the image pull spec is: host[:port][/namespace]/name@sha256:, where the digest must be 64 characters long, and consist only of lowercase hexadecimal characters, a-f and 0-9. The length of the whole spec must be between 1 to 447 characters. The field is optional, and it will be provided after a release will be successfully installed.", - "type": "string" - }, - "name": { - "description": "name indicates the desired release bundle identifier. This field is required and must be between 1 and 64 characters long. The expected name format is ocp-release-bundle--.", - "type": "string" - } - } - }, - "com.github.openshift.api.machineconfiguration.v1alpha1.InternalReleaseImageList": { - "description": "InternalReleaseImageList is a list of InternalReleaseImage resources\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machineconfiguration.v1alpha1.InternalReleaseImage" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.machineconfiguration.v1alpha1.InternalReleaseImageRef": { - "description": "InternalReleaseImageRef is used to provide a simple reference for a release bundle. Currently it contains only the name field.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name indicates the desired release bundle identifier. This field is required and must be between 1 and 64 characters long. The expected name format is ocp-release-bundle--.", - "type": "string" - } - } - }, - "com.github.openshift.api.machineconfiguration.v1alpha1.InternalReleaseImageSpec": { - "description": "InternalReleaseImageSpec defines the desired state of a InternalReleaseImage.", - "type": "object", - "required": [ - "releases" - ], - "properties": { - "releases": { - "description": "releases is a list of release bundle identifiers that the user wants to add/remove to/from the control plane nodes. Entries must be unique, keyed on the name field. releases must contain at least one entry and must not exceed 16 entries.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machineconfiguration.v1alpha1.InternalReleaseImageRef" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.machineconfiguration.v1alpha1.InternalReleaseImageStatus": { - "description": "InternalReleaseImageStatus describes the current state of a InternalReleaseImage.", - "type": "object", - "required": [ - "releases" - ], - "properties": { - "conditions": { - "description": "conditions represent the observations of the InternalReleaseImage controller current state. Valid types are: Degraded. If Degraded is true, that means something has gone wrong in the controller.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "releases": { - "description": "releases is a list of the release bundles currently owned and managed by the cluster. A release bundle content could be safely pulled only when its Conditions field contains at least an Available entry set to \"True\" and Degraded to \"False\". Entries must be unique, keyed on the name field. releases must contain at least one entry and must not exceed 32 entries.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machineconfiguration.v1alpha1.InternalReleaseImageBundleStatus" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.machineconfiguration.v1alpha1.OSImageStream": { - "description": "OSImageStream describes a set of streams and associated images available for the MachineConfigPools to be used as base OS images.\n\nThe resource is a singleton named \"cluster\".\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec contains the desired OSImageStream config configuration.", - "$ref": "#/definitions/com.github.openshift.api.machineconfiguration.v1alpha1.OSImageStreamSpec" - }, - "status": { - "description": "status describes the last observed state of this OSImageStream. Populated by the MachineConfigOperator after reading release metadata. When not present, the controller has not yet reconciled this resource.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machineconfiguration.v1alpha1.OSImageStreamStatus" - } - } - }, - "com.github.openshift.api.machineconfiguration.v1alpha1.OSImageStreamList": { - "description": "OSImageStreamList is a list of OSImageStream resources\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machineconfiguration.v1alpha1.OSImageStream" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.machineconfiguration.v1alpha1.OSImageStreamSet": { - "type": "object", - "required": [ - "name", - "osImage", - "osExtensionsImage" - ], - "properties": { - "name": { - "description": "name is the required identifier of the stream.\n\nname is determined by the operator based on the OCI label of the discovered OS or Extension Image.\n\nMust be a valid RFC 1123 subdomain between 1 and 253 characters in length, consisting of lowercase alphanumeric characters, hyphens ('-'), and periods ('.').", - "type": "string" - }, - "osExtensionsImage": { - "description": "osExtensionsImage is a required OS Extensions Image referenced by digest.\n\nosExtensionsImage bundles the extra repositories used to enable extensions, augmenting the base operating system without modifying the underlying immutable osImage.\n\nThe format of the image pull spec is: host[:port][/namespace]/name@sha256:, where the digest must be 64 characters long, and consist only of lowercase hexadecimal characters, a-f and 0-9. The length of the whole spec must be between 1 to 447 characters.", - "type": "string" - }, - "osImage": { - "description": "osImage is a required OS Image referenced by digest.\n\nosImage contains the immutable, fundamental operating system components, including the kernel and base utilities, that define the core environment for the node's host operating system.\n\nThe format of the image pull spec is: host[:port][/namespace]/name@sha256:, where the digest must be 64 characters long, and consist only of lowercase hexadecimal characters, a-f and 0-9. The length of the whole spec must be between 1 to 447 characters.", - "type": "string" - } - } - }, - "com.github.openshift.api.machineconfiguration.v1alpha1.OSImageStreamSpec": { - "description": "OSImageStreamSpec defines the desired state of a OSImageStream.", - "type": "object", - "properties": { - "defaultStream": { - "description": "defaultStream is the desired name of the stream that should be used as the default when no specific stream is requested by a MachineConfigPool.\n\nThis field is set by the installer during installation. Users may need to update it if the currently selected stream is no longer available, for example when the stream has reached its End of Life. The MachineConfigOperator uses this value to determine which stream from status.availableStreams to apply as the default for MachineConfigPools that do not specify a stream override.\n\nWhen status.availableStreams has been populated by the operator, updating this field requires that the new value references the name of one of the streams in status.availableStreams. Status-only updates by the operator are not subject to this constraint, allowing the operator to update availableStreams independently of this field. During initial creation, before the operator has populated status, any valid value is accepted.\n\nWhen omitted, the operator determines the default stream automatically. Once set, this field cannot be removed.\n\nIt must be a valid RFC 1123 subdomain between 1 and 253 characters in length, consisting of lowercase alphanumeric characters, hyphens ('-'), and periods ('.').", - "type": "string" - } - } - }, - "com.github.openshift.api.machineconfiguration.v1alpha1.OSImageStreamStatus": { - "description": "OSImageStreamStatus describes the current state of a OSImageStream", - "type": "object", - "required": [ - "availableStreams", - "defaultStream" - ], - "properties": { - "availableStreams": { - "description": "availableStreams is a list of the available OS Image Streams that can be used as the base image for MachineConfigPools. availableStreams is required, must have at least one item, must not exceed 100 items, and must have unique entries keyed on the name field.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.machineconfiguration.v1alpha1.OSImageStreamSet" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "defaultStream": { - "description": "defaultStream is the name of the stream that should be used as the default when no specific stream is requested by a MachineConfigPool.\n\nIt must be a valid RFC 1123 subdomain between 1 and 253 characters in length, consisting of lowercase alphanumeric characters, hyphens ('-'), and periods ('.'), and must reference the name of one of the streams in availableStreams.", - "type": "string" - } - } - }, - "com.github.openshift.api.monitoring.v1.AlertRelabelConfig": { - "description": "AlertRelabelConfig defines a set of relabel configs for alerts.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec describes the desired state of this AlertRelabelConfig object.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.monitoring.v1.AlertRelabelConfigSpec" - }, - "status": { - "description": "status describes the current state of this AlertRelabelConfig object.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.monitoring.v1.AlertRelabelConfigStatus" - } - } - }, - "com.github.openshift.api.monitoring.v1.AlertRelabelConfigList": { - "description": "AlertRelabelConfigList is a list of AlertRelabelConfigs.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of AlertRelabelConfigs.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.monitoring.v1.AlertRelabelConfig" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.monitoring.v1.AlertRelabelConfigSpec": { - "description": "AlertRelabelConfigsSpec is the desired state of an AlertRelabelConfig resource.", - "type": "object", - "required": [ - "configs" - ], - "properties": { - "configs": { - "description": "configs is a list of sequentially evaluated alert relabel configs.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.monitoring.v1.RelabelConfig" - } - } - } - }, - "com.github.openshift.api.monitoring.v1.AlertRelabelConfigStatus": { - "description": "AlertRelabelConfigStatus is the status of an AlertRelabelConfig resource.", - "type": "object", - "properties": { - "conditions": { - "description": "conditions contains details on the state of the AlertRelabelConfig, may be empty.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.monitoring.v1.AlertingRule": { - "description": "AlertingRule represents a set of user-defined Prometheus rule groups containing alerting rules. This resource is the supported method for cluster admins to create alerts based on metrics recorded by the platform monitoring stack in OpenShift, i.e. the Prometheus instance deployed to the openshift-monitoring namespace. You might use this to create custom alerting rules not shipped with OpenShift based on metrics from components such as the node_exporter, which provides machine-level metrics such as CPU usage, or kube-state-metrics, which provides metrics on Kubernetes usage.\n\nThe API is mostly compatible with the upstream PrometheusRule type from the prometheus-operator. The primary difference being that recording rules are not allowed here -- only alerting rules. For each AlertingRule resource created, a corresponding PrometheusRule will be created in the openshift-monitoring namespace. OpenShift requires admins to use the AlertingRule resource rather than the upstream type in order to allow better OpenShift specific defaulting and validation, while not modifying the upstream APIs directly.\n\nYou can find upstream API documentation for PrometheusRule resources here:\n\nhttps://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec describes the desired state of this AlertingRule object.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.monitoring.v1.AlertingRuleSpec" - }, - "status": { - "description": "status describes the current state of this AlertOverrides object.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.monitoring.v1.AlertingRuleStatus" - } - } - }, - "com.github.openshift.api.monitoring.v1.AlertingRuleList": { - "description": "AlertingRuleList is a list of AlertingRule objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of AlertingRule objects.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.monitoring.v1.AlertingRule" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.monitoring.v1.AlertingRuleSpec": { - "description": "AlertingRuleSpec is the desired state of an AlertingRule resource.", - "type": "object", - "required": [ - "groups" - ], - "properties": { - "groups": { - "description": "groups is a list of grouped alerting rules. Rule groups are the unit at which Prometheus parallelizes rule processing. All rules in a single group share a configured evaluation interval. All rules in the group will be processed together on this interval, sequentially, and all rules will be processed.\n\nIt's common to group related alerting rules into a single AlertingRule resources, and within that resource, closely related alerts, or simply alerts with the same interval, into individual groups. You are also free to create AlertingRule resources with only a single rule group, but be aware that this can have a performance impact on Prometheus if the group is extremely large or has very complex query expressions to evaluate. Spreading very complex rules across multiple groups to allow them to be processed in parallel is also a common use-case.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.monitoring.v1.RuleGroup" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.monitoring.v1.AlertingRuleStatus": { - "description": "AlertingRuleStatus is the status of an AlertingRule resource.", - "type": "object", - "properties": { - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with.", - "type": "integer", - "format": "int64" - }, - "prometheusRule": { - "description": "prometheusRule is the generated PrometheusRule for this AlertingRule. Each AlertingRule instance results in a generated PrometheusRule object in the same namespace, which is always the openshift-monitoring namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.monitoring.v1.PrometheusRuleRef" - } - } - }, - "com.github.openshift.api.monitoring.v1.PrometheusRuleRef": { - "description": "PrometheusRuleRef is a reference to an existing PrometheusRule object. Each AlertingRule instance results in a generated PrometheusRule object in the same namespace, which is always the openshift-monitoring namespace. This is used to point to the generated PrometheusRule object in the AlertingRule status.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name of the referenced PrometheusRule.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.monitoring.v1.RelabelConfig": { - "description": "RelabelConfig allows dynamic rewriting of label sets for alerts. See Prometheus documentation: - https://prometheus.io/docs/prometheus/latest/configuration/configuration/#alert_relabel_configs - https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config", - "type": "object", - "properties": { - "action": { - "description": "action to perform based on regex matching. Must be one of: 'Replace', 'Keep', 'Drop', 'HashMod', 'LabelMap', 'LabelDrop', or 'LabelKeep'. Default is: 'Replace'", - "type": "string" - }, - "modulus": { - "description": "modulus to take of the hash of the source label values. This can be combined with the 'HashMod' action to set 'target_label' to the 'modulus' of a hash of the concatenated 'source_labels'. This is only valid if sourceLabels is not empty and action is not 'LabelKeep' or 'LabelDrop'.", - "type": "integer", - "format": "int64" - }, - "regex": { - "description": "regex against which the extracted value is matched. Default is: '(.*)' regex is required for all actions except 'HashMod'", - "type": "string" - }, - "replacement": { - "description": "replacement value against which a regex replace is performed if the regular expression matches. This is required if the action is 'Replace' or 'LabelMap' and forbidden for actions 'LabelKeep' and 'LabelDrop'. Regex capture groups are available. Default is: '$1'", - "type": "string" - }, - "separator": { - "description": "separator placed between concatenated source label values. When omitted, Prometheus will use its default value of ';'.", - "type": "string" - }, - "sourceLabels": { - "description": "sourceLabels select values from existing labels. Their content is concatenated using the configured separator and matched against the configured regular expression for the 'Replace', 'Keep', and 'Drop' actions. Not allowed for actions 'LabelKeep' and 'LabelDrop'.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "targetLabel": { - "description": "targetLabel to which the resulting value is written in a 'Replace' action. It is required for 'Replace' and 'HashMod' actions and forbidden for actions 'LabelKeep' and 'LabelDrop'. Regex capture groups are available.", - "type": "string" - } - } - }, - "com.github.openshift.api.monitoring.v1.Rule": { - "description": "Rule describes an alerting rule. See Prometheus documentation: - https://www.prometheus.io/docs/prometheus/latest/configuration/alerting_rules", - "type": "object", - "required": [ - "alert", - "expr" - ], - "properties": { - "alert": { - "description": "alert is the name of the alert. Must be a valid label value, i.e. may contain any Unicode character.", - "type": "string", - "default": "" - }, - "annotations": { - "description": "annotations to add to each alert. These are values that can be used to store longer additional information that you won't query on, such as alert descriptions or runbook links.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "expr": { - "description": "expr is the PromQL expression to evaluate. Every evaluation cycle this is evaluated at the current time, and all resultant time series become pending or firing alerts. This is most often a string representing a PromQL expression, e.g.: mapi_current_pending_csr > mapi_max_pending_csr In rare cases this could be a simple integer, e.g. a simple \"1\" if the intent is to create an alert that is always firing. This is sometimes used to create an always-firing \"Watchdog\" alert in order to ensure the alerting pipeline is functional.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" - }, - "for": { - "description": "for is the time period after which alerts are considered firing after first returning results. Alerts which have not yet fired for long enough are considered pending.", - "type": "string" - }, - "labels": { - "description": "labels to add or overwrite for each alert. The results of the PromQL expression for the alert will result in an existing set of labels for the alert, after evaluating the expression, for any label specified here with the same name as a label in that set, the label here wins and overwrites the previous value. These should typically be short identifying values that may be useful to query against. A common example is the alert severity, where one sets `severity: warning` under the `labels` key:", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.monitoring.v1.RuleGroup": { - "description": "RuleGroup is a list of sequentially evaluated alerting rules.", - "type": "object", - "required": [ - "name", - "rules" - ], - "properties": { - "interval": { - "description": "interval is how often rules in the group are evaluated. If not specified, it defaults to the global.evaluation_interval configured in Prometheus, which itself defaults to 30 seconds. You can check if this value has been modified from the default on your cluster by inspecting the platform Prometheus configuration: The relevant field in that resource is: spec.evaluationInterval", - "type": "string" - }, - "name": { - "description": "name is the name of the group.", - "type": "string", - "default": "" - }, - "rules": { - "description": "rules is a list of sequentially evaluated alerting rules. Prometheus may process rule groups in parallel, but rules within a single group are always processed sequentially, and all rules are processed.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.monitoring.v1.Rule" - } - } - } - }, - "com.github.openshift.api.network.v1.ClusterNetwork": { - "description": "ClusterNetwork was used by OpenShift SDN. DEPRECATED: OpenShift SDN is no longer supported and this object is no longer used in any way by OpenShift.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "serviceNetwork", - "clusterNetworks" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "clusterNetworks": { - "description": "clusterNetworks is a list of ClusterNetwork objects that defines the global overlay network's L3 space by specifying a set of CIDR and netmasks that the SDN can allocate addresses from.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.network.v1.ClusterNetworkEntry" - } - }, - "hostsubnetlength": { - "description": "hostsubnetlength is the number of bits of network to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pods", - "type": "integer", - "format": "int64" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "mtu": { - "description": "mtu is the MTU for the overlay network. This should be 50 less than the MTU of the network connecting the nodes. It is normally autodetected by the cluster network operator.", - "type": "integer", - "format": "int64" - }, - "network": { - "description": "network is a CIDR string specifying the global overlay network's L3 space", - "type": "string" - }, - "pluginName": { - "description": "pluginName is the name of the network plugin being used", - "type": "string" - }, - "serviceNetwork": { - "description": "serviceNetwork is the CIDR range that Service IP addresses are allocated from", - "type": "string", - "default": "" - }, - "vxlanPort": { - "description": "vxlanPort sets the VXLAN destination port used by the cluster. It is set by the master configuration file on startup and cannot be edited manually. Valid values for VXLANPort are integers 1-65535 inclusive and if unset defaults to 4789. Changing VXLANPort allows users to resolve issues between openshift SDN and other software trying to use the same VXLAN destination port.", - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.network.v1.ClusterNetworkEntry": { - "description": "ClusterNetworkEntry defines an individual cluster network. The CIDRs cannot overlap with other cluster network CIDRs, CIDRs reserved for external ips, CIDRs reserved for service networks, and CIDRs reserved for ingress ips.", - "type": "object", - "required": [ - "CIDR", - "hostSubnetLength" - ], - "properties": { - "CIDR": { - "description": "CIDR defines the total range of a cluster networks address space.", - "type": "string", - "default": "" - }, - "hostSubnetLength": { - "description": "hostSubnetLength is the number of bits of the accompanying CIDR address to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pods.", - "type": "integer", - "format": "int64", - "default": 0 - } - } - }, - "com.github.openshift.api.network.v1.ClusterNetworkList": { - "description": "ClusterNetworkList is a collection of ClusterNetworks\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is the list of cluster networks", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.network.v1.ClusterNetwork" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.network.v1.EgressNetworkPolicy": { - "description": "EgressNetworkPolicy was used by OpenShift SDN. DEPRECATED: OpenShift SDN is no longer supported and this object is no longer used in any way by OpenShift.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the specification of the current egress network policy", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.network.v1.EgressNetworkPolicySpec" - } - } - }, - "com.github.openshift.api.network.v1.EgressNetworkPolicyList": { - "description": "EgressNetworkPolicyList is a collection of EgressNetworkPolicy\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is the list of policies", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.network.v1.EgressNetworkPolicy" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.network.v1.EgressNetworkPolicyPeer": { - "description": "EgressNetworkPolicyPeer specifies a target to apply egress network policy to", - "type": "object", - "properties": { - "cidrSelector": { - "description": "cidrSelector is the CIDR range to allow/deny traffic to. If this is set, dnsName must be unset Ideally we would have liked to use the cidr openapi format for this property. But openshift-sdn only supports v4 while specifying the cidr format allows both v4 and v6 cidrs We are therefore using a regex pattern to validate instead.", - "type": "string" - }, - "dnsName": { - "description": "dnsName is the domain name to allow/deny traffic to. If this is set, cidrSelector must be unset", - "type": "string" - } - } - }, - "com.github.openshift.api.network.v1.EgressNetworkPolicyRule": { - "description": "EgressNetworkPolicyRule contains a single egress network policy rule", - "type": "object", - "required": [ - "type", - "to" - ], - "properties": { - "to": { - "description": "to is the target that traffic is allowed/denied to", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.network.v1.EgressNetworkPolicyPeer" - }, - "type": { - "description": "type marks this as an \"Allow\" or \"Deny\" rule", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.network.v1.EgressNetworkPolicySpec": { - "description": "EgressNetworkPolicySpec provides a list of policies on outgoing network traffic", - "type": "object", - "required": [ - "egress" - ], - "properties": { - "egress": { - "description": "egress contains the list of egress policy rules", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.network.v1.EgressNetworkPolicyRule" - } - } - } - }, - "com.github.openshift.api.network.v1.HostSubnet": { - "description": "HostSubnet was used by OpenShift SDN. DEPRECATED: OpenShift SDN is no longer supported and this object is no longer used in any way by OpenShift.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "host", - "hostIP", - "subnet" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "egressCIDRs": { - "description": "egressCIDRs is the list of CIDR ranges available for automatically assigning egress IPs to this node from. If this field is set then EgressIPs should be treated as read-only.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "egressIPs": { - "description": "egressIPs is the list of automatic egress IP addresses currently hosted by this node. If EgressCIDRs is empty, this can be set by hand; if EgressCIDRs is set then the master will overwrite the value here with its own allocation of egress IPs.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "host": { - "description": "host is the name of the node. (This is the same as the object's name, but both fields must be set.)", - "type": "string", - "default": "" - }, - "hostIP": { - "description": "hostIP is the IP address to be used as a VTEP by other nodes in the overlay network", - "type": "string", - "default": "" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "subnet": { - "description": "subnet is the CIDR range of the overlay network assigned to the node for its pods", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.network.v1.HostSubnetList": { - "description": "HostSubnetList is a collection of HostSubnets\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is the list of host subnets", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.network.v1.HostSubnet" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.network.v1.NetNamespace": { - "description": "NetNamespace was used by OpenShift SDN. DEPRECATED: OpenShift SDN is no longer supported and this object is no longer used in any way by OpenShift.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "netname", - "netid" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "egressIPs": { - "description": "egressIPs is a list of reserved IPs that will be used as the source for external traffic coming from pods in this namespace. (If empty, external traffic will be masqueraded to Node IPs.)", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "netid": { - "description": "netid is the network identifier of the network namespace assigned to each overlay network packet. This can be manipulated with the \"oc adm pod-network\" commands.", - "type": "integer", - "format": "int64", - "default": 0 - }, - "netname": { - "description": "netname is the name of the network namespace. (This is the same as the object's name, but both fields must be set.)", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.network.v1.NetNamespaceList": { - "description": "NetNamespaceList is a collection of NetNamespaces\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is the list of net namespaces", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.network.v1.NetNamespace" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.network.v1alpha1.DNSNameResolver": { - "description": "DNSNameResolver stores the DNS name resolution information of a DNS name. It can be enabled by the TechPreviewNoUpgrade feature set. It can also be enabled by the feature gate DNSNameResolver when using CustomNoUpgrade feature set.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the specification of the desired behavior of the DNSNameResolver.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.network.v1alpha1.DNSNameResolverSpec" - }, - "status": { - "description": "status is the most recently observed status of the DNSNameResolver.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.network.v1alpha1.DNSNameResolverStatus" - } - } - }, - "com.github.openshift.api.network.v1alpha1.DNSNameResolverList": { - "description": "DNSNameResolverList contains a list of DNSNameResolvers.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items gives the list of DNSNameResolvers.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.network.v1alpha1.DNSNameResolver" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.network.v1alpha1.DNSNameResolverResolvedAddress": { - "description": "DNSNameResolverResolvedAddress describes the details of an IP address for a resolved DNS name.", - "type": "object", - "required": [ - "ip", - "ttlSeconds", - "lastLookupTime" - ], - "properties": { - "ip": { - "description": "ip is an IP address associated with the dnsName. The validity of the IP address expires after lastLookupTime + ttlSeconds. To refresh the information, a DNS lookup will be performed upon the expiration of the IP address's validity. If the information is not refreshed then it will be removed with a grace period after the expiration of the IP address's validity.", - "type": "string", - "default": "" - }, - "lastLookupTime": { - "description": "lastLookupTime is the timestamp when the last DNS lookup was completed successfully. The validity of the IP address expires after lastLookupTime + ttlSeconds. The value of this field will be updated to the current time on a successful DNS lookup. If the information is not refreshed then it will be removed with a grace period after the expiration of the IP address's validity.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "ttlSeconds": { - "description": "ttlSeconds is the time-to-live value of the IP address. The validity of the IP address expires after lastLookupTime + ttlSeconds. On a successful DNS lookup the value of this field will be updated with the current time-to-live value. If the information is not refreshed then it will be removed with a grace period after the expiration of the IP address's validity.", - "type": "integer", - "format": "int32", - "default": 0 - } - } - }, - "com.github.openshift.api.network.v1alpha1.DNSNameResolverResolvedName": { - "description": "DNSNameResolverResolvedName describes the details of a resolved DNS name.", - "type": "object", - "required": [ - "dnsName", - "resolvedAddresses" - ], - "properties": { - "conditions": { - "description": "conditions provide information about the state of the DNS name. Known .status.conditions.type is: \"Degraded\". \"Degraded\" is true when the last resolution failed for the DNS name, and false otherwise.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "dnsName": { - "description": "dnsName is the resolved DNS name matching the name field of DNSNameResolverSpec. This field can store both regular and wildcard DNS names which match the spec.name field. When the spec.name field contains a regular DNS name, this field will store the same regular DNS name after it is successfully resolved. When the spec.name field contains a wildcard DNS name, each resolvedName.dnsName will store the regular DNS names which match the wildcard DNS name and have been successfully resolved. If the wildcard DNS name can also be successfully resolved, then this field will store the wildcard DNS name as well.", - "type": "string", - "default": "" - }, - "resolutionFailures": { - "description": "resolutionFailures keeps the count of how many consecutive times the DNS resolution failed for the dnsName. If the DNS resolution succeeds then the field will be set to zero. Upon every failure, the value of the field will be incremented by one. The details about the DNS name will be removed, if the value of resolutionFailures reaches 5 and the TTL of all the associated IP addresses have expired.", - "type": "integer", - "format": "int32" - }, - "resolvedAddresses": { - "description": "resolvedAddresses gives the list of associated IP addresses and their corresponding TTLs and last lookup times for the dnsName.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.network.v1alpha1.DNSNameResolverResolvedAddress" - }, - "x-kubernetes-list-map-keys": [ - "ip" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.network.v1alpha1.DNSNameResolverSpec": { - "description": "DNSNameResolverSpec is a desired state description of DNSNameResolver.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is the DNS name for which the DNS name resolution information will be stored. For a regular DNS name, only the DNS name resolution information of the regular DNS name will be stored. For a wildcard DNS name, the DNS name resolution information of all the DNS names that match the wildcard DNS name will be stored. For a wildcard DNS name, the '*' will match only one label. Additionally, only a single '*' can be used at the beginning of the wildcard DNS name. For example, '*.example.com.' will match 'sub1.example.com.' but won't match 'sub2.sub1.example.com.'", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.network.v1alpha1.DNSNameResolverStatus": { - "description": "DNSNameResolverStatus defines the observed status of DNSNameResolver.", - "type": "object", - "properties": { - "resolvedNames": { - "description": "resolvedNames contains a list of matching DNS names and their corresponding IP addresses along with their TTL and last DNS lookup times.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.network.v1alpha1.DNSNameResolverResolvedName" - }, - "x-kubernetes-list-map-keys": [ - "dnsName" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "dnsName", - "x-kubernetes-patch-strategy": "merge" - } - } - }, - "com.github.openshift.api.networkoperator.v1.EgressRouter": { - "description": "EgressRouter is a feature allowing the user to define an egress router that acts as a bridge between pods and external systems. The egress router runs a service that redirects egress traffic originating from a pod or a group of pods to a remote external system or multiple destinations as per configuration.\n\nIt is consumed by the cluster-network-operator. More specifically, given an EgressRouter CR with , the CNO will create and manage: - A service called - An egress pod called - A NAD called \n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).\n\nEgressRouter is a single egressrouter pod configuration object.", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "Specification of the desired egress router.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.networkoperator.v1.EgressRouterSpec" - }, - "status": { - "description": "Observed status of EgressRouter.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.networkoperator.v1.EgressRouterStatus" - } - } - }, - "com.github.openshift.api.networkoperator.v1.EgressRouterSpec": { - "description": "EgressRouterSpec contains the configuration for an egress router. Mode, networkInterface and addresses fields must be specified along with exactly one \"Config\" that matches the mode. Each config consists of parameters specific to that mode.", - "type": "object", - "required": [ - "mode", - "networkInterface", - "addresses" - ], - "properties": { - "addresses": { - "description": "List of IP addresses to configure on the pod's secondary interface.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.networkoperator.v1.EgressRouterAddress" - } - }, - "mode": { - "description": "mode depicts the mode that is used for the egress router. The default mode is \"Redirect\" and is the only supported mode currently.", - "type": "string", - "default": "" - }, - "networkInterface": { - "description": "Specification of interface to create/use. The default is macvlan. Currently only macvlan is supported.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.networkoperator.v1.EgressRouterInterface" - }, - "redirect": { - "description": "redirect represents the configuration parameters specific to redirect mode.", - "$ref": "#/definitions/com.github.openshift.api.networkoperator.v1.RedirectConfig" - } - } - }, - "com.github.openshift.api.oauth.v1.ClusterRoleScopeRestriction": { - "description": "ClusterRoleScopeRestriction describes restrictions on cluster role scopes", - "type": "object", - "required": [ - "roleNames", - "namespaces", - "allowEscalation" - ], - "properties": { - "allowEscalation": { - "description": "allowEscalation indicates whether you can request roles and their escalating resources", - "type": "boolean", - "default": false - }, - "namespaces": { - "description": "namespaces is the list of namespaces that can be referenced. * means any of them (including *)", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "roleNames": { - "description": "roleNames is the list of cluster roles that can referenced. * means anything", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.oauth.v1.OAuthAccessToken": { - "description": "OAuthAccessToken describes an OAuth access token. The name of a token must be prefixed with a `sha256~` string, must not contain \"/\" or \"%\" characters and must be at least 32 characters long.\n\nThe name of the token is constructed from the actual token by sha256-hashing it and using URL-safe unpadded base64-encoding (as described in RFC4648) on the hashed result.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "authorizeToken": { - "description": "authorizeToken contains the token that authorized this token", - "type": "string" - }, - "clientName": { - "description": "clientName references the client that created this token.", - "type": "string" - }, - "expiresIn": { - "description": "expiresIn is the seconds from CreationTime before this token expires.", - "type": "integer", - "format": "int64" - }, - "inactivityTimeoutSeconds": { - "description": "inactivityTimeoutSeconds is the value in seconds, from the CreationTimestamp, after which this token can no longer be used. The value is automatically incremented when the token is used.", - "type": "integer", - "format": "int32" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "redirectURI": { - "description": "redirectURI is the redirection associated with the token.", - "type": "string" - }, - "refreshToken": { - "description": "refreshToken is the value by which this token can be renewed. Can be blank.", - "type": "string" - }, - "scopes": { - "description": "scopes is an array of the requested scopes.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "userName": { - "description": "userName is the user name associated with this token", - "type": "string" - }, - "userUID": { - "description": "userUID is the unique UID associated with this token", - "type": "string" - } - } - }, - "com.github.openshift.api.oauth.v1.OAuthAccessTokenList": { - "description": "OAuthAccessTokenList is a collection of OAuth access tokens\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is the list of OAuth access tokens", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.oauth.v1.OAuthAccessToken" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.oauth.v1.OAuthAuthorizeToken": { - "description": "OAuthAuthorizeToken describes an OAuth authorization token\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "clientName": { - "description": "clientName references the client that created this token.", - "type": "string" - }, - "codeChallenge": { - "description": "codeChallenge is the optional code_challenge associated with this authorization code, as described in rfc7636", - "type": "string" - }, - "codeChallengeMethod": { - "description": "codeChallengeMethod is the optional code_challenge_method associated with this authorization code, as described in rfc7636", - "type": "string" - }, - "expiresIn": { - "description": "expiresIn is the seconds from CreationTime before this token expires.", - "type": "integer", - "format": "int64" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "redirectURI": { - "description": "redirectURI is the redirection associated with the token.", - "type": "string" - }, - "scopes": { - "description": "scopes is an array of the requested scopes.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "state": { - "description": "state data from request", - "type": "string" - }, - "userName": { - "description": "userName is the user name associated with this token", - "type": "string" - }, - "userUID": { - "description": "userUID is the unique UID associated with this token. UserUID and UserName must both match for this token to be valid.", - "type": "string" - } - } - }, - "com.github.openshift.api.oauth.v1.OAuthAuthorizeTokenList": { - "description": "OAuthAuthorizeTokenList is a collection of OAuth authorization tokens\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is the list of OAuth authorization tokens", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.oauth.v1.OAuthAuthorizeToken" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.oauth.v1.OAuthClient": { - "description": "OAuthClient describes an OAuth client\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "accessTokenInactivityTimeoutSeconds": { - "description": "accessTokenInactivityTimeoutSeconds overrides the default token inactivity timeout for tokens granted to this client. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. This value needs to be set only if the default set in configuration is not appropriate for this client. Valid values are: - 0: Tokens for this client never time out - X: Tokens time out if there is no activity for X seconds The current minimum allowed value for X is 300 (5 minutes)\n\nWARNING: existing tokens' timeout will not be affected (lowered) by changing this value", - "type": "integer", - "format": "int32" - }, - "accessTokenMaxAgeSeconds": { - "description": "accessTokenMaxAgeSeconds overrides the default access token max age for tokens granted to this client. 0 means no expiration.", - "type": "integer", - "format": "int32" - }, - "additionalSecrets": { - "description": "additionalSecrets holds other secrets that may be used to identify the client. This is useful for rotation and for service account token validation", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "grantMethod": { - "description": "grantMethod is a required field which determines how to handle grants for this client. Valid grant handling methods are:\n - auto: always approves grant requests, useful for trusted clients\n - prompt: prompts the end user for approval of grant requests, useful for third-party clients", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "redirectURIs": { - "description": "redirectURIs is the valid redirection URIs associated with a client", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-patch-strategy": "merge" - }, - "respondWithChallenges": { - "description": "respondWithChallenges indicates whether the client wants authentication needed responses made in the form of challenges instead of redirects", - "type": "boolean" - }, - "scopeRestrictions": { - "description": "scopeRestrictions describes which scopes this client can request. Each requested scope is checked against each restriction. If any restriction matches, then the scope is allowed. If no restriction matches, then the scope is denied.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.oauth.v1.ScopeRestriction" - } - }, - "secret": { - "description": "secret is the unique secret associated with a client", - "type": "string" - } - } - }, - "com.github.openshift.api.oauth.v1.OAuthClientAuthorization": { - "description": "OAuthClientAuthorization describes an authorization created by an OAuth client\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "clientName": { - "description": "clientName references the client that created this authorization", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "scopes": { - "description": "scopes is an array of the granted scopes.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "userName": { - "description": "userName is the user name that authorized this client", - "type": "string" - }, - "userUID": { - "description": "userUID is the unique UID associated with this authorization. UserUID and UserName must both match for this authorization to be valid.", - "type": "string" - } - } - }, - "com.github.openshift.api.oauth.v1.OAuthClientAuthorizationList": { - "description": "OAuthClientAuthorizationList is a collection of OAuth client authorizations\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is the list of OAuth client authorizations", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.oauth.v1.OAuthClientAuthorization" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.oauth.v1.OAuthClientList": { - "description": "OAuthClientList is a collection of OAuth clients\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is the list of OAuth clients", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.oauth.v1.OAuthClient" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.oauth.v1.OAuthRedirectReference": { - "description": "OAuthRedirectReference is a reference to an OAuth redirect object.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "reference": { - "description": "The reference to an redirect object in the current namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.oauth.v1.RedirectReference" - } - } - }, - "com.github.openshift.api.oauth.v1.RedirectReference": { - "description": "RedirectReference specifies the target in the current namespace that resolves into redirect URIs. Only the 'Route' kind is currently allowed.", - "type": "object", - "required": [ - "group", - "kind", - "name" - ], - "properties": { - "group": { - "description": "The group of the target that is being referred to.", - "type": "string", - "default": "" - }, - "kind": { - "description": "The kind of the target that is being referred to. Currently, only 'Route' is allowed.", - "type": "string", - "default": "" - }, - "name": { - "description": "The name of the target that is being referred to. e.g. name of the Route.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.oauth.v1.ScopeRestriction": { - "description": "ScopeRestriction describe one restriction on scopes. Exactly one option must be non-nil.", - "type": "object", - "properties": { - "clusterRole": { - "description": "clusterRole describes a set of restrictions for cluster role scoping.", - "$ref": "#/definitions/com.github.openshift.api.oauth.v1.ClusterRoleScopeRestriction" - }, - "literals": { - "description": "ExactValues means the scope has to match a particular set of strings exactly", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.oauth.v1.UserOAuthAccessToken": { - "description": "UserOAuthAccessToken is a virtual resource to mirror OAuthAccessTokens to the user the access token was issued for", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "authorizeToken": { - "description": "authorizeToken contains the token that authorized this token", - "type": "string" - }, - "clientName": { - "description": "clientName references the client that created this token.", - "type": "string" - }, - "expiresIn": { - "description": "expiresIn is the seconds from CreationTime before this token expires.", - "type": "integer", - "format": "int64" - }, - "inactivityTimeoutSeconds": { - "description": "inactivityTimeoutSeconds is the value in seconds, from the CreationTimestamp, after which this token can no longer be used. The value is automatically incremented when the token is used.", - "type": "integer", - "format": "int32" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "redirectURI": { - "description": "redirectURI is the redirection associated with the token.", - "type": "string" - }, - "refreshToken": { - "description": "refreshToken is the value by which this token can be renewed. Can be blank.", - "type": "string" - }, - "scopes": { - "description": "scopes is an array of the requested scopes.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "userName": { - "description": "userName is the user name associated with this token", - "type": "string" - }, - "userUID": { - "description": "userUID is the unique UID associated with this token", - "type": "string" - } - } - }, - "com.github.openshift.api.oauth.v1.UserOAuthAccessTokenList": { - "description": "UserOAuthAccessTokenList is a collection of access tokens issued on behalf of the requesting user\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.oauth.v1.UserOAuthAccessToken" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.APIServers": { - "type": "object", - "required": [ - "perGroupOptions" - ], - "properties": { - "perGroupOptions": { - "description": "perGroupOptions is a list of enabled/disabled API servers in addition to the defaults", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.PerGroupOptions" - } - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.BuildControllerConfig": { - "type": "object", - "required": [ - "imageTemplateFormat", - "buildDefaults", - "buildOverrides", - "additionalTrustedCA" - ], - "properties": { - "additionalTrustedCA": { - "description": "additionalTrustedCA is a path to a pem bundle file containing additional CAs that should be trusted for image pushes and pulls during builds.", - "type": "string", - "default": "" - }, - "buildDefaults": { - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.BuildDefaultsConfig" - }, - "buildOverrides": { - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.BuildOverridesConfig" - }, - "imageTemplateFormat": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.ImageConfig" - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.BuildDefaultsConfig": { - "description": "BuildDefaultsConfig controls the default information for Builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "properties": { - "annotations": { - "description": "annotations are annotations that will be added to the build pod", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "env": { - "description": "env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } - }, - "gitHTTPProxy": { - "description": "gitHTTPProxy is the location of the HTTPProxy for Git source", - "type": "string" - }, - "gitHTTPSProxy": { - "description": "gitHTTPSProxy is the location of the HTTPSProxy for Git source", - "type": "string" - }, - "gitNoProxy": { - "description": "gitNoProxy is the list of domains for which the proxy should not be used", - "type": "string" - }, - "imageLabels": { - "description": "imageLabels is a list of labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.ImageLabel" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "nodeSelector": { - "description": "nodeSelector is a selector which must be true for the build pod to fit on a node", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "resources": { - "description": "resources defines resource requirements to execute the build.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" - }, - "sourceStrategyDefaults": { - "description": "sourceStrategyDefaults are default values that apply to builds using the source strategy.", - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.SourceStrategyDefaultsConfig" - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.BuildOverridesConfig": { - "description": "BuildOverridesConfig controls override settings for builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "properties": { - "annotations": { - "description": "annotations are annotations that will be added to the build pod", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "forcePull": { - "description": "forcePull overrides, if set, the equivalent value in the builds, i.e. false disables force pull for all builds, true enables force pull for all builds, independently of what each build specifies itself", - "type": "boolean" - }, - "imageLabels": { - "description": "imageLabels is a list of labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.build.v1.ImageLabel" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "nodeSelector": { - "description": "nodeSelector is a selector which must be true for the build pod to fit on a node", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "tolerations": { - "description": "tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - } - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.ClusterNetworkEntry": { - "description": "ClusterNetworkEntry defines an individual cluster network. The CIDRs cannot overlap with other cluster network CIDRs, CIDRs reserved for external ips, CIDRs reserved for service networks, and CIDRs reserved for ingress ips.", - "type": "object", - "required": [ - "cidr", - "hostSubnetLength" - ], - "properties": { - "cidr": { - "description": "cidr defines the total range of a cluster networks address space.", - "type": "string", - "default": "" - }, - "hostSubnetLength": { - "description": "hostSubnetLength is the number of bits of the accompanying CIDR address to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pod.", - "type": "integer", - "format": "int64", - "default": 0 - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.DeployerControllerConfig": { - "type": "object", - "required": [ - "imageTemplateFormat" - ], - "properties": { - "imageTemplateFormat": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.ImageConfig" - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.DockerPullSecretControllerConfig": { - "type": "object", - "required": [ - "registryURLs", - "internalRegistryHostname" - ], - "properties": { - "internalRegistryHostname": { - "description": "internalRegistryHostname is the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format. Docker pull secrets will be generated for this registry.", - "type": "string", - "default": "" - }, - "registryURLs": { - "description": "registryURLs is a list of urls that the docker pull secrets should be valid for.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.FrontProxyConfig": { - "type": "object", - "required": [ - "clientCA", - "allowedNames", - "usernameHeaders", - "groupHeaders", - "extraHeaderPrefixes" - ], - "properties": { - "allowedNames": { - "description": "allowedNames is an optional list of common names to require a match from.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "clientCA": { - "description": "clientCA is a path to the CA bundle to use to verify the common name of the front proxy's client cert", - "type": "string", - "default": "" - }, - "extraHeaderPrefixes": { - "description": "extraHeaderPrefixes is the set of header prefixes to check for user extra", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "groupHeaders": { - "description": "groupHeaders is the set of headers to check for groups", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "usernameHeaders": { - "description": "usernameHeaders is the set of headers to check for the username", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.ImageConfig": { - "description": "ImageConfig holds the necessary configuration options for building image names for system components", - "type": "object", - "required": [ - "format", - "latest" - ], - "properties": { - "format": { - "description": "format is the format of the name to be built for the system component", - "type": "string", - "default": "" - }, - "latest": { - "description": "latest determines if the latest tag will be pulled from the registry", - "type": "boolean", - "default": false - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.ImageImportControllerConfig": { - "type": "object", - "required": [ - "maxScheduledImageImportsPerMinute", - "disableScheduledImport", - "scheduledImageImportMinimumIntervalSeconds" - ], - "properties": { - "disableScheduledImport": { - "description": "disableScheduledImport allows scheduled background import of images to be disabled.", - "type": "boolean", - "default": false - }, - "maxScheduledImageImportsPerMinute": { - "description": "maxScheduledImageImportsPerMinute is the maximum number of image streams that will be imported in the background per minute. The default value is 60. Set to -1 for unlimited.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "scheduledImageImportMinimumIntervalSeconds": { - "description": "scheduledImageImportMinimumIntervalSeconds is the minimum number of seconds that can elapse between when image streams scheduled for background import are checked against the upstream repository. The default value is 15 minutes.", - "type": "integer", - "format": "int32", - "default": 0 - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.ImagePolicyConfig": { - "type": "object", - "required": [ - "maxImagesBulkImportedPerRepository", - "allowedRegistriesForImport", - "internalRegistryHostname", - "externalRegistryHostnames", - "additionalTrustedCA" - ], - "properties": { - "additionalTrustedCA": { - "description": "additionalTrustedCA is a path to a pem bundle file containing additional CAs that should be trusted during imagestream import.", - "type": "string", - "default": "" - }, - "allowedRegistriesForImport": { - "description": "allowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.RegistryLocation" - } - }, - "externalRegistryHostnames": { - "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "imageStreamImportMode": { - "description": "imageStreamImportMode provides the import mode value for imagestreams. It can be `Legacy` or `PreserveOriginal`. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.If this value is specified, this setting is applied to all newly created imagestreams which do not have the value set.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.", - "type": "string", - "default": "", - "enum": [ - "Legacy", - "PreserveOriginal" - ] - }, - "internalRegistryHostname": { - "description": "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format.", - "type": "string", - "default": "" - }, - "maxImagesBulkImportedPerRepository": { - "description": "maxImagesBulkImportedPerRepository controls the number of images that are imported when a user does a bulk import of a container repository. This number is set low to prevent users from importing large numbers of images accidentally. Set -1 for no limit.", - "type": "integer", - "format": "int32", - "default": 0 - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.IngressControllerConfig": { - "type": "object", - "required": [ - "ingressIPNetworkCIDR" - ], - "properties": { - "ingressIPNetworkCIDR": { - "description": "ingressIPNetworkCIDR controls the range to assign ingress ips from for services of type LoadBalancer on bare metal. If empty, ingress ips will not be assigned. It may contain a single CIDR that will be allocated from. For security reasons, you should ensure that this range does not overlap with the CIDRs reserved for external ips, nodes, pods, or services.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.JenkinsPipelineConfig": { - "description": "JenkinsPipelineConfig holds configuration for the Jenkins pipeline strategy", - "type": "object", - "required": [ - "autoProvisionEnabled", - "templateNamespace", - "templateName", - "serviceName", - "parameters" - ], - "properties": { - "autoProvisionEnabled": { - "description": "autoProvisionEnabled determines whether a Jenkins server will be spawned from the provided template when the first build config in the project with type JenkinsPipeline is created. When not specified this option defaults to true.", - "type": "boolean" - }, - "parameters": { - "description": "parameters specifies a set of optional parameters to the Jenkins template.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "serviceName": { - "description": "serviceName is the name of the Jenkins service OpenShift uses to detect whether a Jenkins pipeline handler has already been installed in a project. This value *must* match a service name in the provided template.", - "type": "string", - "default": "" - }, - "templateName": { - "description": "templateName is the name of the default Jenkins template", - "type": "string", - "default": "" - }, - "templateNamespace": { - "description": "templateNamespace contains the namespace name where the Jenkins template is stored", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.NetworkControllerConfig": { - "description": "MasterNetworkConfig to be passed to the compiled in network plugin", - "type": "object", - "required": [ - "networkPluginName", - "clusterNetworks", - "serviceNetworkCIDR", - "vxlanPort" - ], - "properties": { - "clusterNetworks": { - "description": "clusterNetworks contains a list of cluster networks that defines the global overlay networks L3 space.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.ClusterNetworkEntry" - } - }, - "networkPluginName": { - "type": "string", - "default": "" - }, - "serviceNetworkCIDR": { - "type": "string", - "default": "" - }, - "vxlanPort": { - "type": "integer", - "format": "int64", - "default": 0 - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.OpenShiftAPIServerConfig": { - "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "servingInfo", - "corsAllowedOrigins", - "auditConfig", - "storageConfig", - "admission", - "kubeClientConfig", - "aggregatorConfig", - "imagePolicyConfig", - "projectConfig", - "routingConfig", - "serviceAccountOAuthGrantMethod", - "jenkinsPipelineConfig", - "cloudProviderFile", - "apiServerArguments", - "apiServers" - ], - "properties": { - "admission": { - "description": "admissionConfig holds information about how to configure admission.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.AdmissionConfig" - }, - "aggregatorConfig": { - "description": "aggregatorConfig contains information about how to verify the aggregator front proxy", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.FrontProxyConfig" - }, - "apiServerArguments": { - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "apiServers": { - "description": "apiServers holds information about enabled/disabled API servers", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.APIServers" - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "auditConfig": { - "description": "auditConfig describes how to configure audit information", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.AuditConfig" - }, - "cloudProviderFile": { - "description": "cloudProviderFile points to the cloud config file", - "type": "string", - "default": "" - }, - "corsAllowedOrigins": { - "description": "corsAllowedOrigins", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "imagePolicyConfig": { - "description": "imagePolicyConfig feeds the image policy admission plugin", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.ImagePolicyConfig" - }, - "jenkinsPipelineConfig": { - "description": "jenkinsPipelineConfig holds information about the default Jenkins template used for JenkinsPipeline build strategy.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.JenkinsPipelineConfig" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "kubeClientConfig": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.KubeClientConfig" - }, - "projectConfig": { - "description": "projectConfig feeds an admission plugin", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.ProjectConfig" - }, - "routingConfig": { - "description": "routingConfig holds information about routing and route generation", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.RoutingConfig" - }, - "serviceAccountOAuthGrantMethod": { - "description": "serviceAccountOAuthGrantMethod is used for determining client authorization for service account oauth client. It must be either: deny, prompt, or \"\"", - "type": "string", - "default": "" - }, - "servingInfo": { - "description": "servingInfo describes how to start serving", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.HTTPServingInfo" - }, - "storageConfig": { - "description": "storageConfig contains information about how to use", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.EtcdStorageConfig" - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.OpenShiftControllerManagerConfig": { - "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "servingInfo", - "leaderElection", - "controllers", - "resourceQuota", - "serviceServingCert", - "deployer", - "build", - "serviceAccount", - "dockerPullSecret", - "network", - "ingress", - "imageImport", - "securityAllocator", - "featureGates" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "build": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.BuildControllerConfig" - }, - "controllers": { - "description": "controllers is a list of controllers to enable. '*' enables all on-by-default controllers, 'foo' enables the controller \"+ named 'foo', '-foo' disables the controller named 'foo'. Defaults to \"*\".", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "deployer": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.DeployerControllerConfig" - }, - "dockerPullSecret": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.DockerPullSecretControllerConfig" - }, - "featureGates": { - "description": "featureGates are the set of extra OpenShift feature gates for openshift-controller-manager. These feature gates can be used to enable features that are tech preview or otherwise not available on OpenShift by default.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "imageImport": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.ImageImportControllerConfig" - }, - "ingress": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.IngressControllerConfig" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "leaderElection": { - "description": "leaderElection defines the configuration for electing a controller instance to make changes to the cluster. If unspecified, the ControllerTTL value is checked to determine whether the legacy direct etcd election code will be used.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.LeaderElection" - }, - "network": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.NetworkControllerConfig" - }, - "resourceQuota": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.ResourceQuotaControllerConfig" - }, - "securityAllocator": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.SecurityAllocator" - }, - "serviceAccount": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.ServiceAccountControllerConfig" - }, - "serviceServingCert": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.openshiftcontrolplane.v1.ServiceServingCert" - }, - "servingInfo": { - "description": "servingInfo describes how to start serving", - "$ref": "#/definitions/com.github.openshift.api.config.v1.HTTPServingInfo" - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.PerGroupOptions": { - "type": "object", - "required": [ - "name", - "enabledVersions", - "disabledVersions" - ], - "properties": { - "disabledVersions": { - "description": "disabledVersions is a list of versions that must be disabled in addition to the defaults. Must not collide with the list of enabled versions", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "enabledVersions": { - "description": "enabledVersions is a list of versions that must be enabled in addition to the defaults. Must not collide with the list of disabled versions", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "name": { - "description": "name is an API server name (see OpenShiftAPIserverName typed constants for a complete list of available API servers).", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.ProjectConfig": { - "type": "object", - "required": [ - "defaultNodeSelector", - "projectRequestMessage", - "projectRequestTemplate" - ], - "properties": { - "defaultNodeSelector": { - "description": "defaultNodeSelector holds default project node label selector", - "type": "string", - "default": "" - }, - "projectRequestMessage": { - "description": "projectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint", - "type": "string", - "default": "" - }, - "projectRequestTemplate": { - "description": "projectRequestTemplate is the template to use for creating projects in response to projectrequest. It is in the format namespace/template and it is optional. If it is not specified, a default template is used.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.RegistryLocation": { - "description": "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.", - "type": "object", - "required": [ - "domainName" - ], - "properties": { - "domainName": { - "description": "domainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.", - "type": "string", - "default": "" - }, - "insecure": { - "description": "insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.", - "type": "boolean" - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.ResourceQuotaControllerConfig": { - "type": "object", - "required": [ - "concurrentSyncs", - "syncPeriod", - "minResyncPeriod" - ], - "properties": { - "concurrentSyncs": { - "type": "integer", - "format": "int32", - "default": 0 - }, - "minResyncPeriod": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "syncPeriod": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.RoutingConfig": { - "description": "RoutingConfig holds the necessary configuration options for routing to subdomains", - "type": "object", - "required": [ - "subdomain" - ], - "properties": { - "subdomain": { - "description": "subdomain is the suffix appended to $service.$namespace. to form the default route hostname DEPRECATED: This field is being replaced by routers setting their own defaults. This is the \"default\" route.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.SecurityAllocator": { - "description": "SecurityAllocator controls the automatic allocation of UIDs and MCS labels to a project. If nil, allocation is disabled.", - "type": "object", - "required": [ - "uidAllocatorRange", - "mcsAllocatorRange", - "mcsLabelsPerProject" - ], - "properties": { - "mcsAllocatorRange": { - "description": "mcsAllocatorRange defines the range of MCS categories that will be assigned to namespaces. The format is \"/[,]\". The default is \"s0/2\" and will allocate from c0 -> c1023, which means a total of 535k labels are available (1024 choose 2 ~ 535k). If this value is changed after startup, new projects may receive labels that are already allocated to other projects. Prefix may be any valid SELinux set of terms (including user, role, and type), although leaving them as the default will allow the server to set them automatically.\n\nExamples: * s0:/2 - Allocate labels from s0:c0,c0 to s0:c511,c511 * s0:/2,512 - Allocate labels from s0:c0,c0,c0 to s0:c511,c511,511", - "type": "string", - "default": "" - }, - "mcsLabelsPerProject": { - "description": "mcsLabelsPerProject defines the number of labels that should be reserved per project. The default is 5 to match the default UID and MCS ranges (100k namespaces, 535k/5 labels).", - "type": "integer", - "format": "int32", - "default": 0 - }, - "uidAllocatorRange": { - "description": "uidAllocatorRange defines the total set of Unix user IDs (UIDs) that will be allocated to projects automatically, and the size of the block each namespace gets. For example, 1000-1999/10 will allocate ten UIDs per namespace, and will be able to allocate up to 100 blocks before running out of space. The default is to allocate from 1 billion to 2 billion in 10k blocks (which is the expected size of the ranges container images will use once user namespaces are started).", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.ServiceAccountControllerConfig": { - "type": "object", - "required": [ - "managedNames" - ], - "properties": { - "managedNames": { - "description": "managedNames is a list of service account names that will be auto-created in every namespace. If no names are specified, the ServiceAccountsController will not be started.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.ServiceServingCert": { - "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.", - "type": "object", - "required": [ - "signer" - ], - "properties": { - "signer": { - "description": "signer holds the signing information used to automatically sign serving certificates. If this value is nil, then certs are not signed automatically.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.CertInfo" - } - } - }, - "com.github.openshift.api.openshiftcontrolplane.v1.SourceStrategyDefaultsConfig": { - "description": "SourceStrategyDefaultsConfig contains values that apply to builds using the source strategy.", - "type": "object", - "properties": { - "incremental": { - "description": "incremental indicates if s2i build strategies should perform an incremental build or not", - "type": "boolean" - } - } - }, - "com.github.openshift.api.operator.v1.AWSCSIDriverConfigSpec": { - "description": "AWSCSIDriverConfigSpec defines properties that can be configured for the AWS CSI driver.", - "type": "object", - "properties": { - "efsVolumeMetrics": { - "description": "efsVolumeMetrics sets the configuration for collecting metrics from EFS volumes used by the EFS CSI Driver.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.AWSEFSVolumeMetrics" - }, - "kmsKeyARN": { - "description": "kmsKeyARN sets the cluster default storage class to encrypt volumes with a user-defined KMS key, rather than the default KMS key used by AWS. The value may be either the ARN or Alias ARN of a KMS key.\n\nThe ARN must follow the format: arn::kms:::(key|alias)/, where: is the AWS partition (aws, aws-cn, aws-us-gov, aws-iso, aws-iso-b, aws-iso-e, aws-iso-f, or aws-eusc), is the AWS region, is a 12-digit numeric identifier for the AWS account, is the KMS key ID or alias name.", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.AWSClassicLoadBalancerParameters": { - "description": "AWSClassicLoadBalancerParameters holds configuration parameters for an AWS Classic load balancer.", - "type": "object", - "properties": { - "connectionIdleTimeout": { - "description": "connectionIdleTimeout specifies the maximum time period that a connection may be idle before the load balancer closes the connection. The value must be parseable as a time duration value; see . A nil or zero value means no opinion, in which case a default value is used. The default value for this field is 60s. This default is subject to change.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "subnets": { - "description": "subnets specifies the subnets to which the load balancer will attach. The subnets may be specified by either their ID or name. The total number of subnets is limited to 10.\n\nIn order for the load balancer to be provisioned with subnets, each subnet must exist, each subnet must be from a different availability zone, and the load balancer service must be recreated to pick up new values.\n\nWhen omitted from the spec, the subnets will be auto-discovered for each availability zone. Auto-discovered subnets are not reported in the status of the IngressController object.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.AWSSubnets" - } - } - }, - "com.github.openshift.api.operator.v1.AWSEFSVolumeMetrics": { - "description": "AWSEFSVolumeMetrics defines the configuration for volume metrics in the EFS CSI Driver.", - "type": "object", - "required": [ - "state" - ], - "properties": { - "recursiveWalk": { - "description": "recursiveWalk provides additional configuration for collecting volume metrics in the AWS EFS CSI Driver when the state is set to RecursiveWalk.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.AWSEFSVolumeMetricsRecursiveWalkConfig" - }, - "state": { - "description": "state defines the state of metric collection in the AWS EFS CSI Driver. This field is required and must be set to one of the following values: Disabled or RecursiveWalk. Disabled means no metrics collection will be performed. This is the default value. RecursiveWalk means the AWS EFS CSI Driver will recursively scan volumes to collect metrics. This process may result in high CPU and memory usage, depending on the volume size.", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "state", - "fields-to-discriminateBy": { - "recursiveWalk": "RecursiveWalk" - } - } - ] - }, - "com.github.openshift.api.operator.v1.AWSEFSVolumeMetricsRecursiveWalkConfig": { - "description": "AWSEFSVolumeMetricsRecursiveWalkConfig defines options for volume metrics in the EFS CSI Driver.", - "type": "object", - "properties": { - "fsRateLimit": { - "description": "fsRateLimit defines the rate limit, in goroutines per file system, for processing volume metrics. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 5. The valid range is from 1 to 100 goroutines.", - "type": "integer", - "format": "int32" - }, - "refreshPeriodMinutes": { - "description": "refreshPeriodMinutes specifies the frequency, in minutes, at which volume metrics are refreshed. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 240. The valid range is from 1 to 43200 minutes (30 days).", - "type": "integer", - "format": "int32" - } - } - }, - "com.github.openshift.api.operator.v1.AWSLoadBalancerParameters": { - "description": "AWSLoadBalancerParameters provides configuration settings that are specific to AWS load balancers.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "classicLoadBalancer": { - "description": "classicLoadBalancerParameters holds configuration parameters for an AWS classic load balancer. Present only if type is Classic.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.AWSClassicLoadBalancerParameters" - }, - "networkLoadBalancer": { - "description": "networkLoadBalancerParameters holds configuration parameters for an AWS network load balancer. Present only if type is NLB.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.AWSNetworkLoadBalancerParameters" - }, - "type": { - "description": "type is the type of AWS load balancer to instantiate for an ingresscontroller.\n\nValid values are:\n\n* \"Classic\": A Classic Load Balancer that makes routing decisions at either\n the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See\n the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb\n\n* \"NLB\": A Network Load Balancer that makes routing decisions at the\n transport layer (TCP/SSL). See the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "classicLoadBalancer": "ClassicLoadBalancerParameters", - "networkLoadBalancer": "NetworkLoadBalancerParameters" - } - } - ] - }, - "com.github.openshift.api.operator.v1.AWSNetworkLoadBalancerParameters": { - "description": "AWSNetworkLoadBalancerParameters holds configuration parameters for an AWS Network load balancer. For Example: Setting AWS EIPs https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html", - "type": "object", - "properties": { - "eipAllocations": { - "description": "eipAllocations is a list of IDs for Elastic IP (EIP) addresses that are assigned to the Network Load Balancer. The following restrictions apply:\n\neipAllocations can only be used with external scope, not internal. An EIP can be allocated to only a single IngressController. The number of EIP allocations must match the number of subnets that are used for the load balancer. Each EIP allocation must be unique. A maximum of 10 EIP allocations are permitted.\n\nSee https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html for general information about configuration, characteristics, and limitations of Elastic IP addresses.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "protocol": { - "description": "protocol specifies whether the Network Load Balancer uses PROXY protocol to forward connections to the IngressController.\n\nWhen set to \"TCP\", the NLB uses AWS's native client IP preservation. This may cause hairpin connection failures for internal load balancers when connections are made from pods to router pods on the same node.\n\nWhen set to \"PROXY\", the NLB disables native client IP preservation and uses PROXY protocol v2. The IngressController enables PROXY protocol on HAProxy so that it can parse PROXY protocol headers to obtain the original client IP. This avoids hairpin connection failures.\n\nThe following values are valid for this field:\n\n* \"TCP\". * \"PROXY\".\n\nWhen omitted, this means the user has no opinion and the value is left to the platform to choose a reasonable default, which is subject to change over time. The current default is \"PROXY\".\n\nNote that changing this field may cause brief connection failures during the transition as the NLB attribute change and router rollout occur independently.\n\n\nPossible enum values:\n - `\"PROXY\"` instructs the NLB to forward connections using PROXY protocol v2.\n - `\"TCP\"` instructs the NLB to forward connections using TCP without PROXY protocol.", - "type": "string", - "enum": [ - "PROXY", - "TCP" - ] - }, - "subnets": { - "description": "subnets specifies the subnets to which the load balancer will attach. The subnets may be specified by either their ID or name. The total number of subnets is limited to 10.\n\nIn order for the load balancer to be provisioned with subnets, each subnet must exist, each subnet must be from a different availability zone, and the load balancer service must be recreated to pick up new values.\n\nWhen omitted from the spec, the subnets will be auto-discovered for each availability zone. Auto-discovered subnets are not reported in the status of the IngressController object.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.AWSSubnets" - } - } - }, - "com.github.openshift.api.operator.v1.AWSSubnets": { - "description": "AWSSubnets contains a list of references to AWS subnets by ID or name.", - "type": "object", - "properties": { - "ids": { - "description": "ids specifies a list of AWS subnets by subnet ID. Subnet IDs must start with \"subnet-\", consist only of alphanumeric characters, must be exactly 24 characters long, must be unique, and the total number of subnets specified by ids and names must not exceed 10.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "names": { - "description": "names specifies a list of AWS subnets by subnet name. Subnet names must not start with \"subnet-\", must not include commas, must be under 256 characters in length, must be unique, and the total number of subnets specified by ids and names must not exceed 10.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.operator.v1.AccessLogging": { - "description": "AccessLogging describes how client requests should be logged.", - "type": "object", - "required": [ - "destination" - ], - "properties": { - "destination": { - "description": "destination is where access logs go.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.LoggingDestination" - }, - "httpCaptureCookies": { - "description": "httpCaptureCookies specifies HTTP cookies that should be captured in access logs. If this field is empty, no cookies are captured.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IngressControllerCaptureHTTPCookie" - }, - "x-kubernetes-list-type": "atomic" - }, - "httpCaptureHeaders": { - "description": "httpCaptureHeaders defines HTTP headers that should be captured in access logs. If this field is empty, no headers are captured.\n\nNote that this option only applies to cleartext HTTP connections and to secure HTTP connections for which the ingress controller terminates encryption (that is, edge-terminated or reencrypt connections). Headers cannot be captured for TLS passthrough connections.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IngressControllerCaptureHTTPHeaders" - }, - "httpLogFormat": { - "description": "httpLogFormat specifies the format of the log message for an HTTP request.\n\nIf this field is empty, log messages use the implementation's default HTTP log format. For HAProxy's default HTTP log format, see the HAProxy documentation: http://cbonte.github.io/haproxy-dconv/2.0/configuration.html#8.2.3\n\nNote that this format only applies to cleartext HTTP connections and to secure HTTP connections for which the ingress controller terminates encryption (that is, edge-terminated or reencrypt connections). It does not affect the log format for TLS passthrough connections.", - "type": "string" - }, - "logEmptyRequests": { - "description": "logEmptyRequests specifies how connections on which no request is received should be logged. Typically, these empty requests come from load balancers' health probes or Web browsers' speculative connections (\"preconnect\"), in which case logging these requests may be undesirable. However, these requests may also be caused by network errors, in which case logging empty requests may be useful for diagnosing the errors. In addition, these requests may be caused by port scans, in which case logging empty requests may aid in detecting intrusion attempts. Allowed values for this field are \"Log\" and \"Ignore\". The default value is \"Log\".", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.AddPage": { - "description": "AddPage allows customizing actions on the Add page in developer perspective.", - "type": "object", - "properties": { - "disabledActions": { - "description": "disabledActions is a list of actions that are not shown to users. Each action in the list is represented by its ID.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.operator.v1.AdditionalNetworkDefinition": { - "description": "AdditionalNetworkDefinition configures an extra network that is available but not created by default. Instead, pods must request them by name. type must be specified, along with exactly one \"Config\" that matches the type.", - "type": "object", - "required": [ - "type", - "name" - ], - "properties": { - "name": { - "description": "name is the name of the network. This will be populated in the resulting CRD This must be unique.", - "type": "string", - "default": "" - }, - "namespace": { - "description": "namespace is the namespace of the network. This will be populated in the resulting CRD If not given the network will be created in the default namespace.", - "type": "string" - }, - "rawCNIConfig": { - "description": "rawCNIConfig is the raw CNI configuration json to create in the NetworkAttachmentDefinition CRD", - "type": "string" - }, - "simpleMacvlanConfig": { - "description": "simpleMacvlanConfig configures the macvlan interface in case of type:NetworkTypeSimpleMacvlan", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.SimpleMacvlanConfig" - }, - "type": { - "description": "type is the type of network The supported values are NetworkTypeRaw, NetworkTypeSimpleMacvlan", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.AdditionalRoutingCapabilities": { - "description": "AdditionalRoutingCapabilities describes components and relevant configuration providing advanced routing capabilities.", - "type": "object", - "required": [ - "providers" - ], - "properties": { - "providers": { - "description": "providers is a set of enabled components that provide additional routing capabilities. Entries on this list must be unique. The only valid value is currrently \"FRR\" which provides FRR routing capabilities through the deployment of FRR.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.operator.v1.Authentication": { - "description": "Authentication provides information to configure an operator to manage authentication.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.AuthenticationSpec" - }, - "status": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.AuthenticationStatus" - } - } - }, - "com.github.openshift.api.operator.v1.AuthenticationConfigMapReference": { - "description": "AuthenticationConfigMapReference references a ConfigMap in the openshift-config namespace.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is the metadata.name of the referenced ConfigMap. Must be a valid DNS subdomain name (RFC 1123): at most 253 characters, only lowercase alphanumeric characters, '-' or '.', starting and ending with an alphanumeric character.", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.AuthenticationList": { - "description": "AuthenticationList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.Authentication" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.AuthenticationProxyConfig": { - "description": "AuthenticationProxyConfig holds proxy configuration scoped to authentication components (the OAuth server and the cluster authentication operator).", - "type": "object", - "properties": { - "httpProxy": { - "description": "httpProxy is the URL of the proxy for HTTP requests. Must be a valid URL with http or https scheme, a non-empty hostname, and no path, query parameters, or fragment. Userinfo (e.g. user:password@host) is allowed for proxy authentication. Maximum length is 2048 characters.", - "type": "string" - }, - "httpsProxy": { - "description": "httpsProxy is the URL of the proxy for HTTPS requests. Must be a valid URL with http or https scheme, a non-empty hostname, and no path, query parameters, or fragment. Userinfo (e.g. user:password@host) is allowed for proxy authentication. Maximum length is 2048 characters.", - "type": "string" - }, - "noProxy": { - "description": "noProxy is a list of hostnames and/or CIDRs and/or IPs for which the proxy should not be used. Must contain at least one entry when set. Each entry must be between 1 and 253 characters long and at most 64 entries are allowed. Duplicate entries are not permitted. Entries that are not valid hostnames, CIDRs, or IPs are silently ignored. Cluster-internal defaults (.cluster.local, .svc, 127.0.0.1, localhost) are always appended automatically and do not need to be included.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "trustedCA": { - "description": "trustedCA is a reference to a ConfigMap in the openshift-config namespace containing a CA certificate bundle under the key \"ca-bundle.crt\". This bundle is appended to the system trust store used by authentication components for proxy TLS connections. When omitted, only the system trust store is used.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.AuthenticationConfigMapReference" - } - } - }, - "com.github.openshift.api.operator.v1.AuthenticationSpec": { - "type": "object", - "required": [ - "managementState" - ], - "properties": { - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "proxy": { - "description": "proxy configures proxy settings for outbound connections made by the authentication stack. When set, it replaces the cluster-wide proxy (proxy.config.openshift.io/cluster) entirely for authentication — individual fields are not inherited from the cluster-wide configuration. When omitted, the cluster-wide proxy is used if configured; otherwise no proxy is used.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.AuthenticationProxyConfig" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.operator.v1.AuthenticationStatus": { - "type": "object", - "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "oauthAPIServer": { - "description": "oauthAPIServer holds status specific only to oauth-apiserver", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OAuthAPIServerStatus" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.AzureCSIDriverConfigSpec": { - "description": "AzureCSIDriverConfigSpec defines properties that can be configured for the Azure CSI driver.", - "type": "object", - "properties": { - "diskEncryptionSet": { - "description": "diskEncryptionSet sets the cluster default storage class to encrypt volumes with a customer-managed encryption set, rather than the default platform-managed keys.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.AzureDiskEncryptionSet" - } - } - }, - "com.github.openshift.api.operator.v1.AzureDiskEncryptionSet": { - "description": "AzureDiskEncryptionSet defines the configuration for a disk encryption set.", - "type": "object", - "required": [ - "subscriptionID", - "resourceGroup", - "name" - ], - "properties": { - "name": { - "description": "name is the name of the disk encryption set that will be set on the default storage class. The value should consist of only alphanumberic characters, underscores (_), hyphens, and be at most 80 characters in length.", - "type": "string", - "default": "" - }, - "resourceGroup": { - "description": "resourceGroup defines the Azure resource group that contains the disk encryption set. The value should consist of only alphanumberic characters, underscores (_), parentheses, hyphens and periods. The value should not end in a period and be at most 90 characters in length.", - "type": "string", - "default": "" - }, - "subscriptionID": { - "description": "subscriptionID defines the Azure subscription that contains the disk encryption set. The value should meet the following conditions: 1. It should be a 128-bit number. 2. It should be 36 characters (32 hexadecimal characters and 4 hyphens) long. 3. It should be displayed in five groups separated by hyphens (-). 4. The first group should be 8 characters long. 5. The second, third, and fourth groups should be 4 characters long. 6. The fifth group should be 12 characters long. An Example SubscrionID: f2007bbf-f802-4a47-9336-cf7c6b89b378", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.BGPManagedConfig": { - "description": "BGPManagedConfig contains configuration options for BGP when routing is \"Managed\".", - "type": "object", - "required": [ - "bgpTopology" - ], - "properties": { - "asNumber": { - "description": "asNumber is the 2-byte or 4-byte Autonomous System Number (ASN) to be used in the generated FRR configuration. Valid values are 1 to 4294967295. When omitted, this defaults to 64512.", - "type": "integer", - "format": "int64", - "default": 64512 - }, - "bgpTopology": { - "description": "bgpTopology defines the BGP topology to be used. Allowed values are \"FullMesh\". When set to \"FullMesh\", every node peers directly with every other node via BGP. This field is required when BGPManagedConfig is specified.", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.BootImageSkewEnforcementConfig": { - "description": "BootImageSkewEnforcementConfig is used to configure how boot image version skew is enforced on the cluster.", - "type": "object", - "required": [ - "mode" - ], - "properties": { - "manual": { - "description": "manual describes the current boot image of the cluster. This should be set to the oldest boot image used amongst all machine resources in the cluster. This must include either the RHCOS version of the boot image or the OCP release version which shipped with that RHCOS boot image. Required when mode is set to \"Manual\" and forbidden otherwise.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ClusterBootImageManual" - }, - "mode": { - "description": "mode determines the underlying behavior of skew enforcement mechanism. Valid values are Manual and None. Manual means that the cluster admin is expected to perform manual boot image updates and store the OCP & RHCOS version associated with the last boot image update in the manual field. In Manual mode, the MCO will prevent upgrades when the boot image skew exceeds the skew limit described by the release image. None means that the MCO will no longer monitor the boot image skew. This may affect the cluster's ability to scale. This field is required.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "mode", - "fields-to-discriminateBy": { - "manual": "Manual" - } - } - ] - }, - "com.github.openshift.api.operator.v1.BootImageSkewEnforcementStatus": { - "description": "BootImageSkewEnforcementStatus is the type for the status object. It represents the cluster defaults when the boot image skew enforcement configuration is undefined and reflects the actual configuration when it is defined.", - "type": "object", - "required": [ - "mode" - ], - "properties": { - "automatic": { - "description": "automatic describes the current boot image of the cluster. This will be populated by the MCO when performing boot image updates. This value will be compared against the cluster's skew limit to determine skew compliance. Required when mode is set to \"Automatic\" and forbidden otherwise.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ClusterBootImageAutomatic" - }, - "manual": { - "description": "manual describes the current boot image of the cluster. This will be populated by the MCO using the values provided in the spec.bootImageSkewEnforcement.manual field. This value will be compared against the cluster's skew limit to determine skew compliance. Required when mode is set to \"Manual\" and forbidden otherwise.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ClusterBootImageManual" - }, - "mode": { - "description": "mode determines the underlying behavior of skew enforcement mechanism. Valid values are Automatic, Manual and None. Automatic means that the MCO will perform boot image updates and store the OCP & RHCOS version associated with the last boot image update in the automatic field. Manual means that the cluster admin is expected to perform manual boot image updates and store the OCP & RHCOS version associated with the last boot image update in the manual field. In Automatic and Manual mode, the MCO will prevent upgrades when the boot image skew exceeds the skew limit described by the release image. None means that the MCO will no longer monitor the boot image skew. This may affect the cluster's ability to scale. This field is required.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "mode", - "fields-to-discriminateBy": { - "automatic": "Automatic", - "manual": "Manual" - } - } - ] - }, - "com.github.openshift.api.operator.v1.CSIDriverConfigSpec": { - "description": "CSIDriverConfigSpec defines configuration spec that can be used to optionally configure a specific CSI Driver.", - "type": "object", - "required": [ - "driverType" - ], - "properties": { - "aws": { - "description": "aws is used to configure the AWS CSI driver.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.AWSCSIDriverConfigSpec" - }, - "azure": { - "description": "azure is used to configure the Azure CSI driver.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.AzureCSIDriverConfigSpec" - }, - "driverType": { - "description": "driverType indicates type of CSI driver for which the driverConfig is being applied to. Valid values are: AWS, Azure, GCP, IBMCloud, vSphere, SecretsStore and omitted. Consumers should treat unknown values as a NO-OP.", - "type": "string", - "default": "" - }, - "gcp": { - "description": "gcp is used to configure the GCP CSI driver.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GCPCSIDriverConfigSpec" - }, - "ibmcloud": { - "description": "ibmcloud is used to configure the IBM Cloud CSI driver.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IBMCloudCSIDriverConfigSpec" - }, - "secretsStore": { - "description": "secretsStore is used to configure the Secrets Store CSI driver.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.SecretsStoreCSIDriverConfigSpec" - }, - "vSphere": { - "description": "vSphere is used to configure the vsphere CSI driver.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.VSphereCSIDriverConfigSpec" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "driverType", - "fields-to-discriminateBy": { - "aws": "AWS", - "azure": "Azure", - "gcp": "GCP", - "ibmcloud": "IBMCloud", - "secretsStore": "SecretsStore", - "vSphere": "VSphere" - } - } - ] - }, - "com.github.openshift.api.operator.v1.CSISnapshotController": { - "description": "CSISnapshotController provides a means to configure an operator to manage the CSI snapshots. `cluster` is the canonical name.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.CSISnapshotControllerSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.CSISnapshotControllerStatus" - } - } - }, - "com.github.openshift.api.operator.v1.CSISnapshotControllerList": { - "description": "CSISnapshotControllerList contains a list of CSISnapshotControllers.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.CSISnapshotController" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.CSISnapshotControllerSpec": { - "description": "CSISnapshotControllerSpec is the specification of the desired behavior of the CSISnapshotController operator.", - "type": "object", - "required": [ - "managementState" - ], - "properties": { - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.operator.v1.CSISnapshotControllerStatus": { - "description": "CSISnapshotControllerStatus defines the observed status of the CSISnapshotController operator.", - "type": "object", - "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.Capability": { - "description": "Capabilities contains set of UI capabilities and their state in the console UI.", - "type": "object", - "required": [ - "name", - "visibility" - ], - "properties": { - "name": { - "description": "name is the unique name of a capability. Available capabilities are LightspeedButton, GettingStartedBanner, and GuidedTour.", - "type": "string", - "default": "" - }, - "visibility": { - "description": "visibility defines the visibility state of the capability.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.CapabilityVisibility" - } - } - }, - "com.github.openshift.api.operator.v1.CapabilityVisibility": { - "description": "CapabilityVisibility defines the criteria to enable/disable a capability.", - "type": "object", - "required": [ - "state" - ], - "properties": { - "state": { - "description": "state defines if the capability is enabled or disabled in the console UI. Enabling the capability in the console UI is represented by the \"Enabled\" value. Disabling the capability in the console UI is represented by the \"Disabled\" value.", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "state", - "fields-to-discriminateBy": {} - } - ] - }, - "com.github.openshift.api.operator.v1.ClientTLS": { - "description": "ClientTLS specifies TLS configuration to enable client-to-server authentication, which can be used for mutual TLS.", - "type": "object", - "required": [ - "clientCertificatePolicy", - "clientCA" - ], - "properties": { - "allowedSubjectPatterns": { - "description": "allowedSubjectPatterns specifies a list of regular expressions that should be matched against the distinguished name on a valid client certificate to filter requests. The regular expressions must use PCRE syntax. If this list is empty, no filtering is performed. If the list is nonempty, then at least one pattern must match a client certificate's distinguished name or else the ingress controller rejects the certificate and denies the connection.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "clientCA": { - "description": "clientCA specifies a configmap containing the PEM-encoded CA certificate bundle that should be used to verify a client's certificate. The administrator must create this configmap in the openshift-config namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "clientCertificatePolicy": { - "description": "clientCertificatePolicy specifies whether the ingress controller requires clients to provide certificates. This field accepts the values \"Required\" or \"Optional\".\n\nNote that the ingress controller only checks client certificates for edge-terminated and reencrypt TLS routes; it cannot check certificates for cleartext HTTP or passthrough TLS routes.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.CloudCredential": { - "description": "CloudCredential provides a means to configure an operator to manage CredentialsRequests.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.CloudCredentialSpec" - }, - "status": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.CloudCredentialStatus" - } - } - }, - "com.github.openshift.api.operator.v1.CloudCredentialList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.CloudCredential" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.CloudCredentialSpec": { - "description": "CloudCredentialSpec is the specification of the desired behavior of the cloud-credential-operator.", - "type": "object", - "required": [ - "managementState" - ], - "properties": { - "credentialsMode": { - "description": "credentialsMode allows informing CCO that it should not attempt to dynamically determine the root cloud credentials capabilities, and it should just run in the specified mode. It also allows putting the operator into \"manual\" mode if desired. Leaving the field in default mode runs CCO so that the cluster's cloud credentials will be dynamically probed for capabilities (on supported clouds/platforms). Supported modes:\n AWS/Azure/GCP: \"\" (Default), \"Mint\", \"Passthrough\", \"Manual\"\n Others: Do not set value as other platforms only support running in \"Passthrough\"", - "type": "string" - }, - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.operator.v1.CloudCredentialStatus": { - "description": "CloudCredentialStatus defines the observed status of the cloud-credential-operator.", - "type": "object", - "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.ClusterBootImageAutomatic": { - "description": "ClusterBootImageAutomatic is used to describe the cluster boot image in Automatic mode. It stores the RHCOS version of the boot image and the OCP release version which shipped with that RHCOS boot image. At least one of these values are required. If ocpVersion and rhcosVersion are defined, both values will be used for checking skew compliance. If only ocpVersion is defined, only that value will be used for checking skew compliance. If only rhcosVersion is defined, only that value will be used for checking skew compliance.", - "type": "object", - "properties": { - "ocpVersion": { - "description": "ocpVersion provides a string which represents the OCP version of the boot image. This field must match the OCP semver compatible format of x.y.z. This field must be between 5 and 10 characters long.", - "type": "string" - }, - "rhcosVersion": { - "description": "rhcosVersion provides a string which represents the RHCOS version of the boot image This field must match rhcosVersion formatting of [major].[minor].[datestamp(YYYYMMDD)]-[buildnumber] or the legacy format of [major].[minor].[timestamp(YYYYMMDDHHmm)]-[buildnumber]. This field must be between 14 and 21 characters long.", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.ClusterBootImageManual": { - "description": "ClusterBootImageManual is used to describe the cluster boot image in Manual mode.", - "type": "object", - "required": [ - "mode" - ], - "properties": { - "mode": { - "description": "mode is used to configure which boot image field is defined in Manual mode. Valid values are OCPVersion and RHCOSVersion. OCPVersion means that the cluster admin is expected to set the OCP version associated with the last boot image update in the OCPVersion field. RHCOSVersion means that the cluster admin is expected to set the RHCOS version associated with the last boot image update in the RHCOSVersion field. This field is required.", - "type": "string" - }, - "ocpVersion": { - "description": "ocpVersion provides a string which represents the OCP version of the boot image. This field must match the OCP semver compatible format of x.y.z. This field must be between 5 and 10 characters long. Required when mode is set to \"OCPVersion\" and forbidden otherwise.", - "type": "string" - }, - "rhcosVersion": { - "description": "rhcosVersion provides a string which represents the RHCOS version of the boot image This field must match rhcosVersion formatting of [major].[minor].[datestamp(YYYYMMDD)]-[buildnumber] or the legacy format of [major].[minor].[timestamp(YYYYMMDDHHmm)]-[buildnumber]. This field must be between 14 and 21 characters long. Required when mode is set to \"RHCOSVersion\" and forbidden otherwise.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "mode", - "fields-to-discriminateBy": { - "ocpVersion": "OCPVersion", - "rhcosVersion": "RHCOSVersion" - } - } - ] - }, - "com.github.openshift.api.operator.v1.ClusterCSIDriver": { - "description": "ClusterCSIDriver object allows management and configuration of a CSI driver operator installed by default in OpenShift. Name of the object must be name of the CSI driver it operates. See CSIDriverName type for list of allowed values.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ClusterCSIDriverSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ClusterCSIDriverStatus" - } - } - }, - "com.github.openshift.api.operator.v1.ClusterCSIDriverList": { - "description": "ClusterCSIDriverList contains a list of ClusterCSIDriver\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ClusterCSIDriver" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.ClusterCSIDriverSpec": { - "description": "ClusterCSIDriverSpec is the desired behavior of CSI driver operator", - "type": "object", - "required": [ - "managementState" - ], - "properties": { - "driverConfig": { - "description": "driverConfig can be used to specify platform specific driver configuration. When omitted, this means no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.CSIDriverConfigSpec" - }, - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "storageClassState": { - "description": "storageClassState determines if CSI operator should create and manage storage classes. If this field value is empty or Managed - CSI operator will continuously reconcile storage class and create if necessary. If this field value is Unmanaged - CSI operator will not reconcile any previously created storage class. If this field value is Removed - CSI operator will delete the storage class it created previously. When omitted, this means the user has no opinion and the platform chooses a reasonable default, which is subject to change over time. The current default behaviour is Managed.", - "type": "string" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.operator.v1.ClusterCSIDriverStatus": { - "description": "ClusterCSIDriverStatus is the observed status of CSI driver operator", - "type": "object", - "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.ClusterNetworkEntry": { - "description": "ClusterNetworkEntry is a subnet from which to allocate PodIPs. A network of size HostPrefix (in CIDR notation) will be allocated when nodes join the cluster. If the HostPrefix field is not used by the plugin, it can be left unset. Not all network providers support multiple ClusterNetworks", - "type": "object", - "required": [ - "cidr" - ], - "properties": { - "cidr": { - "type": "string", - "default": "" - }, - "hostPrefix": { - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.operator.v1.Config": { - "description": "Config specifies the behavior of the config operator which is responsible for creating the initial configuration of other components on the cluster. The operator also handles installation, migration or synchronization of cloud configurations for AWS and Azure cloud based clusters\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the specification of the desired behavior of the Config Operator.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ConfigSpec" - }, - "status": { - "description": "status defines the observed status of the Config Operator.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ConfigStatus" - } - } - }, - "com.github.openshift.api.operator.v1.ConfigList": { - "description": "ConfigList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items contains the items", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.Config" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.ConfigMapFileReference": { - "description": "ConfigMapFileReference references a specific file within a ConfigMap.", - "type": "object", - "required": [ - "name", - "key" - ], - "properties": { - "key": { - "description": "key is the logo key inside the referenced ConfigMap. Must consist only of alphanumeric characters, dashes (-), underscores (_), and periods (.). Must be at most 253 characters in length. Must end in a valid file extension. A valid file extension must consist of a period followed by 2 to 5 alpha characters.", - "type": "string", - "default": "" - }, - "name": { - "description": "name is the name of the ConfigMap. name is a required field. Must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character. Must be at most 253 characters in length.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.ConfigSpec": { - "type": "object", - "required": [ - "managementState" - ], - "properties": { - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.operator.v1.ConfigStatus": { - "type": "object", - "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.Console": { - "description": "Console provides a means to configure an operator to manage the console.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ConsoleSpec" - }, - "status": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ConsoleStatus" - } - } - }, - "com.github.openshift.api.operator.v1.ConsoleConfigRoute": { - "description": "ConsoleConfigRoute holds information on external route access to console. DEPRECATED", - "type": "object", - "required": [ - "hostname" - ], - "properties": { - "hostname": { - "description": "hostname is the desired custom domain under which console will be available.", - "type": "string", - "default": "" - }, - "secret": { - "description": "secret points to secret in the openshift-config namespace that contains custom certificate and key and needs to be created manually by the cluster admin. Referenced Secret is required to contain following key value pairs: - \"tls.crt\" - to specifies custom certificate - \"tls.key\" - to specifies private key of the custom certificate If the custom hostname uses the default routing suffix of the cluster, the Secret specification for a serving certificate will not be needed.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" - } - } - }, - "com.github.openshift.api.operator.v1.ConsoleCustomization": { - "description": "ConsoleCustomization defines a list of optional configuration for the console UI. Ensure that Logos and CustomLogoFile cannot be set at the same time.", - "type": "object", - "properties": { - "addPage": { - "description": "addPage allows customizing actions on the Add page in developer perspective.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.AddPage" - }, - "brand": { - "description": "brand is the default branding of the web console which can be overridden by providing the brand field. There is a limited set of specific brand options. This field controls elements of the console such as the logo. Invalid value will prevent a console rollout.", - "type": "string" - }, - "capabilities": { - "description": "capabilities defines an array of capabilities that can be interacted with in the console UI. Each capability defines a visual state that can be interacted with the console to render in the UI. Available capabilities are LightspeedButton, GettingStartedBanner, and GuidedTour. Each of the available capabilities may appear only once in the list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.Capability" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "customLogoFile": { - "description": "customLogoFile replaces the default OpenShift logo in the masthead and about dialog. It is a reference to a Only one of customLogoFile or logos can be set at a time. ConfigMap in the openshift-config namespace. This can be created with a command like 'oc create configmap custom-logo --from-file=/path/to/file -n openshift-config'. Image size must be less than 1 MB due to constraints on the ConfigMap size. The ConfigMap key should include a file extension so that the console serves the file with the correct MIME type. The recommended file format for the logo is SVG, but other file formats are allowed if supported by the browser. Deprecated: Use logos instead.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapFileReference" - }, - "customProductName": { - "description": "customProductName is the name that will be displayed in page titles, logo alt text, and the about dialog instead of the normal OpenShift product name.", - "type": "string" - }, - "developerCatalog": { - "description": "developerCatalog allows to configure the shown developer catalog categories (filters) and types (sub-catalogs).", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.DeveloperConsoleCatalogCustomization" - }, - "documentationBaseURL": { - "description": "documentationBaseURL links to external documentation are shown in various sections of the web console. Providing documentationBaseURL will override the default documentation URL. Invalid value will prevent a console rollout.", - "type": "string" - }, - "logos": { - "description": "logos is used to replace the OpenShift Masthead and Favicon logos in the console UI with custom logos. logos is an optional field that allows a list of logos. Only one of logos or customLogoFile can be set at a time. If logos is set, customLogoFile must be unset. When specified, there must be at least one entry and no more than 2 entries. Each type must appear only once in the list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.Logo" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "perspectives": { - "description": "perspectives allows enabling/disabling of perspective(s) that user can see in the Perspective switcher dropdown.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.Perspective" - }, - "x-kubernetes-list-map-keys": [ - "id" - ], - "x-kubernetes-list-type": "map" - }, - "projectAccess": { - "description": "projectAccess allows customizing the available list of ClusterRoles in the Developer perspective Project access page which can be used by a project admin to specify roles to other users and restrict access within the project. If set, the list will replace the default ClusterRole options.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ProjectAccess" - }, - "quickStarts": { - "description": "quickStarts allows customization of available ConsoleQuickStart resources in console.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.QuickStarts" - } - } - }, - "com.github.openshift.api.operator.v1.ConsoleList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.Console" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.ConsoleProviders": { - "description": "ConsoleProviders defines a list of optional additional providers of functionality to the console.", - "type": "object", - "properties": { - "statuspage": { - "description": "statuspage contains ID for statuspage.io page that provides status info about.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.StatuspageProvider" - } - } - }, - "com.github.openshift.api.operator.v1.ConsoleSpec": { - "description": "ConsoleSpec is the specification of the desired behavior of the Console.", - "type": "object", - "required": [ - "managementState", - "providers" - ], - "properties": { - "customization": { - "description": "customization is used to optionally provide a small set of customization options to the web console.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ConsoleCustomization" - }, - "ingress": { - "description": "ingress allows to configure the alternative ingress for the console. This field is intended for clusters without ingress capability, where access to routes is not possible.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.Ingress" - }, - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "plugins": { - "description": "plugins defines a list of enabled console plugin names.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "providers": { - "description": "providers contains configuration for using specific service providers.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ConsoleProviders" - }, - "route": { - "description": "route contains hostname and secret reference that contains the serving certificate. If a custom route is specified, a new route will be created with the provided hostname, under which console will be available. In case of custom hostname uses the default routing suffix of the cluster, the Secret specification for a serving certificate will not be needed. In case of custom hostname points to an arbitrary domain, manual DNS configurations steps are necessary. The default console route will be maintained to reserve the default hostname for console if the custom route is removed. If not specified, default route will be used. DEPRECATED", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ConsoleConfigRoute" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.operator.v1.ConsoleStatus": { - "description": "ConsoleStatus defines the observed status of the Console.", - "type": "object", - "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.ContainerLoggingDestinationParameters": { - "description": "ContainerLoggingDestinationParameters describes parameters for the Container logging destination type.", - "type": "object", - "properties": { - "maxLength": { - "description": "maxLength is the maximum length of the log message.\n\nValid values are integers in the range 480 to 8192, inclusive.\n\nWhen omitted, the default value is 1024.", - "type": "integer", - "format": "int32" - } - } - }, - "com.github.openshift.api.operator.v1.CustomSecretRotation": { - "description": "CustomSecretRotation holds configuration for custom secret rotation behavior.", - "type": "object", - "properties": { - "minimumRefreshAge": { - "description": "minimumRefreshAge is the minimum time in seconds between secret rotation attempts. Each time kubelet calls NodePublishVolume, the driver checks whether this interval has elapsed since the last successful provider call. If it has, the driver contacts the secret provider to fetch the latest secret values and updates the mounted volume. Setting this value below the kubelet syncFrequency (default: 1 minute) has no additional effect on the actual rotation cadence. Must be at least 1 second and no more than 31560000 seconds (~1 year). When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.", - "type": "integer", - "format": "int32" - } - } - }, - "com.github.openshift.api.operator.v1.DNS": { - "description": "DNS manages the CoreDNS component to provide a name resolution service for pods and services in the cluster.\n\nThis supports the DNS-based service discovery specification: https://github.com/kubernetes/dns/blob/master/docs/specification.md\n\nMore details: https://kubernetes.io/docs/tasks/administer-cluster/coredns\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the specification of the desired behavior of the DNS.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.DNSSpec" - }, - "status": { - "description": "status is the most recently observed status of the DNS.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.DNSStatus" - } - } - }, - "com.github.openshift.api.operator.v1.DNSCache": { - "description": "DNSCache defines the fields for configuring DNS caching.", - "type": "object", - "properties": { - "negativeTTL": { - "description": "negativeTTL is optional and specifies the amount of time that a negative response should be cached.\n\nIf configured, it must be a value of 1s (1 second) or greater up to a theoretical maximum of several years. This field expects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, e.g. \"100s\", \"1m30s\", \"12h30m10s\". Values that are fractions of a second are rounded down to the nearest second. If the configured value is less than 1s, the default value will be used. If not configured, the value will be 0s and OpenShift will use a default value of 30 seconds unless noted otherwise in the respective Corefile for your version of OpenShift. The default value of 30 seconds is subject to change.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "positiveTTL": { - "description": "positiveTTL is optional and specifies the amount of time that a positive response should be cached.\n\nIf configured, it must be a value of 1s (1 second) or greater up to a theoretical maximum of several years. This field expects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, e.g. \"100s\", \"1m30s\", \"12h30m10s\". Values that are fractions of a second are rounded down to the nearest second. If the configured value is less than 1s, the default value will be used. If not configured, the value will be 0s and OpenShift will use a default value of 900 seconds unless noted otherwise in the respective Corefile for your version of OpenShift. The default value of 900 seconds is subject to change.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - } - } - }, - "com.github.openshift.api.operator.v1.DNSList": { - "description": "DNSList contains a list of DNS\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.DNS" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.DNSNodePlacement": { - "description": "DNSNodePlacement describes the node scheduling configuration for DNS pods.", - "type": "object", - "properties": { - "nodeSelector": { - "description": "nodeSelector is the node selector applied to DNS pods.\n\nIf empty, the default is used, which is currently the following:\n\n kubernetes.io/os: linux\n\nThis default is subject to change.\n\nIf set, the specified selector is used and replaces the default.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "tolerations": { - "description": "tolerations is a list of tolerations applied to DNS pods.\n\nIf empty, the DNS operator sets a toleration for the \"node-role.kubernetes.io/master\" taint. This default is subject to change. Specifying tolerations without including a toleration for the \"node-role.kubernetes.io/master\" taint may be risky as it could lead to an outage if all worker nodes become unavailable.\n\nNote that the daemon controller adds some tolerations as well. See https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - } - } - } - }, - "com.github.openshift.api.operator.v1.DNSOverTLSConfig": { - "description": "DNSOverTLSConfig describes optional DNSTransportConfig fields that should be captured.", - "type": "object", - "required": [ - "serverName" - ], - "properties": { - "caBundle": { - "description": "caBundle references a ConfigMap that must contain either a single CA Certificate or a CA Bundle. This allows cluster administrators to provide their own CA or CA bundle for validating the certificate of upstream resolvers.\n\n1. The configmap must contain a `ca-bundle.crt` key. 2. The value must be a PEM encoded CA certificate or CA bundle. 3. The administrator must create this configmap in the openshift-config namespace. 4. The upstream server certificate must contain a Subject Alternative Name (SAN) that matches ServerName.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "serverName": { - "description": "serverName is the upstream server to connect to when forwarding DNS queries. This is required when Transport is set to \"TLS\". ServerName will be validated against the DNS naming conventions in RFC 1123 and should match the TLS certificate installed in the upstream resolver(s).", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.DNSSpec": { - "description": "DNSSpec is the specification of the desired behavior of the DNS.", - "type": "object", - "properties": { - "cache": { - "description": "cache describes the caching configuration that applies to all server blocks listed in the Corefile. This field allows a cluster admin to optionally configure: * positiveTTL which is a duration for which positive responses should be cached. * negativeTTL which is a duration for which negative responses should be cached. If this is not configured, OpenShift will configure positive and negative caching with a default value that is subject to change. At the time of writing, the default positiveTTL is 900 seconds and the default negativeTTL is 30 seconds or as noted in the respective Corefile for your version of OpenShift.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.DNSCache" - }, - "logLevel": { - "description": "logLevel describes the desired logging verbosity for CoreDNS. Any one of the following values may be specified: * Normal logs errors from upstream resolvers. * Debug logs errors, NXDOMAIN responses, and NODATA responses. * Trace logs errors and all responses.\n Setting logLevel: Trace will produce extremely verbose logs.\nValid values are: \"Normal\", \"Debug\", \"Trace\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether the DNS operator should manage cluster DNS", - "type": "string" - }, - "nodePlacement": { - "description": "nodePlacement provides explicit control over the scheduling of DNS pods.\n\nGenerally, it is useful to run a DNS pod on every node so that DNS queries are always handled by a local DNS pod instead of going over the network to a DNS pod on another node. However, security policies may require restricting the placement of DNS pods to specific nodes. For example, if a security policy prohibits pods on arbitrary nodes from communicating with the API, a node selector can be specified to restrict DNS pods to nodes that are permitted to communicate with the API. Conversely, if running DNS pods on nodes with a particular taint is desired, a toleration can be specified for that taint.\n\nIf unset, defaults are used. See nodePlacement for more details.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.DNSNodePlacement" - }, - "operatorLogLevel": { - "description": "operatorLogLevel controls the logging level of the DNS Operator. Valid values are: \"Normal\", \"Debug\", \"Trace\". Defaults to \"Normal\". setting operatorLogLevel: Trace will produce extremely verbose logs.", - "type": "string" - }, - "servers": { - "description": "servers is a list of DNS resolvers that provide name query delegation for one or more subdomains outside the scope of the cluster domain. If servers consists of more than one Server, longest suffix match will be used to determine the Server.\n\nFor example, if there are two Servers, one for \"foo.com\" and another for \"a.foo.com\", and the name query is for \"www.a.foo.com\", it will be routed to the Server with Zone \"a.foo.com\".\n\nIf this field is nil, no servers are created.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.Server" - } - }, - "upstreamResolvers": { - "description": "upstreamResolvers defines a schema for configuring CoreDNS to proxy DNS messages to upstream resolvers for the case of the default (\".\") server\n\nIf this field is not specified, the upstream used will default to /etc/resolv.conf, with policy \"sequential\"", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.UpstreamResolvers" - } - } - }, - "com.github.openshift.api.operator.v1.DNSStatus": { - "description": "DNSStatus defines the observed status of the DNS.", - "type": "object", - "required": [ - "clusterIP", - "clusterDomain" - ], - "properties": { - "clusterDomain": { - "description": "clusterDomain is the local cluster DNS domain suffix for DNS services. This will be a subdomain as defined in RFC 1034, section 3.5: https://tools.ietf.org/html/rfc1034#section-3.5 Example: \"cluster.local\"\n\nMore info: https://kubernetes.io/docs/concepts/services-networking/dns-pod-service", - "type": "string", - "default": "" - }, - "clusterIP": { - "description": "clusterIP is the service IP through which this DNS is made available.\n\nIn the case of the default DNS, this will be a well known IP that is used as the default nameserver for pods that are using the default ClusterFirst DNS policy.\n\nIn general, this IP can be specified in a pod's spec.dnsConfig.nameservers list or used explicitly when performing name resolution from within the cluster. Example: dig foo.com @\n\nMore info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies", - "type": "string", - "default": "" - }, - "conditions": { - "description": "conditions provide information about the state of the DNS on the cluster.\n\nThese are the supported DNS conditions:\n\n * Available\n - True if the following conditions are met:\n * DNS controller daemonset is available.\n - False if any of those conditions are unsatisfied.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - } - } - }, - "com.github.openshift.api.operator.v1.DNSTransportConfig": { - "description": "DNSTransportConfig groups related configuration parameters used for configuring forwarding to upstream resolvers that support DNS-over-TLS.", - "type": "object", - "properties": { - "tls": { - "description": "tls contains the additional configuration options to use when Transport is set to \"TLS\".", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.DNSOverTLSConfig" - }, - "transport": { - "description": "transport allows cluster administrators to opt-in to using a DNS-over-TLS connection between cluster DNS and an upstream resolver(s). Configuring TLS as the transport at this level without configuring a CABundle will result in the system certificates being used to verify the serving certificate of the upstream resolver(s).\n\nPossible values: \"\" (empty) - This means no explicit choice has been made and the platform chooses the default which is subject to change over time. The current default is \"Cleartext\". \"Cleartext\" - Cluster admin specified cleartext option. This results in the same functionality as an empty value but may be useful when a cluster admin wants to be more explicit about the transport, or wants to switch from \"TLS\" to \"Cleartext\" explicitly. \"TLS\" - This indicates that DNS queries should be sent over a TLS connection. If Transport is set to TLS, you MUST also set ServerName. If a port is not included with the upstream IP, port 853 will be tried by default per RFC 7858 section 3.1; https://datatracker.ietf.org/doc/html/rfc7858#section-3.1.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "transport", - "fields-to-discriminateBy": { - "tls": "TLS" - } - } - ] - }, - "com.github.openshift.api.operator.v1.DefaultNetworkDefinition": { - "description": "DefaultNetworkDefinition represents a single network plugin's configuration. type must be specified, along with exactly one \"Config\" that matches the type.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "openshiftSDNConfig": { - "description": "openshiftSDNConfig was previously used to configure the openshift-sdn plugin. DEPRECATED: OpenShift SDN is no longer supported.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OpenShiftSDNConfig" - }, - "ovnKubernetesConfig": { - "description": "ovnKubernetesConfig configures the ovn-kubernetes plugin.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OVNKubernetesConfig" - }, - "type": { - "description": "type is the type of network All NetworkTypes are supported except for NetworkTypeRaw", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.DeveloperConsoleCatalogCategory": { - "description": "DeveloperConsoleCatalogCategory for the developer console catalog.", - "type": "object", - "required": [ - "id", - "label" - ], - "properties": { - "id": { - "description": "id is an identifier used in the URL to enable deep linking in console. ID is required and must have 1-32 URL safe (A-Z, a-z, 0-9, - and _) characters.", - "type": "string", - "default": "" - }, - "label": { - "description": "label defines a category display label. It is required and must have 1-64 characters.", - "type": "string", - "default": "" - }, - "subcategories": { - "description": "subcategories defines a list of child categories.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.DeveloperConsoleCatalogCategoryMeta" - } - }, - "tags": { - "description": "tags is a list of strings that will match the category. A selected category show all items which has at least one overlapping tag between category and item.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.operator.v1.DeveloperConsoleCatalogCategoryMeta": { - "description": "DeveloperConsoleCatalogCategoryMeta are the key identifiers of a developer catalog category.", - "type": "object", - "required": [ - "id", - "label" - ], - "properties": { - "id": { - "description": "id is an identifier used in the URL to enable deep linking in console. ID is required and must have 1-32 URL safe (A-Z, a-z, 0-9, - and _) characters.", - "type": "string", - "default": "" - }, - "label": { - "description": "label defines a category display label. It is required and must have 1-64 characters.", - "type": "string", - "default": "" - }, - "tags": { - "description": "tags is a list of strings that will match the category. A selected category show all items which has at least one overlapping tag between category and item.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.operator.v1.DeveloperConsoleCatalogCustomization": { - "description": "DeveloperConsoleCatalogCustomization allow cluster admin to configure developer catalog.", - "type": "object", - "properties": { - "categories": { - "description": "categories which are shown in the developer catalog.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.DeveloperConsoleCatalogCategory" - } - }, - "types": { - "description": "types allows enabling or disabling of sub-catalog types that user can see in the Developer catalog. When omitted, all the sub-catalog types will be shown.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.DeveloperConsoleCatalogTypes" - } - } - }, - "com.github.openshift.api.operator.v1.DeveloperConsoleCatalogTypes": { - "description": "DeveloperConsoleCatalogTypes defines the state of the sub-catalog types.", - "type": "object", - "required": [ - "state" - ], - "properties": { - "disabled": { - "description": "disabled is a list of developer catalog types (sub-catalogs IDs) that are not shown to users. Types (sub-catalogs) are added via console plugins, the available types (sub-catalog IDs) are available in the console on the cluster configuration page, or when editing the YAML in the console. Example: \"Devfile\", \"HelmChart\", \"BuilderImage\" If the list is empty or all the available sub-catalog types are added, then the complete developer catalog should be hidden.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "enabled": { - "description": "enabled is a list of developer catalog types (sub-catalogs IDs) that will be shown to users. Types (sub-catalogs) are added via console plugins, the available types (sub-catalog IDs) are available in the console on the cluster configuration page, or when editing the YAML in the console. Example: \"Devfile\", \"HelmChart\", \"BuilderImage\" If the list is non-empty, a new type will not be shown to the user until it is added to list. If the list is empty the complete developer catalog will be shown.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "state": { - "description": "state defines if a list of catalog types should be enabled or disabled.", - "type": "string", - "default": "Enabled" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "state", - "fields-to-discriminateBy": { - "disabled": "Disabled", - "enabled": "Enabled" - } - } - ] - }, - "com.github.openshift.api.operator.v1.EgressIPConfig": { - "description": "EgressIPConfig defines the configuration knobs for egressip", - "type": "object", - "properties": { - "reachabilityTotalTimeoutSeconds": { - "description": "reachabilityTotalTimeout configures the EgressIP node reachability check total timeout in seconds. If the EgressIP node cannot be reached within this timeout, the node is declared down. Setting a large value may cause the EgressIP feature to react slowly to node changes. In particular, it may react slowly for EgressIP nodes that really have a genuine problem and are unreachable. When omitted, this means the user has no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 1 second. A value of 0 disables the EgressIP node's reachability check.", - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.operator.v1.EndpointPublishingStrategy": { - "description": "EndpointPublishingStrategy is a way to publish the endpoints of an IngressController, and represents the type and any additional configuration for a specific type.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "hostNetwork": { - "description": "hostNetwork holds parameters for the HostNetwork endpoint publishing strategy. Present only if type is HostNetwork.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.HostNetworkStrategy" - }, - "loadBalancer": { - "description": "loadBalancer holds parameters for the load balancer. Present only if type is LoadBalancerService.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.LoadBalancerStrategy" - }, - "nodePort": { - "description": "nodePort holds parameters for the NodePortService endpoint publishing strategy. Present only if type is NodePortService.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodePortStrategy" - }, - "private": { - "description": "private holds parameters for the Private endpoint publishing strategy. Present only if type is Private.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.PrivateStrategy" - }, - "type": { - "description": "type is the publishing strategy to use. Valid values are:\n\n* LoadBalancerService\n\nPublishes the ingress controller using a Kubernetes LoadBalancer Service.\n\nIn this configuration, the ingress controller deployment uses container networking. A LoadBalancer Service is created to publish the deployment.\n\nSee: https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer\n\nIf domain is set, a wildcard DNS record will be managed to point at the LoadBalancer Service's external name. DNS records are managed only in DNS zones defined by dns.config.openshift.io/cluster .spec.publicZone and .spec.privateZone.\n\nWildcard DNS management is currently supported only on the AWS, Azure, and GCP platforms.\n\n* HostNetwork\n\nPublishes the ingress controller on node ports where the ingress controller is deployed.\n\nIn this configuration, the ingress controller deployment uses host networking, bound to node ports 80 and 443. The user is responsible for configuring an external load balancer to publish the ingress controller via the node ports.\n\n* Private\n\nDoes not publish the ingress controller.\n\nIn this configuration, the ingress controller deployment uses container networking, and is not explicitly published. The user must manually publish the ingress controller.\n\n* NodePortService\n\nPublishes the ingress controller using a Kubernetes NodePort Service.\n\nIn this configuration, the ingress controller deployment uses container networking. A NodePort Service is created to publish the deployment. The specific node ports are dynamically allocated by OpenShift; however, to support static port allocations, user changes to the node port field of the managed NodePort Service will preserved.", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "hostNetwork": "HostNetwork", - "loadBalancer": "LoadBalancer", - "nodePort": "NodePort", - "private": "Private" - } - } - ] - }, - "com.github.openshift.api.operator.v1.Etcd": { - "description": "Etcd provides information to configure an operator to manage etcd.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.EtcdSpec" - }, - "status": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.EtcdStatus" - } - } - }, - "com.github.openshift.api.operator.v1.EtcdList": { - "description": "KubeAPISOperatorConfigList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items contains the items", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.Etcd" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.EtcdSpec": { - "type": "object", - "required": [ - "managementState", - "forceRedeploymentReason" - ], - "properties": { - "backendQuotaGiB": { - "description": "backendQuotaGiB sets the etcd backend storage size limit in gibibytes. The value should be an integer not less than 8 and not more than 16. When not specified, the default value is 8.", - "type": "integer", - "format": "int32", - "default": 8 - }, - "controlPlaneHardwareSpeed": { - "description": "HardwareSpeed allows user to change the etcd tuning profile which configures the latency parameters for heartbeat interval and leader election timeouts allowing the cluster to tolerate longer round-trip-times between etcd members. Valid values are \"\", \"Standard\" and \"Slower\".\n\t\"\" means no opinion and the platform is left to choose a reasonable default\n\twhich is subject to change without notice.\n\nPossible enum values:\n - `\"Slower\"` provides more tolerance for slower hardware and/or higher latency networks. Sets (values subject to change): ETCD_HEARTBEAT_INTERVAL: 5x Standard ETCD_LEADER_ELECTION_TIMEOUT: 2.5x Standard\n - `\"Standard\"` provides the normal tolerances for hardware speed and latency. Currently sets (values subject to change at any time): ETCD_HEARTBEAT_INTERVAL: 100ms ETCD_LEADER_ELECTION_TIMEOUT: 1000ms", - "type": "string", - "default": "", - "enum": [ - "Slower", - "Standard" - ] - }, - "failedRevisionLimit": { - "description": "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - "type": "integer", - "format": "int32" - }, - "forceRedeploymentReason": { - "description": "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.", - "type": "string", - "default": "" - }, - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "succeededRevisionLimit": { - "description": "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - "type": "integer", - "format": "int32" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.operator.v1.EtcdStatus": { - "type": "object", - "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "controlPlaneHardwareSpeed": { - "description": "Possible enum values:\n - `\"Slower\"` provides more tolerance for slower hardware and/or higher latency networks. Sets (values subject to change): ETCD_HEARTBEAT_INTERVAL: 5x Standard ETCD_LEADER_ELECTION_TIMEOUT: 2.5x Standard\n - `\"Standard\"` provides the normal tolerances for hardware speed and latency. Currently sets (values subject to change at any time): ETCD_HEARTBEAT_INTERVAL: 100ms ETCD_LEADER_ELECTION_TIMEOUT: 1000ms", - "type": "string", - "default": "", - "enum": [ - "Slower", - "Standard" - ] - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "latestAvailableRevisionReason": { - "description": "latestAvailableRevisionReason describe the detailed reason for the most recent deployment", - "type": "string" - }, - "nodeStatuses": { - "description": "nodeStatuses track the deployment values and errors across individual nodes", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeStatus" - }, - "x-kubernetes-list-map-keys": [ - "nodeName" - ], - "x-kubernetes-list-type": "map" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.ExportNetworkFlows": { - "type": "object", - "properties": { - "ipfix": { - "description": "ipfix defines IPFIX configuration.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IPFIXConfig" - }, - "netFlow": { - "description": "netFlow defines the NetFlow configuration.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NetFlowConfig" - }, - "sFlow": { - "description": "sFlow defines the SFlow configuration.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.SFlowConfig" - } - } - }, - "com.github.openshift.api.operator.v1.FeaturesMigration": { - "type": "object", - "properties": { - "egressFirewall": { - "description": "egressFirewall specified whether or not the Egress Firewall configuration was migrated. DEPRECATED: network type migration is no longer supported.", - "type": "boolean" - }, - "egressIP": { - "description": "egressIP specified whether or not the Egress IP configuration was migrated. DEPRECATED: network type migration is no longer supported.", - "type": "boolean" - }, - "multicast": { - "description": "multicast specified whether or not the multicast configuration was migrated. DEPRECATED: network type migration is no longer supported.", - "type": "boolean" - } - } - }, - "com.github.openshift.api.operator.v1.FileReferenceSource": { - "description": "FileReferenceSource is used by the console to locate the specified file containing a custom logo.", - "type": "object", - "required": [ - "from" - ], - "properties": { - "configMap": { - "description": "configMap specifies the ConfigMap sourcing details such as the name of the ConfigMap and the key for the file. The ConfigMap must exist in the openshift-config namespace. Required when from is \"ConfigMap\", and forbidden otherwise.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ConfigMapFileReference" - }, - "from": { - "description": "from is a required field to specify the source type of the file reference. Allowed values are ConfigMap. When set to ConfigMap, the file will be sourced from a ConfigMap in the openshift-config namespace. The configMap field must be set when from is set to ConfigMap.\n\nPossible enum values:\n - `\"ConfigMap\"` represents a ConfigMap source.", - "type": "string", - "default": "", - "enum": [ - "ConfigMap" - ] - } - } - }, - "com.github.openshift.api.operator.v1.ForwardPlugin": { - "description": "ForwardPlugin defines a schema for configuring the CoreDNS forward plugin.", - "type": "object", - "required": [ - "upstreams" - ], - "properties": { - "policy": { - "description": "policy is used to determine the order in which upstream servers are selected for querying. Any one of the following values may be specified:\n\n* \"Random\" picks a random upstream server for each query. * \"RoundRobin\" picks upstream servers in a round-robin order, moving to the next server for each new query. * \"Sequential\" tries querying upstream servers in a sequential order until one responds, starting with the first server for each new query.\n\nThe default value is \"Random\"", - "type": "string" - }, - "protocolStrategy": { - "description": "protocolStrategy specifies the protocol to use for upstream DNS requests. Valid values for protocolStrategy are \"TCP\" and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is to use the protocol of the original client request. \"TCP\" specifies that the platform should use TCP for all upstream DNS requests, even if the client request uses UDP. \"TCP\" is useful for UDP-specific issues such as those created by non-compliant upstream resolvers, but may consume more bandwidth or increase DNS response time. Note that protocolStrategy only affects the protocol of DNS requests that CoreDNS makes to upstream resolvers. It does not affect the protocol of DNS requests between clients and CoreDNS.", - "type": "string", - "default": "" - }, - "transportConfig": { - "description": "transportConfig is used to configure the transport type, server name, and optional custom CA or CA bundle to use when forwarding DNS requests to an upstream resolver.\n\nThe default value is \"\" (empty) which results in a standard cleartext connection being used when forwarding DNS requests to an upstream resolver.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.DNSTransportConfig" - }, - "upstreams": { - "description": "upstreams is a list of resolvers to forward name queries for subdomains of Zones. Each instance of CoreDNS performs health checking of Upstreams. When a healthy upstream returns an error during the exchange, another resolver is tried from Upstreams. The Upstreams are selected in the order specified in Policy. Each upstream is represented by an IP address or IP:port if the upstream listens on a port other than 53.\n\nA maximum of 15 upstreams is allowed per ForwardPlugin.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - }, - "com.github.openshift.api.operator.v1.GCPCSIDriverConfigSpec": { - "description": "GCPCSIDriverConfigSpec defines properties that can be configured for the GCP CSI driver.", - "type": "object", - "properties": { - "kmsKey": { - "description": "kmsKey sets the cluster default storage class to encrypt volumes with customer-supplied encryption keys, rather than the default keys managed by GCP.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GCPKMSKeyReference" - } - } - }, - "com.github.openshift.api.operator.v1.GCPKMSKeyReference": { - "description": "GCPKMSKeyReference gathers required fields for looking up a GCP KMS Key", - "type": "object", - "required": [ - "name", - "keyRing", - "projectID" - ], - "properties": { - "keyRing": { - "description": "keyRing is the name of the KMS Key Ring which the KMS Key belongs to. The value should correspond to an existing KMS key ring and should consist of only alphanumeric characters, hyphens (-) and underscores (_), and be at most 63 characters in length.", - "type": "string", - "default": "" - }, - "location": { - "description": "location is the GCP location in which the Key Ring exists. The value must match an existing GCP location, or \"global\". Defaults to global, if not set.", - "type": "string" - }, - "name": { - "description": "name is the name of the customer-managed encryption key to be used for disk encryption. The value should correspond to an existing KMS key and should consist of only alphanumeric characters, hyphens (-) and underscores (_), and be at most 63 characters in length.", - "type": "string", - "default": "" - }, - "projectID": { - "description": "projectID is the ID of the Project in which the KMS Key Ring exists. It must be 6 to 30 lowercase letters, digits, or hyphens. It must start with a letter. Trailing hyphens are prohibited.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.GCPLoadBalancerParameters": { - "description": "GCPLoadBalancerParameters provides configuration settings that are specific to GCP load balancers.", - "type": "object", - "properties": { - "clientAccess": { - "description": "clientAccess describes how client access is restricted for internal load balancers.\n\nValid values are: * \"Global\": Specifying an internal load balancer with Global client access\n allows clients from any region within the VPC to communicate with the load\n balancer.\n\n https://cloud.google.com/kubernetes-engine/docs/how-to/internal-load-balancing#global_access\n\n* \"Local\": Specifying an internal load balancer with Local client access\n means only clients within the same region (and VPC) as the GCP load balancer\n can communicate with the load balancer. Note that this is the default behavior.\n\n https://cloud.google.com/load-balancing/docs/internal#client_access", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.GatewayConfig": { - "description": "GatewayConfig holds node gateway-related parsed config file parameters and command-line overrides", - "type": "object", - "properties": { - "ipForwarding": { - "description": "ipForwarding controls IP forwarding for all traffic on OVN-Kubernetes managed interfaces (such as br-ex). By default this is set to Restricted, and Kubernetes related traffic is still forwarded appropriately, but other IP traffic will not be routed by the OCP node. If there is a desire to allow the host to forward traffic across OVN-Kubernetes managed interfaces, then set this field to \"Global\". The supported values are \"Restricted\" and \"Global\".", - "type": "string" - }, - "ipv4": { - "description": "ipv4 allows users to configure IP settings for IPv4 connections. When omitted, this means no opinion and the default configuration is used. Check individual members fields within ipv4 for details of default values.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IPv4GatewayConfig" - }, - "ipv6": { - "description": "ipv6 allows users to configure IP settings for IPv6 connections. When omitted, this means no opinion and the default configuration is used. Check individual members fields within ipv6 for details of default values.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IPv6GatewayConfig" - }, - "routingViaHost": { - "description": "routingViaHost allows pod egress traffic to exit via the ovn-k8s-mp0 management port into the host before sending it out. If this is not set, traffic will always egress directly from OVN to outside without touching the host stack. Setting this to true means hardware offload will not be supported. Default is false if GatewayConfig is specified.", - "type": "boolean" - } - } - }, - "com.github.openshift.api.operator.v1.GatherStatus": { - "description": "gatherStatus provides information about the last known gather event.", - "type": "object", - "properties": { - "gatherers": { - "description": "gatherers is a list of active gatherers (and their statuses) in the last gathering.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GathererStatus" - }, - "x-kubernetes-list-type": "atomic" - }, - "lastGatherDuration": { - "description": "lastGatherDuration is the total time taken to process all gatherers during the last gather event.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "lastGatherTime": { - "description": "lastGatherTime is the last time when Insights data gathering finished. An empty value means that no data has been gathered yet.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - } - } - }, - "com.github.openshift.api.operator.v1.GathererStatus": { - "description": "gathererStatus represents information about a particular data gatherer.", - "type": "object", - "required": [ - "conditions", - "name", - "lastGatherDuration" - ], - "properties": { - "conditions": { - "description": "conditions provide details on the status of each gatherer.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-type": "atomic" - }, - "lastGatherDuration": { - "description": "lastGatherDuration represents the time spent gathering.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "name": { - "description": "name is the name of the gatherer.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.GenerationStatus": { - "description": "GenerationStatus keeps track of the generation for a given resource so that decisions about forced updates can be made.", - "type": "object", - "required": [ - "group", - "resource", - "namespace", - "name", - "lastGeneration", - "hash" - ], - "properties": { - "group": { - "description": "group is the group of the thing you're tracking", - "type": "string", - "default": "" - }, - "hash": { - "description": "hash is an optional field set for resources without generation that are content sensitive like secrets and configmaps", - "type": "string", - "default": "" - }, - "lastGeneration": { - "description": "lastGeneration is the last generation of the workload controller involved", - "type": "integer", - "format": "int64", - "default": 0 - }, - "name": { - "description": "name is the name of the thing you're tracking", - "type": "string", - "default": "" - }, - "namespace": { - "description": "namespace is where the thing you're tracking is", - "type": "string", - "default": "" - }, - "resource": { - "description": "resource is the resource type of the thing you're tracking", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.HTTPCompressionPolicy": { - "description": "httpCompressionPolicy turns on compression for the specified MIME types.\n\nThis field is optional, and its absence implies that compression should not be enabled globally in HAProxy.\n\nIf httpCompressionPolicy exists, compression should be enabled only for the specified MIME types.", - "type": "object", - "properties": { - "mimeTypes": { - "description": "mimeTypes is a list of MIME types that should have compression applied. This list can be empty, in which case the ingress controller does not apply compression.\n\nNote: Not all MIME types benefit from compression, but HAProxy will still use resources to try to compress if instructed to. Generally speaking, text (html, css, js, etc.) formats benefit from compression, but formats that are already compressed (image, audio, video, etc.) benefit little in exchange for the time and cpu spent on compressing again. See https://joehonton.medium.com/the-gzip-penalty-d31bd697f1a2", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - } - } - }, - "com.github.openshift.api.operator.v1.HealthCheck": { - "description": "healthCheck represents an Insights health check attributes.", - "type": "object", - "required": [ - "description", - "totalRisk", - "advisorURI", - "state" - ], - "properties": { - "advisorURI": { - "description": "advisorURI provides the URL link to the Insights Advisor.", - "type": "string", - "default": "" - }, - "description": { - "description": "description provides basic description of the healtcheck.", - "type": "string", - "default": "" - }, - "state": { - "description": "state determines what the current state of the health check is. Health check is enabled by default and can be disabled by the user in the Insights advisor user interface.", - "type": "string", - "default": "" - }, - "totalRisk": { - "description": "totalRisk of the healthcheck. Indicator of the total risk posed by the detected issue; combination of impact and likelihood. The values can be from 1 to 4, and the higher the number, the more important the issue.", - "type": "integer", - "format": "int32", - "default": 0 - } - } - }, - "com.github.openshift.api.operator.v1.HostNetworkStrategy": { - "description": "HostNetworkStrategy holds parameters for the HostNetwork endpoint publishing strategy.", - "type": "object", - "properties": { - "httpPort": { - "description": "httpPort is the port on the host which should be used to listen for HTTP requests. This field should be set when port 80 is already in use. The value should not coincide with the NodePort range of the cluster. When the value is 0 or is not specified it defaults to 80.", - "type": "integer", - "format": "int32" - }, - "httpsPort": { - "description": "httpsPort is the port on the host which should be used to listen for HTTPS requests. This field should be set when port 443 is already in use. The value should not coincide with the NodePort range of the cluster. When the value is 0 or is not specified it defaults to 443.", - "type": "integer", - "format": "int32" - }, - "protocol": { - "description": "protocol specifies whether the IngressController expects incoming connections to use plain TCP or whether the IngressController expects PROXY protocol.\n\nPROXY protocol can be used with load balancers that support it to communicate the source addresses of client connections when forwarding those connections to the IngressController. Using PROXY protocol enables the IngressController to report those source addresses instead of reporting the load balancer's address in HTTP headers and logs. Note that enabling PROXY protocol on the IngressController will cause connections to fail if you are not using a load balancer that uses PROXY protocol to forward connections to the IngressController. See http://www.haproxy.org/download/2.2/doc/proxy-protocol.txt for information about PROXY protocol.\n\nThe following values are valid for this field:\n\n* The empty string. * \"TCP\". * \"PROXY\".\n\nThe empty string specifies the default, which is TCP without PROXY protocol. Note that the default is subject to change.", - "type": "string" - }, - "statsPort": { - "description": "statsPort is the port on the host where the stats from the router are published. The value should not coincide with the NodePort range of the cluster. If an external load balancer is configured to forward connections to this IngressController, the load balancer should use this port for health checks. The load balancer can send HTTP probes on this port on a given node, with the path /healthz/ready to determine if the ingress controller is ready to receive traffic on the node. For proper operation the load balancer must not forward traffic to a node until the health check reports ready. The load balancer should also stop forwarding requests within a maximum of 45 seconds after /healthz/ready starts reporting not-ready. Probing every 5 to 10 seconds, with a 5-second timeout and with a threshold of two successful or failed requests to become healthy or unhealthy respectively, are well-tested values. When the value is 0 or is not specified it defaults to 1936.", - "type": "integer", - "format": "int32" - } - } - }, - "com.github.openshift.api.operator.v1.HybridOverlayConfig": { - "type": "object", - "required": [ - "hybridClusterNetwork" - ], - "properties": { - "hybridClusterNetwork": { - "description": "hybridClusterNetwork defines a network space given to nodes on an additional overlay network.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ClusterNetworkEntry" - }, - "x-kubernetes-list-type": "atomic" - }, - "hybridOverlayVXLANPort": { - "description": "hybridOverlayVXLANPort defines the VXLAN port number to be used by the additional overlay network. Default is 4789", - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.operator.v1.IBMCloudCSIDriverConfigSpec": { - "description": "IBMCloudCSIDriverConfigSpec defines the properties that can be configured for the IBM Cloud CSI driver.", - "type": "object", - "required": [ - "encryptionKeyCRN" - ], - "properties": { - "encryptionKeyCRN": { - "description": "encryptionKeyCRN is the IBM Cloud CRN of the customer-managed root key to use for disk encryption of volumes for the default storage classes.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.IBMLoadBalancerParameters": { - "description": "IBMLoadBalancerParameters provides configuration settings that are specific to IBM Cloud load balancers.", - "type": "object", - "properties": { - "protocol": { - "description": "protocol specifies whether the load balancer uses PROXY protocol to forward connections to the IngressController. See \"service.kubernetes.io/ibm-load-balancer-cloud-provider-enable-features: \"proxy-protocol\"\" at https://cloud.ibm.com/docs/containers?topic=containers-vpc-lbaas\"\n\nPROXY protocol can be used with load balancers that support it to communicate the source addresses of client connections when forwarding those connections to the IngressController. Using PROXY protocol enables the IngressController to report those source addresses instead of reporting the load balancer's address in HTTP headers and logs. Note that enabling PROXY protocol on the IngressController will cause connections to fail if you are not using a load balancer that uses PROXY protocol to forward connections to the IngressController. See http://www.haproxy.org/download/2.2/doc/proxy-protocol.txt for information about PROXY protocol.\n\nValid values for protocol are TCP, PROXY and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is TCP, without the proxy protocol enabled.", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.IPAMConfig": { - "description": "IPAMConfig contains configurations for IPAM (IP Address Management)", - "type": "object", - "required": [ - "type" - ], - "properties": { - "staticIPAMConfig": { - "description": "staticIPAMConfig configures the static IP address in case of type:IPAMTypeStatic", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.StaticIPAMConfig" - }, - "type": { - "description": "type is the type of IPAM module will be used for IP Address Management(IPAM). The supported values are IPAMTypeDHCP, IPAMTypeStatic", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.IPFIXConfig": { - "type": "object", - "properties": { - "collectors": { - "description": "ipfixCollectors is list of strings formatted as ip:port with a maximum of ten items", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.operator.v1.IPsecConfig": { - "type": "object", - "properties": { - "full": { - "description": "full defines configuration parameters for the IPsec `Full` mode. This is permitted only when mode is configured with `Full`, and forbidden otherwise.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IPsecFullModeConfig" - }, - "mode": { - "description": "mode defines the behaviour of the ipsec configuration within the platform. Valid values are `Disabled`, `External` and `Full`. When 'Disabled', ipsec will not be enabled at the node level. When 'External', ipsec is enabled on the node level but requires the user to configure the secure communication parameters. This mode is for external secure communications and the configuration can be done using the k8s-nmstate operator. When 'Full', ipsec is configured on the node level and inter-pod secure communication within the cluster is configured. Note with `Full`, if ipsec is desired for communication with external (to the cluster) entities (such as storage arrays), this is left to the user to configure.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "mode", - "fields-to-discriminateBy": { - "full": "Full" - } - } - ] - }, - "com.github.openshift.api.operator.v1.IPsecFullModeConfig": { - "description": "IPsecFullModeConfig defines configuration parameters for the IPsec `Full` mode.", - "type": "object", - "properties": { - "encapsulation": { - "description": "encapsulation option to configure libreswan on how inter-pod traffic across nodes are encapsulated to handle NAT traversal. When configured it uses UDP port 4500 for the encapsulation. Valid values are Always, Auto and omitted. Always means enable UDP encapsulation regardless of whether NAT is detected. Auto means enable UDP encapsulation based on the detection of NAT. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is Auto.", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.IPv4GatewayConfig": { - "description": "IPV4GatewayConfig holds the configuration paramaters for IPV4 connections in the GatewayConfig for OVN-Kubernetes", - "type": "object", - "properties": { - "internalMasqueradeSubnet": { - "description": "internalMasqueradeSubnet contains the masquerade addresses in IPV4 CIDR format used internally by ovn-kubernetes to enable host to service traffic. Each host in the cluster is configured with these addresses, as well as the shared gateway bridge interface. The values can be changed after installation. The subnet chosen should not overlap with other networks specified for OVN-Kubernetes as well as other networks used on the host. Additionally the subnet must be large enough to accommodate 6 IPs (maximum prefix length /29). When omitted, this means no opinion and the platform is left to choose a reasonable default which is subject to change over time. The current default subnet is 169.254.0.0/17 The value must be in proper IPV4 CIDR format", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.IPv4OVNKubernetesConfig": { - "type": "object", - "properties": { - "internalJoinSubnet": { - "description": "internalJoinSubnet is a v4 subnet used internally by ovn-kubernetes in case the default one is being already used by something else. It must not overlap with any other subnet being used by OpenShift or by the node network. The size of the subnet must be larger than the number of nodes. The current default value is 100.64.0.0/16 The subnet must be large enough to accommodate one IP per node in your cluster The value must be in proper IPV4 CIDR format", - "type": "string" - }, - "internalTransitSwitchSubnet": { - "description": "internalTransitSwitchSubnet is a v4 subnet in IPV4 CIDR format used internally by OVN-Kubernetes for the distributed transit switch in the OVN Interconnect architecture that connects the cluster routers on each node together to enable east west traffic. The subnet chosen should not overlap with other networks specified for OVN-Kubernetes as well as other networks used on the host. When ommitted, this means no opinion and the platform is left to choose a reasonable default which is subject to change over time. The current default subnet is 100.88.0.0/16 The subnet must be large enough to accommodate one IP per node in your cluster The value must be in proper IPV4 CIDR format", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.IPv6GatewayConfig": { - "description": "IPV6GatewayConfig holds the configuration paramaters for IPV6 connections in the GatewayConfig for OVN-Kubernetes", - "type": "object", - "properties": { - "internalMasqueradeSubnet": { - "description": "internalMasqueradeSubnet contains the masquerade addresses in IPV6 CIDR format used internally by ovn-kubernetes to enable host to service traffic. Each host in the cluster is configured with these addresses, as well as the shared gateway bridge interface. The values can be changed after installation. The subnet chosen should not overlap with other networks specified for OVN-Kubernetes as well as other networks used on the host. Additionally the subnet must be large enough to accommodate 6 IPs (maximum prefix length /125). When omitted, this means no opinion and the platform is left to choose a reasonable default which is subject to change over time. The current default subnet is fd69::/112 Note that IPV6 dual addresses are not permitted", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.IPv6OVNKubernetesConfig": { - "type": "object", - "properties": { - "internalJoinSubnet": { - "description": "internalJoinSubnet is a v6 subnet used internally by ovn-kubernetes in case the default one is being already used by something else. It must not overlap with any other subnet being used by OpenShift or by the node network. The size of the subnet must be larger than the number of nodes. The subnet must be large enough to accommodate one IP per node in your cluster The current default value is fd98::/64 The value must be in proper IPV6 CIDR format Note that IPV6 dual addresses are not permitted", - "type": "string" - }, - "internalTransitSwitchSubnet": { - "description": "internalTransitSwitchSubnet is a v4 subnet in IPV4 CIDR format used internally by OVN-Kubernetes for the distributed transit switch in the OVN Interconnect architecture that connects the cluster routers on each node together to enable east west traffic. The subnet chosen should not overlap with other networks specified for OVN-Kubernetes as well as other networks used on the host. When ommitted, this means no opinion and the platform is left to choose a reasonable default which is subject to change over time. The subnet must be large enough to accommodate one IP per node in your cluster The current default subnet is fd97::/64 The value must be in proper IPV6 CIDR format Note that IPV6 dual addresses are not permitted", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.Ingress": { - "description": "Ingress allows cluster admin to configure alternative ingress for the console.", - "type": "object", - "properties": { - "clientDownloadsURL": { - "description": "clientDownloadsURL is a URL to be used as the address to download client binaries. If not specified, the downloads route hostname will be used. This field is required for clusters without ingress capability, where access to routes is not possible. The console operator will monitor the URL and may go degraded if it's unreachable for an extended period. Must use the HTTPS scheme.", - "type": "string", - "default": "" - }, - "consoleURL": { - "description": "consoleURL is a URL to be used as the base console address. If not specified, the console route hostname will be used. This field is required for clusters without ingress capability, where access to routes is not possible. Make sure that appropriate ingress is set up at this URL. The console operator will monitor the URL and may go degraded if it's unreachable for an extended period. Must use the HTTPS scheme.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.IngressController": { - "description": "IngressController describes a managed ingress controller for the cluster. The controller can service OpenShift Route and Kubernetes Ingress resources.\n\nWhen an IngressController is created, a new ingress controller deployment is created to allow external traffic to reach the services that expose Ingress or Route resources. Updating this resource may lead to disruption for public facing network connections as a new ingress controller revision may be rolled out.\n\nhttps://kubernetes.io/docs/concepts/services-networking/ingress-controllers\n\nWhenever possible, sensible defaults for the platform are used. See each field for more details.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the specification of the desired behavior of the IngressController.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IngressControllerSpec" - }, - "status": { - "description": "status is the most recently observed status of the IngressController.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IngressControllerStatus" - } - } - }, - "com.github.openshift.api.operator.v1.IngressControllerCaptureHTTPCookie": { - "description": "IngressControllerCaptureHTTPCookie describes an HTTP cookie that should be captured.", - "type": "object", - "required": [ - "matchType", - "maxLength" - ], - "properties": { - "matchType": { - "description": "matchType specifies the type of match to be performed on the cookie name. Allowed values are \"Exact\" for an exact string match and \"Prefix\" for a string prefix match. If \"Exact\" is specified, a name must be specified in the name field. If \"Prefix\" is provided, a prefix must be specified in the namePrefix field. For example, specifying matchType \"Prefix\" and namePrefix \"foo\" will capture a cookie named \"foo\" or \"foobar\" but not one named \"bar\". The first matching cookie is captured.", - "type": "string", - "default": "" - }, - "maxLength": { - "description": "maxLength specifies a maximum length of the string that will be logged, which includes the cookie name, cookie value, and one-character delimiter. If the log entry exceeds this length, the value will be truncated in the log message. Note that the ingress controller may impose a separate bound on the total length of HTTP headers in a request.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "name": { - "description": "name specifies a cookie name. Its value must be a valid HTTP cookie name as defined in RFC 6265 section 4.1.", - "type": "string", - "default": "" - }, - "namePrefix": { - "description": "namePrefix specifies a cookie name prefix. Its value must be a valid HTTP cookie name as defined in RFC 6265 section 4.1.", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "matchType", - "fields-to-discriminateBy": { - "name": "Name", - "namePrefix": "NamePrefix" - } - } - ] - }, - "com.github.openshift.api.operator.v1.IngressControllerCaptureHTTPCookieUnion": { - "description": "IngressControllerCaptureHTTPCookieUnion describes optional fields of an HTTP cookie that should be captured.", - "type": "object", - "required": [ - "matchType" - ], - "properties": { - "matchType": { - "description": "matchType specifies the type of match to be performed on the cookie name. Allowed values are \"Exact\" for an exact string match and \"Prefix\" for a string prefix match. If \"Exact\" is specified, a name must be specified in the name field. If \"Prefix\" is provided, a prefix must be specified in the namePrefix field. For example, specifying matchType \"Prefix\" and namePrefix \"foo\" will capture a cookie named \"foo\" or \"foobar\" but not one named \"bar\". The first matching cookie is captured.", - "type": "string", - "default": "" - }, - "name": { - "description": "name specifies a cookie name. Its value must be a valid HTTP cookie name as defined in RFC 6265 section 4.1.", - "type": "string", - "default": "" - }, - "namePrefix": { - "description": "namePrefix specifies a cookie name prefix. Its value must be a valid HTTP cookie name as defined in RFC 6265 section 4.1.", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "matchType", - "fields-to-discriminateBy": { - "name": "Name", - "namePrefix": "NamePrefix" - } - } - ] - }, - "com.github.openshift.api.operator.v1.IngressControllerCaptureHTTPHeader": { - "description": "IngressControllerCaptureHTTPHeader describes an HTTP header that should be captured.", - "type": "object", - "required": [ - "name", - "maxLength" - ], - "properties": { - "maxLength": { - "description": "maxLength specifies a maximum length for the header value. If a header value exceeds this length, the value will be truncated in the log message. Note that the ingress controller may impose a separate bound on the total length of HTTP headers in a request.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "name": { - "description": "name specifies a header name. Its value must be a valid HTTP header name as defined in RFC 2616 section 4.2.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.IngressControllerCaptureHTTPHeaders": { - "description": "IngressControllerCaptureHTTPHeaders specifies which HTTP headers the IngressController captures.", - "type": "object", - "properties": { - "request": { - "description": "request specifies which HTTP request headers to capture.\n\nIf this field is empty, no request headers are captured.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IngressControllerCaptureHTTPHeader" - }, - "x-kubernetes-list-type": "atomic" - }, - "response": { - "description": "response specifies which HTTP response headers to capture.\n\nIf this field is empty, no response headers are captured.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IngressControllerCaptureHTTPHeader" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.operator.v1.IngressControllerHTTPHeader": { - "description": "IngressControllerHTTPHeader specifies configuration for setting or deleting an HTTP header.", - "type": "object", - "required": [ - "name", - "action" - ], - "properties": { - "action": { - "description": "action specifies actions to perform on headers, such as setting or deleting headers.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IngressControllerHTTPHeaderActionUnion" - }, - "name": { - "description": "name specifies the name of a header on which to perform an action. Its value must be a valid HTTP header name as defined in RFC 2616 section 4.2. The name must consist only of alphanumeric and the following special characters, \"-!#$%&'*+.^_`\". The following header names are reserved and may not be modified via this API: Strict-Transport-Security, Proxy, Host, Cookie, Set-Cookie. It must be no more than 255 characters in length. Header name must be unique.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.IngressControllerHTTPHeaderActionUnion": { - "description": "IngressControllerHTTPHeaderActionUnion specifies an action to take on an HTTP header.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "set": { - "description": "set specifies how the HTTP header should be set. This field is required when type is Set and forbidden otherwise.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IngressControllerSetHTTPHeader" - }, - "type": { - "description": "type defines the type of the action to be applied on the header. Possible values are Set or Delete. Set allows you to set HTTP request and response headers. Delete allows you to delete HTTP request and response headers.", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "set": "Set" - } - } - ] - }, - "com.github.openshift.api.operator.v1.IngressControllerHTTPHeaderActions": { - "description": "IngressControllerHTTPHeaderActions defines configuration for actions on HTTP request and response headers.", - "type": "object", - "properties": { - "request": { - "description": "request is a list of HTTP request headers to modify. Actions defined here will modify the request headers of all requests passing through an ingress controller. These actions are applied to all Routes i.e. for all connections handled by the ingress controller defined within a cluster. IngressController actions for request headers will be executed before Route actions. Currently, actions may define to either `Set` or `Delete` headers values. Actions are applied in sequence as defined in this list. A maximum of 20 request header actions may be configured. Sample fetchers allowed are \"req.hdr\" and \"ssl_c_der\". Converters allowed are \"lower\" and \"base64\". Example header values: \"%[req.hdr(X-target),lower]\", \"%{+Q}[ssl_c_der,base64]\".", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IngressControllerHTTPHeader" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "response": { - "description": "response is a list of HTTP response headers to modify. Actions defined here will modify the response headers of all requests passing through an ingress controller. These actions are applied to all Routes i.e. for all connections handled by the ingress controller defined within a cluster. IngressController actions for response headers will be executed after Route actions. Currently, actions may define to either `Set` or `Delete` headers values. Actions are applied in sequence as defined in this list. A maximum of 20 response header actions may be configured. Sample fetchers allowed are \"res.hdr\" and \"ssl_c_der\". Converters allowed are \"lower\" and \"base64\". Example header values: \"%[res.hdr(X-target),lower]\", \"%{+Q}[ssl_c_der,base64]\".", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IngressControllerHTTPHeader" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.operator.v1.IngressControllerHTTPHeaders": { - "description": "IngressControllerHTTPHeaders specifies how the IngressController handles certain HTTP headers.", - "type": "object", - "properties": { - "actions": { - "description": "actions specifies options for modifying headers and their values. Note that this option only applies to cleartext HTTP connections and to secure HTTP connections for which the ingress controller terminates encryption (that is, edge-terminated or reencrypt connections). Headers cannot be modified for TLS passthrough connections. Setting the HSTS (`Strict-Transport-Security`) header is not supported via actions. `Strict-Transport-Security` may only be configured using the \"haproxy.router.openshift.io/hsts_header\" route annotation, and only in accordance with the policy specified in Ingress.Spec.RequiredHSTSPolicies. Any actions defined here are applied after any actions related to the following other fields: cache-control, spec.clientTLS, spec.httpHeaders.forwardedHeaderPolicy, spec.httpHeaders.uniqueId, and spec.httpHeaders.headerNameCaseAdjustments. In case of HTTP request headers, the actions specified in spec.httpHeaders.actions on the Route will be executed after the actions specified in the IngressController's spec.httpHeaders.actions field. In case of HTTP response headers, the actions specified in spec.httpHeaders.actions on the IngressController will be executed after the actions specified in the Route's spec.httpHeaders.actions field. Headers set using this API cannot be captured for use in access logs. The following header names are reserved and may not be modified via this API: Strict-Transport-Security, Proxy, Host, Cookie, Set-Cookie. Note that the total size of all net added headers *after* interpolating dynamic values must not exceed the value of spec.tuningOptions.headerBufferMaxRewriteBytes on the IngressController. Please refer to the documentation for that API field for more details.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IngressControllerHTTPHeaderActions" - }, - "forwardedHeaderPolicy": { - "description": "forwardedHeaderPolicy specifies when and how the IngressController sets the Forwarded, X-Forwarded-For, X-Forwarded-Host, X-Forwarded-Port, X-Forwarded-Proto, and X-Forwarded-Proto-Version HTTP headers. The value may be one of the following:\n\n* \"Append\", which specifies that the IngressController appends the\n headers, preserving existing headers.\n\n* \"Replace\", which specifies that the IngressController sets the\n headers, replacing any existing Forwarded or X-Forwarded-* headers.\n\n* \"IfNone\", which specifies that the IngressController sets the\n headers if they are not already set.\n\n* \"Never\", which specifies that the IngressController never sets the\n headers, preserving any existing headers.\n\nBy default, the policy is \"Append\".", - "type": "string" - }, - "headerNameCaseAdjustments": { - "description": "headerNameCaseAdjustments specifies case adjustments that can be applied to HTTP header names. Each adjustment is specified as an HTTP header name with the desired capitalization. For example, specifying \"X-Forwarded-For\" indicates that the \"x-forwarded-for\" HTTP header should be adjusted to have the specified capitalization.\n\nThese adjustments are only applied to cleartext, edge-terminated, and re-encrypt routes, and only when using HTTP/1.\n\nFor request headers, these adjustments are applied only for routes that have the haproxy.router.openshift.io/h1-adjust-case=true annotation. For response headers, these adjustments are applied to all HTTP responses.\n\nIf this field is empty, no request headers are adjusted.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "uniqueId": { - "description": "uniqueId describes configuration for a custom HTTP header that the ingress controller should inject into incoming HTTP requests. Typically, this header is configured to have a value that is unique to the HTTP request. The header can be used by applications or included in access logs to facilitate tracing individual HTTP requests.\n\nIf this field is empty, no such header is injected into requests.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IngressControllerHTTPUniqueIdHeaderPolicy" - } - } - }, - "com.github.openshift.api.operator.v1.IngressControllerHTTPUniqueIdHeaderPolicy": { - "description": "IngressControllerHTTPUniqueIdHeaderPolicy describes configuration for a unique id header.", - "type": "object", - "properties": { - "format": { - "description": "format specifies the format for the injected HTTP header's value. This field has no effect unless name is specified. For the HAProxy-based ingress controller implementation, this format uses the same syntax as the HTTP log format. If the field is empty, the default value is \"%{+X}o\\\\ %ci:%cp_%fi:%fp_%Ts_%rt:%pid\"; see the corresponding HAProxy documentation: http://cbonte.github.io/haproxy-dconv/2.0/configuration.html#8.2.3", - "type": "string" - }, - "name": { - "description": "name specifies the name of the HTTP header (for example, \"unique-id\") that the ingress controller should inject into HTTP requests. The field's value must be a valid HTTP header name as defined in RFC 2616 section 4.2. If the field is empty, no header is injected.", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.IngressControllerList": { - "description": "IngressControllerList contains a list of IngressControllers.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IngressController" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.IngressControllerLogging": { - "description": "IngressControllerLogging describes what should be logged where.", - "type": "object", - "properties": { - "access": { - "description": "access describes how the client requests should be logged.\n\nIf this field is empty, access logging is disabled.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.AccessLogging" - } - } - }, - "com.github.openshift.api.operator.v1.IngressControllerSetHTTPHeader": { - "description": "IngressControllerSetHTTPHeader defines the value which needs to be set on an HTTP header.", - "type": "object", - "required": [ - "value" - ], - "properties": { - "value": { - "description": "value specifies a header value. Dynamic values can be added. The value will be interpreted as an HAProxy format string as defined in http://cbonte.github.io/haproxy-dconv/2.6/configuration.html#8.2.6 and may use HAProxy's %[] syntax and otherwise must be a valid HTTP header value as defined in https://datatracker.ietf.org/doc/html/rfc7230#section-3.2. The value of this field must be no more than 16384 characters in length. Note that the total size of all net added headers *after* interpolating dynamic values must not exceed the value of spec.tuningOptions.headerBufferMaxRewriteBytes on the IngressController.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.IngressControllerSpec": { - "description": "IngressControllerSpec is the specification of the desired behavior of the IngressController.", - "type": "object", - "properties": { - "clientTLS": { - "description": "clientTLS specifies settings for requesting and verifying client certificates, which can be used to enable mutual TLS for edge-terminated and reencrypt routes.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ClientTLS" - }, - "closedClientConnectionPolicy": { - "description": "closedClientConnectionPolicy controls how the IngressController behaves when the client closes the TCP connection while the TLS handshake or HTTP request is in progress. This option maps directly to HAProxy’s \"abortonclose\" option.\n\nValid values are: \"Abort\" and \"Continue\". The default value is \"Continue\".\n\nWhen set to \"Abort\", the router will stop processing the TLS handshake if it is in progress, and it will not send an HTTP request to the backend server if the request has not yet been sent when the client closes the connection.\n\nWhen set to \"Continue\", the router will complete the TLS handshake if it is in progress, or send an HTTP request to the backend server and wait for the backend server's response, regardless of whether the client has closed the connection.\n\nSetting \"Abort\" can help free CPU resources otherwise spent on TLS computation for connections the client has already closed, and can reduce request queue size, thereby reducing the load on saturated backend servers.\n\nImportant Considerations:\n\n - The default policy (\"Continue\") is HTTP-compliant, and requests\n for aborted client connections will still be served.\n Use the \"Continue\" policy to allow a client to send a request\n and then immediately close its side of the connection while\n still receiving a response on the half-closed connection.\n\n - When clients use keep-alive connections, the most common case for premature\n closure is when the user wants to cancel the transfer or when a timeout\n occurs. In that case, the \"Abort\" policy may be used to reduce resource consumption.\n\n - Using RSA keys larger than 2048 bits can significantly slow down\n TLS computations. Consider using the \"Abort\" policy to reduce CPU usage.", - "type": "string", - "default": "Continue" - }, - "defaultCertificate": { - "description": "defaultCertificate is a reference to a secret containing the default certificate served by the ingress controller. When Routes don't specify their own certificate, defaultCertificate is used.\n\nThe secret must contain the following keys and data:\n\n tls.crt: certificate file contents\n tls.key: key file contents\n\nIf unset, a wildcard certificate is automatically generated and used. The certificate is valid for the ingress controller domain (and subdomains) and the generated certificate's CA will be automatically integrated with the cluster's trust store.\n\nIf a wildcard certificate is used and shared by multiple HTTP/2 enabled routes (which implies ALPN) then clients (i.e., notably browsers) are at liberty to reuse open connections. This means a client can reuse a connection to another route and that is likely to fail. This behaviour is generally known as connection coalescing.\n\nThe in-use certificate (whether generated or user-specified) will be automatically integrated with OpenShift's built-in OAuth server.", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "domain": { - "description": "domain is a DNS name serviced by the ingress controller and is used to configure multiple features:\n\n* For the LoadBalancerService endpoint publishing strategy, domain is\n used to configure DNS records. See endpointPublishingStrategy.\n\n* When using a generated default certificate, the certificate will be valid\n for domain and its subdomains. See defaultCertificate.\n\n* The value is published to individual Route statuses so that end-users\n know where to target external DNS records.\n\ndomain must be unique among all IngressControllers, and cannot be updated.\n\nIf empty, defaults to ingress.config.openshift.io/cluster .spec.domain.\n\nThe domain value must be a valid DNS name. It must consist of lowercase alphanumeric characters, '-' or '.', and each label must start and end with an alphanumeric character and not exceed 63 characters. Maximum length of a valid DNS domain is 253 characters.\n\nThe implementation may add a prefix such as \"router-default.\" to the domain when constructing the router canonical hostname. To ensure the resulting hostname does not exceed the DNS maximum length of 253 characters, the domain length is additionally validated at the IngressController object level. For the maximum length of the domain value itself, the shortest possible variant of the prefix and the ingress controller name was considered for example \"router-a.\"", - "type": "string" - }, - "endpointPublishingStrategy": { - "description": "endpointPublishingStrategy is used to publish the ingress controller endpoints to other networks, enable load balancer integrations, etc.\n\nIf unset, the default is based on infrastructure.config.openshift.io/cluster .status.platform:\n\n AWS: LoadBalancerService (with External scope)\n Azure: LoadBalancerService (with External scope)\n GCP: LoadBalancerService (with External scope)\n IBMCloud: LoadBalancerService (with External scope)\n AlibabaCloud: LoadBalancerService (with External scope)\n Libvirt: HostNetwork\n\nAny other platform types (including None) default to HostNetwork.\n\nendpointPublishingStrategy cannot be updated.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.EndpointPublishingStrategy" - }, - "haproxyVersion": { - "description": "haproxyVersion specifies the HAProxy version to use for this IngressController.\n\nOpenShift 5.0 introduces HAProxy 3.2 as its default version and supports HAProxy 2.8 from OpenShift 4.22 for migration purposes. When an OpenShift release introduces a new default HAProxy version, that HAProxy version becomes available as a pinnable value in subsequent OpenShift releases, providing a smooth migration path for administrators who want to defer HAProxy upgrades.\n\nValid values for OpenShift 5.0: - Unset (default): Uses HAProxy 3.2 (the default for OpenShift 5.0) - \"3.2\": Explicitly pins HAProxy 3.2 for preservation during cluster\n upgrades to future OpenShift releases\n- \"2.8\": Uses HAProxy 2.8 from OpenShift 4.22 (migration support, will\n be dropped in the next OpenShift release)\n\nIf a specific HAProxy version is set and would become unsupported in a target cluster upgrade, a preflight check will block the cluster upgrade until this field is updated to unset or a supported version.", - "type": "string" - }, - "httpCompression": { - "description": "httpCompression defines a policy for HTTP traffic compression. By default, there is no HTTP compression.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.HTTPCompressionPolicy" - }, - "httpEmptyRequestsPolicy": { - "description": "httpEmptyRequestsPolicy describes how HTTP connections should be handled if the connection times out before a request is received. Allowed values for this field are \"Respond\" and \"Ignore\". If the field is set to \"Respond\", the ingress controller sends an HTTP 400 or 408 response, logs the connection (if access logging is enabled), and counts the connection in the appropriate metrics. If the field is set to \"Ignore\", the ingress controller closes the connection without sending a response, logging the connection, or incrementing metrics. The default value is \"Respond\".\n\nTypically, these connections come from load balancers' health probes or Web browsers' speculative connections (\"preconnect\") and can be safely ignored. However, these requests may also be caused by network errors, and so setting this field to \"Ignore\" may impede detection and diagnosis of problems. In addition, these requests may be caused by port scans, in which case logging empty requests may aid in detecting intrusion attempts.", - "type": "string" - }, - "httpErrorCodePages": { - "description": "httpErrorCodePages specifies a configmap with custom error pages. The administrator must create this configmap in the openshift-config namespace. This configmap should have keys in the format \"error-page-.http\", where is an HTTP error code. For example, \"error-page-503.http\" defines an error page for HTTP 503 responses. Currently only error pages for 503 and 404 responses can be customized. Each value in the configmap should be the full response, including HTTP headers. Eg- https://raw.githubusercontent.com/openshift/router/fadab45747a9b30cc3f0a4b41ad2871f95827a93/images/router/haproxy/conf/error-page-503.http If this field is empty, the ingress controller uses the default error pages.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" - }, - "httpHeaders": { - "description": "httpHeaders defines policy for HTTP headers.\n\nIf this field is empty, the default values are used.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IngressControllerHTTPHeaders" - }, - "idleConnectionTerminationPolicy": { - "description": "idleConnectionTerminationPolicy maps directly to HAProxy's idle-close-on-response option and controls whether HAProxy keeps idle frontend connections open during a soft stop (router reload).\n\nAllowed values for this field are \"Immediate\" and \"Deferred\". The default value is \"Immediate\".\n\nWhen set to \"Immediate\", idle connections are closed immediately during router reloads. This ensures immediate propagation of route changes but may impact clients sensitive to connection resets.\n\nWhen set to \"Deferred\", HAProxy will maintain idle connections during a soft reload instead of closing them immediately. These connections remain open until any of the following occurs:\n\n - A new request is received on the connection, in which\n case HAProxy handles it in the old process and closes\n the connection after sending the response.\n\n - HAProxy's `timeout http-keep-alive` duration expires.\n By default this is 300 seconds, but it can be changed\n using httpKeepAliveTimeout tuning option.\n\n - The client's keep-alive timeout expires, causing the\n client to close the connection.\n\nSetting Deferred can help prevent errors in clients or load balancers that do not properly handle connection resets. Additionally, this option allows you to retain the pre-2.4 HAProxy behaviour: in HAProxy version 2.2 (OpenShift versions < 4.14), maintaining idle connections during a soft reload was the default behaviour, but starting with HAProxy 2.4, the default changed to closing idle connections immediately.\n\nImportant Consideration:\n\n - Using Deferred will result in temporary inconsistencies\n for the first request on each persistent connection\n after a route update and router reload. This request\n will be processed by the old HAProxy process using its\n old configuration. Subsequent requests will use the\n updated configuration.\n\nOperational Considerations:\n\n - Keeping idle connections open during reloads may lead\n to an accumulation of old HAProxy processes if\n connections remain idle for extended periods,\n especially in environments where frequent reloads\n occur.\n\n - Consider monitoring the number of HAProxy processes in\n the router pods when Deferred is set.\n\n - You may need to enable or adjust the\n `ingress.operator.openshift.io/hard-stop-after`\n duration (configured via an annotation on the\n IngressController resource) in environments with\n frequent reloads to prevent resource exhaustion.", - "type": "string", - "default": "Immediate" - }, - "logging": { - "description": "logging defines parameters for what should be logged where. If this field is empty, operational logs are enabled but access logs are disabled.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IngressControllerLogging" - }, - "namespaceSelector": { - "description": "namespaceSelector is used to filter the set of namespaces serviced by the ingress controller. This is useful for implementing shards.\n\nIf unset, the default is no filtering.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "nodePlacement": { - "description": "nodePlacement enables explicit control over the scheduling of the ingress controller.\n\nIf unset, defaults are used. See NodePlacement for more details.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodePlacement" - }, - "replicas": { - "description": "replicas is the desired number of ingress controller replicas. If unset, the default depends on the value of the defaultPlacement field in the cluster config.openshift.io/v1/ingresses status.\n\nThe value of replicas is set based on the value of a chosen field in the Infrastructure CR. If defaultPlacement is set to ControlPlane, the chosen field will be controlPlaneTopology. If it is set to Workers the chosen field will be infrastructureTopology. Replicas will then be set to 1 or 2 based whether the chosen field's value is SingleReplica or HighlyAvailable, respectively.\n\nThese defaults are subject to change.", - "type": "integer", - "format": "int32" - }, - "routeAdmission": { - "description": "routeAdmission defines a policy for handling new route claims (for example, to allow or deny claims across namespaces).\n\nIf empty, defaults will be applied. See specific routeAdmission fields for details about their defaults.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.RouteAdmissionPolicy" - }, - "routeSelector": { - "description": "routeSelector is used to filter the set of Routes serviced by the ingress controller. This is useful for implementing shards.\n\nIf unset, the default is no filtering.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "tlsSecurityProfile": { - "description": "tlsSecurityProfile specifies settings for TLS connections for ingresscontrollers.\n\nIf unset, the default is based on the apiservers.config.openshift.io/cluster resource.\n\nNote that when using the Old, Intermediate, and Modern profile types, the effective profile configuration is subject to change between releases. For example, given a specification to use the Intermediate profile deployed on release X.Y.Z, an upgrade to release X.Y.Z+1 may cause a new profile configuration to be applied to the ingress controller, resulting in a rollout.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.TLSSecurityProfile" - }, - "tuningOptions": { - "description": "tuningOptions defines parameters for adjusting the performance of ingress controller pods. All fields are optional and will use their respective defaults if not set. See specific tuningOptions fields for more details.\n\nSetting fields within tuningOptions is generally not recommended. The default values are suitable for most configurations.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IngressControllerTuningOptions" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides allows specifying unsupported configuration options. Its use is unsupported.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.operator.v1.IngressControllerStatus": { - "description": "IngressControllerStatus defines the observed status of the IngressController.", - "type": "object", - "properties": { - "availableReplicas": { - "description": "availableReplicas is number of observed available replicas according to the ingress controller deployment.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "conditions": { - "description": "conditions is a list of conditions and their status.\n\nAvailable means the ingress controller deployment is available and servicing route and ingress resources (i.e, .status.availableReplicas equals .spec.replicas)\n\nThere are additional conditions which indicate the status of other ingress controller features and capabilities.\n\n * LoadBalancerManaged\n - True if the following conditions are met:\n * The endpoint publishing strategy requires a service load balancer.\n - False if any of those conditions are unsatisfied.\n\n * LoadBalancerReady\n - True if the following conditions are met:\n * A load balancer is managed.\n * The load balancer is ready.\n - False if any of those conditions are unsatisfied.\n\n * DNSManaged\n - True if the following conditions are met:\n * The endpoint publishing strategy and platform support DNS.\n * The ingress controller domain is set.\n * dns.config.openshift.io/cluster configures DNS zones.\n - False if any of those conditions are unsatisfied.\n\n * DNSReady\n - True if the following conditions are met:\n * DNS is managed.\n * DNS records have been successfully created.\n - False if any of those conditions are unsatisfied.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "domain": { - "description": "domain is the actual domain in use.", - "type": "string", - "default": "" - }, - "effectiveHAProxyVersion": { - "description": "effectiveHAProxyVersion reports the HAProxy version currently in use by this IngressController. This reflects the resolved value of the spec.haproxyVersion field. When omitted, the effective value has not yet been resolved by the operator or the feature is not enabled for this cluster.\n\nExamples for OpenShift 5.0: - \"3.2\": Using HAProxy 3.2 - \"2.8\": Using HAProxy 2.8", - "type": "string" - }, - "endpointPublishingStrategy": { - "description": "endpointPublishingStrategy is the actual strategy in use.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.EndpointPublishingStrategy" - }, - "namespaceSelector": { - "description": "namespaceSelector is the actual namespaceSelector in use.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "observedGeneration": { - "description": "observedGeneration is the most recent generation observed.", - "type": "integer", - "format": "int64" - }, - "routeSelector": { - "description": "routeSelector is the actual routeSelector in use.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "selector": { - "description": "selector is a label selector, in string format, for ingress controller pods corresponding to the IngressController. The number of matching pods should equal the value of availableReplicas.", - "type": "string", - "default": "" - }, - "tlsProfile": { - "description": "tlsProfile is the TLS connection configuration that is in effect.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.TLSProfileSpec" - } - } - }, - "com.github.openshift.api.operator.v1.IngressControllerTuningOptions": { - "description": "IngressControllerTuningOptions specifies options for tuning the performance of ingress controller pods", - "type": "object", - "properties": { - "clientFinTimeout": { - "description": "clientFinTimeout defines how long a connection will be held open while waiting for the client response to the server/backend closing the connection.\n\nIf unset, the default timeout is 1s", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "clientTimeout": { - "description": "clientTimeout defines how long a connection will be held open while waiting for a client response.\n\nIf unset, the default timeout is 30s", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "configurationManagement": { - "description": "configurationManagement specifies how OpenShift router should update the HAProxy configuration. The following values are valid for this field:\n\n* \"ForkAndReload\". * \"Dynamic\".\n\nOmitting this field means that the user has no opinion and the platform may choose a reasonable default. This default is subject to change over time. The current default is \"ForkAndReload\".\n\n\"ForkAndReload\" means that OpenShift router should rewrite the HAProxy configuration file and instruct HAProxy to fork and reload. This is OpenShift router's traditional approach.\n\n\"Dynamic\" means that OpenShift router may use HAProxy's control socket for some configuration updates and fall back to fork and reload for other configuration updates. This is a newer approach, which may be less mature than ForkAndReload. This setting can improve load-balancing fairness and metrics accuracy and reduce CPU and memory usage if HAProxy has frequent configuration updates for route and endpoints updates.\n\nNote: The \"Dynamic\" option is currently experimental and should not be enabled on production clusters.\n\n\nPossible enum values:\n - `\"Dynamic\"`\n - `\"ForkAndReload\"`", - "type": "string", - "enum": [ - "Dynamic", - "ForkAndReload" - ] - }, - "connectTimeout": { - "description": "connectTimeout defines the maximum time to wait for a connection attempt to a server/backend to succeed.\n\nThis field expects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, e.g. \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\" U+00B5 or \"μs\" U+03BC), \"ms\", \"s\", \"m\", \"h\".\n\nWhen omitted, this means the user has no opinion and the platform is left to choose a reasonable default. This default is subject to change over time. The current default is 5s.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "headerBufferBytes": { - "description": "headerBufferBytes describes how much memory should be reserved (in bytes) for IngressController connection sessions. Note that this value must be at least 16384 if HTTP/2 is enabled for the IngressController (https://tools.ietf.org/html/rfc7540). If this field is empty, the IngressController will use a default value of 32768 bytes.\n\nSetting this field is generally not recommended as headerBufferBytes values that are too small may break the IngressController and headerBufferBytes values that are too large could cause the IngressController to use significantly more memory than necessary.", - "type": "integer", - "format": "int32" - }, - "headerBufferMaxRewriteBytes": { - "description": "headerBufferMaxRewriteBytes describes how much memory should be reserved (in bytes) from headerBufferBytes for HTTP header rewriting and appending for IngressController connection sessions. Note that incoming HTTP requests will be limited to (headerBufferBytes - headerBufferMaxRewriteBytes) bytes, meaning headerBufferBytes must be greater than headerBufferMaxRewriteBytes. If this field is empty, the IngressController will use a default value of 8192 bytes.\n\nSetting this field is generally not recommended as headerBufferMaxRewriteBytes values that are too small may break the IngressController and headerBufferMaxRewriteBytes values that are too large could cause the IngressController to use significantly more memory than necessary.", - "type": "integer", - "format": "int32" - }, - "healthCheckInterval": { - "description": "healthCheckInterval defines how long the router waits between two consecutive health checks on its configured backends. This value is applied globally as a default for all routes, but may be overridden per-route by the route annotation \"router.openshift.io/haproxy.health.check.interval\".\n\nExpects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, eg \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\" U+00B5 or \"μs\" U+03BC), \"ms\", \"s\", \"m\", \"h\".\n\nSetting this to less than 5s can cause excess traffic due to too frequent TCP health checks and accompanying SYN packet storms. Alternatively, setting this too high can result in increased latency, due to backend servers that are no longer available, but haven't yet been detected as such.\n\nAn empty or zero healthCheckInterval means no opinion and IngressController chooses a default, which is subject to change over time. Currently the default healthCheckInterval value is 5s.\n\nCurrently the minimum allowed value is 1s and the maximum allowed value is 2147483647ms (24.85 days). Both are subject to change over time.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "httpKeepAliveTimeout": { - "description": "httpKeepAliveTimeout defines the maximum allowed time to wait for a new HTTP request to appear on a connection from the client to the router.\n\nThis field expects an unsigned duration string of a decimal number, with optional fraction and a unit suffix, e.g. \"300ms\", \"1.5s\" or \"2m45s\". Valid time units are \"ms\", \"s\", \"m\". The allowed range is from 1 millisecond to 15 minutes.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose a reasonable default. This default is subject to change over time. The current default is 300s.\n\nLow values (tens of milliseconds or less) can cause clients to close and reopen connections for each request, leading to reduced connection sharing. For HTTP/2, special care should be taken with low values. A few seconds is a reasonable starting point to avoid holding idle connections open while still allowing subsequent requests to reuse the connection.\n\nHigh values (minutes or more) favor connection reuse but may cause idle connections to linger longer.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "maxConnections": { - "description": "maxConnections defines the maximum number of simultaneous connections that can be established per HAProxy process. Increasing this value allows each ingress controller pod to handle more connections but at the cost of additional system resources being consumed.\n\nPermitted values are: empty, 0, -1, and the range 2000-2000000.\n\nIf this field is empty or 0, the IngressController will use the default value of 50000, but the default is subject to change in future releases.\n\nIf the value is -1 then HAProxy will dynamically compute a maximum value based on the available ulimits in the running container. Selecting -1 (i.e., auto) will result in a large value being computed (~520000 on OpenShift >=4.10 clusters) and therefore each HAProxy process will incur significant memory usage compared to the current default of 50000.\n\nSetting a value that is greater than the current operating system limit will prevent the HAProxy process from starting.\n\nIf you choose a discrete value (e.g., 750000) and the router pod is migrated to a new node, there's no guarantee that that new node has identical ulimits configured. In such a scenario the pod would fail to start. If you have nodes with different ulimits configured (e.g., different tuned profiles) and you choose a discrete value then the guidance is to use -1 and let the value be computed dynamically at runtime.\n\nYou can monitor memory usage for router containers with the following metric: 'container_memory_working_set_bytes{container=\"router\",namespace=\"openshift-ingress\"}'.\n\nYou can monitor memory usage of individual HAProxy processes in router containers with the following metric: 'container_memory_working_set_bytes{container=\"router\",namespace=\"openshift-ingress\"}/container_processes{container=\"router\",namespace=\"openshift-ingress\"}'.", - "type": "integer", - "format": "int32" - }, - "reloadInterval": { - "description": "reloadInterval defines the minimum interval at which the router is allowed to reload to accept new changes. Increasing this value can prevent the accumulation of HAProxy processes, depending on the scenario. Increasing this interval can also lessen load imbalance on a backend's servers when using the roundrobin balancing algorithm. Alternatively, decreasing this value may decrease latency since updates to HAProxy's configuration can take effect more quickly.\n\nThe value must be a time duration value; see . Currently, the minimum value allowed is 1s, and the maximum allowed value is 120s. Minimum and maximum allowed values may change in future versions of OpenShift. Note that if a duration outside of these bounds is provided, the value of reloadInterval will be capped/floored and not rejected (e.g. a duration of over 120s will be capped to 120s; the IngressController will not reject and replace this disallowed value with the default).\n\nA zero value for reloadInterval tells the IngressController to choose the default, which is currently 5s and subject to change without notice.\n\nThis field expects an unsigned duration string of decimal numbers, each with optional fraction and a unit suffix, e.g. \"300ms\", \"1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\" U+00B5 or \"μs\" U+03BC), \"ms\", \"s\", \"m\", \"h\".\n\nNote: Setting a value significantly larger than the default of 5s can cause latency in observing updates to routes and their endpoints. HAProxy's configuration will be reloaded less frequently, and newly created routes will not be served until the subsequent reload.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "serverFinTimeout": { - "description": "serverFinTimeout defines how long a connection will be held open while waiting for the server/backend response to the client closing the connection.\n\nIf unset, the default timeout is 1s", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "serverTimeout": { - "description": "serverTimeout defines how long a connection will be held open while waiting for a server/backend response.\n\nIf unset, the default timeout is 30s", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "threadCount": { - "description": "threadCount defines the number of threads created per HAProxy process. Creating more threads allows each ingress controller pod to handle more connections, at the cost of more system resources being used. HAProxy currently supports up to 64 threads. If this field is empty, the IngressController will use the default value. The current default is 4 threads, but this may change in future releases.\n\nSetting this field is generally not recommended. Increasing the number of HAProxy threads allows ingress controller pods to utilize more CPU time under load, potentially starving other pods if set too high. Reducing the number of threads may cause the ingress controller to perform poorly.", - "type": "integer", - "format": "int32" - }, - "tlsInspectDelay": { - "description": "tlsInspectDelay defines how long the router can hold data to find a matching route.\n\nSetting this too short can cause the router to fall back to the default certificate for edge-terminated or reencrypt routes even when a better matching certificate could be used.\n\nIf unset, the default inspect delay is 5s", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "tunnelTimeout": { - "description": "tunnelTimeout defines how long a tunnel connection (including websockets) will be held open while the tunnel is idle.\n\nIf unset, the default timeout is 1h", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - } - } - }, - "com.github.openshift.api.operator.v1.InsightsOperator": { - "description": "InsightsOperator holds cluster-wide information about the Insights Operator.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the specification of the desired behavior of the Insights.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.InsightsOperatorSpec" - }, - "status": { - "description": "status is the most recently observed status of the Insights operator.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.InsightsOperatorStatus" - } - } - }, - "com.github.openshift.api.operator.v1.InsightsOperatorList": { - "description": "InsightsOperatorList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.InsightsOperator" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.InsightsOperatorSpec": { - "type": "object", - "required": [ - "managementState" - ], - "properties": { - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.operator.v1.InsightsOperatorStatus": { - "type": "object", - "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "gatherStatus": { - "description": "gatherStatus provides basic information about the last Insights data gathering. When omitted, this means no data gathering has taken place yet.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GatherStatus" - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "insightsReport": { - "description": "insightsReport provides general Insights analysis results. When omitted, this means no data gathering has taken place yet.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.InsightsReport" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.InsightsReport": { - "description": "insightsReport provides Insights health check report based on the most recently sent Insights data.", - "type": "object", - "properties": { - "downloadedAt": { - "description": "downloadedAt is the time when the last Insights report was downloaded. An empty value means that there has not been any Insights report downloaded yet and it usually appears in disconnected clusters (or clusters when the Insights data gathering is disabled).", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "healthChecks": { - "description": "healthChecks provides basic information about active Insights health checks in a cluster.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.HealthCheck" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.operator.v1.IrreconcilableValidationOverrides": { - "description": "IrreconcilableValidationOverrides holds the irreconcilable validations overrides to be applied on each rendered MachineConfig generation.", - "type": "object", - "properties": { - "storage": { - "description": "storage can be used to allow making irreconcilable changes to the selected sections under the `spec.config.storage` field of MachineConfig CRs It must have at least one item, may not exceed 3 items and must not contain duplicates. Allowed element values are \"Disks\", \"FileSystems\", \"Raid\" and omitted. When contains \"Disks\" changes to the `spec.config.storage.disks` section of MachineConfig CRs are allowed. When contains \"FileSystems\" changes to the `spec.config.storage.filesystems` section of MachineConfig CRs are allowed. When contains \"Raid\" changes to the `spec.config.storage.raid` section of MachineConfig CRs are allowed. When omitted changes to the `spec.config.storage` section are forbidden.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - } - } - }, - "com.github.openshift.api.operator.v1.KMSEncryptionStatus": { - "type": "object", - "properties": { - "healthReports": { - "description": "healthReports contains all KMS plugin health reports. When omitted, no health reports are available. Each entry must have a unique combination of nodeName and keyID.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.KMSPluginHealthReport" - }, - "x-kubernetes-list-map-keys": [ - "nodeName", - "keyID" - ], - "x-kubernetes-list-type": "map" - }, - "preflight": { - "description": "preflight contains the state of KMS preflight validation for this operator. The preflight validates the KMS provider configuration before it is used to create a new encryption key, catching configuration issues early such as incorrect login credentials or an unreachable Vault service. When omitted, no preflight validation is in progress.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.KMSPreflightCheck" - } - } - }, - "com.github.openshift.api.operator.v1.KMSPluginHealthReport": { - "type": "object", - "required": [ - "nodeName", - "keyID", - "status", - "lastCheckedTime", - "remoteKeyID" - ], - "properties": { - "detail": { - "description": "detail contains additional error/health information for the respective KMS plugin. When omitted, no additional error or health information is provided. When set, the value must be between 1 and 1024 characters.", - "type": "string" - }, - "keyID": { - "description": "keyID is the encryption-key-secret id (kms-{keyID}.sock), a unique identifier of the plugin on that node. This is not a cryptographic key used to encrypt/decrypt any resources. The value must be between 1 and 512 characters.", - "type": "string" - }, - "lastCheckedTime": { - "description": "lastCheckedTime is a timestamp of when the probe was last checked.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "nodeName": { - "description": "nodeName is the name of the node this instance of the plugin runs on. The combination of nodeName and keyID makes this health report unique. The value must be a valid Kubernetes node name: a lowercase RFC 1123 subdomain consisting of lowercase alphanumeric characters, '-' or '.', starting and ending with an alphanumeric character, and be at most 253 characters in length.", - "type": "string" - }, - "remoteKeyID": { - "description": "remoteKeyID refers to the remote key identifier from KMS v2 StatusResponse.key_id. This is not a cryptographic key, but a unique representation of the KEK. The value must be between 1 and 1024 characters.", - "type": "string" - }, - "status": { - "description": "status contains a health indicator for the respective KMS plugin The field can have three states: healthy, unhealthy, error. With error and unhealthy containing additional information in Detail.", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.KMSPreflightCheck": { - "description": "KMSPreflightCheck describes a preflight validation request and its result.", - "type": "object", - "required": [ - "observedConfigHash" - ], - "properties": { - "observedConfigHash": { - "description": "observedConfigHash is a hash of the KMS provider configuration and its referenced resources that has been observed and requires preflight validation before a new encryption key can be created. The value must be exactly 8 characters.", - "type": "string" - }, - "result": { - "description": "result contains the outcome of the most recent preflight check. Preflight is considered passed when result.status is Succeeded and result.configHash matches observedConfigHash. When omitted, no preflight check result has been reported yet.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.KMSPreflightResult" - } - } - }, - "com.github.openshift.api.operator.v1.KMSPreflightResult": { - "description": "KMSPreflightResult contains the outcome of a preflight validation.", - "type": "object", - "required": [ - "status", - "configHash", - "remoteKeyID" - ], - "properties": { - "configHash": { - "description": "configHash is the hash of the configuration that was validated. This is compared against observedConfigHash to confirm the result corresponds to the current configuration. The value must be exactly 8 characters.", - "type": "string" - }, - "remoteKeyID": { - "description": "remoteKeyID is the remote key encryption key identifier from KMS v2 StatusResponse.key_id. This is not a cryptographic key, but a unique representation of the remote key used to encrypt data. The value must be between 1 and 1024 characters.", - "type": "string" - }, - "status": { - "description": "status indicates the outcome of the preflight check. Succeeded means the KMS plugin responded to Status, Encrypt, and Decrypt calls successfully. Failed means the validation did not pass.", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.KubeAPIServer": { - "description": "KubeAPIServer provides information to configure an operator to manage kube-apiserver.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the specification of the desired behavior of the Kubernetes API Server", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.KubeAPIServerSpec" - }, - "status": { - "description": "status is the most recently observed status of the Kubernetes API Server", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.KubeAPIServerStatus" - } - } - }, - "com.github.openshift.api.operator.v1.KubeAPIServerList": { - "description": "KubeAPIServerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items contains the items", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.KubeAPIServer" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.KubeAPIServerSpec": { - "type": "object", - "required": [ - "managementState", - "forceRedeploymentReason" - ], - "properties": { - "eventTTLMinutes": { - "description": "eventTTLMinutes specifies the amount of time that the events are stored before being deleted. The TTL is allowed between 5 minutes minimum up to a maximum of 180 minutes (3 hours).\n\nLowering this value will reduce the storage required in etcd. Note that this setting will only apply to new events being created and will not update existing events.\n\nWhen omitted this means no opinion, and the platform is left to choose a reasonable default, which is subject to change over time. The current default value is 3h (180 minutes).", - "type": "integer", - "format": "int32" - }, - "failedRevisionLimit": { - "description": "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - "type": "integer", - "format": "int32" - }, - "forceRedeploymentReason": { - "description": "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.", - "type": "string", - "default": "" - }, - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "succeededRevisionLimit": { - "description": "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - "type": "integer", - "format": "int32" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.operator.v1.KubeAPIServerStatus": { - "type": "object", - "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "encryptionStatus": { - "description": "encryptionStatus contains status reports for the KMS plugin health and its key rotation.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.KMSEncryptionStatus" - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "latestAvailableRevisionReason": { - "description": "latestAvailableRevisionReason describe the detailed reason for the most recent deployment", - "type": "string" - }, - "nodeStatuses": { - "description": "nodeStatuses track the deployment values and errors across individual nodes", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeStatus" - }, - "x-kubernetes-list-map-keys": [ - "nodeName" - ], - "x-kubernetes-list-type": "map" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "serviceAccountIssuers": { - "description": "serviceAccountIssuers tracks history of used service account issuers. The item without expiration time represents the currently used service account issuer. The other items represents service account issuers that were used previously and are still being trusted. The default expiration for the items is set by the platform and it defaults to 24h. see: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ServiceAccountIssuerStatus" - }, - "x-kubernetes-list-type": "atomic" - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.KubeControllerManager": { - "description": "KubeControllerManager provides information to configure an operator to manage kube-controller-manager.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the specification of the desired behavior of the Kubernetes Controller Manager", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.KubeControllerManagerSpec" - }, - "status": { - "description": "status is the most recently observed status of the Kubernetes Controller Manager", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.KubeControllerManagerStatus" - } - } - }, - "com.github.openshift.api.operator.v1.KubeControllerManagerList": { - "description": "KubeControllerManagerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items contains the items", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.KubeControllerManager" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.KubeControllerManagerSpec": { - "type": "object", - "required": [ - "managementState", - "forceRedeploymentReason", - "useMoreSecureServiceCA" - ], - "properties": { - "failedRevisionLimit": { - "description": "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - "type": "integer", - "format": "int32" - }, - "forceRedeploymentReason": { - "description": "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.", - "type": "string", - "default": "" - }, - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "succeededRevisionLimit": { - "description": "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - "type": "integer", - "format": "int32" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "useMoreSecureServiceCA": { - "description": "useMoreSecureServiceCA indicates that the service-ca.crt provided in SA token volumes should include only enough certificates to validate service serving certificates. Once set to true, it cannot be set to false. Even if someone finds a way to set it back to false, the service-ca.crt files that previously existed will only have the more secure content.", - "type": "boolean", - "default": false - } - } - }, - "com.github.openshift.api.operator.v1.KubeControllerManagerStatus": { - "type": "object", - "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "latestAvailableRevisionReason": { - "description": "latestAvailableRevisionReason describe the detailed reason for the most recent deployment", - "type": "string" - }, - "nodeStatuses": { - "description": "nodeStatuses track the deployment values and errors across individual nodes", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeStatus" - }, - "x-kubernetes-list-map-keys": [ - "nodeName" - ], - "x-kubernetes-list-type": "map" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.KubeScheduler": { - "description": "KubeScheduler provides information to configure an operator to manage scheduler.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the specification of the desired behavior of the Kubernetes Scheduler", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.KubeSchedulerSpec" - }, - "status": { - "description": "status is the most recently observed status of the Kubernetes Scheduler", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.KubeSchedulerStatus" - } - } - }, - "com.github.openshift.api.operator.v1.KubeSchedulerList": { - "description": "KubeSchedulerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items contains the items", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.KubeScheduler" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.KubeSchedulerSpec": { - "type": "object", - "required": [ - "managementState", - "forceRedeploymentReason" - ], - "properties": { - "failedRevisionLimit": { - "description": "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - "type": "integer", - "format": "int32" - }, - "forceRedeploymentReason": { - "description": "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.", - "type": "string", - "default": "" - }, - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "succeededRevisionLimit": { - "description": "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - "type": "integer", - "format": "int32" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.operator.v1.KubeSchedulerStatus": { - "type": "object", - "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "latestAvailableRevisionReason": { - "description": "latestAvailableRevisionReason describe the detailed reason for the most recent deployment", - "type": "string" - }, - "nodeStatuses": { - "description": "nodeStatuses track the deployment values and errors across individual nodes", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeStatus" - }, - "x-kubernetes-list-map-keys": [ - "nodeName" - ], - "x-kubernetes-list-type": "map" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.KubeStorageVersionMigrator": { - "description": "KubeStorageVersionMigrator provides information to configure an operator to manage kube-storage-version-migrator.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.KubeStorageVersionMigratorSpec" - }, - "status": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.KubeStorageVersionMigratorStatus" - } - } - }, - "com.github.openshift.api.operator.v1.KubeStorageVersionMigratorList": { - "description": "KubeStorageVersionMigratorList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items contains the items", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.KubeStorageVersionMigrator" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.KubeStorageVersionMigratorSpec": { - "type": "object", - "required": [ - "managementState" - ], - "properties": { - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.operator.v1.KubeStorageVersionMigratorStatus": { - "type": "object", - "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.LoadBalancerStrategy": { - "description": "LoadBalancerStrategy holds parameters for a load balancer.", - "type": "object", - "required": [ - "scope", - "dnsManagementPolicy" - ], - "properties": { - "allowedSourceRanges": { - "description": "allowedSourceRanges specifies an allowlist of IP address ranges to which access to the load balancer should be restricted. Each range must be specified using CIDR notation (e.g. \"10.0.0.0/8\" or \"fd00::/8\"). If no range is specified, \"0.0.0.0/0\" for IPv4 and \"::/0\" for IPv6 are used by default, which allows all source addresses.\n\nTo facilitate migration from earlier versions of OpenShift that did not have the allowedSourceRanges field, you may set the service.beta.kubernetes.io/load-balancer-source-ranges annotation on the \"router-\" service in the \"openshift-ingress\" namespace, and this annotation will take effect if allowedSourceRanges is empty on OpenShift 4.12.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "dnsManagementPolicy": { - "description": "dnsManagementPolicy indicates if the lifecycle of the wildcard DNS record associated with the load balancer service will be managed by the ingress operator. It defaults to Managed. Valid values are: Managed and Unmanaged.", - "type": "string", - "default": "Managed" - }, - "providerParameters": { - "description": "providerParameters holds desired load balancer information specific to the underlying infrastructure provider.\n\nIf empty, defaults will be applied. See specific providerParameters fields for details about their defaults.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ProviderLoadBalancerParameters" - }, - "scope": { - "description": "scope indicates the scope at which the load balancer is exposed. Possible values are \"External\" and \"Internal\".", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.LoggingDestination": { - "description": "LoggingDestination describes a destination for log messages.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "container": { - "description": "container holds parameters for the Container logging destination. Present only if type is Container.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ContainerLoggingDestinationParameters" - }, - "syslog": { - "description": "syslog holds parameters for a syslog endpoint. Present only if type is Syslog.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.SyslogLoggingDestinationParameters" - }, - "type": { - "description": "type is the type of destination for logs. It must be one of the following:\n\n* Container\n\nThe ingress operator configures the sidecar container named \"logs\" on the ingress controller pod and configures the ingress controller to write logs to the sidecar. The logs are then available as container logs. The expectation is that the administrator configures a custom logging solution that reads logs from this sidecar. Note that using container logs means that logs may be dropped if the rate of logs exceeds the container runtime's or the custom logging solution's capacity.\n\n* Syslog\n\nLogs are sent to a syslog endpoint. The administrator must specify an endpoint that can receive syslog messages. The expectation is that the administrator has configured a custom syslog instance.", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "container": "Container", - "syslog": "Syslog" - } - } - ] - }, - "com.github.openshift.api.operator.v1.Logo": { - "description": "Logo defines a configuration based on theme modes for the console UI logo.", - "type": "object", - "required": [ - "type", - "themes" - ], - "properties": { - "themes": { - "description": "themes specifies the themes for the console UI logo. themes is a required field that allows a list of themes. Each item in the themes list must have a unique mode and a source field. Each mode determines whether the logo is for the dark or light mode of the console UI. If a theme is not specified, the default OpenShift logo will be displayed for that theme. There must be at least one entry and no more than 2 entries.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.Theme" - }, - "x-kubernetes-list-map-keys": [ - "mode" - ], - "x-kubernetes-list-type": "map" - }, - "type": { - "description": "type specifies the type of the logo for the console UI. It determines whether the logo is for the masthead or favicon. type is a required field that allows values of Masthead and Favicon. When set to \"Masthead\", the logo will be used in the masthead and about modal of the console UI. When set to \"Favicon\", the logo will be used as the favicon of the console UI.\n\nPossible enum values:\n - `\"Favicon\"` Favicon represents the favicon logo.\n - `\"Masthead\"` Masthead represents the logo in the masthead.", - "type": "string", - "default": "", - "enum": [ - "Favicon", - "Masthead" - ] - } - } - }, - "com.github.openshift.api.operator.v1.MTUMigration": { - "description": "MTUMigration contains infomation about MTU migration.", - "type": "object", - "properties": { - "machine": { - "description": "machine contains MTU migration configuration for the machine's uplink. Needs to be migrated along with the default network MTU unless the current uplink MTU already accommodates the default network MTU.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.MTUMigrationValues" - }, - "network": { - "description": "network contains information about MTU migration for the default network. Migrations are only allowed to MTU values lower than the machine's uplink MTU by the minimum appropriate offset.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.MTUMigrationValues" - } - } - }, - "com.github.openshift.api.operator.v1.MTUMigrationValues": { - "description": "MTUMigrationValues contains the values for a MTU migration.", - "type": "object", - "required": [ - "to" - ], - "properties": { - "from": { - "description": "from is the MTU to migrate from.", - "type": "integer", - "format": "int64" - }, - "to": { - "description": "to is the MTU to migrate to.", - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.operator.v1.MachineConfiguration": { - "description": "MachineConfiguration provides information to configure an operator to manage Machine Configuration.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the specification of the desired behavior of the Machine Config Operator", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.MachineConfigurationSpec" - }, - "status": { - "description": "status is the most recently observed status of the Machine Config Operator", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.MachineConfigurationStatus" - } - } - }, - "com.github.openshift.api.operator.v1.MachineConfigurationList": { - "description": "MachineConfigurationList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items contains the items", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.MachineConfiguration" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.MachineConfigurationSpec": { - "type": "object", - "required": [ - "managementState", - "forceRedeploymentReason" - ], - "properties": { - "bootImageSkewEnforcement": { - "description": "bootImageSkewEnforcement allows an admin to configure how boot image version skew is enforced on the cluster. When omitted, this will default to Automatic for clusters that support automatic boot image updates. For clusters that do not support automatic boot image updates, cluster upgrades will be disabled until a skew enforcement mode has been specified. When version skew is being enforced, cluster upgrades will be disabled until the version skew is deemed acceptable for the current release payload.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.BootImageSkewEnforcementConfig" - }, - "failedRevisionLimit": { - "description": "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - "type": "integer", - "format": "int32" - }, - "forceRedeploymentReason": { - "description": "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.", - "type": "string", - "default": "" - }, - "irreconcilableValidationOverrides": { - "description": "irreconcilableValidationOverrides is an optional field that can used to make changes to a MachineConfig that cannot be applied to existing nodes. When specified, the fields configured with validation overrides will no longer reject changes to those respective fields due to them not being able to be applied to existing nodes. Only newly provisioned nodes will have these configurations applied. Existing nodes will report observed configuration differences in their MachineConfigNode status.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IrreconcilableValidationOverrides" - }, - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managedBootImages": { - "description": "managedBootImages allows configuration for the management of boot images for machine resources within the cluster. This configuration allows users to select resources that should be updated to the latest boot images during cluster upgrades, ensuring that new machines always boot with the current cluster version's boot image. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The default for each machine manager mode is All for GCP and AWS platforms, and None for all other platforms.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ManagedBootImages" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "nodeDisruptionPolicy": { - "description": "nodeDisruptionPolicy allows an admin to set granular node disruption actions for MachineConfig-based updates, such as drains, service reloads, etc. Specifying this will allow for less downtime when doing small configuration updates to the cluster. This configuration has no effect on cluster upgrades which will still incur node disruption where required.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeDisruptionPolicyConfig" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "succeededRevisionLimit": { - "description": "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - "type": "integer", - "format": "int32" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.operator.v1.MachineConfigurationStatus": { - "type": "object", - "properties": { - "bootImageSkewEnforcementStatus": { - "description": "bootImageSkewEnforcementStatus reflects what the latest cluster-validated boot image skew enforcement configuration is and will be used by Machine Config Controller while performing boot image skew enforcement. When omitted, the MCO has no knowledge of how to enforce boot image skew. When the MCO does not know how boot image skew should be enforced, cluster upgrades will be blocked until it can either automatically determine skew enforcement or there is an explicit skew enforcement configuration provided in the spec.bootImageSkewEnforcement field.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.BootImageSkewEnforcementStatus" - }, - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "managedBootImagesStatus": { - "description": "managedBootImagesStatus reflects what the latest cluster-validated boot image configuration is and will be used by Machine Config Controller while performing boot image updates.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ManagedBootImages" - }, - "nodeDisruptionPolicyStatus": { - "description": "nodeDisruptionPolicyStatus status reflects what the latest cluster-validated policies are, and will be used by the Machine Config Daemon during future node updates.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeDisruptionPolicyStatus" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.operator.v1.MachineManager": { - "description": "MachineManager describes a target machine resource that is registered for boot image updates. It stores identifying information such as the resource type and the API Group of the resource. It also provides granular control via the selection field.", - "type": "object", - "required": [ - "resource", - "apiGroup", - "selection" - ], - "properties": { - "apiGroup": { - "description": "apiGroup is name of the APIGroup that the machine management resource belongs to. The only current valid value is machine.openshift.io. machine.openshift.io means that the machine manager will only register resources that belong to OpenShift machine API group.", - "type": "string", - "default": "" - }, - "resource": { - "description": "resource is the machine management resource's type. Valid values are machinesets and controlplanemachinesets. machinesets means that the machine manager will only register resources of the kind MachineSet. controlplanemachinesets means that the machine manager will only register resources of the kind ControlPlaneMachineSet.", - "type": "string", - "default": "" - }, - "selection": { - "description": "selection allows granular control of the machine management resources that will be registered for boot image updates.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.MachineManagerSelector" - } - } - }, - "com.github.openshift.api.operator.v1.MachineManagerSelector": { - "type": "object", - "required": [ - "mode" - ], - "properties": { - "mode": { - "description": "mode determines how machine managers will be selected for updates. Valid values are All, Partial and None. All means that every resource matched by the machine manager will be updated. Partial requires specified selector(s) and allows customisation of which resources matched by the machine manager will be updated. Partial is not permitted for the controlplanemachinesets resource type as they are a singleton within the cluster. None means that every resource matched by the machine manager will not be updated.", - "type": "string", - "default": "" - }, - "partial": { - "description": "partial provides label selector(s) that can be used to match machine management resources. Only permitted when mode is set to \"Partial\".", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.PartialSelector" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "mode", - "fields-to-discriminateBy": { - "partial": "Partial" - } - } - ] - }, - "com.github.openshift.api.operator.v1.ManagedBootImages": { - "type": "object", - "properties": { - "machineManagers": { - "description": "machineManagers can be used to register machine management resources for boot image updates. The Machine Config Operator will watch for changes to this list. Only one entry is permitted per type of machine management resource.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.MachineManager" - }, - "x-kubernetes-list-map-keys": [ - "resource", - "apiGroup" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.operator.v1.ManagedTokenRequests": { - "description": "ManagedTokenRequests holds the configuration for operator-managed service account token requests.", - "type": "object", - "properties": { - "audiences": { - "description": "audiences specifies service account token audiences that kubelet will provide to the CSI driver during NodePublishVolume calls. These tokens enable workload identity federation (WIF) with cloud providers such as AWS, Azure, and GCP. When empty, the operator clears all tokenRequests from the CSIDriver object.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.SecretsStoreTokenRequest" - }, - "x-kubernetes-list-map-keys": [ - "audience" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.operator.v1.MyOperatorResource": { - "description": "MyOperatorResource is an example operator configuration type\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "metadata", - "spec", - "status" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.MyOperatorResourceSpec" - }, - "status": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.MyOperatorResourceStatus" - } - } - }, - "com.github.openshift.api.operator.v1.MyOperatorResourceSpec": { - "type": "object", - "required": [ - "managementState" - ], - "properties": { - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.operator.v1.MyOperatorResourceStatus": { - "type": "object", - "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.NetFlowConfig": { - "type": "object", - "properties": { - "collectors": { - "description": "netFlow defines the NetFlow collectors that will consume the flow data exported from OVS. It is a list of strings formatted as ip:port with a maximum of ten items", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.operator.v1.Network": { - "description": "Network describes the cluster's desired network configuration. It is consumed by the cluster-network-operator.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NetworkSpec" - }, - "status": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NetworkStatus" - } - } - }, - "com.github.openshift.api.operator.v1.NetworkList": { - "description": "NetworkList contains a list of Network configurations\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.Network" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.NetworkMigration": { - "description": "NetworkMigration represents the cluster network migration configuration.", - "type": "object", - "properties": { - "features": { - "description": "features was previously used to configure which network plugin features would be migrated in a network type migration. DEPRECATED: network type migration is no longer supported, and setting this to a non-empty value will result in the network operator rejecting the configuration.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.FeaturesMigration" - }, - "mode": { - "description": "mode indicates the mode of network type migration. DEPRECATED: network type migration is no longer supported, and setting this to a non-empty value will result in the network operator rejecting the configuration.", - "type": "string" - }, - "mtu": { - "description": "mtu contains the MTU migration configuration. Set this to allow changing the MTU values for the default network. If unset, the operation of changing the MTU for the default network will be rejected.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.MTUMigration" - }, - "networkType": { - "description": "networkType was previously used when changing the default network type. DEPRECATED: network type migration is no longer supported, and setting this to a non-empty value will result in the network operator rejecting the configuration.", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.NetworkSpec": { - "description": "NetworkSpec is the top-level network configuration object.", - "type": "object", - "required": [ - "managementState", - "clusterNetwork", - "serviceNetwork", - "defaultNetwork" - ], - "properties": { - "additionalNetworks": { - "description": "additionalNetworks is a list of extra networks to make available to pods when multiple networks are enabled.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.AdditionalNetworkDefinition" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - }, - "additionalRoutingCapabilities": { - "description": "additionalRoutingCapabilities describes components and relevant configuration providing additional routing capabilities. When set, it enables such components and the usage of the routing capabilities they provide for the machine network. Upstream operators, like MetalLB operator, requiring these capabilities may rely on, or automatically set this attribute. Network plugins may leverage advanced routing capabilities acquired through the enablement of these components but may require specific configuration on their side to do so; refer to their respective documentation and configuration options.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.AdditionalRoutingCapabilities" - }, - "clusterNetwork": { - "description": "clusterNetwork is the IP address pool to use for pod IPs. Some network providers support multiple ClusterNetworks. Others only support one. This is equivalent to the cluster-cidr.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ClusterNetworkEntry" - }, - "x-kubernetes-list-type": "atomic" - }, - "defaultNetwork": { - "description": "defaultNetwork is the \"default\" network that all pods will receive", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.DefaultNetworkDefinition" - }, - "deployKubeProxy": { - "description": "deployKubeProxy specifies whether or not a standalone kube-proxy should be deployed by the operator. Some network providers include kube-proxy or similar functionality. If unset, the plugin will attempt to select the correct value, which is false when ovn-kubernetes is used and true otherwise.", - "type": "boolean" - }, - "disableMultiNetwork": { - "description": "disableMultiNetwork defaults to 'false' and this setting enables the pod multi-networking capability. disableMultiNetwork when set to 'true' at cluster install time does not install the components, typically the Multus CNI and the network-attachment-definition CRD, that enable the pod multi-networking capability. Setting the parameter to 'true' might be useful when you need install third-party CNI plugins, but these plugins are not supported by Red Hat. Changing the parameter value as a postinstallation cluster task has no effect.", - "type": "boolean" - }, - "disableNetworkDiagnostics": { - "description": "disableNetworkDiagnostics specifies whether or not PodNetworkConnectivityCheck CRs from a test pod to every node, apiserver and LB should be disabled or not. If unset, this property defaults to 'false' and network diagnostics is enabled. Setting this to 'true' would reduce the additional load of the pods performing the checks.", - "type": "boolean", - "default": false - }, - "exportNetworkFlows": { - "description": "exportNetworkFlows enables and configures the export of network flow metadata from the pod network by using protocols NetFlow, SFlow or IPFIX. Currently only supported on OVN-Kubernetes plugin. If unset, flows will not be exported to any collector.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ExportNetworkFlows" - }, - "kubeProxyConfig": { - "description": "kubeProxyConfig lets us configure desired proxy configuration, if deployKubeProxy is true. If not specified, sensible defaults will be chosen by OpenShift directly.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ProxyConfig" - }, - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "migration": { - "description": "migration enables and configures cluster network migration, for network changes that cannot be made instantly.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NetworkMigration" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "serviceNetwork": { - "description": "serviceNetwork is the ip address pool to use for Service IPs Currently, all existing network providers only support a single value here, but this is an array to allow for growth.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "useMultiNetworkPolicy": { - "description": "useMultiNetworkPolicy enables a controller which allows for MultiNetworkPolicy objects to be used on additional networks as created by Multus CNI. MultiNetworkPolicy are similar to NetworkPolicy objects, but NetworkPolicy objects only apply to the primary interface. With MultiNetworkPolicy, you can control the traffic that a pod can receive over the secondary interfaces. If unset, this property defaults to 'false' and MultiNetworkPolicy objects are ignored. If 'disableMultiNetwork' is 'true' then the value of this field is ignored.", - "type": "boolean" - } - } - }, - "com.github.openshift.api.operator.v1.NetworkStatus": { - "description": "NetworkStatus is detailed operator status, which is distilled up to the Network clusteroperator object.", - "type": "object", - "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.NoOverlayConfig": { - "description": "NoOverlayConfig contains configuration options for networks operating in no-overlay mode.", - "type": "object", - "required": [ - "outboundSNAT", - "routing" - ], - "properties": { - "outboundSNAT": { - "description": "outboundSNAT defines the SNAT behavior for outbound traffic from pods. Allowed values are \"Enabled\" and \"Disabled\". When set to \"Enabled\", SNAT is performed on outbound traffic from pods. When set to \"Disabled\", SNAT is not performed and pod IPs are preserved in outbound traffic. This field is required when the network operates in no-overlay mode. This field can be set to any value at installation time and can be changed afterwards.", - "type": "string" - }, - "routing": { - "description": "routing specifies whether the pod network routing is managed by OVN-Kubernetes or users. Allowed values are \"Managed\" and \"Unmanaged\". When set to \"Managed\", OVN-Kubernetes manages the pod network routing configuration through BGP. When set to \"Unmanaged\", users are responsible for configuring the pod network routing. This field is required when the network operates in no-overlay mode. This field is immutable once set.", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.NodeDisruptionPolicyClusterStatus": { - "description": "NodeDisruptionPolicyClusterStatus is the type for the status object, rendered by the controller as a merge of cluster defaults and user provided policies", - "type": "object", - "properties": { - "files": { - "description": "files is a list of MachineConfig file definitions and actions to take to changes on those paths", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeDisruptionPolicyStatusFile" - }, - "x-kubernetes-list-map-keys": [ - "path" - ], - "x-kubernetes-list-type": "map" - }, - "sshkey": { - "description": "sshkey is the overall sshkey MachineConfig definition", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeDisruptionPolicyStatusSSHKey" - }, - "units": { - "description": "units is a list MachineConfig unit definitions and actions to take on changes to those services", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeDisruptionPolicyStatusUnit" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.operator.v1.NodeDisruptionPolicyConfig": { - "description": "NodeDisruptionPolicyConfig is the overall spec definition for files/units/sshkeys", - "type": "object", - "properties": { - "files": { - "description": "files is a list of MachineConfig file definitions and actions to take to changes on those paths This list supports a maximum of 50 entries.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeDisruptionPolicySpecFile" - }, - "x-kubernetes-list-map-keys": [ - "path" - ], - "x-kubernetes-list-type": "map" - }, - "sshkey": { - "description": "sshkey maps to the ignition.sshkeys field in the MachineConfig object, definition an action for this will apply to all sshkey changes in the cluster", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeDisruptionPolicySpecSSHKey" - }, - "units": { - "description": "units is a list MachineConfig unit definitions and actions to take on changes to those services This list supports a maximum of 50 entries.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeDisruptionPolicySpecUnit" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.operator.v1.NodeDisruptionPolicySpecAction": { - "type": "object", - "required": [ - "type" - ], - "properties": { - "reload": { - "description": "reload specifies the service to reload, only valid if type is reload", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ReloadService" - }, - "restart": { - "description": "restart specifies the service to restart, only valid if type is restart", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.RestartService" - }, - "type": { - "description": "type represents the commands that will be carried out if this NodeDisruptionPolicySpecActionType is executed Valid values are Reboot, Drain, Reload, Restart, DaemonReload and None. reload/restart requires a corresponding service target specified in the reload/restart field. Other values require no further configuration", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "reload": "Reload", - "restart": "Restart" - } - } - ] - }, - "com.github.openshift.api.operator.v1.NodeDisruptionPolicySpecFile": { - "description": "NodeDisruptionPolicySpecFile is a file entry and corresponding actions to take and is used in the NodeDisruptionPolicyConfig object", - "type": "object", - "required": [ - "path", - "actions" - ], - "properties": { - "actions": { - "description": "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeDisruptionPolicySpecAction" - }, - "x-kubernetes-list-type": "atomic" - }, - "path": { - "description": "path is the location of a file being managed through a MachineConfig. The Actions in the policy will apply to changes to the file at this path.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.NodeDisruptionPolicySpecSSHKey": { - "description": "NodeDisruptionPolicySpecSSHKey is actions to take for any SSHKey change and is used in the NodeDisruptionPolicyConfig object", - "type": "object", - "required": [ - "actions" - ], - "properties": { - "actions": { - "description": "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeDisruptionPolicySpecAction" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.operator.v1.NodeDisruptionPolicySpecUnit": { - "description": "NodeDisruptionPolicySpecUnit is a systemd unit name and corresponding actions to take and is used in the NodeDisruptionPolicyConfig object", - "type": "object", - "required": [ - "name", - "actions" - ], - "properties": { - "actions": { - "description": "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeDisruptionPolicySpecAction" - }, - "x-kubernetes-list-type": "atomic" - }, - "name": { - "description": "name represents the service name of a systemd service managed through a MachineConfig Actions specified will be applied for changes to the named service. Service names should be of the format ${NAME}${SERVICETYPE} and can up to 255 characters long. ${NAME} must be atleast 1 character long and can only consist of alphabets, digits, \":\", \"-\", \"_\", \".\", and \"\\\". ${SERVICETYPE} must be one of \".service\", \".socket\", \".device\", \".mount\", \".automount\", \".swap\", \".target\", \".path\", \".timer\", \".snapshot\", \".slice\" or \".scope\".", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.NodeDisruptionPolicyStatus": { - "type": "object", - "properties": { - "clusterPolicies": { - "description": "clusterPolicies is a merge of cluster default and user provided node disruption policies.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeDisruptionPolicyClusterStatus" - } - } - }, - "com.github.openshift.api.operator.v1.NodeDisruptionPolicyStatusAction": { - "type": "object", - "required": [ - "type" - ], - "properties": { - "reload": { - "description": "reload specifies the service to reload, only valid if type is reload", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ReloadService" - }, - "restart": { - "description": "restart specifies the service to restart, only valid if type is restart", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.RestartService" - }, - "type": { - "description": "type represents the commands that will be carried out if this NodeDisruptionPolicyStatusActionType is executed Valid values are Reboot, Drain, Reload, Restart, DaemonReload, None and Special. reload/restart requires a corresponding service target specified in the reload/restart field. Other values require no further configuration", - "type": "string", - "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "reload": "Reload", - "restart": "Restart" - } - } - ] - }, - "com.github.openshift.api.operator.v1.NodeDisruptionPolicyStatusFile": { - "description": "NodeDisruptionPolicyStatusFile is a file entry and corresponding actions to take and is used in the NodeDisruptionPolicyClusterStatus object", - "type": "object", - "required": [ - "path", - "actions" - ], - "properties": { - "actions": { - "description": "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeDisruptionPolicyStatusAction" - }, - "x-kubernetes-list-type": "atomic" - }, - "path": { - "description": "path is the location of a file being managed through a MachineConfig. The Actions in the policy will apply to changes to the file at this path.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.NodeDisruptionPolicyStatusSSHKey": { - "description": "NodeDisruptionPolicyStatusSSHKey is actions to take for any SSHKey change and is used in the NodeDisruptionPolicyClusterStatus object", - "type": "object", - "required": [ - "actions" - ], - "properties": { - "actions": { - "description": "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeDisruptionPolicyStatusAction" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.operator.v1.NodeDisruptionPolicyStatusUnit": { - "description": "NodeDisruptionPolicyStatusUnit is a systemd unit name and corresponding actions to take and is used in the NodeDisruptionPolicyClusterStatus object", - "type": "object", - "required": [ - "name", - "actions" - ], - "properties": { - "actions": { - "description": "actions represents the series of commands to be executed on changes to the file at the corresponding file path. Actions will be applied in the order that they are set in this list. If there are other incoming changes to other MachineConfig entries in the same update that require a reboot, the reboot will supercede these actions. Valid actions are Reboot, Drain, Reload, DaemonReload and None. The Reboot action and the None action cannot be used in conjunction with any of the other actions. This list supports a maximum of 10 entries.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeDisruptionPolicyStatusAction" - }, - "x-kubernetes-list-type": "atomic" - }, - "name": { - "description": "name represents the service name of a systemd service managed through a MachineConfig Actions specified will be applied for changes to the named service. Service names should be of the format ${NAME}${SERVICETYPE} and can up to 255 characters long. ${NAME} must be atleast 1 character long and can only consist of alphabets, digits, \":\", \"-\", \"_\", \".\", and \"\\\". ${SERVICETYPE} must be one of \".service\", \".socket\", \".device\", \".mount\", \".automount\", \".swap\", \".target\", \".path\", \".timer\", \".snapshot\", \".slice\" or \".scope\".", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.NodePlacement": { - "description": "NodePlacement describes node scheduling configuration for an ingress controller.", - "type": "object", - "properties": { - "nodeSelector": { - "description": "nodeSelector is the node selector applied to ingress controller deployments.\n\nIf set, the specified selector is used and replaces the default.\n\nIf unset, the default depends on the value of the defaultPlacement field in the cluster config.openshift.io/v1/ingresses status.\n\nWhen defaultPlacement is Workers, the default is:\n\n kubernetes.io/os: linux\n node-role.kubernetes.io/worker: ''\n\nWhen defaultPlacement is ControlPlane, the default is:\n\n kubernetes.io/os: linux\n node-role.kubernetes.io/master: ''\n\nThese defaults are subject to change.\n\nNote that using nodeSelector.matchExpressions is not supported. Only nodeSelector.matchLabels may be used. This is a limitation of the Kubernetes API: the pod spec does not allow complex expressions for node selectors.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "tolerations": { - "description": "tolerations is a list of tolerations applied to ingress controller deployments.\n\nThe default is an empty list.\n\nSee https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - }, - "x-kubernetes-list-type": "atomic" - } - } - }, - "com.github.openshift.api.operator.v1.NodePortStrategy": { - "description": "NodePortStrategy holds parameters for the NodePortService endpoint publishing strategy.", - "type": "object", - "properties": { - "protocol": { - "description": "protocol specifies whether the IngressController expects incoming connections to use plain TCP or whether the IngressController expects PROXY protocol.\n\nPROXY protocol can be used with load balancers that support it to communicate the source addresses of client connections when forwarding those connections to the IngressController. Using PROXY protocol enables the IngressController to report those source addresses instead of reporting the load balancer's address in HTTP headers and logs. Note that enabling PROXY protocol on the IngressController will cause connections to fail if you are not using a load balancer that uses PROXY protocol to forward connections to the IngressController. See http://www.haproxy.org/download/2.2/doc/proxy-protocol.txt for information about PROXY protocol.\n\nThe following values are valid for this field:\n\n* The empty string. * \"TCP\". * \"PROXY\".\n\nThe empty string specifies the default, which is TCP without PROXY protocol. Note that the default is subject to change.", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.NodeStatus": { - "description": "NodeStatus provides information about the current state of a particular node managed by this operator.", - "type": "object", - "required": [ - "nodeName" - ], - "properties": { - "currentRevision": { - "description": "currentRevision is the generation of the most recently successful deployment. Can not be set on creation of a nodeStatus. Updates must only increase the value.", - "type": "integer", - "format": "int32" - }, - "lastFailedCount": { - "description": "lastFailedCount is how often the installer pod of the last failed revision failed.", - "type": "integer", - "format": "int32" - }, - "lastFailedReason": { - "description": "lastFailedReason is a machine readable failure reason string.", - "type": "string" - }, - "lastFailedRevision": { - "description": "lastFailedRevision is the generation of the deployment we tried and failed to deploy.", - "type": "integer", - "format": "int32" - }, - "lastFailedRevisionErrors": { - "description": "lastFailedRevisionErrors is a list of human readable errors during the failed deployment referenced in lastFailedRevision.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "lastFailedTime": { - "description": "lastFailedTime is the time the last failed revision failed the last time.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "lastFallbackCount": { - "description": "lastFallbackCount is how often a fallback to a previous revision happened.", - "type": "integer", - "format": "int32" - }, - "nodeName": { - "description": "nodeName is the name of the node", - "type": "string", - "default": "" - }, - "nodeUID": { - "description": "nodeUID is the UID of the node. This field is used to detect that a node has been deleted and recreated with the same name. When the UID changes, it indicates the node is a new instance and the controller should treat this status entry as stale. When omitted, UID-based node replacement detection is not available for this entry.", - "type": "string" - }, - "targetRevision": { - "description": "targetRevision is the generation of the deployment we're trying to apply. Can not be set on creation of a nodeStatus.", - "type": "integer", - "format": "int32" - } - } - }, - "com.github.openshift.api.operator.v1.OAuthAPIServerStatus": { - "type": "object", - "properties": { - "encryptionStatus": { - "description": "encryptionStatus contains status reports for the KMS plugin health and its key rotation.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.KMSEncryptionStatus" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the latest revision used as suffix of revisioned secrets like encryption-config. A new revision causes a new deployment of pods.", - "type": "integer", - "format": "int32" - } - } - }, - "com.github.openshift.api.operator.v1.OLM": { - "description": "OLM provides information to configure an operator to manage the OLM controllers\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OLMSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", + "capabilities": { + "description": "capabilities describes the state of optional, core cluster components.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OLMStatus" - } - } - }, - "com.github.openshift.api.operator.v1.OLMList": { - "description": "OLMList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterVersionCapabilitiesStatus" }, - "items": { - "description": "items contains the items", + "conditionalUpdateRisks": { + "description": "conditionalUpdateRisks contains the list of risks associated with conditionalUpdates. When performing a conditional update, all its associated risks will be compared with the set of accepted risks in the spec.desiredUpdate.acceptRisks field. If all risks for a conditional update are included in the spec.desiredUpdate.acceptRisks set, the conditional update can proceed, otherwise it is blocked. The risk names in the list must be unique. conditionalUpdateRisks must not contain more than 500 entries.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OLM" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.OLMSpec": { - "type": "object", - "required": [ - "managementState" - ], - "properties": { - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConditionalUpdateRisk" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map" }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" + "conditionalUpdates": { + "description": "conditionalUpdates contains the list of updates that may be recommended for this cluster if it meets specific required conditions. Consumers interested in the set of updates that are actually recommended for this cluster should use availableUpdates. This list may be empty if no updates are recommended, if the update service is unavailable, or if an empty or invalid channel has been specified.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConditionalUpdate" + }, + "x-kubernetes-list-type": "atomic" }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.operator.v1.OLMStatus": { - "type": "object", - "properties": { "conditions": { - "description": "conditions is a list of conditions and their status", + "description": "conditions provides information about the cluster version. The condition \"Available\" is set to true if the desiredUpdate has been reached. The condition \"Progressing\" is set to true if an update is being applied. The condition \"Degraded\" is set to true if an update is currently blocked by a temporary or permanent error. Conditions are only valid for the current desiredUpdate when metadata.generation is equal to status.generation.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterOperatorStatusCondition" }, "x-kubernetes-list-map-keys": [ "type" ], - "x-kubernetes-list-type": "map" + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "desired": { + "description": "desired is the version that the cluster is reconciling towards. If the cluster is not yet fully initialized desired will be set with the information available, which may be an image or a tag.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.Release" }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", + "history": { + "description": "history contains a list of the most recent versions applied to the cluster. This value may be empty during cluster startup, and then will be updated when a new update is being applied. The newest update is first in the list and it is ordered by recency. Updates in the history have state Completed if the rollout completed - if an update was failing or halfway applied the state will be Partial. Only a limited amount of update history is preserved.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.UpdateHistory" }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" + "x-kubernetes-list-type": "atomic" }, "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", + "description": "observedGeneration reports which version of the spec is being synced. If this value is not equal to metadata.generation, then the desired and conditions fields may represent a previous version.", "type": "integer", - "format": "int32", + "format": "int64", "default": 0 }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" + "versionHash": { + "description": "versionHash is a fingerprint of the content that the cluster will be updated with. It is used by the operator to avoid unnecessary work and is for internal use only.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.operator.v1.OVNKubernetesConfig": { - "description": "ovnKubernetesConfig contains the configuration parameters for networks using the ovn-kubernetes network project", + "com.github.openshift.api.config.v1.ComponentOverride": { + "description": "ComponentOverride allows overriding cluster version operator's behavior for a component.", "type": "object", + "required": [ + "kind", + "group", + "namespace", + "name", + "unmanaged" + ], "properties": { - "bgpManagedConfig": { - "description": "bgpManagedConfig configures the BGP properties for networks (default network or CUDNs) in no-overlay mode that specify routing=\"Managed\" in their noOverlayConfig. It is required when noOverlayConfig.routing is set to \"Managed\". When omitted, this means the user does not configure BGP for managed routing. This field can be set at installation time or on day 2, and can be modified at any time.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.BGPManagedConfig" - }, - "egressIPConfig": { - "description": "egressIPConfig holds the configuration for EgressIP options.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.EgressIPConfig" - }, - "gatewayConfig": { - "description": "gatewayConfig holds the configuration for node gateway options.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GatewayConfig" - }, - "genevePort": { - "description": "geneve port is the UDP port to be used by geneve encapulation. Default is 6081", - "type": "integer", - "format": "int64" - }, - "hybridOverlayConfig": { - "description": "hybridOverlayConfig configures an additional overlay network for peers that are not using OVN.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.HybridOverlayConfig" - }, - "ipsecConfig": { - "description": "ipsecConfig enables and configures IPsec for pods on the pod network within the cluster.", - "default": { - "mode": "Disabled" - }, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IPsecConfig" - }, - "ipv4": { - "description": "ipv4 allows users to configure IP settings for IPv4 connections. When ommitted, this means no opinions and the default configuration is used. Check individual fields within ipv4 for details of default values.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IPv4OVNKubernetesConfig" - }, - "ipv6": { - "description": "ipv6 allows users to configure IP settings for IPv6 connections. When ommitted, this means no opinions and the default configuration is used. Check individual fields within ipv4 for details of default values.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IPv6OVNKubernetesConfig" - }, - "mtu": { - "description": "mtu is the MTU to use for the tunnel interface. This must be 100 bytes smaller than the uplink mtu. Default is 1400", - "type": "integer", - "format": "int64" - }, - "noOverlayConfig": { - "description": "noOverlayConfig contains configuration for no-overlay mode. This configuration applies to the default network only. It is required when transport is \"NoOverlay\". When omitted, this means the user does not configure no-overlay mode options.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NoOverlayConfig" - }, - "policyAuditConfig": { - "description": "policyAuditConfig is the configuration for network policy audit events. If unset, reported defaults are used.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.PolicyAuditConfig" + "group": { + "description": "group identifies the API group that the kind is in.", + "type": "string", + "default": "" }, - "routeAdvertisements": { - "description": "routeAdvertisements determines if the functionality to advertise cluster network routes through a dynamic routing protocol, such as BGP, is enabled or not. This functionality is configured through the ovn-kubernetes RouteAdvertisements CRD. Requires the 'FRR' routing capability provider to be enabled as an additional routing capability. Allowed values are \"Enabled\", \"Disabled\" and ommited. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is \"Disabled\".", - "type": "string" + "kind": { + "description": "kind indentifies which object to override.", + "type": "string", + "default": "" }, - "transport": { - "description": "transport sets the transport mode for pods on the default network. Allowed values are \"NoOverlay\" and \"Geneve\". \"NoOverlay\" avoids tunnel encapsulation, routing pod traffic directly between nodes. \"Geneve\" encapsulates pod traffic using Geneve tunnels between nodes. When omitted, this means the user has no opinion and the platform chooses a reasonable default which is subject to change over time. The current default is \"Geneve\". \"NoOverlay\" can only be set at installation time and cannot be changed afterwards. \"Geneve\" may be set explicitly at any time to lock in the current default.", - "type": "string" + "name": { + "description": "name is the component's name.", + "type": "string", + "default": "" }, - "v4InternalSubnet": { - "description": "v4InternalSubnet is a v4 subnet used internally by ovn-kubernetes in case the default one is being already used by something else. It must not overlap with any other subnet being used by OpenShift or by the node network. The size of the subnet must be larger than the number of nodes. Default is 100.64.0.0/16", - "type": "string" + "namespace": { + "description": "namespace is the component's namespace. If the resource is cluster scoped, the namespace should be empty.", + "type": "string", + "default": "" }, - "v6InternalSubnet": { - "description": "v6InternalSubnet is a v6 subnet used internally by ovn-kubernetes in case the default one is being already used by something else. It must not overlap with any other subnet being used by OpenShift or by the node network. The size of the subnet must be larger than the number of nodes. Default is fd98::/64", - "type": "string" + "unmanaged": { + "description": "unmanaged controls if cluster version operator should stop managing the resources in this cluster. Default: false", + "type": "boolean", + "default": false } } }, - "com.github.openshift.api.operator.v1.OpenShiftAPIServer": { - "description": "OpenShiftAPIServer provides information to configure an operator to manage openshift-apiserver.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.ComponentRouteSpec": { + "description": "ComponentRouteSpec allows for configuration of a route's hostname and serving certificate.", "type": "object", "required": [ - "metadata", - "spec" + "namespace", + "name", + "hostname" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "hostname": { + "description": "hostname is the hostname that should be used by the route.", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "labels": { + "description": "labels defines additional labels to be applied to the route created for the component. These labels are used by the IngressController to determine which routes it should manage. Changing labels may cause the route to be reassigned to a different IngressController. When omitted, no additional labels are applied to the component route. When specified, labels must contain at least one entry, up to a maximum of 8. Label keys must be valid qualified names, consisting of a name segment and an optional prefix separated by a slash (/). The name segment must be at most 63 characters in length and must consist only of alphanumeric characters, dashes (-), underscores (_), and dots (.), and must start and end with alphanumeric characters. The prefix, if specified, must be a DNS subdomain: at most 253 characters in length, consisting of dot-separated segments where each segment starts and ends with an alphanumeric character. Label values must be either empty or 1-63 characters, consisting of alphanumeric characters, dashes (-), underscores (_), or dots (.), starting and ending with an alphanumeric character. Keys with the \"kubernetes.io/\", \"k8s.io/\", and \"openshift.io/\" prefixes are reserved and may not be used.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + }, + "x-kubernetes-map-type": "granular" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "name": { + "description": "name is the logical name of the route to customize.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of status.componentRoutes if the route is to be customized.", + "type": "string", + "default": "" }, - "spec": { - "description": "spec is the specification of the desired behavior of the OpenShift API Server.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OpenShiftAPIServerSpec" + "namespace": { + "description": "namespace is the namespace of the route to customize.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of status.componentRoutes if the route is to be customized.", + "type": "string", + "default": "" }, - "status": { - "description": "status defines the observed status of the OpenShift API Server.", + "servingCertKeyPairSecret": { + "description": "servingCertKeyPairSecret is a reference to a secret of type `kubernetes.io/tls` in the openshift-config namespace. The serving cert/key pair must match and will be used by the operator to fulfill the intent of serving with this name. If the custom hostname uses the default routing suffix of the cluster, the Secret specification for a serving certificate will not be needed.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OpenShiftAPIServerStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" } } }, - "com.github.openshift.api.operator.v1.OpenShiftAPIServerList": { - "description": "OpenShiftAPIServerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.ComponentRouteStatus": { + "description": "ComponentRouteStatus contains information allowing configuration of a route's hostname and serving certificate.", "type": "object", "required": [ - "metadata", - "items" + "namespace", + "name", + "defaultHostname", + "relatedObjects" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "conditions": { + "description": "conditions are used to communicate the state of the componentRoutes entry.\n\nSupported conditions include Available, Degraded and Progressing.\n\nIf available is true, the content served by the route can be accessed by users. This includes cases where a default may continue to serve content while the customized route specified by the cluster-admin is being configured.\n\nIf Degraded is true, that means something has gone wrong trying to handle the componentRoutes entry. The currentHostnames field may or may not be in effect.\n\nIf Progressing is true, that means the component is taking some action related to the componentRoutes entry.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" + }, + "consumingUsers": { + "description": "consumingUsers is a slice of ServiceAccounts that need to have read permission on the servingCertKeyPairSecret secret.", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "items": { - "description": "items contains the items", + "currentHostnames": { + "description": "currentHostnames is the list of current names used by the route. Typically, this list should consist of a single hostname, but if multiple hostnames are supported by the route the operator may write multiple entries to this list.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OpenShiftAPIServer" + "type": "string", + "default": "" } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.OpenShiftAPIServerSpec": { - "type": "object", - "required": [ - "managementState" - ], - "properties": { - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", + "defaultHostname": { + "description": "defaultHostname is the hostname of this route prior to customization.", "type": "string", "default": "" }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "name": { + "description": "name is the logical name of the route to customize. It does not have to be the actual name of a route resource but it cannot be renamed.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of spec.componentRoutes if the route is to be customized.", + "type": "string", + "default": "" }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" + "namespace": { + "description": "namespace is the namespace of the route to customize. It must be a real namespace. Using an actual namespace ensures that no two components will conflict and the same component can be installed multiple times.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of spec.componentRoutes if the route is to be customized.", + "type": "string", + "default": "" }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "relatedObjects": { + "description": "relatedObjects is a list of resources which are useful when debugging or inspecting how spec.componentRoutes is applied.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ObjectReference" + } } } }, - "com.github.openshift.api.operator.v1.OpenShiftAPIServerStatus": { + "com.github.openshift.api.config.v1.ConditionalUpdate": { + "description": "ConditionalUpdate represents an update which is recommended to some clusters on the version the current cluster is reconciling, but which may not be recommended for the current cluster.", "type": "object", + "required": [ + "release", + "risks" + ], "properties": { "conditions": { - "description": "conditions is a list of conditions and their status", + "description": "conditions represents the observations of the conditional update's current status. Known types are: * Recommended, for whether the update is recommended for the current cluster.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" }, "x-kubernetes-list-map-keys": [ "type" ], "x-kubernetes-list-type": "map" }, - "encryptionStatus": { - "description": "encryptionStatus contains status reports for the KMS plugin health and its key rotation.", + "release": { + "description": "release is the target of the update.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.KMSEncryptionStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.Release" + }, + "riskNames": { + "description": "riskNames represents the set of the names of conditionalUpdateRisks that are relevant to this update for some clusters. The Applies condition of each conditionalUpdateRisks entry declares if that risk applies to this cluster. A conditional update is accepted only if each of its risks either does not apply to the cluster or is considered acceptable by the cluster administrator. The latter means that the risk names are included in value of the spec.desiredUpdate.acceptRisks field. Entries must be unique and must not exceed 256 characters. riskNames must not contain more than 500 entries.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", + "risks": { + "description": "risks represents the range of issues associated with updating to the target release. The cluster-version operator will evaluate all entries, and only recommend the update if there is at least one entry and all entries recommend the update.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConditionalUpdateRisk" }, "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", "name" ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + } + } + }, + "com.github.openshift.api.config.v1.ConditionalUpdateRisk": { + "description": "ConditionalUpdateRisk represents a reason and cluster-state for not recommending a conditional update.", + "type": "object", + "required": [ + "url", + "name", + "message", + "matchingRules" + ], + "properties": { + "conditions": { + "description": "conditions represents the observations of the conditional update risk's current status. Known types are: * Applies, for whether the risk applies to the current cluster. The condition's types in the list must be unique. conditions must not contain more than one entry.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], "x-kubernetes-list-type": "map" }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" + "matchingRules": { + "description": "matchingRules is a slice of conditions for deciding which clusters match the risk and which do not. The slice is ordered by decreasing precedence. The cluster-version operator will walk the slice in order, and stop after the first it can successfully evaluate. If no condition can be successfully evaluated, the update will not be recommended.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterCondition" + }, + "x-kubernetes-list-type": "atomic" }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" + "message": { + "description": "message provides additional information about the risk of updating, in the event that matchingRules match the cluster state. This is only to be consumed by humans. It may contain Line Feed characters (U+000A), which should be rendered as new lines.", + "type": "string", + "default": "" }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 + "name": { + "description": "name is the CamelCase reason for not recommending a conditional update, in the event that matchingRules match the cluster state.", + "type": "string", + "default": "" }, - "version": { - "description": "version is the level this availability applies to", + "url": { + "description": "url contains information about this risk.", + "type": "string", + "default": "" + } + } + }, + "com.github.openshift.api.config.v1.ConfigMapFileReference": { + "description": "ConfigMapFileReference references a config map in a specific namespace. The namespace must be specified at the point of use.", + "type": "object", + "required": [ + "name" + ], + "properties": { + "key": { + "description": "key allows pointing to a specific key/value inside of the configmap. This is useful for logical file references.", "type": "string" + }, + "name": { + "type": "string", + "default": "" + } + } + }, + "com.github.openshift.api.config.v1.ConfigMapNameReference": { + "description": "ConfigMapNameReference references a config map in a specific namespace. The namespace must be specified at the point of use.", + "type": "object", + "required": [ + "name" + ], + "properties": { + "name": { + "description": "name is the metadata.name of the referenced config map", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.operator.v1.OpenShiftControllerManager": { - "description": "OpenShiftControllerManager provides information to configure an operator to manage openshift-controller-manager.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.Console": { + "description": "Console holds cluster-wide configuration for the web console, including the logout URL, and reports the public URL of the console. The canonical name is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "metadata", "spec" ], "properties": { @@ -36388,17 +2109,29 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { + "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OpenShiftControllerManagerSpec" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConsoleSpec" }, "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OpenShiftControllerManagerStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConsoleStatus" + } + } + }, + "com.github.openshift.api.config.v1.ConsoleAuthentication": { + "description": "ConsoleAuthentication defines a list of optional configuration for console authentication.", + "type": "object", + "properties": { + "logoutRedirect": { + "description": "An optional, absolute URL to redirect web browsers to after logging out of the console. If not specified, it will redirect to the default login page. This is required when using an identity provider that supports single sign-on (SSO) such as: - OpenID (Keycloak, Azure) - RequestHeader (GSSAPI, SSPI, SAML) - OAuth (GitHub, GitLab, Google) Logging out of the console will destroy the user's token. The logoutRedirect provides the user the option to perform single logout (SLO) through the identity provider to destroy their single sign-on session.", + "type": "string" } } }, - "com.github.openshift.api.operator.v1.OpenShiftControllerManagerList": { - "description": "OpenShiftControllerManagerList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.ConsoleList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "metadata", @@ -36410,11 +2143,10 @@ "type": "string" }, "items": { - "description": "items contains the items", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OpenShiftControllerManager" + "$ref": "#/definitions/com.github.openshift.api.config.v1.Console" } }, "kind": { @@ -36424,383 +2156,319 @@ "metadata": { "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.operator.v1.OpenShiftControllerManagerSpec": { - "type": "object", - "required": [ - "managementState" - ], - "properties": { - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.operator.v1.OpenShiftControllerManagerStatus": { - "type": "object", - "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.OpenShiftSDNConfig": { - "description": "OpenShiftSDNConfig was used to configure the OpenShift SDN plugin. It is no longer used.", - "type": "object", - "required": [ - "mode" - ], - "properties": { - "enableUnidling": { - "description": "enableUnidling controls whether or not the service proxy will support idling and unidling of services. By default, unidling is enabled.", - "type": "boolean" - }, - "mode": { - "description": "mode is one of \"Multitenant\", \"Subnet\", or \"NetworkPolicy\"", - "type": "string", - "default": "" - }, - "mtu": { - "description": "mtu is the mtu to use for the tunnel interface. Defaults to 1450 if unset. This must be 50 bytes smaller than the machine's uplink.", - "type": "integer", - "format": "int64" - }, - "useExternalOpenvswitch": { - "description": "useExternalOpenvswitch used to control whether the operator would deploy an OVS DaemonSet itself or expect someone else to start OVS. As of 4.6, OVS is always run as a system service, and this flag is ignored.", - "type": "boolean" - }, - "vxlanPort": { - "description": "vxlanPort is the port to use for all vxlan packets. The default is 4789.", - "type": "integer", - "format": "int64" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } } }, - "com.github.openshift.api.operator.v1.OpenStackLoadBalancerParameters": { - "description": "OpenStackLoadBalancerParameters provides configuration settings that are specific to OpenStack load balancers.", + "com.github.openshift.api.config.v1.ConsoleSpec": { + "description": "ConsoleSpec is the specification of the desired behavior of the Console.", "type": "object", "properties": { - "floatingIP": { - "description": "floatingIP specifies the IP address that the load balancer will use. When not specified, an IP address will be assigned randomly by the OpenStack cloud provider. When specified, the floating IP has to be pre-created. If the specified value is not a floating IP or is already claimed, the OpenStack cloud provider won't be able to provision the load balancer. This field may only be used if the IngressController has External scope. This value must be a valid IPv4 or IPv6 address.", - "type": "string" + "authentication": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConsoleAuthentication" } } }, - "com.github.openshift.api.operator.v1.OperatorCondition": { - "description": "OperatorCondition is just the standard condition fields.", + "com.github.openshift.api.config.v1.ConsoleStatus": { + "description": "ConsoleStatus defines the observed status of the Console.", "type": "object", - "required": [ - "type", - "status", - "lastTransitionTime" - ], "properties": { - "lastTransitionTime": { - "description": "lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "type": "string" - }, - "reason": { - "type": "string" - }, - "status": { - "description": "status of the condition, one of True, False, Unknown.", - "type": "string", - "default": "" - }, - "type": { - "description": "type of condition in CamelCase or in foo.example.com/CamelCase.", + "consoleURL": { + "description": "The URL for the console. This will be derived from the host for the route that is created for the console.", "type": "string", "default": "" } } }, - "com.github.openshift.api.operator.v1.OperatorSpec": { - "description": "OperatorSpec contains common fields operators need. It is intended to be anonymous included inside of the Spec struct for your particular operator.", + "com.github.openshift.api.config.v1.Custom": { + "description": "Custom provides the custom configuration of gatherers", "type": "object", "required": [ - "managementState" + "configs" ], "properties": { - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" + "configs": { + "description": "configs is a required list of gatherers configurations that can be used to enable or disable specific gatherers. It may not exceed 100 items and each gatherer can be present only once. It is possible to disable an entire set of gatherers while allowing a specific function within that set. The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.GathererConfig" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map" + } + } + }, + "com.github.openshift.api.config.v1.CustomFeatureGates": { + "type": "object", + "properties": { + "disabled": { + "description": "disabled is a list of all feature gates that you want to force off", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "enabled": { + "description": "enabled is a list of all feature gates that you want to force on", + "type": "array", + "items": { + "type": "string", + "default": "" + } } } }, - "com.github.openshift.api.operator.v1.OperatorStatus": { + "com.github.openshift.api.config.v1.CustomTLSProfile": { + "description": "CustomTLSProfile is a user-defined TLS security profile. Be extremely careful using a custom TLS profile as invalid configurations can be catastrophic.", "type": "object", + "required": [ + "ciphers", + "minTLSVersion" + ], "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", + "ciphers": { + "description": "ciphers is used to specify the cipher algorithms that are negotiated during the TLS handshake. Operators may remove entries that their operands do not support. For example, to use only ECDHE-RSA-AES128-GCM-SHA256 (yaml):\n\n ciphers:\n - ECDHE-RSA-AES128-GCM-SHA256\n\nTLS 1.3 cipher suites (e.g. TLS_AES_128_GCM_SHA256) are not configurable and are always enabled when TLS 1.3 is negotiated.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" + "type": "string", + "default": "" }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" + "x-kubernetes-list-type": "atomic" }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", + "groups": { + "description": "groups is an optional, ordered field used to specify the supported groups (formerly known as elliptic curves) that are used during the TLS handshake. The order of the groups represents a suggested preference, with the most preferred group first. Note that not all platform components honor the ordering: Go-based components use Go's internal preference order and treat this list as a filter of allowed groups rather than an ordered preference. Operators may remove entries their operands do not support.\n\nWhen omitted, this means no opinion and the platform is left to choose reasonable defaults which are subject to change over time and may be different per platform component depending on the underlying TLS libraries they use. If specified, the list must contain at least one and at most 7 groups, and each group must be unique.\n\nFor example, to use X25519 and secp256r1 (yaml):\n\n groups:\n - X25519\n - secp256r1", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" + "type": "string", + "default": "" }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 + "x-kubernetes-list-type": "set" }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" + "minTLSVersion": { + "description": "minTLSVersion is used to specify the minimal version of the TLS protocol that is negotiated during the TLS handshake. For example, to use TLS versions 1.1, 1.2 and 1.3 (yaml):\n\n minTLSVersion: VersionTLS11", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.operator.v1.PartialSelector": { - "description": "PartialSelector provides label selector(s) that can be used to match machine management resources.", + "com.github.openshift.api.config.v1.DNS": { + "description": "DNS holds cluster-wide information about DNS. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "machineResourceSelector" + "spec" ], "properties": { - "machineResourceSelector": { - "description": "machineResourceSelector is a label selector that can be used to select machine resources like MachineSets.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec holds user settable values for configuration", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.DNSSpec" + }, + "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.DNSStatus" } } }, - "com.github.openshift.api.operator.v1.Perspective": { - "description": "Perspective defines a perspective that cluster admins want to show/hide in the perspective switcher dropdown", + "com.github.openshift.api.config.v1.DNSList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "id", - "visibility" + "metadata", + "items" ], "properties": { - "id": { - "description": "id defines the id of the perspective. Example: \"dev\", \"admin\". The available perspective ids can be found in the code snippet section next to the yaml editor. Incorrect or unknown ids will be ignored.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "pinnedResources": { - "description": "pinnedResources defines the list of default pinned resources that users will see on the perspective navigation if they have not customized these pinned resources themselves. The list of available Kubernetes resources could be read via `kubectl api-resources`. The console will also provide a configuration UI and a YAML snippet that will list the available resources that can be pinned to the navigation. Incorrect or unknown resources will be ignored.", + "items": { "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.PinnedResourceReference" + "$ref": "#/definitions/com.github.openshift.api.config.v1.DNS" } }, - "visibility": { - "description": "visibility defines the state of perspective along with access review checks if needed for that perspective.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.PerspectiveVisibility" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } } }, - "com.github.openshift.api.operator.v1.PerspectiveVisibility": { - "description": "PerspectiveVisibility defines the criteria to show/hide a perspective", + "com.github.openshift.api.config.v1.DNSPlatformSpec": { + "description": "DNSPlatformSpec holds cloud-provider-specific configuration for DNS administration.", "type": "object", "required": [ - "state" + "type" ], "properties": { - "accessReview": { - "description": "accessReview defines required and missing access review checks.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ResourceAttributesAccessReview" + "aws": { + "description": "aws contains DNS configuration specific to the Amazon Web Services cloud provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.AWSDNSSpec" }, - "state": { - "description": "state defines the perspective is enabled or disabled or access review check is required.", + "type": { + "description": "type is the underlying infrastructure provider for the cluster. Allowed values: \"\", \"AWS\".\n\nIndividual components may not support all platforms, and must handle unrecognized platforms with best-effort defaults.", "type": "string", "default": "" } }, "x-kubernetes-unions": [ { - "discriminator": "state", + "discriminator": "type", "fields-to-discriminateBy": { - "accessReview": "AccessReview" + "aws": "AWS" } } ] }, - "com.github.openshift.api.operator.v1.PinnedResourceReference": { - "description": "PinnedResourceReference includes the group, version and type of resource", + "com.github.openshift.api.config.v1.DNSSpec": { "type": "object", "required": [ - "group", - "version", - "resource" + "baseDomain" ], "properties": { - "group": { - "description": "group is the API Group of the Resource. Enter empty string for the core group. This value should consist of only lowercase alphanumeric characters, hyphens and periods. Example: \"\", \"apps\", \"build.openshift.io\", etc.", + "baseDomain": { + "description": "baseDomain is the base domain of the cluster. All managed DNS records will be sub-domains of this base.\n\nFor example, given the base domain `openshift.example.com`, an API server DNS record may be created for `cluster-api.openshift.example.com`.\n\nOnce set, this field cannot be changed.", "type": "string", "default": "" }, - "resource": { - "description": "resource is the type that is being referenced. It is normally the plural form of the resource kind in lowercase. This value should consist of only lowercase alphanumeric characters and hyphens. Example: \"deployments\", \"deploymentconfigs\", \"pods\", etc.", - "type": "string", - "default": "" + "platform": { + "description": "platform holds configuration specific to the underlying infrastructure provider for DNS. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.DNSPlatformSpec" }, - "version": { - "description": "version is the API Version of the Resource. This value should consist of only lowercase alphanumeric characters. Example: \"v1\", \"v1beta1\", etc.", - "type": "string", - "default": "" + "privateZone": { + "description": "privateZone is the location where all the DNS records that are only available internally to the cluster exist.\n\nIf this field is nil, no private records should be created.\n\nOnce set, this field cannot be changed.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.DNSZone" + }, + "publicZone": { + "description": "publicZone is the location where all the DNS records that are publicly accessible to the internet exist.\n\nIf this field is nil, no public records should be created.\n\nOnce set, this field cannot be changed.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.DNSZone" } } }, - "com.github.openshift.api.operator.v1.PolicyAuditConfig": { + "com.github.openshift.api.config.v1.DNSStatus": { + "type": "object" + }, + "com.github.openshift.api.config.v1.DNSZone": { + "description": "DNSZone is used to define a DNS hosted zone. A zone can be identified by an ID or tags.", "type": "object", "properties": { - "destination": { - "description": "destination is the location for policy log messages. Regardless of this config, persistent logs will always be dumped to the host at /var/log/ovn/ however Additionally syslog output may be configured as follows. Valid values are: - \"libc\" -> to use the libc syslog() function of the host node's journdald process - \"udp:host:port\" -> for sending syslog over UDP - \"unix:file\" -> for using the UNIX domain socket directly - \"null\" -> to discard all messages logged to syslog The default is \"null\"", + "id": { + "description": "id is the identifier that can be used to find the DNS hosted zone.\n\non AWS zone can be fetched using `ID` as id in [1] on Azure zone can be fetched using `ID` as a pre-determined name in [2], on GCP zone can be fetched using `ID` as a pre-determined name in [3].\n\n[1]: https://docs.aws.amazon.com/cli/latest/reference/route53/get-hosted-zone.html#options [2]: https://docs.microsoft.com/en-us/cli/azure/network/dns/zone?view=azure-cli-latest#az-network-dns-zone-show [3]: https://cloud.google.com/dns/docs/reference/v1/managedZones/get", "type": "string" }, - "maxFileSize": { - "description": "maxFilesSize is the max size an ACL_audit log file is allowed to reach before rotation occurs Units are in MB and the Default is 50MB", - "type": "integer", - "format": "int64" - }, - "maxLogFiles": { - "description": "maxLogFiles specifies the maximum number of ACL_audit log files that can be present.", - "type": "integer", - "format": "int32" - }, - "rateLimit": { - "description": "rateLimit is the approximate maximum number of messages to generate per-second per-node. If unset the default of 20 msg/sec is used.", - "type": "integer", - "format": "int64" - }, - "syslogFacility": { - "description": "syslogFacility the RFC5424 facility for generated messages, e.g. \"kern\". Default is \"local0\"", - "type": "string" + "tags": { + "description": "tags can be used to query the DNS hosted zone.\n\non AWS, resourcegroupstaggingapi [1] can be used to fetch a zone using `Tags` as tag-filters,\n\n[1]: https://docs.aws.amazon.com/cli/latest/reference/resourcegroupstaggingapi/get-resources.html#options", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + } + } + }, + "com.github.openshift.api.config.v1.DelegatedAuthentication": { + "description": "DelegatedAuthentication allows authentication to be disabled.", + "type": "object", + "properties": { + "disabled": { + "description": "disabled indicates that authentication should be disabled. By default it will use delegated authentication.", + "type": "boolean" + } + } + }, + "com.github.openshift.api.config.v1.DelegatedAuthorization": { + "description": "DelegatedAuthorization allows authorization to be disabled.", + "type": "object", + "properties": { + "disabled": { + "description": "disabled indicates that authorization should be disabled. By default it will use delegated authorization.", + "type": "boolean" + } + } + }, + "com.github.openshift.api.config.v1.DeprecatedWebhookTokenAuthenticator": { + "description": "deprecatedWebhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator. It's the same as WebhookTokenAuthenticator but it's missing the 'required' validation on KubeConfig field.", + "type": "object", + "required": [ + "kubeConfig" + ], + "properties": { + "kubeConfig": { + "description": "kubeConfig contains kube config file data which describes how to access the remote webhook service. For further details, see: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication The key \"kubeConfig\" is used to locate the data. If the secret or expected key is not found, the webhook is not honored. If the specified kube config data is not valid, the webhook is not honored. The namespace for this secret is determined by the point of use.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" } } }, - "com.github.openshift.api.operator.v1.PrivateStrategy": { - "description": "PrivateStrategy holds parameters for the Private endpoint publishing strategy.", + "com.github.openshift.api.config.v1.EquinixMetalPlatformSpec": { + "description": "EquinixMetalPlatformSpec holds the desired state of the Equinix Metal infrastructure provider. This only includes fields that can be modified in the cluster.", + "type": "object" + }, + "com.github.openshift.api.config.v1.EquinixMetalPlatformStatus": { + "description": "EquinixMetalPlatformStatus holds the current status of the Equinix Metal infrastructure provider.", "type": "object", "properties": { - "protocol": { - "description": "protocol specifies whether the IngressController expects incoming connections to use plain TCP or whether the IngressController expects PROXY protocol.\n\nPROXY protocol can be used with load balancers that support it to communicate the source addresses of client connections when forwarding those connections to the IngressController. Using PROXY protocol enables the IngressController to report those source addresses instead of reporting the load balancer's address in HTTP headers and logs. Note that enabling PROXY protocol on the IngressController will cause connections to fail if you are not using a load balancer that uses PROXY protocol to forward connections to the IngressController. See http://www.haproxy.org/download/2.2/doc/proxy-protocol.txt for information about PROXY protocol.\n\nThe following values are valid for this field:\n\n* The empty string. * \"TCP\". * \"PROXY\".\n\nThe empty string specifies the default, which is TCP without PROXY protocol. Note that the default is subject to change.", + "apiServerInternalIP": { + "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.", + "type": "string" + }, + "ingressIP": { + "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.", "type": "string" } } }, - "com.github.openshift.api.operator.v1.ProjectAccess": { - "description": "ProjectAccess contains options for project access roles", + "com.github.openshift.api.config.v1.EtcdConnectionInfo": { + "description": "EtcdConnectionInfo holds information necessary for connecting to an etcd server", "type": "object", + "required": [ + "ca", + "certFile", + "keyFile" + ], "properties": { - "availableClusterRoles": { - "description": "availableClusterRoles is the list of ClusterRole names that are assignable to users through the project access tab.", + "ca": { + "description": "ca is a file containing trusted roots for the etcd server certificates", + "type": "string", + "default": "" + }, + "certFile": { + "description": "certFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" + }, + "keyFile": { + "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "type": "string", + "default": "" + }, + "urls": { + "description": "urls are the URLs for etcd", "type": "array", "items": { "type": "string", @@ -36809,78 +2477,37 @@ } } }, - "com.github.openshift.api.operator.v1.ProviderLoadBalancerParameters": { - "description": "ProviderLoadBalancerParameters holds desired load balancer information specific to the underlying infrastructure provider.", + "com.github.openshift.api.config.v1.EtcdStorageConfig": { "type": "object", "required": [ - "type" + "ca", + "certFile", + "keyFile", + "storagePrefix" ], "properties": { - "aws": { - "description": "aws provides configuration settings that are specific to AWS load balancers.\n\nIf empty, defaults will be applied. See specific aws fields for details about their defaults.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.AWSLoadBalancerParameters" - }, - "gcp": { - "description": "gcp provides configuration settings that are specific to GCP load balancers.\n\nIf empty, defaults will be applied. See specific gcp fields for details about their defaults.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GCPLoadBalancerParameters" - }, - "ibm": { - "description": "ibm provides configuration settings that are specific to IBM Cloud load balancers.\n\nIf empty, defaults will be applied. See specific ibm fields for details about their defaults.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IBMLoadBalancerParameters" + "ca": { + "description": "ca is a file containing trusted roots for the etcd server certificates", + "type": "string", + "default": "" }, - "openstack": { - "description": "openstack provides configuration settings that are specific to OpenStack load balancers.\n\nIf empty, defaults will be applied. See specific openstack fields for details about their defaults.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OpenStackLoadBalancerParameters" + "certFile": { + "description": "certFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" }, - "type": { - "description": "type is the underlying infrastructure provider for the load balancer. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"IBM\", \"Nutanix\", \"OpenStack\", and \"VSphere\".", + "keyFile": { + "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", "type": "string", "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "aws": "AWS", - "gcp": "GCP", - "ibm": "IBM", - "openstack": "OpenStack" - } - } - ] - }, - "com.github.openshift.api.operator.v1.ProxyConfig": { - "description": "ProxyConfig defines the configuration knobs for kubeproxy All of these are optional and have sensible defaults", - "type": "object", - "properties": { - "bindAddress": { - "description": "The address to \"bind\" on Defaults to 0.0.0.0", - "type": "string" }, - "iptablesSyncPeriod": { - "description": "An internal kube-proxy parameter. In older releases of OCP, this sometimes needed to be adjusted in large clusters for performance reasons, but this is no longer necessary, and there is no reason to change this from the default value. Default: 30s", - "type": "string" + "storagePrefix": { + "description": "storagePrefix is the path within etcd that the OpenShift resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located.", + "type": "string", + "default": "" }, - "proxyArguments": { - "description": "Any additional arguments to pass to the kubeproxy process", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - } - } - }, - "com.github.openshift.api.operator.v1.QuickStarts": { - "description": "QuickStarts allow cluster admins to customize available ConsoleQuickStart resources.", - "type": "object", - "properties": { - "disabled": { - "description": "disabled is a list of ConsoleQuickStart resource names that are not shown to users.", + "urls": { + "description": "urls are the URLs for etcd", "type": "array", "items": { "type": "string", @@ -36889,75 +2516,89 @@ } } }, - "com.github.openshift.api.operator.v1.ReloadService": { - "description": "ReloadService allows the user to specify the services to be reloaded", + "com.github.openshift.api.config.v1.ExternalClaimsSource": { + "description": "ExternalClaimsSource provides the configuration for a single external claim source.", "type": "object", "required": [ - "serviceName" + "url", + "mappings" ], "properties": { - "serviceName": { - "description": "serviceName is the full name (e.g. crio.service) of the service to be reloaded Service names should be of the format ${NAME}${SERVICETYPE} and can up to 255 characters long. ${NAME} must be atleast 1 character long and can only consist of alphabets, digits, \":\", \"-\", \"_\", \".\", and \"\\\". ${SERVICETYPE} must be one of \".service\", \".socket\", \".device\", \".mount\", \".automount\", \".swap\", \".target\", \".path\", \".timer\", \".snapshot\", \".slice\" or \".scope\".", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1.ResourceAttributesAccessReview": { - "description": "ResourceAttributesAccessReview defines the visibility of the perspective depending on the access review checks. `required` and `missing` can work together esp. in the case where the cluster admin wants to show another perspective to users without specific permissions. Out of `required` and `missing` atleast one property should be non-empty.", - "type": "object", - "properties": { - "missing": { - "description": "missing defines a list of permission checks. The perspective will only be shown when at least one check fails. When omitted, the access review is skipped and the perspective will not be shown unless it is required to do so based on the configuration of the required access review list.", + "authentication": { + "description": "authentication is an optional field that configures how the apiserver authenticates with an external claims source. When not specified, anonymous authentication is used which means no 'Authorization' header is sent in the HTTP request to fetch the external claims.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalSourceAuthentication" + }, + "mappings": { + "description": "mappings is a required list of the claim and response handling expression pairs that produces the claims from the external source. mappings must have at least 1 entry and must not exceed 16 entries. Entries must have a unique name across all external claim sources.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceAttributes" - } + "$ref": "#/definitions/com.github.openshift.api.config.v1.SourcedClaimMapping" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map" }, - "required": { - "description": "required defines a list of permission checks. The perspective will only be shown when all checks are successful. When omitted, the access review is skipped and the perspective will not be shown unless it is required to do so based on the configuration of the missing access review list.", + "predicates": { + "description": "predicates is an optional list of constraints in which claims should attempt to be fetched from this external source.\n\nWhen omitted, claims are always fetched from this external source.\n\nWhen specified, all predicates must evaluate to 'true' before claims are attempted to be fetched from this external source. predicates must have at least 1 entry and must not exceed 16 entries. Entries must have unique expressions.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceAttributes" - } - } - } - }, - "com.github.openshift.api.operator.v1.RestartService": { - "description": "RestartService allows the user to specify the services to be restarted", - "type": "object", - "required": [ - "serviceName" - ], - "properties": { - "serviceName": { - "description": "serviceName is the full name (e.g. crio.service) of the service to be restarted Service names should be of the format ${NAME}${SERVICETYPE} and can up to 255 characters long. ${NAME} must be atleast 1 character long and can only consist of alphabets, digits, \":\", \"-\", \"_\", \".\", and \"\\\". ${SERVICETYPE} must be one of \".service\", \".socket\", \".device\", \".mount\", \".automount\", \".swap\", \".target\", \".path\", \".timer\", \".snapshot\", \".slice\" or \".scope\".", - "type": "string", - "default": "" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalSourcePredicate" + }, + "x-kubernetes-list-map-keys": [ + "expression" + ], + "x-kubernetes-list-type": "map" + }, + "tls": { + "description": "tls is an optional field that configures the http client TLS settings when fetching external claims from this source.\n\nWhen omitted, system default TLS settings will be used for fetching claims from the external source.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalSourceTLS" + }, + "url": { + "description": "url is a required configuration of the URL for which the external claims are located.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.SourceURL" } } }, - "com.github.openshift.api.operator.v1.RouteAdmissionPolicy": { - "description": "RouteAdmissionPolicy is an admission policy for allowing new route claims.", + "com.github.openshift.api.config.v1.ExternalIPConfig": { + "description": "ExternalIPConfig specifies some IP blocks relevant for the ExternalIP field of a Service resource.", "type": "object", "properties": { - "namespaceOwnership": { - "description": "namespaceOwnership describes how host name claims across namespaces should be handled.\n\nValue must be one of:\n\n- Strict: Do not allow routes in different namespaces to claim the same host.\n\n- InterNamespaceAllowed: Allow routes to claim different paths of the same\n host name across namespaces.\n\nIf empty, the default is Strict.", - "type": "string" + "autoAssignCIDRs": { + "description": "autoAssignCIDRs is a list of CIDRs from which to automatically assign Service.ExternalIP. These are assigned when the service is of type LoadBalancer. In general, this is only useful for bare-metal clusters. In Openshift 3.x, this was misleadingly called \"IngressIPs\". Automatically assigned External IPs are not affected by any ExternalIPPolicy rules. Currently, only one entry may be provided.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "wildcardPolicy": { - "description": "wildcardPolicy describes how routes with wildcard policies should be handled for the ingress controller. WildcardPolicy controls use of routes [1] exposed by the ingress controller based on the route's wildcard policy.\n\n[1] https://github.com/openshift/api/blob/master/route/v1/types.go\n\nNote: Updating WildcardPolicy from WildcardsAllowed to WildcardsDisallowed will cause admitted routes with a wildcard policy of Subdomain to stop working. These routes must be updated to a wildcard policy of None to be readmitted by the ingress controller.\n\nWildcardPolicy supports WildcardsAllowed and WildcardsDisallowed values.\n\nIf empty, defaults to \"WildcardsDisallowed\".", - "type": "string" + "policy": { + "description": "policy is a set of restrictions applied to the ExternalIP field. If nil or empty, then ExternalIP is not allowed to be set.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalIPPolicy" } } }, - "com.github.openshift.api.operator.v1.SFlowConfig": { + "com.github.openshift.api.config.v1.ExternalIPPolicy": { + "description": "ExternalIPPolicy configures exactly which IPs are allowed for the ExternalIP field in a Service. If the zero struct is supplied, then none are permitted. The policy controller always allows automatically assigned external IPs.", "type": "object", "properties": { - "collectors": { - "description": "sFlowCollectors is list of strings formatted as ip:port with a maximum of ten items", + "allowedCIDRs": { + "description": "allowedCIDRs is the list of allowed CIDRs.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "rejectedCIDRs": { + "description": "rejectedCIDRs is the list of disallowed CIDRs. These take precedence over allowedCIDRs.", "type": "array", "items": { "type": "string", @@ -36967,143 +2608,114 @@ } } }, - "com.github.openshift.api.operator.v1.SecretsStoreCSIDriverConfigSpec": { - "description": "SecretsStoreCSIDriverConfigSpec defines properties that can be configured for the Secrets Store CSI driver.", + "com.github.openshift.api.config.v1.ExternalPlatformSpec": { + "description": "ExternalPlatformSpec holds the desired state for the generic External infrastructure provider.", "type": "object", "properties": { - "secretRotation": { - "description": "secretRotation controls automatic secret rotation behavior. When omitted, secret rotation is enabled with a default poll interval of 2 minutes.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.SecretsStoreSecretRotation" - }, - "tokenRequests": { - "description": "tokenRequests controls service account token configuration for workload identity federation (WIF) with cloud providers. When omitted, the operator preserves any existing tokenRequests already configured on the CSIDriver object without modification.", + "platformName": { + "description": "platformName holds the arbitrary string representing the infrastructure provider name, expected to be set at the installation time. This field is solely for informational and reporting purposes and is not expected to be used for decision-making.", + "type": "string", + "default": "Unknown" + } + } + }, + "com.github.openshift.api.config.v1.ExternalPlatformStatus": { + "description": "ExternalPlatformStatus holds the current status of the generic External infrastructure provider.", + "type": "object", + "properties": { + "cloudControllerManager": { + "description": "cloudControllerManager contains settings specific to the external Cloud Controller Manager (a.k.a. CCM or CPI). When omitted, new nodes will be not tainted and no extra initialization from the cloud controller manager is expected.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.SecretsStoreTokenRequests" + "$ref": "#/definitions/com.github.openshift.api.config.v1.CloudControllerManagerStatus" } } }, - "com.github.openshift.api.operator.v1.SecretsStoreSecretRotation": { - "description": "SecretsStoreSecretRotation configures the automatic secret rotation behavior for the Secrets Store CSI driver.", + "com.github.openshift.api.config.v1.ExternalSourceAuthentication": { + "description": "ExternalSourceAuthentication configures how the apiserver should attempt to authenticate with an external claims source.", "type": "object", "required": [ "type" ], "properties": { - "custom": { - "description": "custom holds the custom rotation configuration. Only valid when type is \"Custom\".", + "clientCredential": { + "description": "clientCredential configures the client credentials and token endpoint to use to get an access token. clientCredential is required when type is 'ClientCredential', and forbidden otherwise.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.CustomSecretRotation" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClientCredentialConfig" }, "type": { - "description": "type determines the secret rotation behavior. When \"None\", secret rotation is disabled and secrets are only fetched at initial pod mount time. When \"Custom\", secret rotation is enabled with the configuration specified in the custom field.", - "type": "string" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "custom": "Custom" - } + "description": "type is a required field that sets the type of authentication method used by the authenticator when fetching external claims.\n\nAllowed values are 'RequestProvidedToken' and 'ClientCredential'.\n\nWhen set to 'RequestProvidedToken', the authenticator will use the token provided to the kube-apiserver as part of the request to authenticate with the external claims source.\n\nWhen set to 'ClientCredential', the authenticator will use the configured client-id, client-secret, and token endpoint to fetch an access token using the OAuth2 client credentials grant flow. The fetched access token will then be used to authenticate with the external claims source.\n\n\nPossible enum values:\n - `\"ClientCredential\"` is an ExternalSourceAuthenticationType that represents that the authenticator should use the OAuth2 client credentials grant flow to obtain an access token for authenticating with the external claims source. This is useful for scenarios such as fetching user information from Microsoft's Graph API where a separate client credential is needed to access the API.\n - `\"RequestProvidedToken\"` is an ExternalSourceAuthenticationType that represents that the token being evaluated for authentication should be used for authenticating with the external claims source. This is useful for scenarios where a token has multiple audiences and scopes so that it can be used to access both the cluster and the UserInfo endpoint that contains additional information about the user not present in the token.", + "type": "string", + "enum": [ + "ClientCredential", + "RequestProvidedToken" + ] } - ] + } }, - "com.github.openshift.api.operator.v1.SecretsStoreTokenRequest": { - "description": "SecretsStoreTokenRequest specifies a service account token audience configuration for workload identity federation (WIF) with the Secrets Store CSI driver.", + "com.github.openshift.api.config.v1.ExternalSourceCertificateAuthorityConfigMapReference": { + "description": "ExternalSourceCertificateAuthorityConfigMapReference is a reference to a ConfigMap in the openshift-config namespace that should be used for configuring the certificate authority to be used when sourcing claims from external sources.", "type": "object", "required": [ - "audience" + "name" ], "properties": { - "audience": { - "description": "audience is the intended audience of the service account token. An empty string means the issued token will use the kube-apiserver's default APIAudiences.", + "name": { + "description": "name is the required name of the ConfigMap that exists in the openshift-config namespace. The key \"ca-bundle.crt\" must be present and must contain the CA certificate to be used to verify the external source's TLS certificate.\n\nIt must be at least 1 character in length, must not exceed 253 characters in length, must start and end with a lowercase alphanumeric character, and must only contain lowercase alphanumeric characters, '-' or '.'.", "type": "string" - }, - "expirationSeconds": { - "description": "expirationSeconds is the requested duration of validity of the service account token. The token issuer may return a token with a different validity duration. When omitted, the token expiration is determined by the kube-apiserver. Must be at least 600 seconds (10 minutes) and no more than 315360000 seconds (~10 years).", - "type": "integer", - "format": "int32" } } }, - "com.github.openshift.api.operator.v1.SecretsStoreTokenRequests": { - "description": "SecretsStoreTokenRequests configures how service account tokens are provided to the Secrets Store CSI driver for workload identity federation.", + "com.github.openshift.api.config.v1.ExternalSourcePredicate": { + "description": "ExternalSourcePredicate configures a singular condition that must return true before the external source is queried to retrieve external claims.", "type": "object", "required": [ - "type" + "expression" ], "properties": { - "managed": { - "description": "managed holds configuration for operator-managed tokenRequests. Only valid when type is \"Managed\".", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ManagedTokenRequests" - }, - "type": { - "description": "type determines how the operator manages tokenRequests on the CSIDriver object. When \"Unmanaged\", existing tokenRequests on the CSIDriver are preserved and the managed field is not used. When \"Managed\", the operator sets tokenRequests from the audiences specified in the managed field, replacing any previously configured values. Once set to \"Managed\", type cannot be reverted back to \"Unmanaged\".", + "expression": { + "description": "expression is a required CEL expression that is used to determine whether or not an external source should be used to fetch external claims.\n\nThe expression must return a boolean value, where true means that the source should be consulted and false means that it should not.\n\nClaims from the token used for the request to the kube-apiserver are made available via the `claims` variable.\n\nThe contents of the `claims` variable varies based on the claims that are present in the token being validated. It is the responsibility of those configuring this field to understand what claims the identity provider includes when issuing tokens.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length.", "type": "string" } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "managed": "Managed" - } - } - ] + } }, - "com.github.openshift.api.operator.v1.Server": { - "description": "Server defines the schema for a server that runs per instance of CoreDNS.", + "com.github.openshift.api.config.v1.ExternalSourceTLS": { + "description": "ExternalSourceTLS configures the TLS options that the apiserver uses as a client when making a request to the external claim source.", "type": "object", "required": [ - "name", - "zones", - "forwardPlugin" + "certificateAuthority" ], "properties": { - "forwardPlugin": { - "description": "forwardPlugin defines a schema for configuring CoreDNS to proxy DNS messages to upstream resolvers.", + "certificateAuthority": { + "description": "certificateAuthority is a required reference to a ConfigMap in the openshift-config namespace that contains the CA certificate to use to validate TLS connections with the external claims source. The key \"ca-bundle.crt\" must be present in the referenced ConfigMap and must contain the CA certificate to be used to verify the external source's TLS certificate.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ForwardPlugin" - }, - "name": { - "description": "name is required and specifies a unique name for the server. Name must comply with the Service Name Syntax of rfc6335.", - "type": "string", - "default": "" - }, - "zones": { - "description": "zones is required and specifies the subdomains that Server is authoritative for. Zones must conform to the rfc1123 definition of a subdomain. Specifying the cluster domain (i.e., \"cluster.local\") is invalid.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalSourceCertificateAuthorityConfigMapReference" } } }, - "com.github.openshift.api.operator.v1.ServiceAccountIssuerStatus": { + "com.github.openshift.api.config.v1.ExtraMapping": { + "description": "ExtraMapping allows specifying a key and CEL expression to evaluate the keys' value. It is used to create additional mappings and attributes added to a cluster identity from a provided authentication token.", "type": "object", "required": [ - "name" + "key", + "valueExpression" ], "properties": { - "expirationTime": { - "description": "expirationTime is the time after which this service account issuer will be pruned and removed from the trusted list of service account issuers.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "key": { + "description": "key is a required field that specifies the string to use as the extra attribute key.\n\nkey must be a domain-prefix path (e.g 'example.org/foo'). key must not exceed 510 characters in length. key must contain the '/' character, separating the domain and path characters. key must not be empty.\n\nThe domain portion of the key (string of characters prior to the '/') must be a valid RFC1123 subdomain. It must not exceed 253 characters in length. It must start and end with an alphanumeric character. It must only contain lower case alphanumeric characters and '-' or '.'. It must not use the reserved domains, or be subdomains of, \"kubernetes.io\", \"k8s.io\", and \"openshift.io\".\n\nThe path portion of the key (string of characters after the '/') must not be empty and must consist of at least one alphanumeric character, percent-encoded octets, '-', '.', '_', '~', '!', '$', '&', ''', '(', ')', '*', '+', ',', ';', '=', and ':'. It must not exceed 256 characters in length.", + "type": "string", + "default": "" }, - "name": { - "description": "name is the name of the service account issuer", + "valueExpression": { + "description": "valueExpression is a required field to specify the CEL expression to extract the extra attribute value from a JWT token's claims. valueExpression must produce a string or string array value. \"\", [], and null are treated as the extra mapping not being present. Empty string values within an array are filtered out.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'. 'claims' is a map of claim names to claim values. For example, the 'sub' claim value can be accessed as 'claims.sub'. Nested claims can be accessed using dot notation ('claims.foo.bar').\n\nvalueExpression must not exceed 1024 characters in length. valueExpression must not be empty.", "type": "string", "default": "" } } }, - "com.github.openshift.api.operator.v1.ServiceCA": { - "description": "ServiceCA provides information to configure an operator to manage the service cert controllers\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.FeatureGate": { + "description": "Feature holds cluster-wide information about feature gates. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "metadata", "spec" ], "properties": { @@ -37123,17 +2735,59 @@ "spec": { "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ServiceCASpec" + "$ref": "#/definitions/com.github.openshift.api.config.v1.FeatureGateSpec" }, "status": { "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ServiceCAStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.FeatureGateStatus" + } + } + }, + "com.github.openshift.api.config.v1.FeatureGateAttributes": { + "type": "object", + "required": [ + "name" + ], + "properties": { + "name": { + "description": "name is the name of the FeatureGate.", + "type": "string", + "default": "" + } + } + }, + "com.github.openshift.api.config.v1.FeatureGateDetails": { + "type": "object", + "required": [ + "version" + ], + "properties": { + "disabled": { + "description": "disabled is a list of all feature gates that are disabled in the cluster for the named version.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.FeatureGateAttributes" + } + }, + "enabled": { + "description": "enabled is a list of all feature gates that are enabled in the cluster for the named version.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.FeatureGateAttributes" + } + }, + "version": { + "description": "version matches the version provided by the ClusterVersion and in the ClusterOperator.Status.Versions field.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.operator.v1.ServiceCAList": { - "description": "ServiceCAList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.FeatureGateList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "metadata", @@ -37145,11 +2799,10 @@ "type": "string" }, "items": { - "description": "items contains the items", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ServiceCA" + "$ref": "#/definitions/com.github.openshift.api.config.v1.FeatureGate" } }, "kind": { @@ -37163,927 +2816,818 @@ } } }, - "com.github.openshift.api.operator.v1.ServiceCASpec": { + "com.github.openshift.api.config.v1.FeatureGateSelection": { "type": "object", - "required": [ - "managementState" - ], "properties": { - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "customNoUpgrade": { + "description": "customNoUpgrade allows the enabling or disabling of any feature. Turning this feature set on IS NOT SUPPORTED, CANNOT BE UNDONE, and PREVENTS UPGRADES. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations your cluster may fail in an unrecoverable way. featureSet must equal \"CustomNoUpgrade\" must be set to use this field.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.CustomFeatureGates" }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", + "featureSet": { + "description": "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting. Turning on or off features may cause irreversible changes in your cluster which cannot be undone.", "type": "string" + } + }, + "x-kubernetes-unions": [ + { + "discriminator": "featureSet", + "fields-to-discriminateBy": { + "customNoUpgrade": "CustomNoUpgrade" + } + } + ] + }, + "com.github.openshift.api.config.v1.FeatureGateSpec": { + "type": "object", + "properties": { + "customNoUpgrade": { + "description": "customNoUpgrade allows the enabling or disabling of any feature. Turning this feature set on IS NOT SUPPORTED, CANNOT BE UNDONE, and PREVENTS UPGRADES. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations your cluster may fail in an unrecoverable way. featureSet must equal \"CustomNoUpgrade\" must be set to use this field.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.CustomFeatureGates" }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "featureSet": { + "description": "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting. Turning on or off features may cause irreversible changes in your cluster which cannot be undone.", + "type": "string" } - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "featureSet", + "fields-to-discriminateBy": { + "customNoUpgrade": "CustomNoUpgrade" + } + } + ] }, - "com.github.openshift.api.operator.v1.ServiceCAStatus": { + "com.github.openshift.api.config.v1.FeatureGateStatus": { "type": "object", "properties": { "conditions": { - "description": "conditions is a list of conditions and their status", + "description": "conditions represent the observations of the current state. Known .status.conditions.type are: \"DeterminationDegraded\"", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" }, "x-kubernetes-list-map-keys": [ "type" ], "x-kubernetes-list-type": "map" }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", + "featureGates": { + "description": "featureGates contains a list of enabled and disabled featureGates that are keyed by payloadVersion. Operators other than the CVO and cluster-config-operator, must read the .status.featureGates, locate the version they are managing, find the enabled/disabled featuregates and make the operand and operator match. The enabled/disabled values for a particular version may change during the life of the cluster as various .spec.featureSet values are selected. Operators may choose to restart their processes to pick up these changes, but remembering past enable/disable lists is beyond the scope of this API and is the responsibility of individual operators. Only featureGates with .version in the ClusterVersion.status will be present in this list.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.FeatureGateDetails" }, "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" + "version" ], "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" } } }, - "com.github.openshift.api.operator.v1.ServiceCatalogAPIServer": { - "description": "ServiceCatalogAPIServer provides information to configure an operator to manage Service Catalog API Server DEPRECATED: will be removed in 4.6\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.FeatureGateTests": { "type": "object", "required": [ - "spec" + "featureGate", + "tests" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ServiceCatalogAPIServerSpec" + "featureGate": { + "description": "featureGate is the name of the FeatureGate as it appears in The FeatureGate CR instance.", + "type": "string", + "default": "" }, - "status": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ServiceCatalogAPIServerStatus" + "tests": { + "description": "tests contains an item for every TestName", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.TestDetails" + } } } }, - "com.github.openshift.api.operator.v1.ServiceCatalogAPIServerList": { - "description": "ServiceCatalogAPIServerList is a collection of items DEPRECATED: will be removed in 4.6\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.GCPPlatformSpec": { + "description": "GCPPlatformSpec holds the desired state of the Google Cloud Platform infrastructure provider. This only includes fields that can be modified in the cluster.", + "type": "object" + }, + "com.github.openshift.api.config.v1.GCPPlatformStatus": { + "description": "GCPPlatformStatus holds the current status of the Google Cloud Platform infrastructure provider.", "type": "object", "required": [ - "metadata", - "items" + "projectID", + "region" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "cloudLoadBalancerConfig": { + "description": "cloudLoadBalancerConfig holds configuration related to DNS and cloud load balancers. It allows configuration of in-cluster DNS as an alternative to the platform default DNS implementation. When using the ClusterHosted DNS type, Load Balancer IP addresses must be provided for the API and internal API load balancers as well as the ingress load balancer.", + "default": { + "dnsType": "PlatformDefault" + }, + "$ref": "#/definitions/com.github.openshift.api.config.v1.CloudLoadBalancerConfig" }, - "items": { - "description": "items contains the items", + "projectID": { + "description": "resourceGroupName is the Project ID for new GCP resources created for the cluster.", + "type": "string", + "default": "" + }, + "region": { + "description": "region holds the region for new GCP resources created for the cluster.", + "type": "string", + "default": "" + }, + "resourceLabels": { + "description": "resourceLabels is a list of additional labels to apply to GCP resources created for the cluster. See https://cloud.google.com/compute/docs/labeling-resources for information on labeling GCP resources. GCP supports a maximum of 64 labels per resource. OpenShift reserves 32 labels for internal use, allowing 32 labels for user configuration.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ServiceCatalogAPIServer" - } + "$ref": "#/definitions/com.github.openshift.api.config.v1.GCPResourceLabel" + }, + "x-kubernetes-list-map-keys": [ + "key" + ], + "x-kubernetes-list-type": "map" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "resourceTags": { + "description": "resourceTags is a list of additional tags to apply to GCP resources created for the cluster. See https://cloud.google.com/resource-manager/docs/tags/tags-overview for information on tagging GCP resources. GCP supports a maximum of 50 tags per resource.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.GCPResourceTag" + }, + "x-kubernetes-list-map-keys": [ + "key" + ], + "x-kubernetes-list-type": "map" + }, + "universeDomain": { + "description": "universeDomain is the GCP universe domain for the cluster, detected from the installer credentials. Components with their own GCP credentials should read the universe domain from those credentials, as they are the authoritative source. This field is provided for components that do not have GCP credentials and for general observability.\n\nWhen omitted, standard public GCP (googleapis.com) is assumed.\n\nuniverseDomain is an optional field that, when specified, must be non-empty and at most 253 characters. It must be a valid DNS subdomain: containing only lowercase alphanumeric characters, '-' or '.', and starting and ending with an alphanumeric character.", "type": "string" + } + } + }, + "com.github.openshift.api.config.v1.GCPResourceLabel": { + "description": "GCPResourceLabel is a label to apply to GCP resources created for the cluster.", + "type": "object", + "required": [ + "key", + "value" + ], + "properties": { + "key": { + "description": "key is the key part of the label. A label key can have a maximum of 63 characters and cannot be empty. Label key must begin with a lowercase letter, and must contain only lowercase letters, numeric characters, and the following special characters `_-`. Label key must not have the reserved prefixes `kubernetes-io` and `openshift-io`.", + "type": "string", + "default": "" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "value": { + "description": "value is the value part of the label. A label value can have a maximum of 63 characters and cannot be empty. Value must contain only lowercase letters, numeric characters, and the following special characters `_-`.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.operator.v1.ServiceCatalogAPIServerSpec": { + "com.github.openshift.api.config.v1.GCPResourceTag": { + "description": "GCPResourceTag is a tag to apply to GCP resources created for the cluster.", "type": "object", "required": [ - "managementState" + "parentID", + "key", + "value" ], "properties": { - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", + "key": { + "description": "key is the key part of the tag. A tag key can have a maximum of 63 characters and cannot be empty. Tag key must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `._-`.", "type": "string", "default": "" }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" + "parentID": { + "description": "parentID is the ID of the hierarchical resource where the tags are defined, e.g. at the Organization or the Project level. To find the Organization or Project ID refer to the following pages: https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id, https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects. An OrganizationID must consist of decimal numbers, and cannot have leading zeroes. A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters, numbers, and hyphens, and must start with a letter, and cannot end with a hyphen.", + "type": "string", + "default": "" }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "value": { + "description": "value is the value part of the tag. A tag value can have a maximum of 63 characters and cannot be empty. Tag value must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `_-.@%=+:,*#&(){}[]` and spaces.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.operator.v1.ServiceCatalogAPIServerStatus": { + "com.github.openshift.api.config.v1.GatherConfig": { + "description": "GatherConfig provides data gathering configuration options.", "type": "object", + "required": [ + "gatherers" + ], "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", + "dataPolicy": { + "description": "dataPolicy is an optional list of DataPolicyOptions that allows user to enable additional obfuscation of the Insights archive data. It may not exceed 2 items and must not contain duplicates. Valid values are ObfuscateNetworking and WorkloadNames. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When set to WorkloadNames, the gathered data about cluster resources will not contain the workload names for your deployments. Resources UIDs will be used instead. When omitted no obfuscation is applied.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" + "type": "string", + "default": "" }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" + "x-kubernetes-list-type": "atomic" }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 + "gatherers": { + "description": "gatherers is a required field that specifies the configuration of the gatherers.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.Gatherers" }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" + "storage": { + "description": "storage is an optional field that allows user to define persistent storage for gathering jobs to store the Insights data archive. If omitted, the gathering job will use ephemeral storage.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.Storage" } } }, - "com.github.openshift.api.operator.v1.ServiceCatalogControllerManager": { - "description": "ServiceCatalogControllerManager provides information to configure an operator to manage Service Catalog Controller Manager DEPRECATED: will be removed in 4.6\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.GathererConfig": { + "description": "GathererConfig allows to configure specific gatherers", "type": "object", "required": [ - "metadata", - "spec" + "name", + "state" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "name": { + "description": "name is the required name of a specific gatherer. It may not exceed 256 characters. The format for a gatherer name is: {gatherer}/{function} where the function is optional. Gatherer consists of a lowercase letters only that may include underscores (_). Function consists of a lowercase letters only that may include underscores (_) and is separated from the gatherer by a forward slash (/). The particular gatherers can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\"", "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "state": { + "description": "state is a required field that allows you to configure specific gatherer. Valid values are \"Enabled\" and \"Disabled\". When set to Enabled the gatherer will run. When set to Disabled the gatherer will not run.", "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ServiceCatalogControllerManagerSpec" - }, - "status": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ServiceCatalogControllerManagerStatus" } } }, - "com.github.openshift.api.operator.v1.ServiceCatalogControllerManagerList": { - "description": "ServiceCatalogControllerManagerList is a collection of items DEPRECATED: will be removed in 4.6\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.Gatherers": { + "description": "Gatherers specifies the configuration of the gatherers", "type": "object", "required": [ - "metadata", - "items" + "mode" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items contains the items", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.ServiceCatalogControllerManager" - } + "custom": { + "description": "custom provides gathering configuration. It is required when mode is Custom, and forbidden otherwise. Custom configuration allows user to disable only a subset of gatherers. Gatherers that are not explicitly disabled in custom configuration will run.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.Custom" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "mode": { + "description": "mode is a required field that specifies the mode for gatherers. Allowed values are All, None, and Custom. When set to All, all gatherers will run and gather data. When set to None, all gatherers will be disabled and no data will be gathered. When set to Custom, the custom configuration from the custom field will be applied.", "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "mode", + "fields-to-discriminateBy": { + "custom": "Custom" + } + } + ] }, - "com.github.openshift.api.operator.v1.ServiceCatalogControllerManagerSpec": { + "com.github.openshift.api.config.v1.GenericAPIServerConfig": { + "description": "GenericAPIServerConfig is an inline-able struct for aggregated apiservers that need to store data in etcd", "type": "object", "required": [ - "managementState" + "servingInfo", + "corsAllowedOrigins", + "auditConfig", + "storageConfig", + "admission", + "kubeClientConfig" ], "properties": { - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" + "admission": { + "description": "admissionConfig holds information about how to configure admission.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.AdmissionConfig" }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.operator.v1.ServiceCatalogControllerManagerStatus": { - "type": "object", - "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" + "auditConfig": { + "description": "auditConfig describes how to configure audit information", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.AuditConfig" }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", + "corsAllowedOrigins": { + "description": "corsAllowedOrigins", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" + "type": "string", + "default": "" + } }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" + "kubeClientConfig": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.KubeClientConfig" }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 + "servingInfo": { + "description": "servingInfo describes how to start serving", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.HTTPServingInfo" }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" + "storageConfig": { + "description": "storageConfig contains information about how to use", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.EtcdStorageConfig" } } }, - "com.github.openshift.api.operator.v1.SimpleMacvlanConfig": { - "description": "SimpleMacvlanConfig contains configurations for macvlan interface.", + "com.github.openshift.api.config.v1.GenericControllerConfig": { + "description": "GenericControllerConfig provides information to configure a controller\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "servingInfo", + "leaderElection", + "authentication", + "authorization" + ], "properties": { - "ipamConfig": { - "description": "ipamConfig configures IPAM module will be used for IP Address Management (IPAM).", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.IPAMConfig" - }, - "master": { - "description": "master is the host interface to create the macvlan interface from. If not specified, it will be default route interface", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "mode": { - "description": "mode is the macvlan mode: bridge, private, vepa, passthru. The default is bridge", - "type": "string" + "authentication": { + "description": "authentication allows configuration of authentication for the endpoints", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.DelegatedAuthentication" }, - "mtu": { - "description": "mtu is the mtu to use for the macvlan interface. if unset, host's kernel will select the value.", - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.operator.v1.StaticIPAMAddresses": { - "description": "StaticIPAMAddresses provides IP address and Gateway for static IPAM addresses", - "type": "object", - "properties": { - "address": { - "description": "address is the IP address in CIDR format", - "type": "string", - "default": "" + "authorization": { + "description": "authorization allows configuration of authentication for the endpoints", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.DelegatedAuthorization" }, - "gateway": { - "description": "gateway is IP inside of subnet to designate as the gateway", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1.StaticIPAMConfig": { - "description": "StaticIPAMConfig contains configurations for static IPAM (IP Address Management)", - "type": "object", - "properties": { - "addresses": { - "description": "addresses configures IP address for the interface", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.StaticIPAMAddresses" - }, - "x-kubernetes-list-type": "atomic" }, - "dns": { - "description": "dns configures DNS for the interface", - "$ref": "#/definitions/com.github.openshift.api.operator.v1.StaticIPAMDNS" + "leaderElection": { + "description": "leaderElection provides information to elect a leader. Only override this if you have a specific need", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.LeaderElection" }, - "routes": { - "description": "routes configures IP routes for the interface", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.StaticIPAMRoutes" - }, - "x-kubernetes-list-type": "atomic" + "servingInfo": { + "description": "servingInfo is the HTTP serving information for the controller's endpoints", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.HTTPServingInfo" } } }, - "com.github.openshift.api.operator.v1.StaticIPAMDNS": { - "description": "StaticIPAMDNS provides DNS related information for static IPAM", + "com.github.openshift.api.config.v1.GitHubIdentityProvider": { + "description": "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials", "type": "object", + "required": [ + "clientID", + "clientSecret" + ], "properties": { - "domain": { - "description": "domain configures the domainname the local domain used for short hostname lookups", - "type": "string" + "ca": { + "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" }, - "nameservers": { - "description": "nameservers points DNS servers for IP lookup", + "clientID": { + "description": "clientID is the oauth client ID", + "type": "string", + "default": "" + }, + "clientSecret": { + "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" + }, + "hostname": { + "description": "hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value configured at /setup/settings#hostname.", + "type": "string", + "default": "" + }, + "organizations": { + "description": "organizations optionally restricts which organizations are allowed to log in", "type": "array", "items": { "type": "string", "default": "" - }, - "x-kubernetes-list-type": "atomic" + } }, - "search": { - "description": "search configures priority ordered search domains for short hostname lookups", + "teams": { + "description": "teams optionally restricts which teams are allowed to log in. Format is /.", "type": "array", "items": { "type": "string", "default": "" - }, - "x-kubernetes-list-type": "atomic" + } } } }, - "com.github.openshift.api.operator.v1.StaticIPAMRoutes": { - "description": "StaticIPAMRoutes provides Destination/Gateway pairs for static IPAM routes", + "com.github.openshift.api.config.v1.GitLabIdentityProvider": { + "description": "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials", "type": "object", "required": [ - "destination" + "clientID", + "clientSecret", + "url" ], "properties": { - "destination": { - "description": "destination points the IP route destination", + "ca": { + "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" + }, + "clientID": { + "description": "clientID is the oauth client ID", "type": "string", "default": "" }, - "gateway": { - "description": "gateway is the route's next-hop IP address If unset, a default gateway is assumed (as determined by the CNI plugin).", - "type": "string" + "clientSecret": { + "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" + }, + "url": { + "description": "url is the oauth server base URL", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.operator.v1.StaticPodOperatorSpec": { - "description": "StaticPodOperatorSpec is spec for controllers that manage static pods.", + "com.github.openshift.api.config.v1.GoogleIdentityProvider": { + "description": "GoogleIdentityProvider provides identities for users authenticating using Google credentials", "type": "object", "required": [ - "managementState", - "forceRedeploymentReason" + "clientID", + "clientSecret" ], "properties": { - "failedRevisionLimit": { - "description": "failedRevisionLimit is the number of failed static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - "type": "integer", - "format": "int32" - }, - "forceRedeploymentReason": { - "description": "forceRedeploymentReason can be used to force the redeployment of the operand by providing a unique string. This provides a mechanism to kick a previously failed deployment and provide a reason why you think it will work this time instead of failing again on the same config.", + "clientID": { + "description": "clientID is the oauth client ID", "type": "string", "default": "" }, - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" + "clientSecret": { + "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", + "hostedDomain": { + "description": "hostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to", "type": "string", "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "succeededRevisionLimit": { - "description": "succeededRevisionLimit is the number of successful static pod installer revisions to keep on disk and in the api -1 = unlimited, 0 or unset = 5 (default)", - "type": "integer", - "format": "int32" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - } - }, - "com.github.openshift.api.operator.v1.StaticPodOperatorStatus": { - "description": "StaticPodOperatorStatus is status for controllers that manage static pods. There are different needs because individual node status must be tracked.", - "type": "object", - "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "latestAvailableRevisionReason": { - "description": "latestAvailableRevisionReason describe the detailed reason for the most recent deployment", - "type": "string" - }, - "nodeStatuses": { - "description": "nodeStatuses track the deployment values and errors across individual nodes", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.NodeStatus" - }, - "x-kubernetes-list-map-keys": [ - "nodeName" - ], - "x-kubernetes-list-type": "map" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" } } }, - "com.github.openshift.api.operator.v1.StatuspageProvider": { - "description": "StatuspageProvider provides identity for statuspage account.", + "com.github.openshift.api.config.v1.HTPasswdIdentityProvider": { + "description": "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials", "type": "object", "required": [ - "pageID" + "fileData" ], "properties": { - "pageID": { - "description": "pageID is the unique ID assigned by Statuspage for your page. This must be a public page.", - "type": "string", - "default": "" + "fileData": { + "description": "fileData is a required reference to a secret by name containing the data to use as the htpasswd file. The key \"htpasswd\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. If the specified htpasswd data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" } } }, - "com.github.openshift.api.operator.v1.Storage": { - "description": "Storage provides a means to configure an operator to manage the cluster storage operator. `cluster` is the canonical name.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.HTTPServingInfo": { + "description": "HTTPServingInfo holds configuration for serving HTTP", "type": "object", "required": [ - "spec" + "bindAddress", + "bindNetwork", + "certFile", + "keyFile", + "maxRequestsInFlight", + "requestTimeoutSeconds" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "bindAddress": { + "description": "bindAddress is the ip:port to serve on", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "bindNetwork": { + "description": "bindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", + "type": "string", + "default": "" + }, + "certFile": { + "description": "certFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" + }, + "cipherSuites": { + "description": "cipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "clientCA": { + "description": "clientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", "type": "string" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "keyFile": { + "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "type": "string", + "default": "" }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.StorageSpec" + "maxRequestsInFlight": { + "description": "maxRequestsInFlight is the number of concurrent requests allowed to the server. If zero, no limit.", + "type": "integer", + "format": "int64", + "default": 0 }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.StorageStatus" - } - } - }, - "com.github.openshift.api.operator.v1.StorageList": { - "description": "StorageList contains a list of Storages.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "minTLSVersion": { + "description": "minTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", "type": "string" }, - "items": { + "namedCertificates": { + "description": "namedCertificates is a list of certificates to use to secure requests to specific hostnames", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.Storage" + "$ref": "#/definitions/com.github.openshift.api.config.v1.NamedCertificate" } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "requestTimeoutSeconds": { + "description": "requestTimeoutSeconds is the number of seconds before requests are timed out. The default is 60 minutes, if -1 there is no limit on requests.", + "type": "integer", + "format": "int64", + "default": 0 + } + } + }, + "com.github.openshift.api.config.v1.HubSource": { + "description": "HubSource is used to specify the hub source and its configuration", + "type": "object", + "required": [ + "name", + "disabled" + ], + "properties": { + "disabled": { + "description": "disabled is used to disable a default hub source on cluster", + "type": "boolean", + "default": false }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "name": { + "description": "name is the name of one of the default hub sources", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.operator.v1.StorageSpec": { - "description": "StorageSpec is the specification of the desired behavior of the cluster storage operator.", + "com.github.openshift.api.config.v1.HubSourceStatus": { + "description": "HubSourceStatus is used to reflect the current state of applying the configuration to a default source", "type": "object", "required": [ - "managementState" + "name", + "disabled" ], "properties": { - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", + "disabled": { + "description": "disabled is used to disable a default hub source on cluster", + "type": "boolean", + "default": false + }, + "message": { + "description": "message provides more information regarding failures", "type": "string" }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", + "name": { + "description": "name is the name of one of the default hub sources", "type": "string", "default": "" }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", + "status": { + "description": "status indicates success or failure in applying the configuration", "type": "string" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "vsphereStorageDriver": { - "description": "vsphereStorageDriver indicates the storage driver to use on VSphere clusters. Once this field is set to CSIWithMigrationDriver, it can not be changed. If this is empty, the platform will choose a good default, which may change over time without notice. The current default is CSIWithMigrationDriver and may not be changed. DEPRECATED: This field will be removed in a future release.", - "type": "string", - "default": "" } } }, - "com.github.openshift.api.operator.v1.StorageStatus": { - "description": "StorageStatus defines the observed status of the cluster storage operator.", + "com.github.openshift.api.config.v1.IBMCloudPlatformSpec": { + "description": "IBMCloudPlatformSpec holds the desired state of the IBMCloud infrastructure provider. This only includes fields that can be modified in the cluster.", "type": "object", "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", + "serviceEndpoints": { + "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of an IBM service. These endpoints are used by components within the cluster when trying to reach the IBM Cloud Services that have been overridden. The CCCMO reads in the IBMCloudPlatformSpec and validates each endpoint is resolvable. Once validated, the cloud config and IBMCloudPlatformStatus are updated to reflect the same custom endpoints. A maximum of 13 service endpoints overrides are supported.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" + "$ref": "#/definitions/com.github.openshift.api.config.v1.IBMCloudServiceEndpoint" }, "x-kubernetes-list-map-keys": [ - "type" + "name" ], "x-kubernetes-list-type": "map" + } + } + }, + "com.github.openshift.api.config.v1.IBMCloudPlatformStatus": { + "description": "IBMCloudPlatformStatus holds the current status of the IBMCloud infrastructure provider.", + "type": "object", + "properties": { + "cisInstanceCRN": { + "description": "cisInstanceCRN is the CRN of the Cloud Internet Services instance managing the DNS zone for the cluster's base domain", + "type": "string" + }, + "dnsInstanceCRN": { + "description": "dnsInstanceCRN is the CRN of the DNS Services instance managing the DNS zone for the cluster's base domain", + "type": "string" + }, + "location": { + "description": "location is where the cluster has been deployed", + "type": "string" + }, + "providerType": { + "description": "providerType indicates the type of cluster that was created", + "type": "string" + }, + "resourceGroupName": { + "description": "resourceGroupName is the Resource Group for new IBMCloud resources created for the cluster.", + "type": "string" }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", + "serviceEndpoints": { + "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of an IBM service. These endpoints are used by components within the cluster when trying to reach the IBM Cloud Services that have been overridden. The CCCMO reads in the IBMCloudPlatformSpec and validates each endpoint is resolvable. Once validated, the cloud config and IBMCloudPlatformStatus are updated to reflect the same custom endpoints.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.IBMCloudServiceEndpoint" }, "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", "name" ], "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" } } }, - "com.github.openshift.api.operator.v1.SyslogLoggingDestinationParameters": { - "description": "SyslogLoggingDestinationParameters describes parameters for the Syslog logging destination type.", + "com.github.openshift.api.config.v1.IBMCloudServiceEndpoint": { + "description": "IBMCloudServiceEndpoint stores the configuration of a custom url to override existing defaults of IBM Cloud Services.", "type": "object", "required": [ - "address", - "port" + "name", + "url" ], "properties": { - "address": { - "description": "address is the IP address of the syslog endpoint that receives log messages.", + "name": { + "description": "name is the name of the IBM Cloud service. Possible values are: CIS, COS, COSConfig, DNSServices, GlobalCatalog, GlobalSearch, GlobalTagging, HyperProtect, IAM, KeyProtect, ResourceController, ResourceManager, or VPC. For example, the IBM Cloud Private IAM service could be configured with the service `name` of `IAM` and `url` of `https://private.iam.cloud.ibm.com` Whereas the IBM Cloud Private VPC service for US South (Dallas) could be configured with the service `name` of `VPC` and `url` of `https://us.south.private.iaas.cloud.ibm.com`", "type": "string", "default": "" }, - "facility": { - "description": "facility specifies the syslog facility of log messages.\n\nIf this field is empty, the facility is \"local1\".", - "type": "string" - }, - "maxLength": { - "description": "maxLength is the maximum length of the log message.\n\nValid values are integers in the range 480 to 4096, inclusive.\n\nWhen omitted, the default value is 1024.", - "type": "integer", - "format": "int64" - }, - "port": { - "description": "port is the UDP port number of the syslog endpoint that receives log messages.", - "type": "integer", - "format": "int64", - "default": 0 - } - } - }, - "com.github.openshift.api.operator.v1.Theme": { - "description": "Theme defines a theme mode for the console UI.", - "type": "object", - "required": [ - "mode", - "source" - ], - "properties": { - "mode": { - "description": "mode is used to specify what theme mode a logo will apply to in the console UI. mode is a required field that allows values of Dark and Light. When set to Dark, the logo file referenced in the 'file' field will be used when an end-user of the console UI enables the Dark mode. When set to Light, the logo file referenced in the 'file' field will be used when an end-user of the console UI enables the Light mode.\n\nPossible enum values:\n - `\"Dark\"` represents the dark mode for a console theme.\n - `\"Light\"` represents the light mode for a console theme.", + "url": { + "description": "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty. The path must follow the pattern /v[0,9]+ or /api/v[0,9]+", "type": "string", - "default": "", - "enum": [ - "Dark", - "Light" - ] - }, - "source": { - "description": "source is used by the console to locate the specified file containing a custom logo. source is a required field that references a ConfigMap name and key that contains the custom logo file in the openshift-config namespace. You can create it with a command like: - 'oc create configmap custom-logos-config --namespace=openshift-config --from-file=/path/to/file' The ConfigMap key must include the file extension so that the console serves the file with the correct MIME type. The recommended file format for the Masthead and Favicon logos is SVG, but other file formats are allowed if supported by the browser. The logo image size must be less than 1 MB due to constraints on the ConfigMap size. For more information, see the documentation: https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/web_console/customizing-web-console#customizing-web-console", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.FileReferenceSource" + "default": "" } } }, - "com.github.openshift.api.operator.v1.Upstream": { - "description": "Upstream can either be of type SystemResolvConf, or of type Network.\n\n - For an Upstream of type SystemResolvConf, no further fields are necessary:\n The upstream will be configured to use /etc/resolv.conf.\n - For an Upstream of type Network, a NetworkResolver field needs to be defined\n with an IP address or IP:port if the upstream listens on a port other than 53.", + "com.github.openshift.api.config.v1.IdentityProvider": { + "description": "IdentityProvider provides identities for users authenticating using credentials", "type": "object", "required": [ + "name", "type" ], "properties": { - "address": { - "description": "address must be defined when Type is set to Network. It will be ignored otherwise. It must be a valid ipv4 or ipv6 address.", + "basicAuth": { + "description": "basicAuth contains configuration options for the BasicAuth IdP", + "$ref": "#/definitions/com.github.openshift.api.config.v1.BasicAuthIdentityProvider" + }, + "github": { + "description": "github enables user authentication using GitHub credentials", + "$ref": "#/definitions/com.github.openshift.api.config.v1.GitHubIdentityProvider" + }, + "gitlab": { + "description": "gitlab enables user authentication using GitLab credentials", + "$ref": "#/definitions/com.github.openshift.api.config.v1.GitLabIdentityProvider" + }, + "google": { + "description": "google enables user authentication using Google credentials", + "$ref": "#/definitions/com.github.openshift.api.config.v1.GoogleIdentityProvider" + }, + "htpasswd": { + "description": "htpasswd enables user authentication using an HTPasswd file to validate credentials", + "$ref": "#/definitions/com.github.openshift.api.config.v1.HTPasswdIdentityProvider" + }, + "keystone": { + "description": "keystone enables user authentication using keystone password credentials", + "$ref": "#/definitions/com.github.openshift.api.config.v1.KeystoneIdentityProvider" + }, + "ldap": { + "description": "ldap enables user authentication using LDAP credentials", + "$ref": "#/definitions/com.github.openshift.api.config.v1.LDAPIdentityProvider" + }, + "mappingMethod": { + "description": "mappingMethod determines how identities from this provider are mapped to users Defaults to \"claim\"", "type": "string" }, - "port": { - "description": "port may be defined when Type is set to Network. It will be ignored otherwise. Port must be between 65535", - "type": "integer", - "format": "int64" + "name": { + "description": "name is used to qualify the identities returned by this provider. - It MUST be unique and not shared by any other identity provider used - It MUST be a valid path segment: name cannot equal \".\" or \"..\" or contain \"/\" or \"%\" or \":\"\n Ref: https://godoc.org/github.com/openshift/origin/pkg/user/apis/user/validation#ValidateIdentityProviderName", + "type": "string", + "default": "" + }, + "openID": { + "description": "openID enables user authentication using OpenID credentials", + "$ref": "#/definitions/com.github.openshift.api.config.v1.OpenIDIdentityProvider" + }, + "requestHeader": { + "description": "requestHeader enables user authentication using request header credentials", + "$ref": "#/definitions/com.github.openshift.api.config.v1.RequestHeaderIdentityProvider" }, "type": { - "description": "type defines whether this upstream contains an IP/IP:port resolver or the local /etc/resolv.conf. Type accepts 2 possible values: SystemResolvConf or Network.\n\n* When SystemResolvConf is used, the Upstream structure does not require any further fields to be defined:\n /etc/resolv.conf will be used\n* When Network is used, the Upstream structure must contain at least an Address", + "description": "type identifies the identity provider type for this entry.", "type": "string", "default": "" } } }, - "com.github.openshift.api.operator.v1.UpstreamResolvers": { - "description": "UpstreamResolvers defines a schema for configuring the CoreDNS forward plugin in the specific case of the default (\".\") server. It defers from ForwardPlugin in the default values it accepts: * At least one upstream should be specified. * the default policy is Sequential", + "com.github.openshift.api.config.v1.IdentityProviderConfig": { + "description": "IdentityProviderConfig contains configuration for using a specific identity provider", "type": "object", + "required": [ + "type" + ], "properties": { - "policy": { - "description": "policy is used to determine the order in which upstream servers are selected for querying. Any one of the following values may be specified:\n\n* \"Random\" picks a random upstream server for each query. * \"RoundRobin\" picks upstream servers in a round-robin order, moving to the next server for each new query. * \"Sequential\" tries querying upstream servers in a sequential order until one responds, starting with the first server for each new query.\n\nThe default value is \"Sequential\"", - "type": "string" + "basicAuth": { + "description": "basicAuth contains configuration options for the BasicAuth IdP", + "$ref": "#/definitions/com.github.openshift.api.config.v1.BasicAuthIdentityProvider" }, - "protocolStrategy": { - "description": "protocolStrategy specifies the protocol to use for upstream DNS requests. Valid values for protocolStrategy are \"TCP\" and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is to use the protocol of the original client request. \"TCP\" specifies that the platform should use TCP for all upstream DNS requests, even if the client request uses UDP. \"TCP\" is useful for UDP-specific issues such as those created by non-compliant upstream resolvers, but may consume more bandwidth or increase DNS response time. Note that protocolStrategy only affects the protocol of DNS requests that CoreDNS makes to upstream resolvers. It does not affect the protocol of DNS requests between clients and CoreDNS.", - "type": "string", - "default": "" + "github": { + "description": "github enables user authentication using GitHub credentials", + "$ref": "#/definitions/com.github.openshift.api.config.v1.GitHubIdentityProvider" }, - "transportConfig": { - "description": "transportConfig is used to configure the transport type, server name, and optional custom CA or CA bundle to use when forwarding DNS requests to an upstream resolver.\n\nThe default value is \"\" (empty) which results in a standard cleartext connection being used when forwarding DNS requests to an upstream resolver.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.DNSTransportConfig" + "gitlab": { + "description": "gitlab enables user authentication using GitLab credentials", + "$ref": "#/definitions/com.github.openshift.api.config.v1.GitLabIdentityProvider" }, - "upstreams": { - "description": "upstreams is a list of resolvers to forward name queries for the \".\" domain. Each instance of CoreDNS performs health checking of Upstreams. When a healthy upstream returns an error during the exchange, another resolver is tried from Upstreams. The Upstreams are selected in the order specified in Policy.\n\nA maximum of 15 upstreams is allowed per ForwardPlugin. If no Upstreams are specified, /etc/resolv.conf is used by default", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.Upstream" - } - } - } - }, - "com.github.openshift.api.operator.v1.VSphereCSIDriverConfigSpec": { - "description": "VSphereCSIDriverConfigSpec defines properties that can be configured for vsphere CSI driver.", - "type": "object", - "properties": { - "globalMaxSnapshotsPerBlockVolume": { - "description": "globalMaxSnapshotsPerBlockVolume is a global configuration parameter that applies to volumes on all kinds of datastores. If omitted, the platform chooses a default, which is subject to change over time, currently that default is 3. Snapshots can not be disabled using this parameter. Increasing number of snapshots above 3 can have negative impact on performance, for more details see: https://kb.vmware.com/s/article/1025279 Volume snapshot documentation: https://docs.vmware.com/en/VMware-vSphere-Container-Storage-Plug-in/3.0/vmware-vsphere-csp-getting-started/GUID-E0B41C69-7EEB-450F-A73D-5FD2FF39E891.html", - "type": "integer", - "format": "int64" + "google": { + "description": "google enables user authentication using Google credentials", + "$ref": "#/definitions/com.github.openshift.api.config.v1.GoogleIdentityProvider" }, - "granularMaxSnapshotsPerBlockVolumeInVSAN": { - "description": "granularMaxSnapshotsPerBlockVolumeInVSAN is a granular configuration parameter on vSAN datastore only. It overrides GlobalMaxSnapshotsPerBlockVolume if set, while it falls back to the global constraint if unset. Snapshots for VSAN can not be disabled using this parameter.", - "type": "integer", - "format": "int64" + "htpasswd": { + "description": "htpasswd enables user authentication using an HTPasswd file to validate credentials", + "$ref": "#/definitions/com.github.openshift.api.config.v1.HTPasswdIdentityProvider" }, - "granularMaxSnapshotsPerBlockVolumeInVVOL": { - "description": "granularMaxSnapshotsPerBlockVolumeInVVOL is a granular configuration parameter on Virtual Volumes datastore only. It overrides GlobalMaxSnapshotsPerBlockVolume if set, while it falls back to the global constraint if unset. Snapshots for VVOL can not be disabled using this parameter.", - "type": "integer", - "format": "int64" + "keystone": { + "description": "keystone enables user authentication using keystone password credentials", + "$ref": "#/definitions/com.github.openshift.api.config.v1.KeystoneIdentityProvider" }, - "maxAllowedBlockVolumesPerNode": { - "description": "maxAllowedBlockVolumesPerNode is an optional configuration parameter that allows setting a custom value for the limit of the number of PersistentVolumes attached to a node. In vSphere version 7 this limit was set to 59 by default, however in vSphere version 8 this limit was increased to 255. Before increasing this value above 59 the cluster administrator needs to ensure that every node forming the cluster is updated to ESXi version 8 or higher and that all nodes are running the same version. The limit must be between 1 and 255, which matches the vSphere version 8 maximum. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is 59, which matches the limit for vSphere version 7.", - "type": "integer", - "format": "int32" + "ldap": { + "description": "ldap enables user authentication using LDAP credentials", + "$ref": "#/definitions/com.github.openshift.api.config.v1.LDAPIdentityProvider" }, - "topologyCategories": { - "description": "topologyCategories indicates tag categories with which vcenter resources such as hostcluster or datacenter were tagged with. If cluster Infrastructure object has a topology, values specified in Infrastructure object will be used and modifications to topologyCategories will be rejected.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "openID": { + "description": "openID enables user authentication using OpenID credentials", + "$ref": "#/definitions/com.github.openshift.api.config.v1.OpenIDIdentityProvider" + }, + "requestHeader": { + "description": "requestHeader enables user authentication using request header credentials", + "$ref": "#/definitions/com.github.openshift.api.config.v1.RequestHeaderIdentityProvider" + }, + "type": { + "description": "type identifies the identity provider type for this entry.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.operator.v1alpha1.BackupJobReference": { - "description": "BackupJobReference holds a reference to the batch/v1 Job created to run the etcd backup", + "com.github.openshift.api.config.v1.Image": { + "description": "Image governs policies related to imagestream imports and runtime configuration for external registries. It allows cluster admins to configure which registries OpenShift is allowed to import images from, extra CA trust bundles for external registries, and policies to block or allow registry hostnames. When exposing OpenShift's image registry to the public, this also lets cluster admins specify the external hostname.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "namespace", - "name" + "spec" ], "properties": { - "name": { - "description": "name is the name of the Job. Required", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "namespace": { - "description": "namespace is the namespace of the Job. this is always expected to be \"openshift-etcd\" since the user provided PVC is also required to be in \"openshift-etcd\" Required", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec holds user settable values for configuration", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageSpec" + }, + "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageStatus" } } }, - "com.github.openshift.api.operator.v1alpha1.ClusterAPI": { - "description": "ClusterAPI provides configuration for the capi-operator.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.ImageContentPolicy": { + "description": "ImageContentPolicy holds cluster-wide information about how to handle registry mirror rules. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "metadata", "spec" ], "properties": { @@ -38101,170 +3645,94 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec is the specification of the desired behavior of the capi-operator.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.ClusterAPISpec" - }, - "status": { - "description": "status defines the observed status of the capi-operator.", + "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.ClusterAPIStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageContentPolicySpec" } } }, - "com.github.openshift.api.operator.v1alpha1.ClusterAPIInstallerComponent": { - "description": "ClusterAPIInstallerComponent defines a component which will be installed by this revision.", + "com.github.openshift.api.config.v1.ImageContentPolicyList": { + "description": "ImageContentPolicyList lists the items in the ImageContentPolicy CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "type" + "metadata", + "items" ], "properties": { - "image": { - "description": "image defines an image source for a component. The image must contain a /capi-operator-installer directory containing the component manifests.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.ClusterAPIInstallerComponentImage" - }, - "name": { - "description": "name is the human-readable name of the component. The value has no effect, and will not be set if the component does not define a name in its manifests. If set it must consist of alphanumeric characters, or '-', and may not exceed 255 characters.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "type": { - "description": "type is the source type of the component. The only valid value is Image. When set to Image, the image field must be set and will define an image source for the component.\n\nPossible enum values:\n - `\"Image\"` is an image source for a component.", - "type": "string", - "enum": [ - "Image" - ] - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "image": "Image" + "items": { + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageContentPolicy" } - } - ] - }, - "com.github.openshift.api.operator.v1alpha1.ClusterAPIInstallerComponentImage": { - "description": "ClusterAPIInstallerComponentImage defines an image source for a component.", - "type": "object", - "required": [ - "ref", - "profile" - ], - "properties": { - "profile": { - "description": "profile is the name of a profile to use from the image.\n\nA profile name may be up to 255 characters long. It must consist of alphanumeric characters, '-', or '_'.", - "type": "string" }, - "ref": { - "description": "ref is an image reference to the image containing the component manifests. The reference must be a valid image digest reference in the format host[:port][/namespace]/name@sha256:. The digest must be 64 characters long, and consist only of lowercase hexadecimal characters, a-f and 0-9. The length of the field must be between 1 to 447 characters.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1alpha1.ClusterAPIInstallerComponentSource": { - "description": "ClusterAPIInstallerComponentSource defines the source of a component which will be installed by this revision.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "image": { - "description": "image defines an image source for a component. The image must contain a /capi-operator-installer directory containing the component manifests.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.ClusterAPIInstallerComponentImage" }, - "type": { - "description": "type is the source type of the component. The only valid value is Image. When set to Image, the image field must be set and will define an image source for the component.\n\nPossible enum values:\n - `\"Image\"` is an image source for a component.", - "type": "string", - "enum": [ - "Image" - ] - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "image": "Image" - } + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } - ] + } }, - "com.github.openshift.api.operator.v1alpha1.ClusterAPIInstallerRevision": { + "com.github.openshift.api.config.v1.ImageContentPolicySpec": { + "description": "ImageContentPolicySpec is the specification of the ImageContentPolicy CRD.", "type": "object", - "required": [ - "name", - "revision", - "contentID" - ], "properties": { - "components": { - "description": "components is a list of components which will be installed by this revision. Components will be installed in the order they are listed. If omitted no components will be installed.\n\nThe maximum number of components is 32.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.ClusterAPIInstallerComponent" - }, - "x-kubernetes-list-type": "atomic" - }, - "contentID": { - "description": "contentID uniquely identifies the content of this revision. The contentID must be between 1 and 255 characters long.", - "type": "string" - }, - "manifestSubstitutions": { - "description": "manifestSubstitutions is a list of envsubst style substitutions which will be applied to manifests in the revision during rendering. If defined it must not be empty, and may not contain more than 32 items. Each manifest substitution must have a unique key.", + "repositoryDigestMirrors": { + "description": "repositoryDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in RepositoryDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To pull image from mirrors by tags, should set the \"allowMirrorByTags\".\n\nEach “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.ClusterAPIInstallerRevisionManifestSubstitution" + "$ref": "#/definitions/com.github.openshift.api.config.v1.RepositoryDigestMirrors" }, "x-kubernetes-list-map-keys": [ - "key" + "source" ], "x-kubernetes-list-type": "map" - }, - "name": { - "description": "name is the name of a revision.", - "type": "string" - }, - "revision": { - "description": "revision is a monotonically increasing number that is assigned to a revision.", - "type": "integer", - "format": "int64" - }, - "unmanagedCustomResourceDefinitions": { - "description": "unmanagedCustomResourceDefinitions is a list of the names of ClusterResourceDefinition (CRD) objects which are included in this revision, but which should not be installed or updated. If not set, all CRDs in the revision will be managed by the CAPI operator.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" } - }, - "x-kubernetes-map-type": "atomic" + } }, - "com.github.openshift.api.operator.v1alpha1.ClusterAPIInstallerRevisionManifestSubstitution": { - "description": "ClusterAPIInstallerRevisionManifestSubstitution defines an envsubst style substitution which will be applied to manifests in a revision during rendering.", + "com.github.openshift.api.config.v1.ImageDigestMirrorSet": { + "description": "ImageDigestMirrorSet holds cluster-wide information about how to handle registry mirror rules on using digest pull specification. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "key", - "value" + "spec" ], "properties": { - "key": { - "description": "key is the name of the envsubst variable to substitute. It must be a valid envsubst variable name, consisting of letters, digits, and underscores, and must start with a letter or underscore. The key must not be empty, and must not exceed 255 characters.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "value": { - "description": "value is the value to substitute for the envsubst variable. It may be empty, in which case the variable will be substituted with an empty string. The value must not exceed 4096 characters.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec holds user settable values for configuration", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageDigestMirrorSetSpec" + }, + "status": { + "description": "status contains the observed state of the resource.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageDigestMirrorSetStatus" } } }, - "com.github.openshift.api.operator.v1alpha1.ClusterAPIList": { - "description": "ClusterAPIList contains a list of ClusterAPI configurations\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.ImageDigestMirrorSetList": { + "description": "ImageDigestMirrorSetList lists the items in the ImageDigestMirrorSet CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "metadata", @@ -38276,11 +3744,10 @@ "type": "string" }, "items": { - "description": "items contains the items", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.ClusterAPI" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageDigestMirrorSet" } }, "kind": { @@ -38294,91 +3761,74 @@ } } }, - "com.github.openshift.api.operator.v1alpha1.ClusterAPISpec": { - "description": "ClusterAPISpec defines the desired configuration of the capi-operator. The spec is required but we deliberately allow it to be empty.", + "com.github.openshift.api.config.v1.ImageDigestMirrorSetSpec": { + "description": "ImageDigestMirrorSetSpec is the specification of the ImageDigestMirrorSet CRD.", "type": "object", "properties": { - "unmanagedCustomResourceDefinitions": { - "description": "unmanagedCustomResourceDefinitions is a list of ClusterResourceDefinition (CRD) names that should not be managed by the capi-operator installer controller. This allows external actors to own specific CRDs while capi-operator manages others.\n\nEach CRD name must be a valid DNS-1123 subdomain consisting of lowercase alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character, with a maximum length of 253 characters. CRD names must contain at least two '.' characters. Example: \"clusters.cluster.x-k8s.io\"\n\nItems cannot be removed from this list once added.\n\nThe maximum number of unmanagedCustomResourceDefinitions is 128.", + "imageDigestMirrors": { + "description": "imageDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in imageDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To use mirrors to pull images using tag specification, users should configure a list of mirrors using \"ImageTagMirrorSet\" CRD.\n\nIf the image pull specification matches the repository of \"source\" in multiple imagedigestmirrorset objects, only the objects which define the most specific namespace match will be used. For example, if there are objects using quay.io/libpod and quay.io/libpod/busybox as the \"source\", only the objects using quay.io/libpod/busybox are going to apply for pull specification quay.io/libpod/busybox. Each “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified. Users who want to use a specific order of mirrors, should configure them into one list of mirrors using the expected order.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageDigestMirrors" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" } } }, - "com.github.openshift.api.operator.v1alpha1.ClusterAPIStatus": { - "description": "ClusterAPIStatus describes the current state of the capi-operator.", + "com.github.openshift.api.config.v1.ImageDigestMirrorSetStatus": { + "type": "object" + }, + "com.github.openshift.api.config.v1.ImageDigestMirrors": { + "description": "ImageDigestMirrors holds cluster-wide information about how to handle mirrors in the registries config.", "type": "object", "required": [ - "desiredRevision", - "revisions" + "source" ], "properties": { - "currentRevision": { - "description": "currentRevision is the name of the most recently fully applied revision. It is written by the installer controller. If it is absent, it indicates that no revision has been fully applied yet. If set, currentRevision must correspond to an entry in the revisions list.", - "type": "string" - }, - "desiredRevision": { - "description": "desiredRevision is the name of the desired revision. It is written by the revision controller. It must be set to the name of the entry in the revisions list with the highest revision number.", + "mirrorSourcePolicy": { + "description": "mirrorSourcePolicy defines the fallback policy if fails to pull image from the mirrors. If unset, the image will continue to be pulled from the the repository in the pull spec. sourcePolicy is valid configuration only when one or more mirrors are in the mirror list.", "type": "string" }, - "observedRevisionGeneration": { - "description": "observedRevisionGeneration is the generation of the ClusterAPI object that was last observed by the revision controller. If specified it must be greater than or equal to 1, and less than 2^53. It may not decrease or be unset once set.", - "type": "integer", - "format": "int64" - }, - "revisions": { - "description": "revisions is a list of all currently active revisions. A revision is active until the installer controller updates currentRevision to a later revision. It is written by the revision controller.\n\nThe maximum number of revisions is 16. All revisions must have a unique name. All revisions must have a unique revision number. When adding a revision, the revision number must be greater than the highest revision number in the list. Revisions are immutable, although they can be deleted.", + "mirrors": { + "description": "mirrors is zero or more locations that may also contain the same images. No mirror will be configured if not specified. Images can be pulled from these mirrors only if they are referenced by their digests. The mirrored location is obtained by replacing the part of the input reference that matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo reference, a (source, mirror) pair *.redhat.io, mirror.local/redhat causes a mirror.local/redhat/product/repo repository to be used. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. If no mirror is specified or all image pulls from the mirror list fail, the image will continue to be pulled from the repository in the pull spec unless explicitly prohibited by \"mirrorSourcePolicy\" Other cluster configuration, including (but not limited to) other imageDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering. \"mirrors\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.ClusterAPIInstallerRevision" + "type": "string", + "default": "" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-type": "set" + }, + "source": { + "description": "source matches the repository that users refer to, e.g. in image pull specifications. Setting source to a registry hostname e.g. docker.io. quay.io, or registry.redhat.io, will match the image pull specification of corressponding registry. \"source\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo [*.]host for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.operator.v1alpha1.ClusterVersionOperator": { - "description": "ClusterVersionOperator holds cluster-wide information about the Cluster Version Operator.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.ImageLabel": { "type": "object", "required": [ - "metadata", - "spec" + "name" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "name": { + "description": "name defines the name of the label. It must have non-zero length.", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "value": { + "description": "value defines the literal value of the label.", "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the specification of the desired behavior of the Cluster Version Operator.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.ClusterVersionOperatorSpec" - }, - "status": { - "description": "status is the most recently observed status of the Cluster Version Operator.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.ClusterVersionOperatorStatus" } } }, - "com.github.openshift.api.operator.v1alpha1.ClusterVersionOperatorList": { - "description": "ClusterVersionOperatorList is a collection of ClusterVersionOperators.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.ImageList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "metadata" + "metadata", + "items" ], "properties": { "apiVersion": { @@ -38386,11 +3836,10 @@ "type": "string" }, "items": { - "description": "items is a list of ClusterVersionOperators.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.ClusterVersionOperator" + "$ref": "#/definitions/com.github.openshift.api.config.v1.Image" } }, "kind": { @@ -38404,49 +3853,8 @@ } } }, - "com.github.openshift.api.operator.v1alpha1.ClusterVersionOperatorSpec": { - "description": "ClusterVersionOperatorSpec is the specification of the desired behavior of the Cluster Version Operator.", - "type": "object", - "properties": { - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1alpha1.ClusterVersionOperatorStatus": { - "description": "ClusterVersionOperatorStatus defines the observed status of the Cluster Version Operator.", - "type": "object", - "properties": { - "observedGeneration": { - "description": "observedGeneration represents the most recent generation observed by the operator and specifies the version of the spec field currently being synced.", - "type": "integer", - "format": "int64" - } - } - }, - "com.github.openshift.api.operator.v1alpha1.DelegatedAuthentication": { - "description": "DelegatedAuthentication allows authentication to be disabled.", - "type": "object", - "properties": { - "disabled": { - "description": "disabled indicates that authentication should be disabled. By default it will use delegated authentication.", - "type": "boolean" - } - } - }, - "com.github.openshift.api.operator.v1alpha1.DelegatedAuthorization": { - "description": "DelegatedAuthorization allows authorization to be disabled.", - "type": "object", - "properties": { - "disabled": { - "description": "disabled indicates that authorization should be disabled. By default it will use delegated authorization.", - "type": "boolean" - } - } - }, - "com.github.openshift.api.operator.v1alpha1.EtcdBackup": { - "description": "# EtcdBackup provides configuration options and status for a one-time backup attempt of the etcd cluster\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.ImagePolicy": { + "description": "ImagePolicy holds namespace-wide configuration for image signature verification\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "spec" @@ -38461,23 +3869,50 @@ "type": "string" }, "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "spec": { - "description": "spec holds user settable values for configuration", + "spec": { + "description": "spec holds user settable values for configuration", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImagePolicySpec" + }, + "status": { + "description": "status contains the observed state of the resource.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImagePolicyStatus" + } + } + }, + "com.github.openshift.api.config.v1.ImagePolicyFulcioCAWithRekorRootOfTrust": { + "description": "ImagePolicyFulcioCAWithRekorRootOfTrust defines the root of trust based on the Fulcio certificate and the Rekor public key.", + "type": "object", + "required": [ + "fulcioCAData", + "rekorKeyData", + "fulcioSubject" + ], + "properties": { + "fulcioCAData": { + "description": "fulcioCAData is a required field contains inline base64-encoded data for the PEM format fulcio CA. fulcioCAData must be at most 8192 characters.", + "type": "string", + "format": "byte" + }, + "fulcioSubject": { + "description": "fulcioSubject is a required field specifies OIDC issuer and the email of the Fulcio authentication configuration.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.EtcdBackupSpec" + "$ref": "#/definitions/com.github.openshift.api.config.v1.PolicyFulcioSubject" }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.EtcdBackupStatus" + "rekorKeyData": { + "description": "rekorKeyData is a required field contains inline base64-encoded data for the PEM format from the Rekor public key. rekorKeyData must be at most 8192 characters.", + "type": "string", + "format": "byte" } } }, - "com.github.openshift.api.operator.v1alpha1.EtcdBackupList": { - "description": "EtcdBackupList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.ImagePolicyList": { + "description": "ImagePolicyList is a list of ImagePolicy resources\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "metadata", @@ -38489,10 +3924,11 @@ "type": "string" }, "items": { + "description": "items is a list of ImagePolicies", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.EtcdBackup" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImagePolicy" } }, "kind": { @@ -38500,201 +3936,187 @@ "type": "string" }, "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } } }, - "com.github.openshift.api.operator.v1alpha1.EtcdBackupSpec": { + "com.github.openshift.api.config.v1.ImagePolicyPKIRootOfTrust": { + "description": "ImagePolicyPKIRootOfTrust defines the root of trust based on Root CA(s) and corresponding intermediate certificates.", "type": "object", + "required": [ + "caRootsData", + "pkiCertificateSubject" + ], "properties": { - "pvcName": { - "description": "pvcName specifies the name of the PersistentVolumeClaim (PVC) which binds a PersistentVolume where the etcd backup file would be saved The PVC itself must always be created in the \"openshift-etcd\" namespace If the PVC is left unspecified \"\" then the platform will choose a reasonable default location to save the backup. In the future this would be backups saved across the control-plane master nodes.", + "caIntermediatesData": { + "description": "caIntermediatesData contains base64-encoded data of a certificate bundle PEM file, which contains one or more intermediate certificates in the PEM format. The total length of the data must not exceed 8192 characters. caIntermediatesData requires caRootsData to be set.", "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.operator.v1alpha1.EtcdBackupStatus": { - "type": "object", - "properties": { - "backupJob": { - "description": "backupJob is the reference to the Job that executes the backup. Optional", - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.BackupJobReference" + "format": "byte" }, - "conditions": { - "description": "conditions provide details on the status of the etcd backup job.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" + "caRootsData": { + "description": "caRootsData contains base64-encoded data of a certificate bundle PEM file, which contains one or more CA roots in the PEM format. The total length of the data must not exceed 8192 characters.", + "type": "string", + "format": "byte" + }, + "pkiCertificateSubject": { + "description": "pkiCertificateSubject defines the requirements imposed on the subject to which the certificate was issued.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.PKICertificateSubject" } } }, - "com.github.openshift.api.operator.v1alpha1.GatewayAPIIngressConfig": { - "description": "GatewayAPIIngressConfig holds configuration for Gateway API integration in the Cluster Ingress Operator.", + "com.github.openshift.api.config.v1.ImagePolicyPublicKeyRootOfTrust": { + "description": "ImagePolicyPublicKeyRootOfTrust defines the root of trust based on a sigstore public key.", "type": "object", + "required": [ + "keyData" + ], "properties": { - "managementMode": { - "description": "managementMode specifies how the Cluster Ingress Operator manages Gateway API Custom Resource Definitions (CRDs), the OpenShift Gateway API implementation, and its Gateway API controllers.\n\nAllowed values are \"Managed\" and \"Unmanaged\".\n\nWhen omitted or set to \"Managed\", the ingress operator installs, owns, and upgrades the Gateway API CRDs, protects them with a Validating Admission Policy, and deploys the OpenShift Gateway API implementation and its Gateway API controllers.\n\nWhen set to \"Unmanaged\", the ingress operator does not install or manage Gateway API CRDs and does not deploy the OpenShift Gateway API implementation or its Gateway API controllers. The cluster administrator or a third-party product is responsible for providing their own CRDs and Gateway controller. The ingress operator reports observational status only.", - "type": "string" + "keyData": { + "description": "keyData is a required field contains inline base64-encoded data for the PEM format public key. keyData must be at most 8192 characters.", + "type": "string", + "format": "byte" + }, + "rekorKeyData": { + "description": "rekorKeyData is an optional field contains inline base64-encoded data for the PEM format from the Rekor public key. rekorKeyData must be at most 8192 characters.", + "type": "string", + "format": "byte" } } }, - "com.github.openshift.api.operator.v1alpha1.GenerationHistory": { - "description": "GenerationHistory keeps track of the generation for a given resource so that decisions about forced updated can be made. DEPRECATED: Use fields in v1.GenerationStatus instead", + "com.github.openshift.api.config.v1.ImagePolicySpec": { + "description": "ImagePolicySpec is the specification of the ImagePolicy CRD.", "type": "object", "required": [ - "group", - "resource", - "namespace", - "name", - "lastGeneration" + "scopes", + "policy" ], "properties": { - "group": { - "description": "group is the group of the thing you're tracking", - "type": "string", - "default": "" - }, - "lastGeneration": { - "description": "lastGeneration is the last generation of the workload controller involved", - "type": "integer", - "format": "int64", - "default": 0 - }, - "name": { - "description": "name is the name of the thing you're tracking", - "type": "string", - "default": "" - }, - "namespace": { - "description": "namespace is where the thing you're tracking is", - "type": "string", - "default": "" + "policy": { + "description": "policy is a required field that contains configuration to allow scopes to be verified, and defines how images not matching the verification policy will be treated.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageSigstoreVerificationPolicy" }, - "resource": { - "description": "resource is the resource type of the thing you're tracking", - "type": "string", - "default": "" + "scopes": { + "description": "scopes is a required field that defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. This support no more than 256 scopes in one object. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. If a scope is configured in both the ClusterImagePolicy and the ImagePolicy, or if the scope in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy, only the policy from the ClusterImagePolicy will be applied. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" } } }, - "com.github.openshift.api.operator.v1alpha1.GenericOperatorConfig": { - "description": "GenericOperatorConfig provides information to configure an operator\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.ImagePolicyStatus": { "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "authentication": { - "description": "authentication allows configuration of authentication for the endpoints", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.DelegatedAuthentication" - }, - "authorization": { - "description": "authorization allows configuration of authentication for the endpoints", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.DelegatedAuthorization" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "leaderElection": { - "description": "leaderElection provides information to elect a leader. Only override this if you have a specific need", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.LeaderElection" - }, - "servingInfo": { - "description": "servingInfo is the HTTP serving information for the controller's endpoints", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.HTTPServingInfo" + "conditions": { + "description": "conditions provide details on the status of this API Resource. condition type 'Pending' indicates that the customer resource contains a policy that cannot take effect. It is either overwritten by a global policy or the image scope is not valid.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" } } }, - "com.github.openshift.api.operator.v1alpha1.ImageContentSourcePolicy": { - "description": "ImageContentSourcePolicy holds cluster-wide information about how to handle registry mirror rules. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.ImageSigstoreVerificationPolicy": { + "description": "ImageSigstoreVerificationPolicy defines the verification policy for the items in the scopes list.", "type": "object", "required": [ - "spec" + "rootOfTrust" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "rootOfTrust": { + "description": "rootOfTrust is a required field that defines the root of trust for verifying image signatures during retrieval. This allows image consumers to specify policyType and corresponding configuration of the policy, matching how the policy was generated.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "$ref": "#/definitions/com.github.openshift.api.config.v1.PolicyRootOfTrust" }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.ImageContentSourcePolicySpec" + "signedIdentity": { + "description": "signedIdentity is an optional field specifies what image identity the signature claims about the image. This is useful when the image identity in the signature differs from the original image spec, such as when mirror registry is configured for the image scope, the signature from the mirror registry contains the image identity of the mirror instead of the original scope. The required matchPolicy field specifies the approach used in the verification process to verify the identity in the signature and the actual image identity, the default matchPolicy is \"MatchRepoDigestOrExact\".", + "$ref": "#/definitions/com.github.openshift.api.config.v1.PolicyIdentity" } } }, - "com.github.openshift.api.operator.v1alpha1.ImageContentSourcePolicyList": { - "description": "ImageContentSourcePolicyList lists the items in the ImageContentSourcePolicy CRD.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.ImageSpec": { "type": "object", - "required": [ - "metadata", - "items" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "additionalTrustedCA": { + "description": "additionalTrustedCA is a reference to a ConfigMap containing additional CAs that should be trusted during imagestream import, pod image pull, build image pull, and imageregistry pullthrough. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" }, - "items": { + "allowedRegistriesForImport": { + "description": "allowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.ImageContentSourcePolicy" - } + "$ref": "#/definitions/com.github.openshift.api.config.v1.RegistryLocation" + }, + "x-kubernetes-list-type": "atomic" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "externalRegistryHostnames": { + "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "imageStreamImportMode": { + "description": "imageStreamImportMode controls the import mode behaviour of imagestreams. It can be set to `Legacy` or `PreserveOriginal` or the empty string. If this value is specified, this setting is applied to all newly created imagestreams which do not have the value set. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported. When empty, the behaviour will be decided based on the payload type advertised by the ClusterVersion status, i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.", + "type": "string", + "default": "", + "enum": [ + "Legacy", + "PreserveOriginal" + ] + }, + "registrySources": { + "description": "registrySources contains configuration that determines how the container runtime should treat individual registries when accessing images for builds+pods. (e.g. whether or not to allow insecure access). It does not contain configuration for the internal cluster registry.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/com.github.openshift.api.config.v1.RegistrySources" } } }, - "com.github.openshift.api.operator.v1alpha1.ImageContentSourcePolicySpec": { - "description": "ImageContentSourcePolicySpec is the specification of the ImageContentSourcePolicy CRD.", + "com.github.openshift.api.config.v1.ImageStatus": { "type": "object", "properties": { - "repositoryDigestMirrors": { - "description": "repositoryDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in RepositoryDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. Only image pull specifications that have an image digest will have this behavior applied to them - tags will continue to be pulled from the specified repository in the pull spec.\n\nEach “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified.", + "externalRegistryHostnames": { + "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.RepositoryDigestMirrors" - } + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "imageStreamImportMode": { + "description": "imageStreamImportMode controls the import mode behaviour of imagestreams. It can be `Legacy` or `PreserveOriginal`. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported. This value will be reconciled based on either the spec value or if no spec value is specified, the image registry operator would look at the ClusterVersion status to determine the payload type and set the import mode accordingly, i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.", + "type": "string", + "enum": [ + "Legacy", + "PreserveOriginal" + ] + }, + "internalRegistryHostname": { + "description": "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format. This value is set by the image registry operator which controls the internal registry hostname.", + "type": "string" } } }, - "com.github.openshift.api.operator.v1alpha1.Ingress": { - "description": "Ingress contains configuration options specific to the Ingress Operator itself, including how it manages Gateway API integration.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.ImageTagMirrorSet": { + "description": "ImageTagMirrorSet holds cluster-wide information about how to handle registry mirror rules on using tag pull specification. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "metadata", "spec" ], "properties": { @@ -38712,22 +4134,23 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec holds user settable values for configuration.", + "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.IngressSpec" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageTagMirrorSetSpec" }, "status": { - "description": "status holds observed values from the cluster.", + "description": "status contains the observed state of the resource.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.IngressStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageTagMirrorSetStatus" } } }, - "com.github.openshift.api.operator.v1alpha1.IngressList": { - "description": "IngressList is a collection of Ingresses.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.ImageTagMirrorSetList": { + "description": "ImageTagMirrorSetList lists the items in the ImageTagMirrorSet CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "metadata" + "metadata", + "items" ], "properties": { "apiVersion": { @@ -38735,11 +4158,10 @@ "type": "string" }, "items": { - "description": "items is a list of Ingresses.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.Ingress" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageTagMirrorSet" } }, "kind": { @@ -38753,110 +4175,55 @@ } } }, - "com.github.openshift.api.operator.v1alpha1.IngressSpec": { - "description": "IngressSpec is the specification of the desired behavior of the Ingress Operator.", - "type": "object", - "properties": { - "gatewayAPI": { - "description": "gatewayAPI holds configuration for Gateway API integration, including how the ingress operator manages Gateway API CRDs, the OpenShift Gateway API implementation, and its Gateway API controllers.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.GatewayAPIIngressConfig" - } - } - }, - "com.github.openshift.api.operator.v1alpha1.IngressStatus": { - "description": "IngressStatus defines the observed status of the Ingress Operator.", + "com.github.openshift.api.config.v1.ImageTagMirrorSetSpec": { + "description": "ImageTagMirrorSetSpec is the specification of the ImageTagMirrorSet CRD.", "type": "object", "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status.\n\nGateway API CRD management conditions are reported here with the \"GatewayAPI\" prefix:\n\n* \"GatewayAPICRDsManaged\" indicates whether the ingress operator is actively\n managing Gateway API CRDs.\n* \"GatewayAPICRDsPresent\" indicates whether Gateway API CRDs exist on the\n cluster.\n* \"GatewayAPICRDsCompliant\" indicates whether the installed CRDs match the\n version expected by this ingress operator release.", + "imageTagMirrors": { + "description": "imageTagMirrors allows images referenced by image tags in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in imageTagMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To use mirrors to pull images using digest specification only, users should configure a list of mirrors using \"ImageDigestMirrorSet\" CRD.\n\nIf the image pull specification matches the repository of \"source\" in multiple imagetagmirrorset objects, only the objects which define the most specific namespace match will be used. For example, if there are objects using quay.io/libpod and quay.io/libpod/busybox as the \"source\", only the objects using quay.io/libpod/busybox are going to apply for pull specification quay.io/libpod/busybox. Each “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified. Users who want to use a deterministic order of mirrors, should configure them into one list of mirrors using the expected order.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImageTagMirrors" }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "observedGeneration": { - "description": "observedGeneration represents the most recent generation observed by the operator and specifies the version of the spec field currently being synced.\n\nWhen omitted, the operator has not yet observed the resource.", - "type": "integer", - "format": "int64" + "x-kubernetes-list-type": "atomic" } } }, - "com.github.openshift.api.operator.v1alpha1.LoggingConfig": { - "description": "LoggingConfig holds information about configuring logging DEPRECATED: Use v1.LogLevel instead", - "type": "object", - "required": [ - "level", - "vmodule" - ], - "properties": { - "level": { - "description": "level is passed to glog.", - "type": "integer", - "format": "int64", - "default": 0 - }, - "vmodule": { - "description": "vmodule is passed to glog.", - "type": "string", - "default": "" - } - } + "com.github.openshift.api.config.v1.ImageTagMirrorSetStatus": { + "type": "object" }, - "com.github.openshift.api.operator.v1alpha1.NodeStatus": { - "description": "NodeStatus provides information about the current state of a particular node managed by this operator. Deprecated: Use v1.NodeStatus instead", + "com.github.openshift.api.config.v1.ImageTagMirrors": { + "description": "ImageTagMirrors holds cluster-wide information about how to handle mirrors in the registries config.", "type": "object", "required": [ - "nodeName", - "currentDeploymentGeneration", - "targetDeploymentGeneration", - "lastFailedDeploymentGeneration", - "lastFailedDeploymentErrors" + "source" ], "properties": { - "currentDeploymentGeneration": { - "description": "currentDeploymentGeneration is the generation of the most recently successful deployment", - "type": "integer", - "format": "int32", - "default": 0 + "mirrorSourcePolicy": { + "description": "mirrorSourcePolicy defines the fallback policy if fails to pull image from the mirrors. If unset, the image will continue to be pulled from the repository in the pull spec. sourcePolicy is valid configuration only when one or more mirrors are in the mirror list.", + "type": "string" }, - "lastFailedDeploymentErrors": { - "description": "lastFailedDeploymentGenerationErrors is a list of the errors during the failed deployment referenced in lastFailedDeploymentGeneration", + "mirrors": { + "description": "mirrors is zero or more locations that may also contain the same images. No mirror will be configured if not specified. Images can be pulled from these mirrors only if they are referenced by their tags. The mirrored location is obtained by replacing the part of the input reference that matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo reference, a (source, mirror) pair *.redhat.io, mirror.local/redhat causes a mirror.local/redhat/product/repo repository to be used. Pulling images by tag can potentially yield different images, depending on which endpoint we pull from. Configuring a list of mirrors using \"ImageDigestMirrorSet\" CRD and forcing digest-pulls for mirrors avoids that issue. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. If no mirror is specified or all image pulls from the mirror list fail, the image will continue to be pulled from the repository in the pull spec unless explicitly prohibited by \"mirrorSourcePolicy\". Other cluster configuration, including (but not limited to) other imageTagMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering. \"mirrors\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", "type": "array", "items": { "type": "string", "default": "" - } - }, - "lastFailedDeploymentGeneration": { - "description": "lastFailedDeploymentGeneration is the generation of the deployment we tried and failed to deploy.", - "type": "integer", - "format": "int32", - "default": 0 + }, + "x-kubernetes-list-type": "set" }, - "nodeName": { - "description": "nodeName is the name of the node", + "source": { + "description": "source matches the repository that users refer to, e.g. in image pull specifications. Setting source to a registry hostname e.g. docker.io. quay.io, or registry.redhat.io, will match the image pull specification of corressponding registry. \"source\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo [*.]host for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", "type": "string", "default": "" - }, - "targetDeploymentGeneration": { - "description": "targetDeploymentGeneration is the generation of the deployment we're trying to apply", - "type": "integer", - "format": "int32", - "default": 0 } } }, - "com.github.openshift.api.operator.v1alpha1.OLM": { - "description": "OLM provides information to configure an operator to manage the OLM controllers\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.Infrastructure": { + "description": "Infrastructure holds cluster-wide information about Infrastructure. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "metadata", "spec" ], "properties": { @@ -38876,17 +4243,17 @@ "spec": { "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.OLMSpec" + "$ref": "#/definitions/com.github.openshift.api.config.v1.InfrastructureSpec" }, "status": { "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.OLMStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.InfrastructureStatus" } } }, - "com.github.openshift.api.operator.v1alpha1.OLMList": { - "description": "OLMList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.InfrastructureList": { + "description": "InfrastructureList is\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "metadata", @@ -38898,11 +4265,10 @@ "type": "string" }, "items": { - "description": "items contains the items", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.OLM" + "$ref": "#/definitions/com.github.openshift.api.config.v1.Infrastructure" } }, "kind": { @@ -38916,1813 +4282,1779 @@ } } }, - "com.github.openshift.api.operator.v1alpha1.OLMSpec": { + "com.github.openshift.api.config.v1.InfrastructureSpec": { + "description": "InfrastructureSpec contains settings that apply to the cluster infrastructure.", "type": "object", - "required": [ - "managementState" - ], "properties": { - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "cloudConfig": { + "description": "cloudConfig is a reference to a ConfigMap containing the cloud provider configuration file. This configuration file is used to configure the Kubernetes cloud provider integration when using the built-in cloud provider integration or the external cloud controller manager. The namespace for this config map is openshift-config.\n\ncloudConfig should only be consumed by the kube_cloud_config controller. The controller is responsible for using the user configuration in the spec for various platforms and combining that with the user provided ConfigMap in this field to create a stitched kube cloud config. The controller generates a ConfigMap `kube-cloud-config` in `openshift-config-managed` namespace with the kube cloud config is stored in `cloud.conf` key. All the clients are expected to use the generated ConfigMap only.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapFileReference" }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", + "controlPlaneTopology": { + "description": "controlPlaneTopology expresses the desired topology configuration for control nodes.\n\nWhen status.controlPlaneTopology is 'SingleReplica' and spec.controlPlaneTopology is set to 'HighlyAvailable', a transition will be triggered to reconfigure the cluster from SingleReplica to HighlyAvailable.\n\nWhen left blank or status.controlPlaneTopology and spec.controlPlaneTopology are the same value, no changes are required and no transitions will be triggered.\n\nThis value may be set to match status.controlPlaneTopology regardless of the current value.", "type": "string" }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "platformSpec": { + "description": "platformSpec holds desired information specific to the underlying infrastructure provider.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.PlatformSpec" } } }, - "com.github.openshift.api.operator.v1alpha1.OLMStatus": { + "com.github.openshift.api.config.v1.InfrastructureStatus": { + "description": "InfrastructureStatus describes the infrastructure the cluster is leveraging.", "type": "object", "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" + "apiServerInternalURI": { + "description": "apiServerInternalURL is a valid URI with scheme 'https', address and optionally a port (defaulting to 443). apiServerInternalURL can be used by components like kubelets, to contact the Kubernetes API server using the infrastructure provider rather than Kubernetes networking.", + "type": "string", + "default": "" }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" + "apiServerURL": { + "description": "apiServerURL is a valid URI with scheme 'https', address and optionally a port (defaulting to 443). apiServerURL can be used by components like the web console to tell users where to find the Kubernetes API.", + "type": "string", + "default": "" }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" + "controlPlaneTopology": { + "description": "controlPlaneTopology expresses the expectations for operands that normally run on control nodes. The default is 'HighlyAvailable', which represents the behavior operators have in a \"normal\" cluster. The 'SingleReplica' mode will be used in single-node deployments and the operators should not configure the operand for highly-available operation The 'External' mode indicates that the control plane is hosted externally to the cluster and that its components are not visible within the cluster. The 'HighlyAvailableArbiter' mode indicates that the control plane will consist of 2 control-plane nodes that run conventional services and 1 smaller sized arbiter node that runs a bare minimum of services to maintain quorum.", + "type": "string", + "default": "" }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" + "cpuPartitioning": { + "description": "cpuPartitioning expresses if CPU partitioning is a currently enabled feature in the cluster. CPU Partitioning means that this cluster can support partitioning workloads to specific CPU Sets. Valid values are \"None\" and \"AllNodes\". When omitted, the default value is \"None\". The default value of \"None\" indicates that no nodes will be setup with CPU partitioning. The \"AllNodes\" value indicates that all nodes have been setup with CPU partitioning, and can then be further configured via the PerformanceProfile API.", + "type": "string", + "default": "None" }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 + "etcdDiscoveryDomain": { + "description": "etcdDiscoveryDomain is the domain used to fetch the SRV records for discovering etcd servers and clients. For more info: https://github.com/etcd-io/etcd/blob/329be66e8b3f9e2e6af83c123ff89297e49ebd15/Documentation/op-guide/clustering.md#dns-discovery deprecated: as of 4.7, this field is no longer set or honored. It will be removed in a future release.", + "type": "string", + "default": "" }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" - } - } - }, - "com.github.openshift.api.operator.v1alpha1.OperatorCondition": { - "description": "OperatorCondition is just the standard condition fields. DEPRECATED: Use v1.OperatorCondition instead", - "type": "object", - "required": [ - "type", - "status" - ], - "properties": { - "lastTransitionTime": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "infrastructureName": { + "description": "infrastructureName uniquely identifies a cluster with a human friendly name. Once set it should not be changed. Must be of max length 27 and must have only alphanumeric or hyphen characters.", + "type": "string", + "default": "" }, - "message": { + "infrastructureTopology": { + "description": "infrastructureTopology expresses the expectations for infrastructure services that do not run on control plane nodes, usually indicated by a node selector for a `role` value other than `master`. The default is 'HighlyAvailable', which represents the behavior operators have in a \"normal\" cluster. The 'SingleReplica' mode will be used in single-node deployments and the operators should not configure the operand for highly-available operation NOTE: External topology mode is not applicable for this field.", "type": "string" }, - "reason": { + "platform": { + "description": "platform is the underlying infrastructure provider for the cluster.\n\nDeprecated: Use platformStatus.type instead.", "type": "string" }, - "status": { - "type": "string", - "default": "" - }, - "type": { - "type": "string", - "default": "" + "platformStatus": { + "description": "platformStatus holds status information specific to the underlying infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.PlatformStatus" } } }, - "com.github.openshift.api.operator.v1alpha1.OperatorSpec": { - "description": "OperatorSpec contains common fields for an operator to need. It is intended to be anonymous included inside of the Spec struct for you particular operator. DEPRECATED: Use v1.OperatorSpec instead", + "com.github.openshift.api.config.v1.Ingress": { + "description": "Ingress holds cluster-wide information about ingress, including the default ingress domain used for routes. The canonical name is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "managementState", - "imagePullSpec", - "imagePullPolicy", - "version" + "spec" ], "properties": { - "imagePullPolicy": { - "description": "imagePullPolicy specifies the image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "imagePullSpec": { - "description": "imagePullSpec is the image to use for the component.", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "logging": { - "description": "logging contains glog parameters for the component pods. It's always a command line arg for the moment", + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.LoggingConfig" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" + "spec": { + "description": "spec holds user settable values for configuration", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.IngressSpec" }, - "version": { - "description": "version is the desired state in major.minor.micro-patch. Usually patch is ignored.", - "type": "string", - "default": "" + "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.IngressStatus" } } }, - "com.github.openshift.api.operator.v1alpha1.OperatorStatus": { - "description": "OperatorStatus contains common fields for an operator to need. It is intended to be anonymous included inside of the Status struct for you particular operator. DEPRECATED: Use v1.OperatorStatus instead", + "com.github.openshift.api.config.v1.IngressList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "metadata", + "items" + ], "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.OperatorCondition" + "$ref": "#/definitions/com.github.openshift.api.config.v1.Ingress" } }, - "currentVersionAvailability": { - "description": "currentVersionAvailability is availability information for the current version. If it is unmanged or removed, this doesn't exist.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.VersionAvailability" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "state": { - "description": "state indicates what the operator has observed to be its current operational status.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "targetVersionAvailability": { - "description": "targetVersionAvailability is availability information for the target version if we are migrating", - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.VersionAvailability" - }, - "taskSummary": { - "description": "taskSummary is a high level summary of what the controller is currently attempting to do. It is high-level, human-readable and not guaranteed in any way. (I needed this for debugging and realized it made a great summary).", - "type": "string" + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } } }, - "com.github.openshift.api.operator.v1alpha1.RepositoryDigestMirrors": { - "description": "RepositoryDigestMirrors holds cluster-wide information about how to handle mirros in the registries config. Note: the mirrors only work when pulling the images that are referenced by their digests.", + "com.github.openshift.api.config.v1.IngressPlatformSpec": { + "description": "IngressPlatformSpec holds the desired state of Ingress specific to the underlying infrastructure provider of the current cluster. Since these are used at spec-level for the underlying cluster, it is supposed that only one of the spec structs is set.", "type": "object", "required": [ - "source" + "type" ], "properties": { - "mirrors": { - "description": "mirrors is one or more repositories that may also contain the same images. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. Other cluster configuration, including (but not limited to) other repositoryDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering.", - "type": "array", - "items": { - "type": "string", - "default": "" + "aws": { + "description": "aws contains settings specific to the Amazon Web Services infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.AWSIngressSpec" + }, + "type": { + "description": "type is the underlying infrastructure provider for the cluster. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"KubeVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.", + "type": "string", + "default": "" + } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "aws": "AWS" } - }, - "source": { - "description": "source is the repository that users refer to, e.g. in image pull specifications.", - "type": "string", - "default": "" } - } + ] }, - "com.github.openshift.api.operator.v1alpha1.StaticPodOperatorStatus": { - "description": "StaticPodOperatorStatus is status for controllers that manage static pods. There are different needs because individual node status must be tracked. DEPRECATED: Use v1.StaticPodOperatorStatus instead", + "com.github.openshift.api.config.v1.IngressSpec": { "type": "object", "required": [ - "latestAvailableDeploymentGeneration", - "nodeStatuses" + "domain" ], "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", + "appsDomain": { + "description": "appsDomain is an optional domain to use instead of the one specified in the domain field when a Route is created without specifying an explicit host. If appsDomain is nonempty, this value is used to generate default host values for Route. Unlike domain, appsDomain may be modified after installation. This assumes a new ingresscontroller has been setup with a wildcard certificate.", + "type": "string" + }, + "componentRoutes": { + "description": "componentRoutes is an optional list of routes that are managed by OpenShift components that a cluster-admin is able to configure the hostname and serving certificate for. The namespace and name of each route in this list should match an existing entry in the status.componentRoutes list.\n\nTo determine the set of configurable Routes, look at namespace and name of entries in the .status.componentRoutes list, where participating operators write the status of configurable routes. A maximum of 250 component routes may be configured.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.OperatorCondition" - } + "$ref": "#/definitions/com.github.openshift.api.config.v1.ComponentRouteSpec" + }, + "x-kubernetes-list-map-keys": [ + "namespace", + "name" + ], + "x-kubernetes-list-type": "map" }, - "currentVersionAvailability": { - "description": "currentVersionAvailability is availability information for the current version. If it is unmanged or removed, this doesn't exist.", - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.VersionAvailability" + "domain": { + "description": "domain is used to generate a default host name for a route when the route's host name is empty. The generated host name will follow this pattern: \"..\".\n\nIt is also used as the default wildcard domain suffix for ingress. The default ingresscontroller domain will follow this pattern: \"*.\".\n\nOnce set, changing domain is not currently supported.", + "type": "string", + "default": "" }, - "latestAvailableDeploymentGeneration": { - "description": "latestAvailableDeploymentGeneration is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32", - "default": 0 + "loadBalancer": { + "description": "loadBalancer contains the load balancer details in general which are not only specific to the underlying infrastructure provider of the current cluster and are required for Ingress Controller to work on OpenShift.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.LoadBalancer" }, - "nodeStatuses": { - "description": "nodeStatuses track the deployment values and errors across individual nodes", + "requiredHSTSPolicies": { + "description": "requiredHSTSPolicies specifies HSTS policies that are required to be set on newly created or updated routes matching the domainPattern/s and namespaceSelector/s that are specified in the policy. Each requiredHSTSPolicy must have at least a domainPattern and a maxAge to validate a route HSTS Policy route annotation, and affect route admission.\n\nA candidate route is checked for HSTS Policies if it has the HSTS Policy route annotation: \"haproxy.router.openshift.io/hsts_header\" E.g. haproxy.router.openshift.io/hsts_header: max-age=31536000;preload;includeSubDomains\n\n- For each candidate route, if it matches a requiredHSTSPolicy domainPattern and optional namespaceSelector, then the maxAge, preloadPolicy, and includeSubdomainsPolicy must be valid to be admitted. Otherwise, the route is rejected. - The first match, by domainPattern and optional namespaceSelector, in the ordering of the RequiredHSTSPolicies determines the route's admission status. - If the candidate route doesn't match any requiredHSTSPolicy domainPattern and optional namespaceSelector, then it may use any HSTS Policy annotation.\n\nThe HSTS policy configuration may be changed after routes have already been created. An update to a previously admitted route may then fail if the updated route does not conform to the updated HSTS policy configuration. However, changing the HSTS policy configuration will not cause a route that is already admitted to stop working.\n\nNote that if there are no RequiredHSTSPolicies, any HSTS Policy annotation on the route is valid.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.NodeStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.RequiredHSTSPolicy" } - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "state": { - "description": "state indicates what the operator has observed to be its current operational status.", - "type": "string" - }, - "targetVersionAvailability": { - "description": "targetVersionAvailability is availability information for the target version if we are migrating", - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.VersionAvailability" - }, - "taskSummary": { - "description": "taskSummary is a high level summary of what the controller is currently attempting to do. It is high-level, human-readable and not guaranteed in any way. (I needed this for debugging and realized it made a great summary).", - "type": "string" } } }, - "com.github.openshift.api.operator.v1alpha1.VersionAvailability": { - "description": "VersionAvailability gives information about the synchronization and operational status of a particular version of the component DEPRECATED: Use fields in v1.OperatorStatus instead", + "com.github.openshift.api.config.v1.IngressStatus": { "type": "object", - "required": [ - "version", - "updatedReplicas", - "readyReplicas", - "errors", - "generations" - ], "properties": { - "errors": { - "description": "errors indicates what failures are associated with the operator trying to manage this version", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "generations": { - "description": "generations allows an operator to track what the generation of \"important\" resources was the last time we updated them", + "componentRoutes": { + "description": "componentRoutes is where participating operators place the current route status for routes whose hostnames and serving certificates can be customized by the cluster-admin.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1alpha1.GenerationHistory" - } - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "updatedReplicas": { - "description": "updatedReplicas indicates how many replicas are at the desired state", - "type": "integer", - "format": "int32", - "default": 0 + "$ref": "#/definitions/com.github.openshift.api.config.v1.ComponentRouteStatus" + }, + "x-kubernetes-list-map-keys": [ + "namespace", + "name" + ], + "x-kubernetes-list-type": "map" }, - "version": { - "description": "version is the level this availability applies to", + "defaultPlacement": { + "description": "defaultPlacement is set at installation time to control which nodes will host the ingress router pods by default. The options are control-plane nodes or worker nodes.\n\nThis field works by dictating how the Cluster Ingress Operator will consider unset replicas and nodePlacement fields in IngressController resources when creating the corresponding Deployments.\n\nSee the documentation for the IngressController replicas and nodePlacement fields for more information.\n\nWhen omitted, the default value is Workers", "type": "string", "default": "" } } }, - "com.github.openshift.api.operatorcontrolplane.v1alpha1.LogEntry": { - "description": "LogEntry records events", + "com.github.openshift.api.config.v1.InsightsDataGather": { + "description": "InsightsDataGather provides data gather configuration options for the Insights Operator.\n\n\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "time", - "success" + "spec" ], "properties": { - "latency": { - "description": "latency records how long the action mentioned in the entry took.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "message": { - "description": "message explaining status in a human readable format.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "reason": { - "description": "reason for status in a machine readable format.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "success": { - "description": "success indicates if the log entry indicates a success or failure.", - "type": "boolean", - "default": false + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "time": { - "description": "Start time of check action.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "spec": { + "description": "spec holds user settable values for configuration", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.InsightsDataGatherSpec" } } }, - "com.github.openshift.api.operatorcontrolplane.v1alpha1.OutageEntry": { - "description": "OutageEntry records time period of an outage", + "com.github.openshift.api.config.v1.InsightsDataGatherList": { + "description": "InsightsDataGatherList is a collection of items Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "start" + "metadata", + "items" ], "properties": { - "end": { - "description": "end of outage detected", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "endLogs": { - "description": "endLogs contains log entries related to the end of this outage. Should contain the success entry that resolved the outage and possibly a few of the failure log entries that preceded it.", + "items": { + "description": "items is the required list of InsightsDataGather objects it may not exceed 100 items", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operatorcontrolplane.v1alpha1.LogEntry" + "$ref": "#/definitions/com.github.openshift.api.config.v1.InsightsDataGather" } }, - "message": { - "description": "message summarizes outage details in a human readable format.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "start": { - "description": "start of outage detected", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "startLogs": { - "description": "startLogs contains log entries related to the start of this outage. Should contain the original failure, any entries where the failure mode changed.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operatorcontrolplane.v1alpha1.LogEntry" - } + "metadata": { + "description": "metadata is the required standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } } }, - "com.github.openshift.api.operatorcontrolplane.v1alpha1.PodNetworkConnectivityCheck": { - "description": "PodNetworkConnectivityCheck\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.InsightsDataGatherSpec": { + "description": "InsightsDataGatherSpec contains the configuration for the data gathering.", "type": "object", "required": [ - "metadata", - "spec" + "gatherConfig" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec defines the source and target of the connectivity check", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operatorcontrolplane.v1alpha1.PodNetworkConnectivityCheckSpec" - }, - "status": { - "description": "status contains the observed status of the connectivity check", + "gatherConfig": { + "description": "gatherConfig is a required spec attribute that includes all the configuration options related to gathering of the Insights data and its uploading to the ingress.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operatorcontrolplane.v1alpha1.PodNetworkConnectivityCheckStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.GatherConfig" } } }, - "com.github.openshift.api.operatorcontrolplane.v1alpha1.PodNetworkConnectivityCheckCondition": { - "description": "PodNetworkConnectivityCheckCondition represents the overall status of the pod network connectivity.", + "com.github.openshift.api.config.v1.IntermediateTLSProfile": { + "description": "IntermediateTLSProfile is a TLS security profile based on the \"intermediate\" configuration of the Mozilla Server Side TLS configuration guidelines.", + "type": "object" + }, + "com.github.openshift.api.config.v1.KMSPluginConfig": { + "description": "KMSPluginConfig defines the configuration for the KMS instance that will be used with KMS encryption", "type": "object", "required": [ - "type", - "status", - "lastTransitionTime" + "type" ], "properties": { - "lastTransitionTime": { - "description": "Last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "message indicating details about last transition in a human readable format.", - "type": "string" - }, - "reason": { - "description": "reason for the condition's last status transition in a machine readable format.", - "type": "string" - }, - "status": { - "description": "status of the condition", - "type": "string", - "default": "" - }, "type": { - "description": "type of the condition", + "description": "type defines the kind of platform for the KMS provider. Allowed values are Vault. When set to Vault, the plugin connects to a HashiCorp Vault server for key management.", "type": "string", "default": "" + }, + "vault": { + "description": "vault defines the configuration for the Vault KMS plugin. The plugin connects to a Vault Enterprise server that is managed by the user outside the purview of the control plane. This field must be set when type is Vault, and must be unset otherwise.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.VaultKMSPluginConfig" } - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "vault": "Vault" + } + } + ] }, - "com.github.openshift.api.operatorcontrolplane.v1alpha1.PodNetworkConnectivityCheckList": { - "description": "PodNetworkConnectivityCheckList is a collection of PodNetworkConnectivityCheck\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.KeystoneIdentityProvider": { + "description": "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials", "type": "object", "required": [ - "metadata", - "items" + "url", + "domainName" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "ca": { + "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" }, - "items": { - "description": "items contains the items", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operatorcontrolplane.v1alpha1.PodNetworkConnectivityCheck" - } + "domainName": { + "description": "domainName is required for keystone v3", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "tlsClientCert": { + "description": "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "tlsClientKey": { + "description": "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" + }, + "url": { + "description": "url is the remote URL to connect to", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.operatorcontrolplane.v1alpha1.PodNetworkConnectivityCheckSpec": { + "com.github.openshift.api.config.v1.KubeClientConfig": { "type": "object", "required": [ - "sourcePod", - "targetEndpoint" + "kubeConfig", + "connectionOverrides" ], "properties": { - "sourcePod": { - "description": "sourcePod names the pod from which the condition will be checked", - "type": "string", - "default": "" - }, - "targetEndpoint": { - "description": "EndpointAddress to check. A TCP address of the form host:port. Note that if host is a DNS name, then the check would fail if the DNS name cannot be resolved. Specify an IP address for host to bypass DNS name lookup.", - "type": "string", - "default": "" + "connectionOverrides": { + "description": "connectionOverrides specifies client overrides for system components to loop back to this master.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClientConnectionOverrides" + }, + "kubeConfig": { + "description": "kubeConfig is a .kubeconfig filename for going to the owning kube-apiserver. Empty uses an in-cluster-config", + "type": "string", + "default": "" + } + } + }, + "com.github.openshift.api.config.v1.KubevirtPlatformSpec": { + "description": "KubevirtPlatformSpec holds the desired state of the kubevirt infrastructure provider. This only includes fields that can be modified in the cluster.", + "type": "object" + }, + "com.github.openshift.api.config.v1.KubevirtPlatformStatus": { + "description": "KubevirtPlatformStatus holds the current status of the kubevirt infrastructure provider.", + "type": "object", + "properties": { + "apiServerInternalIP": { + "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.", + "type": "string" }, - "tlsClientCert": { - "description": "TLSClientCert, if specified, references a kubernetes.io/tls type secret with 'tls.crt' and 'tls.key' entries containing an optional TLS client certificate and key to be used when checking endpoints that require a client certificate in order to gracefully preform the scan without causing excessive logging in the endpoint process. The secret must exist in the same namespace as this resource.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" + "ingressIP": { + "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.", + "type": "string" } } }, - "com.github.openshift.api.operatorcontrolplane.v1alpha1.PodNetworkConnectivityCheckStatus": { + "com.github.openshift.api.config.v1.LDAPAttributeMapping": { + "description": "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields", "type": "object", + "required": [ + "id" + ], "properties": { - "conditions": { - "description": "conditions summarize the status of the check", + "email": { + "description": "email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operatorcontrolplane.v1alpha1.PodNetworkConnectivityCheckCondition" - }, - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "type": "string", + "default": "" + } }, - "failures": { - "description": "failures contains logs of unsuccessful check actions", + "id": { + "description": "id is the list of attributes whose values should be used as the user ID. Required. First non-empty attribute is used. At least one attribute is required. If none of the listed attribute have a value, authentication fails. LDAP standard identity attribute is \"dn\"", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operatorcontrolplane.v1alpha1.LogEntry" + "type": "string", + "default": "" } }, - "outages": { - "description": "outages contains logs of time periods of outages", + "name": { + "description": "name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operatorcontrolplane.v1alpha1.OutageEntry" + "type": "string", + "default": "" } }, - "successes": { - "description": "successes contains logs successful check actions", + "preferredUsername": { + "description": "preferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operatorcontrolplane.v1alpha1.LogEntry" + "type": "string", + "default": "" } } } }, - "com.github.openshift.api.operatoringress.v1.DNSRecord": { - "description": "DNSRecord is a DNS record managed in the zones defined by dns.config.openshift.io/cluster .spec.publicZone and .spec.privateZone.\n\nCluster admin manipulation of this resource is not supported. This resource is only for internal communication of OpenShift operators.\n\nIf DNSManagementPolicy is \"Unmanaged\", the operator will not be responsible for managing the DNS records on the cloud provider.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.LDAPIdentityProvider": { + "description": "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials", "type": "object", "required": [ - "spec", - "status" + "url", + "insecure", + "attributes" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "attributes": { + "description": "attributes maps LDAP attributes to identities", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.LDAPAttributeMapping" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "bindDN": { + "description": "bindDN is an optional DN to bind with during the search phase.", + "type": "string", + "default": "" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "bindPassword": { + "description": "bindPassword is an optional reference to a secret by name containing a password to bind with during the search phase. The key \"bindPassword\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" }, - "spec": { - "description": "spec is the specification of the desired behavior of the dnsRecord.", + "ca": { + "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operatoringress.v1.DNSRecordSpec" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" }, - "status": { - "description": "status is the most recently observed status of the dnsRecord.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operatoringress.v1.DNSRecordStatus" + "insecure": { + "description": "insecure, if true, indicates the connection should not use TLS WARNING: Should not be set to `true` with the URL scheme \"ldaps://\" as \"ldaps://\" URLs always\n attempt to connect using TLS, even when `insecure` is set to `true`\nWhen `true`, \"ldap://\" URLS connect insecurely. When `false`, \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830.", + "type": "boolean", + "default": false + }, + "url": { + "description": "url is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is: ldap://host:port/basedn?attribute?scope?filter", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.operatoringress.v1.DNSRecordList": { - "description": "DNSRecordList contains a list of dnsrecords.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.LeaderElection": { + "description": "LeaderElection provides information to elect a leader", "type": "object", "required": [ - "items" + "leaseDuration", + "renewDeadline", + "retryPeriod" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "disable": { + "description": "disable allows leader election to be suspended while allowing a fully defaulted \"normal\" startup case.", + "type": "boolean" }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operatoringress.v1.DNSRecord" - }, - "x-kubernetes-list-type": "atomic" + "leaseDuration": { + "description": "leaseDuration is the duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "name": { + "description": "name indicates what name to use for the resource", "type": "string" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "namespace": { + "description": "namespace indicates which namespace the resource is in", + "type": "string" + }, + "renewDeadline": { + "description": "renewDeadline is the interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" + }, + "retryPeriod": { + "description": "retryPeriod is the duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" + } + } + }, + "com.github.openshift.api.config.v1.LoadBalancer": { + "type": "object", + "properties": { + "platform": { + "description": "platform holds configuration specific to the underlying infrastructure provider for the ingress load balancers. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/com.github.openshift.api.config.v1.IngressPlatformSpec" + } + } + }, + "com.github.openshift.api.config.v1.MTUMigration": { + "description": "MTUMigration contains infomation about MTU migration.", + "type": "object", + "properties": { + "machine": { + "description": "machine contains MTU migration configuration for the machine's uplink.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.MTUMigrationValues" + }, + "network": { + "description": "network contains MTU migration configuration for the default network.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.MTUMigrationValues" } } }, - "com.github.openshift.api.operatoringress.v1.DNSRecordSpec": { - "description": "DNSRecordSpec contains the details of a DNS record.", + "com.github.openshift.api.config.v1.MTUMigrationValues": { + "description": "MTUMigrationValues contains the values for a MTU migration.", "type": "object", "required": [ - "dnsName", - "targets", - "recordType", - "recordTTL", - "dnsManagementPolicy" + "to" ], "properties": { - "dnsManagementPolicy": { - "description": "dnsManagementPolicy denotes the current policy applied on the DNS record. Records that have policy set as \"Unmanaged\" are ignored by the ingress operator. This means that the DNS record on the cloud provider is not managed by the operator, and the \"Published\" status condition will be updated to \"Unknown\" status, since it is externally managed. Any existing record on the cloud provider can be deleted at the discretion of the cluster admin.\n\nThis field defaults to Managed. Valid values are \"Managed\" and \"Unmanaged\".", - "type": "string", - "default": "Managed" - }, - "dnsName": { - "description": "dnsName is the hostname of the DNS record", - "type": "string", - "default": "" - }, - "recordTTL": { - "description": "recordTTL is the record TTL in seconds. If zero, the default is 30. RecordTTL will not be used in AWS regions Alias targets, but will be used in CNAME targets, per AWS API contract.", + "from": { + "description": "from is the MTU to migrate from.", "type": "integer", - "format": "int64", - "default": 0 - }, - "recordType": { - "description": "recordType is the DNS record type. For example, \"A\", \"AAAA\", or \"CNAME\".", - "type": "string", - "default": "" + "format": "int64" }, - "targets": { - "description": "targets are record targets.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "to": { + "description": "to is the MTU to migrate to.", + "type": "integer", + "format": "int64" } } }, - "com.github.openshift.api.operatoringress.v1.DNSRecordStatus": { - "description": "DNSRecordStatus is the most recently observed status of each record.", + "com.github.openshift.api.config.v1.MaxAgePolicy": { + "description": "MaxAgePolicy contains a numeric range for specifying a compliant HSTS max-age for the enclosing RequiredHSTSPolicy", "type": "object", "properties": { - "observedGeneration": { - "description": "observedGeneration is the most recently observed generation of the DNSRecord. When the DNSRecord is updated, the controller updates the corresponding record in each managed zone. If an update for a particular zone fails, that failure is recorded in the status condition for the zone so that the controller can determine that it needs to retry the update for that specific zone.", + "largestMaxAge": { + "description": "The largest allowed value (in seconds) of the RequiredHSTSPolicy max-age This value can be left unspecified, in which case no upper limit is enforced.", "type": "integer", - "format": "int64" + "format": "int32" + }, + "smallestMaxAge": { + "description": "The smallest allowed value (in seconds) of the RequiredHSTSPolicy max-age Setting max-age=0 allows the deletion of an existing HSTS header from a host. This is a necessary tool for administrators to quickly correct mistakes. This value can be left unspecified, in which case no lower limit is enforced.", + "type": "integer", + "format": "int32" + } + } + }, + "com.github.openshift.api.config.v1.ModernTLSProfile": { + "description": "ModernTLSProfile is a TLS security profile based on the \"modern\" configuration of the Mozilla Server Side TLS configuration guidelines.", + "type": "object" + }, + "com.github.openshift.api.config.v1.NamedCertificate": { + "description": "NamedCertificate specifies a certificate/key, and the names it should be served for", + "type": "object", + "required": [ + "certFile", + "keyFile" + ], + "properties": { + "certFile": { + "description": "certFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" + }, + "keyFile": { + "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "type": "string", + "default": "" }, - "zones": { - "description": "zones are the status of the record in each zone.", + "names": { + "description": "names is a list of DNS names this certificate should be used to secure A name can be a normal DNS name, or can contain leading wildcard segments.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operatoringress.v1.DNSZoneStatus" - }, - "x-kubernetes-list-type": "atomic" + "type": "string", + "default": "" + } } } }, - "com.github.openshift.api.operatoringress.v1.DNSZoneCondition": { - "description": "DNSZoneCondition is just the standard condition fields.", + "com.github.openshift.api.config.v1.Network": { + "description": "Network holds cluster-wide information about Network. The canonical name is `cluster`. It is used to configure the desired network configuration, such as: IP address pools for services/pod IPs, network plugin, etc. Please view network.spec for an explanation on what applies when configuring this resource.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "type", - "status" + "spec" ], "properties": { - "lastTransitionTime": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "reason": { + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "status": { - "type": "string", - "default": "" + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "type": { + "spec": { + "description": "spec holds user settable values for configuration. As a general rule, this SHOULD NOT be read directly. Instead, you should consume the NetworkStatus, as it indicates the currently deployed configuration. Currently, most spec fields are immutable after installation. Please view the individual ones for further details on each.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.NetworkSpec" + }, + "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.NetworkStatus" + } + } + }, + "com.github.openshift.api.config.v1.NetworkDiagnostics": { + "type": "object", + "properties": { + "mode": { + "description": "mode controls the network diagnostics mode\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is All.", "type": "string", "default": "" + }, + "sourcePlacement": { + "description": "sourcePlacement controls the scheduling of network diagnostics source deployment\n\nSee NetworkDiagnosticsSourcePlacement for more details about default values.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.NetworkDiagnosticsSourcePlacement" + }, + "targetPlacement": { + "description": "targetPlacement controls the scheduling of network diagnostics target daemonset\n\nSee NetworkDiagnosticsTargetPlacement for more details about default values.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.NetworkDiagnosticsTargetPlacement" } } }, - "com.github.openshift.api.operatoringress.v1.DNSZoneStatus": { - "description": "DNSZoneStatus is the status of a record within a specific zone.", + "com.github.openshift.api.config.v1.NetworkDiagnosticsSourcePlacement": { + "description": "NetworkDiagnosticsSourcePlacement defines node scheduling configuration network diagnostics source components", "type": "object", - "required": [ - "dnsZone" - ], "properties": { - "conditions": { - "description": "conditions are any conditions associated with the record in the zone.\n\nIf publishing the record succeeds, the \"Published\" condition will be set with status \"True\" and upon failure it will be set to \"False\" along with the reason and message describing the cause of the failure.", + "nodeSelector": { + "description": "nodeSelector is the node selector applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `kubernetes.io/os: linux`.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "tolerations": { + "description": "tolerations is a list of tolerations applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is an empty list.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operatoringress.v1.DNSZoneCondition" + "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" }, "x-kubernetes-list-type": "atomic" - }, - "dnsZone": { - "description": "dnsZone is the zone where the record is published.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.DNSZone" } } }, - "com.github.openshift.api.osin.v1.AllowAllPasswordIdentityProvider": { - "description": "AllowAllPasswordIdentityProvider provides identities for users authenticating using non-empty passwords\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.NetworkDiagnosticsTargetPlacement": { + "description": "NetworkDiagnosticsTargetPlacement defines node scheduling configuration network diagnostics target components", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "nodeSelector": { + "description": "nodeSelector is the node selector applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `kubernetes.io/os: linux`.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "tolerations": { + "description": "tolerations is a list of tolerations applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `- operator: \"Exists\"` which means that all taints are tolerated.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" + }, + "x-kubernetes-list-type": "atomic" } } }, - "com.github.openshift.api.osin.v1.BasicAuthPasswordIdentityProvider": { - "description": "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.NetworkList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "url", - "ca", - "certFile", - "keyFile" + "metadata", + "items" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "ca": { - "description": "ca is the CA for verifying TLS connections", - "type": "string", - "default": "" - }, - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" + "items": { + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.Network" + } }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "url": { - "description": "url is the remote URL to connect to", - "type": "string", - "default": "" + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } } }, - "com.github.openshift.api.osin.v1.DenyAllPasswordIdentityProvider": { - "description": "DenyAllPasswordIdentityProvider provides no identities for users\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.NetworkMigration": { + "description": "NetworkMigration represents the network migration status.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "mtu": { + "description": "mtu is the MTU configuration that is being deployed.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.MTUMigration" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "networkType": { + "description": "networkType is the target plugin that is being deployed. DEPRECATED: network type migration is no longer supported, so this should always be unset.", "type": "string" } } }, - "com.github.openshift.api.osin.v1.GitHubIdentityProvider": { - "description": "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.NetworkObservabilitySpec": { + "description": "NetworkObservabilitySpec defines the configuration for network observability installation", "type": "object", "required": [ - "clientID", - "clientSecret", - "organizations", - "teams", - "hostname", - "ca" + "installationPolicy" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "installationPolicy": { + "description": "installationPolicy controls whether network observability is installed during cluster deployment. Valid values are \"InstallAndEnable\" and \"NoAction\". When set to \"InstallAndEnable\", ensure that network observability will be installed and enabled on the cluster. If already installed, no action taken, but if it gets uninstalled, it will install it again. When set to \"NoAction\", nothing will be done regarding Network observability. During the installation of NetworkObservability, the platform checks for any existing manual installations. If a successful installation using the OLMv0 or OLMv1 API is detected, it will be used. If the platform cannot determine how the current version was installed, or if the existing installation is incomplete, the installation process will stop.", "type": "string" + } + } + }, + "com.github.openshift.api.config.v1.NetworkSpec": { + "description": "NetworkSpec is the desired network configuration. As a general rule, this SHOULD NOT be read directly. Instead, you should consume the NetworkStatus, as it indicates the currently deployed configuration. Currently, most spec fields are immutable after installation. Please view the individual ones for further details on each.", + "type": "object", + "required": [ + "clusterNetwork", + "serviceNetwork", + "networkType" + ], + "properties": { + "clusterNetwork": { + "description": "IP address pool to use for pod IPs. This field is immutable after installation.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterNetworkEntry" + }, + "x-kubernetes-list-type": "atomic" }, - "ca": { - "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value.", - "type": "string", - "default": "" + "externalIP": { + "description": "externalIP defines configuration for controllers that affect Service.ExternalIP. If nil, then ExternalIP is not allowed to be set.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalIPConfig" }, - "clientID": { - "description": "clientID is the oauth client ID", - "type": "string", - "default": "" + "networkDiagnostics": { + "description": "networkDiagnostics defines network diagnostics configuration.\n\nTakes precedence over spec.disableNetworkDiagnostics in network.operator.openshift.io. If networkDiagnostics is not specified or is empty, and the spec.disableNetworkDiagnostics flag in network.operator.openshift.io is set to true, the network diagnostics feature will be disabled.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.NetworkDiagnostics" }, - "clientSecret": { - "description": "clientSecret is the oauth client secret", - "$ref": "#/definitions/com.github.openshift.api.config.v1.StringSource" + "networkObservability": { + "description": "networkObservability is an optional field that configures network observability installation during cluster deployment (day-0). When omitted, unless this is a SNO cluster, network observability will be installed if not already present, after that, no action taken.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.NetworkObservabilitySpec" }, - "hostname": { - "description": "hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value that is configured at /setup/settings#hostname.", + "networkType": { + "description": "networkType is the plugin that is to be deployed (e.g. OVNKubernetes). This should match a value that the cluster-network-operator understands, or else no networking will be installed. Currently supported values are: - OVNKubernetes This field is immutable after installation.", "type": "string", "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "organizations": { - "description": "organizations optionally restricts which organizations are allowed to log in", + "serviceNetwork": { + "description": "IP address pool for services. Currently, we only support a single entry here. This field is immutable after installation.", "type": "array", "items": { "type": "string", "default": "" - } + }, + "x-kubernetes-list-type": "atomic" }, - "teams": { - "description": "teams optionally restricts which teams are allowed to log in. Format is /.", + "serviceNodePortRange": { + "description": "The port range allowed for Services of type NodePort. If not specified, the default of 30000-32767 will be used. Such Services without a NodePort specified will have one automatically allocated from this range. This parameter can be updated after the cluster is installed.", + "type": "string" + } + } + }, + "com.github.openshift.api.config.v1.NetworkStatus": { + "description": "NetworkStatus is the current network configuration.", + "type": "object", + "properties": { + "clusterNetwork": { + "description": "IP address pool to use for pod IPs.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ClusterNetworkEntry" + }, + "x-kubernetes-list-type": "atomic" + }, + "clusterNetworkMTU": { + "description": "clusterNetworkMTU is the MTU for inter-pod networking.", + "type": "integer", + "format": "int32" + }, + "conditions": { + "description": "conditions represents the observations of a network.config current state. Known .status.conditions.type are: \"NetworkDiagnosticsAvailable\"", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" + }, + "migration": { + "description": "migration contains the cluster network migration configuration.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.NetworkMigration" + }, + "networkType": { + "description": "networkType is the plugin that is deployed (e.g. OVNKubernetes).", + "type": "string" + }, + "serviceNetwork": { + "description": "IP address pool for services. Currently, we only support a single entry here.", "type": "array", "items": { "type": "string", "default": "" - } + }, + "x-kubernetes-list-type": "atomic" } } }, - "com.github.openshift.api.osin.v1.GitLabIdentityProvider": { - "description": "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.Node": { + "description": "Node holds cluster-wide information about node specific features.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "ca", - "url", - "clientID", - "clientSecret" + "spec" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "ca": { - "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", - "type": "string", - "default": "" - }, - "clientID": { - "description": "clientID is the oauth client ID", - "type": "string", - "default": "" - }, - "clientSecret": { - "description": "clientSecret is the oauth client secret", - "$ref": "#/definitions/com.github.openshift.api.config.v1.StringSource" - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "legacy": { - "description": "legacy determines if OAuth2 or OIDC should be used If true, OAuth2 is used If false, OIDC is used If nil and the URL's host is gitlab.com, OIDC is used Otherwise, OAuth2 is used In a future release, nil will default to using OIDC Eventually this flag will be removed and only OIDC will be used", - "type": "boolean" + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "url": { - "description": "url is the oauth server base URL", - "type": "string", - "default": "" + "spec": { + "description": "spec holds user settable values for configuration", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.NodeSpec" + }, + "status": { + "description": "status holds observed values.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.NodeStatus" } } }, - "com.github.openshift.api.osin.v1.GoogleIdentityProvider": { - "description": "GoogleIdentityProvider provides identities for users authenticating using Google credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.NodeList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "clientID", - "clientSecret", - "hostedDomain" + "metadata", + "items" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "clientID": { - "description": "clientID is the oauth client ID", - "type": "string", - "default": "" - }, - "clientSecret": { - "description": "clientSecret is the oauth client secret", - "$ref": "#/definitions/com.github.openshift.api.config.v1.StringSource" - }, - "hostedDomain": { - "description": "hostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to", - "type": "string", - "default": "" + "items": { + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.Node" + } }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } } }, - "com.github.openshift.api.osin.v1.GrantConfig": { - "description": "GrantConfig holds the necessary configuration options for grant handlers", + "com.github.openshift.api.config.v1.NodeSpec": { "type": "object", - "required": [ - "method", - "serviceAccountMethod" - ], "properties": { - "method": { - "description": "method determines the default strategy to use when an OAuth client requests a grant. This method will be used only if the specific OAuth client doesn't provide a strategy of their own. Valid grant handling methods are:\n - auto: always approves grant requests, useful for trusted clients\n - prompt: prompts the end user for approval of grant requests, useful for third-party clients\n - deny: always denies grant requests, useful for black-listed clients", - "type": "string", - "default": "" + "cgroupMode": { + "description": "cgroupMode determines the cgroups version on the node", + "type": "string" }, - "serviceAccountMethod": { - "description": "serviceAccountMethod is used for determining client authorization for service account oauth client. It must be either: deny, prompt", + "minimumKubeletVersion": { + "description": "minimumKubeletVersion is the lowest version of a kubelet that can join the cluster. Specifically, the apiserver will deny most authorization requests of kubelets that are older than the specified version, only allowing the kubelet to get and update its node object, and perform subjectaccessreviews. This means any kubelet that attempts to join the cluster will not be able to run any assigned workloads, and will eventually be marked as not ready. Its max length is 8, so maximum version allowed is either \"9.999.99\" or \"99.99.99\". Since the kubelet reports the version of the kubernetes release, not Openshift, this field references the underlying kubernetes version this version of Openshift is based off of. In other words: if an admin wishes to ensure no nodes run an older version than Openshift 4.17, then they should set the minimumKubeletVersion to 1.30.0. When comparing versions, the kubelet's version is stripped of any contents outside of major.minor.patch version. Thus, a kubelet with version \"1.0.0-ec.0\" will be compatible with minimumKubeletVersion \"1.0.0\" or earlier.", "type": "string", "default": "" + }, + "workerLatencyProfile": { + "description": "workerLatencyProfile determins the how fast the kubelet is updating the status and corresponding reaction of the cluster", + "type": "string" } } }, - "com.github.openshift.api.osin.v1.HTPasswdPasswordIdentityProvider": { - "description": "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.NodeStatus": { "type": "object", - "required": [ - "file" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "file": { - "description": "file is a reference to your htpasswd file", - "type": "string", - "default": "" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "conditions": { + "description": "conditions contain the details and the current state of the nodes.config object", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" } } }, - "com.github.openshift.api.osin.v1.IdentityProvider": { - "description": "IdentityProvider provides identities for users authenticating using credentials", + "com.github.openshift.api.config.v1.NutanixFailureDomain": { + "description": "NutanixFailureDomain configures failure domain information for the Nutanix platform.", "type": "object", "required": [ "name", - "challenge", - "login", - "mappingMethod", - "provider" + "cluster", + "subnets" ], "properties": { - "challenge": { - "description": "challenge indicates whether to issue WWW-Authenticate challenges for this provider", - "type": "boolean", - "default": false - }, - "login": { - "description": "login indicates whether to use this identity provider for unauthenticated browsers to login against", - "type": "boolean", - "default": false - }, - "mappingMethod": { - "description": "mappingMethod determines how identities from this provider are mapped to users", - "type": "string", - "default": "" + "cluster": { + "description": "cluster is to identify the cluster (the Prism Element under management of the Prism Central), in which the Machine's VM will be created. The cluster identifier (uuid or name) can be obtained from the Prism Central console or using the prism_central API.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.NutanixResourceIdentifier" }, "name": { - "description": "name is used to qualify the identities returned by this provider", + "description": "name defines the unique name of a failure domain. Name is required and must be at most 64 characters in length. It must consist of only lower case alphanumeric characters and hyphens (-). It must start and end with an alphanumeric character. This value is arbitrary and is used to identify the failure domain within the platform.", "type": "string", "default": "" }, - "provider": { - "description": "provider contains the information about how to set up a specific identity provider", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "subnets": { + "description": "subnets holds a list of identifiers (one or more) of the cluster's network subnets If the feature gate NutanixMultiSubnets is enabled, up to 32 subnets may be configured. for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be obtained from the Prism Central console or using the prism_central API.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.NutanixResourceIdentifier" + }, + "x-kubernetes-list-type": "atomic" } } }, - "com.github.openshift.api.osin.v1.KeystonePasswordIdentityProvider": { - "description": "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.NutanixPlatformLoadBalancer": { + "description": "NutanixPlatformLoadBalancer defines the load balancer used by the cluster on Nutanix platform.", "type": "object", - "required": [ - "url", - "ca", - "certFile", - "keyFile", - "domainName", - "useKeystoneIdentity" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "ca": { - "description": "ca is the CA for verifying TLS connections", - "type": "string", - "default": "" - }, - "certFile": { - "description": "certFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "domainName": { - "description": "domainName is required for keystone v3", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "url": { - "description": "url is the remote URL to connect to", + "type": { + "description": "type defines the type of load balancer used by the cluster on Nutanix platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", "type": "string", - "default": "" - }, - "useKeystoneIdentity": { - "description": "useKeystoneIdentity flag indicates that user should be authenticated by keystone ID, not by username", - "type": "boolean", - "default": false + "default": "OpenShiftManagedDefault" } - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": {} + } + ] }, - "com.github.openshift.api.osin.v1.LDAPAttributeMapping": { - "description": "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields", + "com.github.openshift.api.config.v1.NutanixPlatformSpec": { + "description": "NutanixPlatformSpec holds the desired state of the Nutanix infrastructure provider. This only includes fields that can be modified in the cluster.", "type": "object", "required": [ - "id", - "preferredUsername", - "name", - "email" + "prismCentral", + "prismElements" ], "properties": { - "email": { - "description": "email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "id": { - "description": "id is the list of attributes whose values should be used as the user ID. Required. LDAP standard identity attribute is \"dn\"", + "failureDomains": { + "description": "failureDomains configures failure domains information for the Nutanix platform. When set, the failure domains defined here may be used to spread Machines across prism element clusters to improve fault tolerance of the cluster.", "type": "array", "items": { - "type": "string", - "default": "" - } + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.NutanixFailureDomain" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map" }, - "name": { - "description": "name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "prismCentral": { + "description": "prismCentral holds the endpoint address and port to access the Nutanix Prism Central. When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy. Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the proxy spec.noProxy list.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.NutanixPrismEndpoint" }, - "preferredUsername": { - "description": "preferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"", + "prismElements": { + "description": "prismElements holds one or more endpoint address and port data to access the Nutanix Prism Elements (clusters) of the Nutanix Prism Central. Currently we only support one Prism Element (cluster) for an OpenShift cluster, where all the Nutanix resources (VMs, subnets, volumes, etc.) used in the OpenShift cluster are located. In the future, we may support Nutanix resources (VMs, etc.) spread over multiple Prism Elements (clusters) of the Prism Central.", "type": "array", "items": { - "type": "string", - "default": "" - } + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.NutanixPrismElementEndpoint" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map" } } }, - "com.github.openshift.api.osin.v1.LDAPPasswordIdentityProvider": { - "description": "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.NutanixPlatformStatus": { + "description": "NutanixPlatformStatus holds the current status of the Nutanix infrastructure provider.", "type": "object", "required": [ - "url", - "bindDN", - "bindPassword", - "insecure", - "ca", - "attributes" + "apiServerInternalIPs", + "ingressIPs" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "apiServerInternalIP": { + "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", "type": "string" }, - "attributes": { - "description": "attributes maps LDAP attributes to identities", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.osin.v1.LDAPAttributeMapping" - }, - "bindDN": { - "description": "bindDN is an optional DN to bind with during the search phase.", - "type": "string", - "default": "" - }, - "bindPassword": { - "description": "bindPassword is an optional password to bind with during the search phase.", - "$ref": "#/definitions/com.github.openshift.api.config.v1.StringSource" + "apiServerInternalIPs": { + "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "ca": { - "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", + "dnsRecordsType": { + "description": "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", "type": "string", - "default": "" - }, - "insecure": { - "description": "insecure, if true, indicates the connection should not use TLS. Cannot be set to true with a URL scheme of \"ldaps://\" If false, \"ldaps://\" URLs connect using TLS, and \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830", - "type": "boolean", - "default": false + "enum": [ + "External", + "Internal" + ] }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "ingressIP": { + "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", "type": "string" }, - "url": { - "description": "url is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is\n ldap://host:port/basedn?attribute?scope?filter", - "type": "string", - "default": "" + "ingressIPs": { + "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" + }, + "loadBalancer": { + "description": "loadBalancer defines how the load balancer used by the cluster is configured.", + "default": { + "type": "OpenShiftManagedDefault" + }, + "$ref": "#/definitions/com.github.openshift.api.config.v1.NutanixPlatformLoadBalancer" } } }, - "com.github.openshift.api.osin.v1.OAuthConfig": { - "description": "OAuthConfig holds the necessary configuration options for OAuth authentication", + "com.github.openshift.api.config.v1.NutanixPrismElementEndpoint": { + "description": "NutanixPrismElementEndpoint holds the name and endpoint data for a Prism Element (cluster)", "type": "object", "required": [ - "masterCA", - "masterURL", - "masterPublicURL", - "loginURL", - "assetPublicURL", - "alwaysShowProviderSelection", - "identityProviders", - "grantConfig", - "sessionConfig", - "tokenConfig", - "templates" + "name", + "endpoint" ], "properties": { - "alwaysShowProviderSelection": { - "description": "alwaysShowProviderSelection will force the provider selection page to render even when there is only a single provider.", - "type": "boolean", - "default": false - }, - "assetPublicURL": { - "description": "assetPublicURL is used for building valid client redirect URLs for external access", - "type": "string", - "default": "" - }, - "grantConfig": { - "description": "grantConfig describes how to handle grants", + "endpoint": { + "description": "endpoint holds the endpoint address and port data of the Prism Element (cluster). When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy. Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the proxy spec.noProxy list.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.osin.v1.GrantConfig" - }, - "identityProviders": { - "description": "identityProviders is an ordered list of ways for a user to identify themselves", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.osin.v1.IdentityProvider" - } - }, - "loginURL": { - "description": "loginURL, along with masterCA, masterURL and masterPublicURL have distinct meanings depending on how the OAuth server is run. The two states are: 1. embedded in the kube api server (all 3.x releases) 2. as a standalone external process (all 4.x releases) in the embedded configuration, loginURL is equivalent to masterPublicURL and the other fields have functionality that matches their docs. in the standalone configuration, the fields are used as: loginURL is the URL required to login to the cluster: oc login --server= masterPublicURL is the issuer URL it is accessible from inside (service network) and outside (ingress) of the cluster masterURL is the loopback variation of the token_endpoint URL with no path component it is only accessible from inside (service network) of the cluster masterCA is used to perform TLS verification for connections made to masterURL For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2", - "type": "string", - "default": "" - }, - "masterCA": { - "description": "masterCA is the CA for verifying the TLS connection back to the MasterURL. This field is deprecated and will be removed in a future release. See loginURL for details. Deprecated", - "type": "string" - }, - "masterPublicURL": { - "description": "masterPublicURL is used for building valid client redirect URLs for internal and external access This field is deprecated and will be removed in a future release. See loginURL for details. Deprecated", - "type": "string", - "default": "" + "$ref": "#/definitions/com.github.openshift.api.config.v1.NutanixPrismEndpoint" }, - "masterURL": { - "description": "masterURL is used for making server-to-server calls to exchange authorization codes for access tokens This field is deprecated and will be removed in a future release. See loginURL for details. Deprecated", + "name": { + "description": "name is the name of the Prism Element (cluster). This value will correspond with the cluster field configured on other resources (eg Machines, PVCs, etc).", "type": "string", "default": "" - }, - "proxyTrustedCA": { - "description": "proxyTrustedCA is an optional path to a PEM-encoded CA bundle used to verify connections to an HTTPS proxy during outbound IdP requests. When omitted, proxy connections use the system trust roots only.", - "type": "string" - }, - "sessionConfig": { - "description": "sessionConfig hold information about configuring sessions.", - "$ref": "#/definitions/com.github.openshift.api.osin.v1.SessionConfig" - }, - "templates": { - "description": "templates allow you to customize pages like the login page.", - "$ref": "#/definitions/com.github.openshift.api.osin.v1.OAuthTemplates" - }, - "tokenConfig": { - "description": "tokenConfig contains options for authorization and access tokens", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.osin.v1.TokenConfig" } } }, - "com.github.openshift.api.osin.v1.OAuthTemplates": { - "description": "OAuthTemplates allow for customization of pages like the login page", + "com.github.openshift.api.config.v1.NutanixPrismEndpoint": { + "description": "NutanixPrismEndpoint holds the endpoint address and port to access the Nutanix Prism Central or Element (cluster)", "type": "object", "required": [ - "login", - "providerSelection", - "error" + "address", + "port" ], "properties": { - "error": { - "description": "error is a path to a file containing a go template used to render error pages during the authentication or grant flow If unspecified, the default error page is used.", - "type": "string", - "default": "" - }, - "login": { - "description": "login is a path to a file containing a go template used to render the login page. If unspecified, the default login page is used.", + "address": { + "description": "address is the endpoint address (DNS name or IP address) of the Nutanix Prism Central or Element (cluster)", "type": "string", "default": "" }, - "providerSelection": { - "description": "providerSelection is a path to a file containing a go template used to render the provider selection page. If unspecified, the default provider selection page is used.", - "type": "string", - "default": "" + "port": { + "description": "port is the port number to access the Nutanix Prism Central or Element (cluster)", + "type": "integer", + "format": "int32", + "default": 0 } } }, - "com.github.openshift.api.osin.v1.OpenIDClaims": { - "description": "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider", + "com.github.openshift.api.config.v1.NutanixResourceIdentifier": { + "description": "NutanixResourceIdentifier holds the identity of a Nutanix PC resource (cluster, image, subnet, etc.)", "type": "object", "required": [ - "id", - "preferredUsername", - "name", - "email", - "groups" + "type" ], "properties": { - "email": { - "description": "email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "groups": { - "description": "groups is the list of claims value of which should be used to synchronize groups from the OIDC provider to OpenShift for the user", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "id": { - "description": "id is the list of claims whose values should be used as the user ID. Required. OpenID standard identity claim is \"sub\"", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, "name": { - "description": "name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "description": "name is the resource name in the PC. It cannot be empty if the type is Name.", + "type": "string" }, - "preferredUsername": { - "description": "preferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the id claim", - "type": "array", - "items": { - "type": "string", - "default": "" + "type": { + "description": "type is the identifier type to use for this resource.", + "type": "string", + "default": "" + }, + "uuid": { + "description": "uuid is the UUID of the resource in the PC. It cannot be empty if the type is UUID.", + "type": "string" + } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "name": "Name", + "uuid": "UUID" } } - } + ] }, - "com.github.openshift.api.osin.v1.OpenIDIdentityProvider": { - "description": "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.OAuth": { + "description": "OAuth holds cluster-wide information about OAuth. The canonical name is `cluster`. It is used to configure the integrated OAuth server. This configuration is only honored when the top level Authentication config has type set to IntegratedOAuth.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "ca", - "clientID", - "clientSecret", - "extraScopes", - "extraAuthorizeParameters", - "urls", - "claims" + "metadata", + "spec" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "ca": { - "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "claims": { - "description": "claims mappings", + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.osin.v1.OpenIDClaims" - }, - "clientID": { - "description": "clientID is the oauth client ID", - "type": "string", - "default": "" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "clientSecret": { - "description": "clientSecret is the oauth client secret", - "$ref": "#/definitions/com.github.openshift.api.config.v1.StringSource" + "spec": { + "description": "spec holds user settable values for configuration", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.OAuthSpec" }, - "extraAuthorizeParameters": { - "description": "extraAuthorizeParameters are any custom parameters to add to the authorize request.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.OAuthStatus" + } + } + }, + "com.github.openshift.api.config.v1.OAuthList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "type": "object", + "required": [ + "metadata", + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "extraScopes": { - "description": "extraScopes are any scopes to request in addition to the standard \"openid\" scope.", + "items": { "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.OAuth" } }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "urls": { - "description": "urls to use to authenticate", + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.osin.v1.OpenIDURLs" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } } }, - "com.github.openshift.api.osin.v1.OpenIDURLs": { - "description": "OpenIDURLs are URLs to use when authenticating with an OpenID identity provider", + "com.github.openshift.api.config.v1.OAuthRemoteConnectionInfo": { + "description": "OAuthRemoteConnectionInfo holds information necessary for establishing a remote connection", "type": "object", "required": [ - "authorize", - "token", - "userInfo" + "url" ], "properties": { - "authorize": { - "description": "authorize is the oauth authorization URL", - "type": "string", - "default": "" + "ca": { + "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" }, - "token": { - "description": "token is the oauth token granting URL", - "type": "string", - "default": "" + "tlsClientCert": { + "description": "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" + }, + "tlsClientKey": { + "description": "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" }, - "userInfo": { - "description": "userInfo is the optional userinfo URL. If present, a granted access_token is used to request claims If empty, a granted id_token is parsed for claims", + "url": { + "description": "url is the remote URL to connect to", "type": "string", "default": "" } } }, - "com.github.openshift.api.osin.v1.OsinServerConfig": { - "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.OAuthSpec": { + "description": "OAuthSpec contains desired cluster auth configuration", "type": "object", "required": [ - "servingInfo", - "corsAllowedOrigins", - "auditConfig", - "storageConfig", - "admission", - "kubeClientConfig", - "oauthConfig" + "tokenConfig" ], "properties": { - "admission": { - "description": "admissionConfig holds information about how to configure admission.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.AdmissionConfig" - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "auditConfig": { - "description": "auditConfig describes how to configure audit information", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.AuditConfig" - }, - "corsAllowedOrigins": { - "description": "corsAllowedOrigins", + "identityProviders": { + "description": "identityProviders is an ordered list of ways for a user to identify themselves. When this list is empty, no identities are provisioned for users.", "type": "array", "items": { - "type": "string", - "default": "" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.IdentityProvider" + }, + "x-kubernetes-list-type": "atomic" }, - "kubeClientConfig": { + "templates": { + "description": "templates allow you to customize pages like the login page.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.KubeClientConfig" + "$ref": "#/definitions/com.github.openshift.api.config.v1.OAuthTemplates" }, - "oauthConfig": { - "description": "oauthConfig holds the necessary configuration options for OAuth authentication", + "tokenConfig": { + "description": "tokenConfig contains options for authorization and access tokens", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.TokenConfig" + } + } + }, + "com.github.openshift.api.config.v1.OAuthStatus": { + "description": "OAuthStatus shows current known state of OAuth server in the cluster", + "type": "object" + }, + "com.github.openshift.api.config.v1.OAuthTemplates": { + "description": "OAuthTemplates allow for customization of pages like the login page", + "type": "object", + "properties": { + "error": { + "description": "error is the name of a secret that specifies a go template to use to render error pages during the authentication or grant flow. The key \"errors.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default error page is used. If the specified template is not valid, the default error page is used. If unspecified, the default error page is used. The namespace for this secret is openshift-config.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.osin.v1.OAuthConfig" + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" }, - "servingInfo": { - "description": "servingInfo describes how to start serving", + "login": { + "description": "login is the name of a secret that specifies a go template to use to render the login page. The key \"login.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default login page is used. If the specified template is not valid, the default login page is used. If unspecified, the default login page is used. The namespace for this secret is openshift-config.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.HTTPServingInfo" + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" }, - "storageConfig": { - "description": "storageConfig contains information about how to use", + "providerSelection": { + "description": "providerSelection is the name of a secret that specifies a go template to use to render the provider selection page. The key \"providers.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default provider selection page is used. If the specified template is not valid, the default provider selection page is used. If unspecified, the default provider selection page is used. The namespace for this secret is openshift-config.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.config.v1.EtcdStorageConfig" + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" } } }, - "com.github.openshift.api.osin.v1.RequestHeaderIdentityProvider": { - "description": "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.OIDCClientConfig": { + "description": "OIDCClientConfig configures how platform clients interact with identity providers as an authentication method.", "type": "object", "required": [ - "loginURL", - "challengeURL", - "clientCA", - "clientCommonNames", - "headers", - "preferredUsernameHeaders", - "nameHeaders", - "emailHeaders" + "componentName", + "componentNamespace", + "clientID" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "challengeURL": { - "description": "challengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}", + "clientID": { + "description": "clientID is a required field that configures the client identifier, from the identity provider, that the platform component uses for authentication requests made to the identity provider. The identity provider must accept this identifier for platform components to be able to use the identity provider as an authentication mode.\n\nclientID must not be an empty string (\"\").", "type": "string", "default": "" }, - "clientCA": { - "description": "clientCA is a file with the trusted signer certs. If empty, no request verification is done, and any direct request to the OAuth server can impersonate any identity from this provider, merely by setting a request header.", + "clientSecret": { + "description": "clientSecret is an optional field that configures the client secret used by the platform component when making authentication requests to the identity provider.\n\nWhen not specified, no client secret will be used when making authentication requests to the identity provider.\n\nWhen specified, clientSecret references a Secret in the 'openshift-config' namespace that contains the client secret in the 'clientSecret' key of the '.data' field.\n\nThe client secret will be used when making authentication requests to the identity provider.\n\nPublic clients do not require a client secret but private clients do require a client secret to work with the identity provider.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" + }, + "componentName": { + "description": "componentName is a required field that specifies the name of the platform component being configured to use the identity provider as an authentication mode.\n\nIt is used in combination with componentNamespace as a unique identifier.\n\ncomponentName must not be an empty string (\"\") and must not exceed 256 characters in length.", "type": "string", "default": "" }, - "clientCommonNames": { - "description": "clientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "emailHeaders": { - "description": "emailHeaders is the set of headers to check for the email address", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "headers": { - "description": "headers is the set of headers to check for identity information", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "loginURL": { - "description": "loginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}", + "componentNamespace": { + "description": "componentNamespace is a required field that specifies the namespace in which the platform component being configured to use the identity provider as an authentication mode is running.\n\nIt is used in combination with componentName as a unique identifier.\n\ncomponentNamespace must not be an empty string (\"\") and must not exceed 63 characters in length.", "type": "string", "default": "" }, - "nameHeaders": { - "description": "nameHeaders is the set of headers to check for the display name", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "preferredUsernameHeaders": { - "description": "preferredUsernameHeaders is the set of headers to check for the preferred username", + "extraScopes": { + "description": "extraScopes is an optional field that configures the extra scopes that should be requested by the platform component when making authentication requests to the identity provider. This is useful if you have configured claim mappings that requires specific scopes to be requested beyond the standard OIDC scopes.\n\nWhen omitted, no additional scopes are requested.", "type": "array", "items": { "type": "string", "default": "" - } + }, + "x-kubernetes-list-type": "set" } } }, - "com.github.openshift.api.osin.v1.SessionConfig": { - "description": "SessionConfig specifies options for cookie-based sessions. Used by AuthRequestHandlerSession", + "com.github.openshift.api.config.v1.OIDCClientReference": { + "description": "OIDCClientReference is a reference to a platform component client configuration.", "type": "object", "required": [ - "sessionSecretsFile", - "sessionMaxAgeSeconds", - "sessionName" + "oidcProviderName", + "issuerURL", + "clientID" ], "properties": { - "sessionMaxAgeSeconds": { - "description": "sessionMaxAgeSeconds specifies how long created sessions last. Used by AuthRequestHandlerSession", - "type": "integer", - "format": "int32", - "default": 0 + "clientID": { + "description": "clientID is a required field that specifies the client identifier, from the identity provider, that the platform component is using for authentication requests made to the identity provider.\n\nclientID must not be empty.", + "type": "string", + "default": "" }, - "sessionName": { - "description": "sessionName is the cookie name used to store the session", + "issuerURL": { + "description": "issuerURL is a required field that specifies the URL of the identity provider that this client is configured to make requests against.\n\nissuerURL must use the 'https' scheme.", "type": "string", "default": "" }, - "sessionSecretsFile": { - "description": "sessionSecretsFile is a reference to a file containing a serialized SessionSecrets object If no file is specified, a random signing and encryption key are generated at each server start", + "oidcProviderName": { + "description": "oidcProviderName is a required reference to the 'name' of the identity provider configured in 'oidcProviders' that this client is associated with.\n\noidcProviderName must not be an empty string (\"\").", "type": "string", "default": "" } } }, - "com.github.openshift.api.osin.v1.SessionSecret": { - "description": "SessionSecret is a secret used to authenticate/decrypt cookie-based sessions", + "com.github.openshift.api.config.v1.OIDCClientStatus": { + "description": "OIDCClientStatus represents the current state of platform components and how they interact with the configured identity providers.", "type": "object", "required": [ - "authentication", - "encryption" + "componentName", + "componentNamespace" ], "properties": { - "authentication": { - "description": "authentication is used to authenticate sessions using HMAC. Recommended to use a secret with 32 or 64 bytes.", + "componentName": { + "description": "componentName is a required field that specifies the name of the platform component using the identity provider as an authentication mode. It is used in combination with componentNamespace as a unique identifier.\n\ncomponentName must not be an empty string (\"\") and must not exceed 256 characters in length.", "type": "string", "default": "" }, - "encryption": { - "description": "encryption is used to encrypt sessions. Must be 16, 24, or 32 characters long, to select AES-128, AES-", + "componentNamespace": { + "description": "componentNamespace is a required field that specifies the namespace in which the platform component using the identity provider as an authentication mode is running.\n\nIt is used in combination with componentName as a unique identifier.\n\ncomponentNamespace must not be an empty string (\"\") and must not exceed 63 characters in length.", "type": "string", "default": "" + }, + "conditions": { + "description": "conditions are used to communicate the state of the `oidcClients` entry.\n\nSupported conditions include Available, Degraded and Progressing.\n\nIf Available is true, the component is successfully using the configured client. If Degraded is true, that means something has gone wrong trying to handle the client configuration. If Progressing is true, that means the component is taking some action related to the `oidcClients` entry.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" + }, + "consumingUsers": { + "description": "consumingUsers is an optional list of ServiceAccounts requiring read permissions on the `clientSecret` secret.\n\nconsumingUsers must not exceed 5 entries.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" + }, + "currentOIDCClients": { + "description": "currentOIDCClients is an optional list of clients that the component is currently using.\n\nEntries must have unique issuerURL/clientID pairs.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.OIDCClientReference" + }, + "x-kubernetes-list-map-keys": [ + "issuerURL", + "clientID" + ], + "x-kubernetes-list-type": "map" } } }, - "com.github.openshift.api.osin.v1.SessionSecrets": { - "description": "SessionSecrets list the secrets to use to sign/encrypt and authenticate/decrypt created sessions.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.OIDCProvider": { "type": "object", "required": [ - "secrets" + "name", + "issuer", + "claimMappings" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "claimMappings": { + "description": "claimMappings is a required field that configures the rules to be used by the Kubernetes API server for translating claims in a JWT token, issued by the identity provider, to a cluster identity.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.TokenClaimMappings" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "claimValidationRules": { + "description": "claimValidationRules is an optional field that configures the rules to be used by the Kubernetes API server for validating the claims in a JWT token issued by the identity provider.\n\nValidation rules are joined via an AND operation.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.TokenClaimValidationRule" + }, + "x-kubernetes-list-type": "atomic" }, - "secrets": { - "description": "secrets is a list of secrets New sessions are signed and encrypted using the first secret. Existing sessions are decrypted/authenticated by each secret until one succeeds. This allows rotating secrets.", + "externalClaimsSources": { + "description": "externalClaimsSources is an optional field that can be used to configure sources, external to the token provided in a request, in which claims should be fetched from and made available to the claim mapping process that is used to build the identity of a token holder.\n\nFor example, fetching additional user metadata from an OIDC provider's UserInfo endpoint.\n\nWhen not specified, only claims present in the token itself will be available in the claim mapping process.\n\nWhen specified, at least one external claim source must be specified and no more than 5 sources may be specified. All external claim sources must have unique claim mappings. When an external source responds and resolves additional claims successfully, they will be made available as claims during the claim mapping process. Externally sourced claims with the same name as a claim existing within the token will overwrite the claim data from the token with the externally sourced information. If an external source does not respond, responds with an error, or the additional claim data cannot be resolved from the response successfully it will not be included in the claim data passed to the claim mapping process.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.osin.v1.SessionSecret" - } + "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalClaimsSource" + }, + "x-kubernetes-list-type": "atomic" + }, + "issuer": { + "description": "issuer is a required field that configures how the platform interacts with the identity provider and how tokens issued from the identity provider are evaluated by the Kubernetes API server.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.TokenIssuer" + }, + "name": { + "description": "name is a required field that configures the unique human-readable identifier associated with the identity provider. It is used to distinguish between multiple identity providers and has no impact on token validation or authentication mechanics.\n\nname must not be an empty string (\"\").", + "type": "string", + "default": "" + }, + "oidcClients": { + "description": "oidcClients is an optional field that configures how on-cluster, platform clients should request tokens from the identity provider. oidcClients must not exceed 20 entries and entries must have unique namespace/name pairs.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.OIDCClientConfig" + }, + "x-kubernetes-list-map-keys": [ + "componentNamespace", + "componentName" + ], + "x-kubernetes-list-type": "map" + }, + "userValidationRules": { + "description": "userValidationRules is an optional field that configures the set of rules used to validate the cluster user identity that was constructed via mapping token claims to user identity attributes. Rules are CEL expressions that must evaluate to 'true' for authentication to succeed. If any rule in the chain of rules evaluates to 'false', authentication will fail. When specified, at least one rule must be specified and no more than 64 rules may be specified.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.TokenUserValidationRule" + }, + "x-kubernetes-list-map-keys": [ + "expression" + ], + "x-kubernetes-list-type": "map" } } }, - "com.github.openshift.api.osin.v1.TokenConfig": { - "description": "TokenConfig holds the necessary configuration options for authorization and access tokens", + "com.github.openshift.api.config.v1.ObjectReference": { + "description": "ObjectReference contains enough information to let you inspect or modify the referred object.", "type": "object", + "required": [ + "group", + "resource", + "name" + ], "properties": { - "accessTokenInactivityTimeout": { - "description": "accessTokenInactivityTimeout defines the token inactivity timeout for tokens granted by any client. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Takes valid time duration string such as \"5m\", \"1.5h\" or \"2h45m\". The minimum allowed value for duration is 300s (5 minutes). If the timeout is configured per client, then that value takes precedence. If the timeout value is not specified and the client does not override the value, then tokens are valid until their lifetime.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" + "group": { + "description": "group of the referent.", + "type": "string", + "default": "" }, - "accessTokenInactivityTimeoutSeconds": { - "description": "accessTokenInactivityTimeoutSeconds - DEPRECATED: setting this field has no effect.", - "type": "integer", - "format": "int32" + "name": { + "description": "name of the referent.", + "type": "string", + "default": "" }, - "accessTokenMaxAgeSeconds": { - "description": "accessTokenMaxAgeSeconds defines the maximum age of access tokens", - "type": "integer", - "format": "int32" + "namespace": { + "description": "namespace of the referent.", + "type": "string" }, - "authorizeTokenMaxAgeSeconds": { - "description": "authorizeTokenMaxAgeSeconds defines the maximum age of authorize tokens", - "type": "integer", - "format": "int32" + "resource": { + "description": "resource of the referent.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.project.v1.Project": { - "description": "Projects are the unit of isolation and collaboration in OpenShift. A project has one or more members, a quota on the resources that the project may consume, and the security controls on the resources in the project. Within a project, members may have different roles - project administrators can set membership, editors can create and manage the resources, and viewers can see but not access running containers. In a normal cluster project administrators are not able to alter their quotas - that is restricted to cluster administrators.\n\nListing or watching projects will return only projects the user has the reader role on.\n\nAn OpenShift project is an alternative representation of a Kubernetes namespace. Projects are exposed as editable to end users while namespaces are not. Direct creation of a project is typically restricted to administrators, while end users should use the requestproject resource.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.OldTLSProfile": { + "description": "OldTLSProfile is a TLS security profile based on the \"old\" configuration of the Mozilla Server Side TLS configuration guidelines.", + "type": "object" + }, + "com.github.openshift.api.config.v1.OpenIDClaims": { + "description": "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "email": { + "description": "email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "groups": { + "description": "groups is the list of claims value of which should be used to synchronize groups from the OIDC provider to OpenShift for the user. If multiple claims are specified, the first one with a non-empty value is used.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "spec": { - "description": "spec defines the behavior of the Namespace.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.project.v1.ProjectSpec" + "name": { + "description": "name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "status": { - "description": "status describes the current status of a Namespace", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.project.v1.ProjectStatus" + "preferredUsername": { + "description": "preferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the sub claim", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } } }, - "com.github.openshift.api.project.v1.ProjectList": { - "description": "ProjectList is a list of Project objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.OpenIDIdentityProvider": { + "description": "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials", "type": "object", "required": [ - "items" + "clientID", + "clientSecret", + "issuer", + "claims" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "ca": { + "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" }, - "items": { - "description": "items is the list of projects", + "claims": { + "description": "claims mappings", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.OpenIDClaims" + }, + "clientID": { + "description": "clientID is the oauth client ID", + "type": "string", + "default": "" + }, + "clientSecret": { + "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" + }, + "extraAuthorizeParameters": { + "description": "extraAuthorizeParameters are any custom parameters to add to the authorize request.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "extraScopes": { + "description": "extraScopes are any scopes to request in addition to the standard \"openid\" scope.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.project.v1.Project" + "type": "string", + "default": "" } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "issuer": { + "description": "issuer is the URL that the OpenID Provider asserts as its Issuer Identifier. It must use the https scheme with no query or fragment component.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.project.v1.ProjectRequest": { - "description": "ProjectRequest is the set of options necessary to fully qualify a project request\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.OpenStackPlatformLoadBalancer": { + "description": "OpenStackPlatformLoadBalancer defines the load balancer used by the cluster on OpenStack platform.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "description": { - "description": "description is the description to apply to a project", - "type": "string" - }, - "displayName": { - "description": "displayName is the display name to apply to a project", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "type": { + "description": "type defines the type of load balancer used by the cluster on OpenStack platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", + "type": "string", + "default": "OpenShiftManagedDefault" } - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": {} + } + ] }, - "com.github.openshift.api.project.v1.ProjectSpec": { - "description": "ProjectSpec describes the attributes on a Project", + "com.github.openshift.api.config.v1.OpenStackPlatformSpec": { + "description": "OpenStackPlatformSpec holds the desired state of the OpenStack infrastructure provider. This only includes fields that can be modified in the cluster.", "type": "object", "properties": { - "finalizers": { - "description": "finalizers is an opaque list of values that must be empty to permanently remove object from storage", + "apiServerInternalIPs": { + "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", "type": "array", "items": { "type": "string", "default": "" - } - } - } - }, - "com.github.openshift.api.project.v1.ProjectStatus": { - "description": "ProjectStatus is information about the current status of a Project", - "type": "object", - "properties": { - "conditions": { - "description": "Represents the latest available observations of the project current state.", + }, + "x-kubernetes-list-type": "atomic" + }, + "ingressIPs": { + "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.NamespaceCondition" + "type": "string", + "default": "" }, - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "x-kubernetes-list-type": "atomic" }, - "phase": { - "description": "phase is the current lifecycle phase of the project\n\nPossible enum values:\n - `\"Active\"` means the namespace is available for use in the system\n - `\"Terminating\"` means the namespace is undergoing graceful termination", - "type": "string", - "enum": [ - "Active", - "Terminating" - ] + "machineNetworks": { + "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } } }, - "com.github.openshift.api.quota.v1.AppliedClusterResourceQuota": { - "description": "AppliedClusterResourceQuota mirrors ClusterResourceQuota at a project scope, for projection into a project. It allows a project-admin to know which ClusterResourceQuotas are applied to his project and their associated usage.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.OpenStackPlatformStatus": { + "description": "OpenStackPlatformStatus holds the current status of the OpenStack infrastructure provider.", "type": "object", "required": [ - "metadata", - "spec" + "apiServerInternalIPs", + "ingressIPs" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "apiServerInternalIP": { + "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "apiServerInternalIPs": { + "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "cloudName": { + "description": "cloudName is the name of the desired OpenStack cloud in the client configuration file (`clouds.yaml`).", + "type": "string" }, - "spec": { - "description": "spec defines the desired quota", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.quota.v1.ClusterResourceQuotaSpec" + "dnsRecordsType": { + "description": "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", + "type": "string", + "enum": [ + "External", + "Internal" + ] }, - "status": { - "description": "status defines the actual enforced quota and its current usage", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.quota.v1.ClusterResourceQuotaStatus" - } - } - }, - "com.github.openshift.api.quota.v1.AppliedClusterResourceQuotaList": { - "description": "AppliedClusterResourceQuotaList is a collection of AppliedClusterResourceQuotas\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "ingressIP": { + "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", "type": "string" }, - "items": { - "description": "items is a list of AppliedClusterResourceQuota", + "ingressIPs": { + "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.quota.v1.AppliedClusterResourceQuota" - } + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "loadBalancer": { + "description": "loadBalancer defines how the load balancer used by the cluster is configured.", + "default": { + "type": "OpenShiftManagedDefault" + }, + "$ref": "#/definitions/com.github.openshift.api.config.v1.OpenStackPlatformLoadBalancer" + }, + "machineNetworks": { + "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "nodeDNSIP": { + "description": "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for OpenStack deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.", "type": "string" + } + } + }, + "com.github.openshift.api.config.v1.OperandVersion": { + "type": "object", + "required": [ + "name", + "version" + ], + "properties": { + "name": { + "description": "name is the name of the particular operand this version is for. It usually matches container images, not operators.", + "type": "string", + "default": "" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "version": { + "description": "version indicates which version of a particular operand is currently being managed. It must always match the Available operand. If 1.0.0 is Available, then this must indicate 1.0.0 even if the operator is trying to rollout 1.1.0", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.quota.v1.ClusterResourceQuota": { - "description": "ClusterResourceQuota mirrors ResourceQuota at a cluster scope. This object is easily convertible to synthetic ResourceQuota object to allow quota evaluation re-use.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.OperatorHub": { + "description": "OperatorHub is the Schema for the operatorhubs API. It can be used to change the state of the default hub sources for OperatorHub on the cluster from enabled to disabled and vice versa.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "metadata", - "spec" + "spec", + "status" ], "properties": { "apiVersion": { @@ -40739,21 +6071,20 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec defines the desired quota", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.quota.v1.ClusterResourceQuotaSpec" + "$ref": "#/definitions/com.github.openshift.api.config.v1.OperatorHubSpec" }, "status": { - "description": "status defines the actual enforced quota and its current usage", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.quota.v1.ClusterResourceQuotaStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.OperatorHubStatus" } } }, - "com.github.openshift.api.quota.v1.ClusterResourceQuotaList": { - "description": "ClusterResourceQuotaList is a collection of ClusterResourceQuotas\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.OperatorHubList": { + "description": "OperatorHubList contains a list of OperatorHub\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ + "metadata", "items" ], "properties": { @@ -40762,11 +6093,10 @@ "type": "string" }, "items": { - "description": "items is a list of ClusterResourceQuotas", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.quota.v1.ClusterResourceQuota" + "$ref": "#/definitions/com.github.openshift.api.config.v1.OperatorHub" } }, "kind": { @@ -40780,497 +6110,536 @@ } } }, - "com.github.openshift.api.quota.v1.ClusterResourceQuotaSelector": { - "description": "ClusterResourceQuotaSelector is used to select projects. At least one of LabelSelector or AnnotationSelector must present. If only one is present, it is the only selection criteria. If both are specified, the project must match both restrictions.", - "type": "object", - "properties": { - "annotations": { - "description": "AnnotationSelector is used to select projects by annotation.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "labels": { - "description": "LabelSelector is used to select projects by label.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - } - } - }, - "com.github.openshift.api.quota.v1.ClusterResourceQuotaSpec": { - "description": "ClusterResourceQuotaSpec defines the desired quota restrictions", + "com.github.openshift.api.config.v1.OperatorHubSpec": { + "description": "OperatorHubSpec defines the desired state of OperatorHub", "type": "object", - "required": [ - "selector", - "quota" - ], "properties": { - "quota": { - "description": "quota defines the desired quota", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuotaSpec" + "disableAllDefaultSources": { + "description": "disableAllDefaultSources allows you to disable all the default hub sources. If this is true, a specific entry in sources can be used to enable a default source. If this is false, a specific entry in sources can be used to disable or enable a default source.", + "type": "boolean" }, - "selector": { - "description": "selector is the selector used to match projects. It should only select active projects on the scale of dozens (though it can select many more less active projects). These projects will contend on object creation through this resource.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.quota.v1.ClusterResourceQuotaSelector" + "sources": { + "description": "sources is the list of default hub sources and their configuration. If the list is empty, it implies that the default hub sources are enabled on the cluster unless disableAllDefaultSources is true. If disableAllDefaultSources is true and sources is not empty, the configuration present in sources will take precedence. The list of default hub sources and their current state will always be reflected in the status block.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.HubSource" + } } } }, - "com.github.openshift.api.quota.v1.ClusterResourceQuotaStatus": { - "description": "ClusterResourceQuotaStatus defines the actual enforced quota and its current usage", + "com.github.openshift.api.config.v1.OperatorHubStatus": { + "description": "OperatorHubStatus defines the observed state of OperatorHub. The current state of the default hub sources will always be reflected here.", "type": "object", - "required": [ - "total" - ], "properties": { - "namespaces": { - "description": "namespaces slices the usage by project. This division allows for quick resolution of deletion reconciliation inside of a single project without requiring a recalculation across all projects. This can be used to pull the deltas for a given project.", + "sources": { + "description": "sources encapsulates the result of applying the configuration for each hub source", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.quota.v1.ResourceQuotaStatusByNamespace" + "$ref": "#/definitions/com.github.openshift.api.config.v1.HubSourceStatus" } - }, - "total": { - "description": "total defines the actual enforced quota and its current usage across all projects", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuotaStatus" } } }, - "com.github.openshift.api.quota.v1.ResourceQuotaStatusByNamespace": { - "description": "ResourceQuotaStatusByNamespace gives status for a particular project", + "com.github.openshift.api.config.v1.OvirtPlatformLoadBalancer": { + "description": "OvirtPlatformLoadBalancer defines the load balancer used by the cluster on Ovirt platform.", + "type": "object", + "properties": { + "type": { + "description": "type defines the type of load balancer used by the cluster on Ovirt platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", + "type": "string", + "default": "OpenShiftManagedDefault" + } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": {} + } + ] + }, + "com.github.openshift.api.config.v1.OvirtPlatformSpec": { + "description": "OvirtPlatformSpec holds the desired state of the oVirt infrastructure provider. This only includes fields that can be modified in the cluster.", + "type": "object" + }, + "com.github.openshift.api.config.v1.OvirtPlatformStatus": { + "description": "OvirtPlatformStatus holds the current status of the oVirt infrastructure provider.", "type": "object", "required": [ - "namespace", - "status" + "apiServerInternalIPs", + "ingressIPs" ], "properties": { - "namespace": { - "description": "namespace the project this status applies to", + "apiServerInternalIP": { + "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", + "type": "string" + }, + "apiServerInternalIPs": { + "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" + }, + "dnsRecordsType": { + "description": "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", "type": "string", - "default": "" + "enum": [ + "External", + "Internal" + ] }, - "status": { - "description": "status indicates how many resources have been consumed by this project", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuotaStatus" + "ingressIP": { + "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", + "type": "string" + }, + "ingressIPs": { + "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" + }, + "loadBalancer": { + "description": "loadBalancer defines how the load balancer used by the cluster is configured.", + "default": { + "type": "OpenShiftManagedDefault" + }, + "$ref": "#/definitions/com.github.openshift.api.config.v1.OvirtPlatformLoadBalancer" + }, + "nodeDNSIP": { + "description": "deprecated: as of 4.6, this field is no longer set or honored. It will be removed in a future release.", + "type": "string" } } }, - "com.github.openshift.api.route.v1.LocalObjectReference": { - "description": "LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace.", + "com.github.openshift.api.config.v1.PKICertificateSubject": { + "description": "PKICertificateSubject defines the requirements imposed on the subject to which the certificate was issued.", "type": "object", "properties": { - "name": { - "description": "name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "email": { + "description": "email specifies the expected email address imposed on the subject to which the certificate was issued, and must match the email address listed in the Subject Alternative Name (SAN) field of the certificate. The email must be a valid email address and at most 320 characters in length.", + "type": "string" + }, + "hostname": { + "description": "hostname specifies the expected hostname imposed on the subject to which the certificate was issued, and it must match the hostname listed in the Subject Alternative Name (SAN) DNS field of the certificate. The hostname must be a valid dns 1123 subdomain name, optionally prefixed by '*.', and at most 253 characters in length. It must consist only of lowercase alphanumeric characters, hyphens, periods and the optional preceding asterisk.", "type": "string" } - }, - "x-kubernetes-map-type": "atomic" + } }, - "com.github.openshift.api.route.v1.Route": { - "description": "A route allows developers to expose services through an HTTP(S) aware load balancing and proxy layer via a public DNS entry. The route may further specify TLS options and a certificate, or specify a public CNAME that the router should also accept for HTTP and HTTPS traffic. An administrator typically configures their router to be visible outside the cluster firewall, and may also add additional security, caching, or traffic controls on the service content. Routers usually talk directly to the service endpoints.\n\nOnce a route is created, the `host` field may not be changed. Generally, routers use the oldest route with a given host when resolving conflicts.\n\nRouters are subject to additional customization and may support additional controls via the annotations field.\n\nBecause administrators may configure multiple routers, the route status field is used to return information to clients about the names and states of the route under each router. If a client chooses a duplicate name, for instance, the route status conditions are used to indicate the route cannot be chosen.\n\nTo enable HTTP/2 ALPN on a route it requires a custom (non-wildcard) certificate. This prevents connection coalescing by clients, notably web browsers. We do not support HTTP/2 ALPN on routes that use the default certificate because of the risk of connection re-use/coalescing. Routes that do not have their own custom certificate will not be HTTP/2 ALPN-enabled on either the frontend or the backend.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.PersistentVolumeClaimReference": { + "description": "PersistentVolumeClaimReference is a reference to a PersistentVolumeClaim.", "type": "object", "required": [ - "spec" + "name" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "name": { + "description": "name is the name of the PersistentVolumeClaim that will be used to store the Insights data archive. It is a string that follows the DNS1123 subdomain format. It must be at most 253 characters in length, and must consist only of lower case alphanumeric characters, '-' and '.', and must start and end with an alphanumeric character.", "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the desired state of the route", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.route.v1.RouteSpec" - }, - "status": { - "description": "status is the current state of the route", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.route.v1.RouteStatus" } } }, - "com.github.openshift.api.route.v1.RouteHTTPHeader": { - "description": "RouteHTTPHeader specifies configuration for setting or deleting an HTTP header.", + "com.github.openshift.api.config.v1.PersistentVolumeConfig": { + "description": "PersistentVolumeConfig provides configuration options for PersistentVolume storage.", "type": "object", "required": [ - "name", - "action" + "claim" ], "properties": { - "action": { - "description": "action specifies actions to perform on headers, such as setting or deleting headers.", + "claim": { + "description": "claim is a required field that specifies the configuration of the PersistentVolumeClaim that will be used to store the Insights data archive. The PersistentVolumeClaim must be created in the openshift-insights namespace.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.route.v1.RouteHTTPHeaderActionUnion" + "$ref": "#/definitions/com.github.openshift.api.config.v1.PersistentVolumeClaimReference" }, - "name": { - "description": "name specifies the name of a header on which to perform an action. Its value must be a valid HTTP header name as defined in RFC 2616 section 4.2. The name must consist only of alphanumeric and the following special characters, \"-!#$%&'*+.^_`\". The following header names are reserved and may not be modified via this API: Strict-Transport-Security, Proxy, Cookie, Set-Cookie. It must be no more than 255 characters in length. Header name must be unique.", - "type": "string", - "default": "" + "mountPath": { + "description": "mountPath is an optional field specifying the directory where the PVC will be mounted inside the Insights data gathering Pod. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default mount path is /var/lib/insights-operator The path may not exceed 1024 characters and must not contain a colon.", + "type": "string" } } }, - "com.github.openshift.api.route.v1.RouteHTTPHeaderActionUnion": { - "description": "RouteHTTPHeaderActionUnion specifies an action to take on an HTTP header.", + "com.github.openshift.api.config.v1.PlatformSpec": { + "description": "PlatformSpec holds the desired state specific to the underlying infrastructure provider of the current cluster. Since these are used at spec-level for the underlying cluster, it is supposed that only one of the spec structs is set.", "type": "object", "required": [ "type" ], "properties": { - "set": { - "description": "set defines the HTTP header that should be set: added if it doesn't exist or replaced if it does. This field is required when type is Set and forbidden otherwise.", - "$ref": "#/definitions/com.github.openshift.api.route.v1.RouteSetHTTPHeader" + "alibabaCloud": { + "description": "alibabaCloud contains settings specific to the Alibaba Cloud infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.AlibabaCloudPlatformSpec" + }, + "aws": { + "description": "aws contains settings specific to the Amazon Web Services infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.AWSPlatformSpec" + }, + "azure": { + "description": "azure contains settings specific to the Azure infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.AzurePlatformSpec" + }, + "baremetal": { + "description": "baremetal contains settings specific to the BareMetal platform.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.BareMetalPlatformSpec" + }, + "equinixMetal": { + "description": "equinixMetal contains settings specific to the Equinix Metal infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.EquinixMetalPlatformSpec" + }, + "external": { + "description": "ExternalPlatformType represents generic infrastructure provider. Platform-specific components should be supplemented separately.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalPlatformSpec" + }, + "gcp": { + "description": "gcp contains settings specific to the Google Cloud Platform infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.GCPPlatformSpec" + }, + "ibmcloud": { + "description": "ibmcloud contains settings specific to the IBMCloud infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.IBMCloudPlatformSpec" + }, + "kubevirt": { + "description": "kubevirt contains settings specific to the kubevirt infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.KubevirtPlatformSpec" + }, + "nutanix": { + "description": "nutanix contains settings specific to the Nutanix infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.NutanixPlatformSpec" + }, + "openstack": { + "description": "openstack contains settings specific to the OpenStack infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.OpenStackPlatformSpec" + }, + "ovirt": { + "description": "ovirt contains settings specific to the oVirt infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.OvirtPlatformSpec" + }, + "powervs": { + "description": "powervs contains settings specific to the IBM Power Systems Virtual Servers infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.PowerVSPlatformSpec" }, "type": { - "description": "type defines the type of the action to be applied on the header. Possible values are Set or Delete. Set allows you to set HTTP request and response headers. Delete allows you to delete HTTP request and response headers.", + "description": "type is the underlying infrastructure provider for the cluster. This value controls whether infrastructure automation such as service load balancers, dynamic volume provisioning, machine creation and deletion, and other integrations are enabled. If None, no infrastructure automation is enabled. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"IBMCloud\", \"KubeVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\", \"External\", and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.", "type": "string", "default": "" - } - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "set": "Set" - } - } - ] - }, - "com.github.openshift.api.route.v1.RouteHTTPHeaderActions": { - "description": "RouteHTTPHeaderActions defines configuration for actions on HTTP request and response headers.", - "type": "object", - "properties": { - "request": { - "description": "request is a list of HTTP request headers to modify. Currently, actions may define to either `Set` or `Delete` headers values. Actions defined here will modify the request headers of all requests made through a route. These actions are applied to a specific Route defined within a cluster i.e. connections made through a route. Currently, actions may define to either `Set` or `Delete` headers values. Route actions will be executed after IngressController actions for request headers. Actions are applied in sequence as defined in this list. A maximum of 20 request header actions may be configured. You can use this field to specify HTTP request headers that should be set or deleted when forwarding connections from the client to your application. Sample fetchers allowed are \"req.hdr\" and \"ssl_c_der\". Converters allowed are \"lower\" and \"base64\". Example header values: \"%[req.hdr(X-target),lower]\", \"%{+Q}[ssl_c_der,base64]\". Any request header configuration applied directly via a Route resource using this API will override header configuration for a header of the same name applied via spec.httpHeaders.actions on the IngressController or route annotation. Note: This field cannot be used if your route uses TLS passthrough.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.route.v1.RouteHTTPHeader" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" }, - "response": { - "description": "response is a list of HTTP response headers to modify. Currently, actions may define to either `Set` or `Delete` headers values. Actions defined here will modify the response headers of all requests made through a route. These actions are applied to a specific Route defined within a cluster i.e. connections made through a route. Route actions will be executed before IngressController actions for response headers. Actions are applied in sequence as defined in this list. A maximum of 20 response header actions may be configured. You can use this field to specify HTTP response headers that should be set or deleted when forwarding responses from your application to the client. Sample fetchers allowed are \"res.hdr\" and \"ssl_c_der\". Converters allowed are \"lower\" and \"base64\". Example header values: \"%[res.hdr(X-target),lower]\", \"%{+Q}[ssl_c_der,base64]\". Note: This field cannot be used if your route uses TLS passthrough.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.route.v1.RouteHTTPHeader" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" - } - } - }, - "com.github.openshift.api.route.v1.RouteHTTPHeaders": { - "description": "RouteHTTPHeaders defines policy for HTTP headers.", - "type": "object", - "properties": { - "actions": { - "description": "actions specifies options for modifying headers and their values. Note that this option only applies to cleartext HTTP connections and to secure HTTP connections for which the ingress controller terminates encryption (that is, edge-terminated or reencrypt connections). Headers cannot be modified for TLS passthrough connections. Setting the HSTS (`Strict-Transport-Security`) header is not supported via actions. `Strict-Transport-Security` may only be configured using the \"haproxy.router.openshift.io/hsts_header\" route annotation, and only in accordance with the policy specified in Ingress.Spec.RequiredHSTSPolicies. In case of HTTP request headers, the actions specified in spec.httpHeaders.actions on the Route will be executed after the actions specified in the IngressController's spec.httpHeaders.actions field. In case of HTTP response headers, the actions specified in spec.httpHeaders.actions on the IngressController will be executed after the actions specified in the Route's spec.httpHeaders.actions field. The headers set via this API will not appear in access logs. Any actions defined here are applied after any actions related to the following other fields: cache-control, spec.clientTLS, spec.httpHeaders.forwardedHeaderPolicy, spec.httpHeaders.uniqueId, and spec.httpHeaders.headerNameCaseAdjustments. The following header names are reserved and may not be modified via this API: Strict-Transport-Security, Proxy, Cookie, Set-Cookie. Note that the total size of all net added headers *after* interpolating dynamic values must not exceed the value of spec.tuningOptions.headerBufferMaxRewriteBytes on the IngressController. Please refer to the documentation for that API field for more details.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.route.v1.RouteHTTPHeaderActions" + "vsphere": { + "description": "vsphere contains settings specific to the VSphere infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.VSpherePlatformSpec" } } }, - "com.github.openshift.api.route.v1.RouteIngress": { - "description": "RouteIngress holds information about the places where a route is exposed.", + "com.github.openshift.api.config.v1.PlatformStatus": { + "description": "PlatformStatus holds the current status specific to the underlying infrastructure provider of the current cluster. Since these are used at status-level for the underlying cluster, it is supposed that only one of the status structs is set.", "type": "object", + "required": [ + "type" + ], "properties": { - "conditions": { - "description": "conditions is the state of the route, may be empty.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.route.v1.RouteIngressCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" + "alibabaCloud": { + "description": "alibabaCloud contains settings specific to the Alibaba Cloud infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.AlibabaCloudPlatformStatus" }, - "host": { - "description": "host is the host string under which the route is exposed; this value is required", - "type": "string" + "aws": { + "description": "aws contains settings specific to the Amazon Web Services infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.AWSPlatformStatus" }, - "routerCanonicalHostname": { - "description": "CanonicalHostname is the external host name for the router that can be used as a CNAME for the host requested for this route. This value is optional and may not be set in all cases.", - "type": "string" + "azure": { + "description": "azure contains settings specific to the Azure infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.AzurePlatformStatus" }, - "routerName": { - "description": "Name is a name chosen by the router to identify itself; this value is required", - "type": "string" + "baremetal": { + "description": "baremetal contains settings specific to the BareMetal platform.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.BareMetalPlatformStatus" }, - "wildcardPolicy": { - "description": "Wildcard policy is the wildcard policy that was allowed where this route is exposed.", - "type": "string" + "equinixMetal": { + "description": "equinixMetal contains settings specific to the Equinix Metal infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.EquinixMetalPlatformStatus" + }, + "external": { + "description": "external contains settings specific to the generic External infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.ExternalPlatformStatus" + }, + "gcp": { + "description": "gcp contains settings specific to the Google Cloud Platform infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.GCPPlatformStatus" + }, + "ibmcloud": { + "description": "ibmcloud contains settings specific to the IBMCloud infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.IBMCloudPlatformStatus" + }, + "kubevirt": { + "description": "kubevirt contains settings specific to the kubevirt infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.KubevirtPlatformStatus" + }, + "nutanix": { + "description": "nutanix contains settings specific to the Nutanix infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.NutanixPlatformStatus" + }, + "openstack": { + "description": "openstack contains settings specific to the OpenStack infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.OpenStackPlatformStatus" + }, + "ovirt": { + "description": "ovirt contains settings specific to the oVirt infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.OvirtPlatformStatus" + }, + "powervs": { + "description": "powervs contains settings specific to the Power Systems Virtual Servers infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.PowerVSPlatformStatus" + }, + "type": { + "description": "type is the underlying infrastructure provider for the cluster. This value controls whether infrastructure automation such as service load balancers, dynamic volume provisioning, machine creation and deletion, and other integrations are enabled. If None, no infrastructure automation is enabled. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.\n\nThis value will be synced with to the `status.platform` and `status.platformStatus.type`. Currently this value cannot be changed once set.", + "type": "string", + "default": "" + }, + "vsphere": { + "description": "vsphere contains settings specific to the VSphere infrastructure provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.VSpherePlatformStatus" } } }, - "com.github.openshift.api.route.v1.RouteIngressCondition": { - "description": "RouteIngressCondition contains details for the current condition of this route on a particular router.", + "com.github.openshift.api.config.v1.PolicyFulcioSubject": { + "description": "PolicyFulcioSubject defines the OIDC issuer and the email of the Fulcio authentication configuration.", "type": "object", "required": [ - "type", - "status" + "oidcIssuer", + "signedEmail" ], "properties": { - "lastTransitionTime": { - "description": "RFC 3339 date and time when this condition last transitioned", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "Human readable message indicating details about last transition.", - "type": "string" - }, - "reason": { - "description": "(brief) reason for the condition's last transition, and is usually a machine and human readable constant", - "type": "string" - }, - "status": { - "description": "status is the status of the condition. Can be True, False, Unknown.", + "oidcIssuer": { + "description": "oidcIssuer is a required filed contains the expected OIDC issuer. The oidcIssuer must be a valid URL and at most 2048 characters in length. It will be verified that the Fulcio-issued certificate contains a (Fulcio-defined) certificate extension pointing at this OIDC issuer URL. When Fulcio issues certificates, it includes a value based on an URL inside the client-provided ID token. Example: \"https://expected.OIDC.issuer/\"", "type": "string", "default": "" }, - "type": { - "description": "type is the type of the condition. Currently only Admitted or UnservableInFutureVersions.", + "signedEmail": { + "description": "signedEmail is a required field holds the email address that the Fulcio certificate is issued for. The signedEmail must be a valid email address and at most 320 characters in length. Example: \"expected-signing-user@example.com\"", "type": "string", "default": "" } } }, - "com.github.openshift.api.route.v1.RouteList": { - "description": "RouteList is a collection of Routes.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.PolicyIdentity": { + "description": "PolicyIdentity defines image identity the signature claims about the image. When omitted, the default matchPolicy is \"MatchRepoDigestOrExact\".", "type": "object", "required": [ - "items" + "matchPolicy" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of routes", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.route.v1.Route" - } + "exactRepository": { + "description": "exactRepository specifies the repository that must be exactly matched by the identity in the signature. exactRepository is required if matchPolicy is set to \"ExactRepository\". It is used to verify that the signature claims an identity matching this exact repository, rather than the original image identity.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.PolicyMatchExactRepository" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "matchPolicy": { + "description": "matchPolicy is a required filed specifies matching strategy to verify the image identity in the signature against the image scope. Allowed values are \"MatchRepoDigestOrExact\", \"MatchRepository\", \"ExactRepository\", \"RemapIdentity\". When omitted, the default value is \"MatchRepoDigestOrExact\". When set to \"MatchRepoDigestOrExact\", the identity in the signature must be in the same repository as the image identity if the image identity is referenced by a digest. Otherwise, the identity in the signature must be the same as the image identity. When set to \"MatchRepository\", the identity in the signature must be in the same repository as the image identity. When set to \"ExactRepository\", the exactRepository must be specified. The identity in the signature must be in the same repository as a specific identity specified by \"repository\". When set to \"RemapIdentity\", the remapIdentity must be specified. The signature must be in the same as the remapped image identity. Remapped image identity is obtained by replacing the \"prefix\" with the specified “signedPrefix” if the the image identity matches the specified remapPrefix.", + "type": "string", + "default": "" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "remapIdentity": { + "description": "remapIdentity specifies the prefix remapping rule for verifying image identity. remapIdentity is required if matchPolicy is set to \"RemapIdentity\". It is used to verify that the signature claims a different registry/repository prefix than the original image.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.PolicyMatchRemapIdentity" } - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "matchPolicy", + "fields-to-discriminateBy": { + "exactRepository": "PolicyMatchExactRepository", + "remapIdentity": "PolicyMatchRemapIdentity" + } + } + ] }, - "com.github.openshift.api.route.v1.RoutePort": { - "description": "RoutePort defines a port mapping from a router to an endpoint in the service endpoints.", + "com.github.openshift.api.config.v1.PolicyMatchExactRepository": { "type": "object", "required": [ - "targetPort" + "repository" ], "properties": { - "targetPort": { - "description": "The target port on pods selected by the service this route points to. If this is a string, it will be looked up as a named port in the target endpoints port list. Required", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + "repository": { + "description": "repository is the reference of the image identity to be matched. repository is required if matchPolicy is set to \"ExactRepository\". The value should be a repository name (by omitting the tag or digest) in a registry implementing the \"Docker Registry HTTP API V2\". For example, docker.io/library/busybox", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.route.v1.RouteSetHTTPHeader": { - "description": "RouteSetHTTPHeader specifies what value needs to be set on an HTTP header.", + "com.github.openshift.api.config.v1.PolicyMatchRemapIdentity": { "type": "object", "required": [ - "value" + "prefix", + "signedPrefix" ], "properties": { - "value": { - "description": "value specifies a header value. Dynamic values can be added. The value will be interpreted as an HAProxy format string as defined in http://cbonte.github.io/haproxy-dconv/2.6/configuration.html#8.2.6 and may use HAProxy's %[] syntax and otherwise must be a valid HTTP header value as defined in https://datatracker.ietf.org/doc/html/rfc7230#section-3.2. The value of this field must be no more than 16384 characters in length. Note that the total size of all net added headers *after* interpolating dynamic values must not exceed the value of spec.tuningOptions.headerBufferMaxRewriteBytes on the IngressController.", + "prefix": { + "description": "prefix is required if matchPolicy is set to \"RemapIdentity\". prefix is the prefix of the image identity to be matched. If the image identity matches the specified prefix, that prefix is replaced by the specified “signedPrefix” (otherwise it is used as unchanged and no remapping takes place). This is useful when verifying signatures for a mirror of some other repository namespace that preserves the vendor’s repository structure. The prefix and signedPrefix values can be either host[:port] values (matching exactly the same host[:port], string), repository namespaces, or repositories (i.e. they must not contain tags/digests), and match as prefixes of the fully expanded form. For example, docker.io/library/busybox (not busybox) to specify that single repository, or docker.io/library (not an empty string) to specify the parent namespace of docker.io/library/busybox.", + "type": "string", + "default": "" + }, + "signedPrefix": { + "description": "signedPrefix is required if matchPolicy is set to \"RemapIdentity\". signedPrefix is the prefix of the image identity to be matched in the signature. The format is the same as \"prefix\". The values can be either host[:port] values (matching exactly the same host[:port], string), repository namespaces, or repositories (i.e. they must not contain tags/digests), and match as prefixes of the fully expanded form. For example, docker.io/library/busybox (not busybox) to specify that single repository, or docker.io/library (not an empty string) to specify the parent namespace of docker.io/library/busybox.", "type": "string", "default": "" } } }, - "com.github.openshift.api.route.v1.RouteSpec": { - "description": "RouteSpec describes the hostname or path the route exposes, any security information, and one to four backends (services) the route points to. Requests are distributed among the backends depending on the weights assigned to each backend. When using roundrobin scheduling the portion of requests that go to each backend is the backend weight divided by the sum of all of the backend weights. When the backend has more than one endpoint the requests that end up on the backend are roundrobin distributed among the endpoints. Weights are between 0 and 256 with default 100. Weight 0 causes no requests to the backend. If all weights are zero the route will be considered to have no backends and return a standard 503 response.\n\nThe `tls` field is optional and allows specific certificates or behavior for the route. Routers typically configure a default certificate on a wildcard domain to terminate routes without explicit certificates, but custom hostnames usually must choose passthrough (send traffic directly to the backend via the TLS Server-Name- Indication field) or provide a certificate.", + "com.github.openshift.api.config.v1.PolicyRootOfTrust": { + "description": "PolicyRootOfTrust defines the root of trust based on the selected policyType.", "type": "object", "required": [ - "to" + "policyType" ], "properties": { - "alternateBackends": { - "description": "alternateBackends allows up to 3 additional backends to be assigned to the route. Only the Service kind is allowed, and it will be defaulted to Service. Use the weight field in RouteTargetReference object to specify relative preference.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.route.v1.RouteTargetReference" - }, - "x-kubernetes-list-map-keys": [ - "name", - "kind" - ], - "x-kubernetes-list-type": "map" - }, - "host": { - "description": "host is an alias/DNS that points to the service. Optional. If not specified a route name will typically be automatically chosen. Must follow DNS952 subdomain conventions.", - "type": "string" - }, - "httpHeaders": { - "description": "httpHeaders defines policy for HTTP headers.", - "$ref": "#/definitions/com.github.openshift.api.route.v1.RouteHTTPHeaders" - }, - "path": { - "description": "path that the router watches for, to route traffic for to the service. Optional", - "type": "string" - }, - "port": { - "description": "If specified, the port to be used by the router. Most routers will use all endpoints exposed by the service by default - set this value to instruct routers which port to use.", - "$ref": "#/definitions/com.github.openshift.api.route.v1.RoutePort" - }, - "subdomain": { - "description": "subdomain is a DNS subdomain that is requested within the ingress controller's domain (as a subdomain). If host is set this field is ignored. An ingress controller may choose to ignore this suggested name, in which case the controller will report the assigned name in the status.ingress array or refuse to admit the route. If this value is set and the server does not support this field host will be populated automatically. Otherwise host is left empty. The field may have multiple parts separated by a dot, but not all ingress controllers may honor the request. This field may not be changed after creation except by a user with the update routes/custom-host permission.\n\nExample: subdomain `frontend` automatically receives the router subdomain `apps.mycluster.com` to have a full hostname `frontend.apps.mycluster.com`.", - "type": "string" + "fulcioCAWithRekor": { + "description": "fulcioCAWithRekor defines the root of trust configuration based on the Fulcio certificate and the Rekor public key. fulcioCAWithRekor is required when policyType is FulcioCAWithRekor, and forbidden otherwise For more information about Fulcio and Rekor, please refer to the document at: https://github.com/sigstore/fulcio and https://github.com/sigstore/rekor", + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImagePolicyFulcioCAWithRekorRootOfTrust" }, - "tls": { - "description": "The tls field provides the ability to configure certificates and termination for the route.", - "$ref": "#/definitions/com.github.openshift.api.route.v1.TLSConfig" + "pki": { + "description": "pki defines the root of trust configuration based on Bring Your Own Public Key Infrastructure (BYOPKI) Root CA(s) and corresponding intermediate certificates. pki is required when policyType is PKI, and forbidden otherwise.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImagePolicyPKIRootOfTrust" }, - "to": { - "description": "to is an object the route should use as the primary backend. Only the Service kind is allowed, and it will be defaulted to Service. If the weight field (0-256 default 100) is set to zero, no traffic will be sent to this backend.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.route.v1.RouteTargetReference" + "policyType": { + "description": "policyType is a required field specifies the type of the policy for verification. This field must correspond to how the policy was generated. Allowed values are \"PublicKey\", \"FulcioCAWithRekor\", and \"PKI\". When set to \"PublicKey\", the policy relies on a sigstore publicKey and may optionally use a Rekor verification. When set to \"FulcioCAWithRekor\", the policy is based on the Fulcio certification and incorporates a Rekor verification. When set to \"PKI\", the policy is based on the certificates from Bring Your Own Public Key Infrastructure (BYOPKI).", + "type": "string", + "default": "" }, - "wildcardPolicy": { - "description": "Wildcard policy if any for the route. Currently only 'Subdomain' or 'None' is allowed.", - "type": "string" + "publicKey": { + "description": "publicKey defines the root of trust configuration based on a sigstore public key. Optionally include a Rekor public key for Rekor verification. publicKey is required when policyType is PublicKey, and forbidden otherwise.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.ImagePolicyPublicKeyRootOfTrust" } - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "policyType", + "fields-to-discriminateBy": { + "fulcioCAWithRekor": "FulcioCAWithRekor", + "pki": "PKI", + "publicKey": "PublicKey" + } + } + ] }, - "com.github.openshift.api.route.v1.RouteStatus": { - "description": "RouteStatus provides relevant info about the status of a route, including which routers acknowledge it.", + "com.github.openshift.api.config.v1.PowerVSPlatformSpec": { + "description": "PowerVSPlatformSpec holds the desired state of the IBM Power Systems Virtual Servers infrastructure provider. This only includes fields that can be modified in the cluster.", "type": "object", "properties": { - "ingress": { - "description": "ingress describes the places where the route may be exposed. The list of ingress points may contain duplicate Host or RouterName values. Routes are considered live once they are `Ready`", + "serviceEndpoints": { + "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of a Power VS service.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.route.v1.RouteIngress" + "$ref": "#/definitions/com.github.openshift.api.config.v1.PowerVSServiceEndpoint" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map" } } }, - "com.github.openshift.api.route.v1.RouteTargetReference": { - "description": "RouteTargetReference specifies the target that resolve into endpoints. Only the 'Service' kind is allowed. Use 'weight' field to emphasize one over others.", + "com.github.openshift.api.config.v1.PowerVSPlatformStatus": { + "description": "PowerVSPlatformStatus holds the current status of the IBM Power Systems Virtual Servers infrastrucutre provider.", "type": "object", "required": [ - "kind", - "name" + "region", + "zone" ], "properties": { - "kind": { - "description": "The kind of target that the route is referring to. Currently, only 'Service' is allowed", + "cisInstanceCRN": { + "description": "cisInstanceCRN is the CRN of the Cloud Internet Services instance managing the DNS zone for the cluster's base domain", + "type": "string" + }, + "dnsInstanceCRN": { + "description": "dnsInstanceCRN is the CRN of the DNS Services instance managing the DNS zone for the cluster's base domain", + "type": "string" + }, + "region": { + "description": "region holds the default Power VS region for new Power VS resources created by the cluster.", "type": "string", "default": "" }, - "name": { - "description": "name of the service/target that is being referred to. e.g. name of the service", + "resourceGroup": { + "description": "resourceGroup is the resource group name for new IBMCloud resources created for a cluster. The resource group specified here will be used by cluster-image-registry-operator to set up a COS Instance in IBMCloud for the cluster registry. More about resource groups can be found here: https://cloud.ibm.com/docs/account?topic=account-rgs. When omitted, the image registry operator won't be able to configure storage, which results in the image registry cluster operator not being in an available state.", "type": "string", "default": "" }, - "weight": { - "description": "weight as an integer between 0 and 256, default 100, that specifies the target's relative weight against other target reference objects. 0 suppresses requests to this backend.", - "type": "integer", - "format": "int32" + "serviceEndpoints": { + "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of a Power VS service.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.PowerVSServiceEndpoint" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map" + }, + "zone": { + "description": "zone holds the default zone for the new Power VS resources created by the cluster. Note: Currently only single-zone OCP clusters are supported", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.route.v1.RouterShard": { - "description": "RouterShard has information of a routing shard and is used to generate host names and routing table entries when a routing shard is allocated for a specific route. Caveat: This is WIP and will likely undergo modifications when sharding support is added.", + "com.github.openshift.api.config.v1.PowerVSServiceEndpoint": { + "description": "PowervsServiceEndpoint stores the configuration of a custom url to override existing defaults of PowerVS Services.", "type": "object", "required": [ - "shardName", - "dnsSuffix" + "name", + "url" ], "properties": { - "dnsSuffix": { - "description": "dnsSuffix for the shard ala: shard-1.v3.openshift.com", + "name": { + "description": "name is the name of the Power VS service. Few of the services are IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api ResourceController - https://cloud.ibm.com/apidocs/resource-controller/resource-controller Power Cloud - https://cloud.ibm.com/apidocs/power-cloud", "type": "string", "default": "" }, - "shardName": { - "description": "shardName uniquely identifies a router shard in the \"set\" of routers used for routing traffic to the services.", + "url": { + "description": "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.", "type": "string", "default": "" } } }, - "com.github.openshift.api.route.v1.TLSConfig": { - "description": "TLSConfig defines config used to secure a route and provide termination", + "com.github.openshift.api.config.v1.PrefixedClaimMapping": { + "description": "PrefixedClaimMapping configures a claim mapping that allows for an optional prefix.", "type": "object", - "required": [ - "termination" - ], "properties": { - "caCertificate": { - "description": "caCertificate provides the cert authority certificate contents", - "type": "string" - }, - "certificate": { - "description": "certificate provides certificate contents. This should be a single serving certificate, not a certificate chain. Do not include a CA certificate.", - "type": "string" - }, - "destinationCACertificate": { - "description": "destinationCACertificate provides the contents of the ca certificate of the final destination. When using reencrypt termination this file should be provided in order to have routers use it for health checks on the secure connection. If this field is not specified, the router may provide its own destination CA and perform hostname validation using the short service name (service.namespace.svc), which allows infrastructure generated certificates to automatically verify.", - "type": "string" - }, - "externalCertificate": { - "description": "externalCertificate provides certificate contents as a secret reference. This should be a single serving certificate, not a certificate chain. Do not include a CA certificate. The secret referenced should be present in the same namespace as that of the Route. Forbidden when `certificate` is set. The router service account needs to be granted with read-only access to this secret, please refer to openshift docs for additional details.", - "$ref": "#/definitions/com.github.openshift.api.route.v1.LocalObjectReference" - }, - "insecureEdgeTerminationPolicy": { - "description": "insecureEdgeTerminationPolicy indicates the desired behavior for insecure connections to a route. While each router may make its own decisions on which ports to expose, this is normally port 80.\n\nIf a route does not specify insecureEdgeTerminationPolicy, then the default behavior is \"None\".\n\n* Allow - traffic is sent to the server on the insecure port (edge/reencrypt terminations only).\n\n* None - no traffic is allowed on the insecure port (default).\n\n* Redirect - clients are redirected to the secure port.", - "type": "string" + "claim": { + "description": "claim is an optional field for specifying the JWT token claim that is used in the mapping. The value of this claim will be assigned to the field in which this mapping is associated. claim must not exceed 256 characters in length. When set to the empty string `\"\"`, this means that no named claim should be used for the group mapping. claim is required when the ExternalOIDCWithUpstreamParity feature gate is not enabled.", + "type": "string", + "default": "" }, - "key": { - "description": "key provides key file contents", + "expression": { + "description": "expression is an optional CEL expression used to derive group values from JWT claims.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length .\n\nWhen specified, claim must not be set or be explicitly set to the empty string (`\"\"`).", "type": "string" }, - "termination": { - "description": "termination indicates the TLS termination type.\n\n* edge - TLS termination is done by the router and http is used to communicate with the backend (default)\n\n* passthrough - Traffic is sent straight to the destination without the router providing TLS termination\n\n* reencrypt - TLS termination is done by the router and https is used to communicate with the backend\n\nNote: passthrough termination is incompatible with httpHeader actions", + "prefix": { + "description": "prefix is an optional field that configures the prefix that will be applied to the cluster identity attribute during the process of mapping JWT claims to cluster identity attributes.\n\nWhen omitted or set to an empty string (\"\"), no prefix is applied to the cluster identity attribute. Must not be set to a non-empty value when expression is set.\n\nExample: if `prefix` is set to \"myoidc:\" and the `claim` in JWT contains an array of strings \"a\", \"b\" and \"c\", the mapping will result in an array of string \"myoidc:a\", \"myoidc:b\" and \"myoidc:c\".", + "type": "string", + "default": "" + } + } + }, + "com.github.openshift.api.config.v1.ProfileCustomizations": { + "description": "ProfileCustomizations contains various parameters for modifying the default behavior of certain profiles", + "type": "object", + "properties": { + "dynamicResourceAllocation": { + "description": "dynamicResourceAllocation allows to enable or disable dynamic resource allocation within the scheduler. Dynamic resource allocation is an API for requesting and sharing resources between pods and containers inside a pod. Third-party resource drivers are responsible for tracking and allocating resources. Different kinds of resources support arbitrary parameters for defining requirements and initialization. Valid values are Enabled, Disabled and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is Disabled.", "type": "string", "default": "" } } }, - "com.github.openshift.api.samples.v1.Config": { - "description": "Config contains the configuration and detailed condition status for the Samples Operator.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.Project": { + "description": "Project holds cluster-wide information about Project. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "metadata", "spec" ], "properties": { @@ -41288,52 +6657,113 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { + "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.samples.v1.ConfigSpec" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ProjectSpec" }, "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.samples.v1.ConfigStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ProjectStatus" } } }, - "com.github.openshift.api.samples.v1.ConfigCondition": { - "description": "ConfigCondition captures various conditions of the Config as entries are processed.", + "com.github.openshift.api.config.v1.ProjectList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "type", - "status" + "metadata", + "items" ], "properties": { - "lastTransitionTime": { - "description": "lastTransitionTime is the last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "lastUpdateTime": { - "description": "lastUpdateTime is the last time this condition was updated.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "message is a human readable message indicating details about the transition.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "reason": { - "description": "reason is what caused the condition's last transition.", + "items": { + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.Project" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "status": { - "description": "status of the condition, one of True, False, Unknown.", + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + } + }, + "com.github.openshift.api.config.v1.ProjectSpec": { + "description": "ProjectSpec holds the project creation configuration.", + "type": "object", + "properties": { + "projectRequestMessage": { + "description": "projectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint", "type": "string", "default": "" }, - "type": { - "description": "type of condition.", + "projectRequestTemplate": { + "description": "projectRequestTemplate is the template to use for creating projects in response to projectrequest. This must point to a template in 'openshift-config' namespace. It is optional. If it is not specified, a default template is used.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.TemplateReference" + } + } + }, + "com.github.openshift.api.config.v1.ProjectStatus": { + "type": "object" + }, + "com.github.openshift.api.config.v1.PromQLClusterCondition": { + "description": "PromQLClusterCondition represents a cluster condition based on PromQL.", + "type": "object", + "required": [ + "promql" + ], + "properties": { + "promql": { + "description": "promql is a PromQL query classifying clusters. This query query should return a 1 in the match case and a 0 in the does-not-match case. Queries which return no time series, or which return values besides 0 or 1, are evaluation failures.", "type": "string", "default": "" } } }, - "com.github.openshift.api.samples.v1.ConfigList": { + "com.github.openshift.api.config.v1.Proxy": { + "description": "Proxy holds cluster-wide information on how to configure default proxies for the cluster. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "type": "object", + "required": [ + "spec" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec holds user-settable values for the proxy configuration", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ProxySpec" + }, + "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ProxyStatus" + } + } + }, + "com.github.openshift.api.config.v1.ProxyList": { "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ @@ -41349,7 +6779,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.samples.v1.Config" + "$ref": "#/definitions/com.github.openshift.api.config.v1.Proxy" } }, "kind": { @@ -41363,374 +6793,326 @@ } } }, - "com.github.openshift.api.samples.v1.ConfigSpec": { - "description": "ConfigSpec contains the desired configuration and state for the Samples Operator, controlling various behavior around the imagestreams and templates it creates/updates in the openshift namespace.", + "com.github.openshift.api.config.v1.ProxySpec": { + "description": "ProxySpec contains cluster proxy creation configuration.", "type": "object", "properties": { - "architectures": { - "description": "architectures determine which hardware architecture(s) to install, where x86_64, ppc64le, and s390x are the only supported choices currently.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "managementState": { - "description": "managementState is top level on/off type of switch for all operators. When \"Managed\", this operator processes config and manipulates the samples accordingly. When \"Unmanaged\", this operator ignores any updates to the resources it watches. When \"Removed\", it reacts that same wasy as it does if the Config object is deleted, meaning any ImageStreams or Templates it manages (i.e. it honors the skipped lists) and the registry secret are deleted, along with the ConfigMap in the operator's namespace that represents the last config used to manipulate the samples,", + "httpProxy": { + "description": "httpProxy is the URL of the proxy for HTTP requests. Empty means unset and will not result in an env var.", "type": "string" }, - "samplesRegistry": { - "description": "samplesRegistry allows for the specification of which registry is accessed by the ImageStreams for their image content. Defaults on the content in https://github.com/openshift/library that are pulled into this github repository, but based on our pulling only ocp content it typically defaults to registry.redhat.io.", + "httpsProxy": { + "description": "httpsProxy is the URL of the proxy for HTTPS requests. Empty means unset and will not result in an env var.", "type": "string" }, - "skippedHelmCharts": { - "description": "skippedHelmCharts specifies names of helm charts that should NOT be managed. Admins can use this to allow them to delete content they don’t want. They will still have to MANUALLY DELETE the content but the operator will not recreate(or update) anything listed here. Few examples of the name of helmcharts which can be skipped are 'redhat-redhat-perl-imagestreams','redhat-redhat-nodejs-imagestreams','redhat-nginx-imagestreams', 'redhat-redhat-ruby-imagestreams','redhat-redhat-python-imagestreams','redhat-redhat-php-imagestreams', 'redhat-httpd-imagestreams','redhat-redhat-dotnet-imagestreams'. Rest of the names can be obtained from openshift console --> helmcharts -->installed helmcharts. This will display the list of all the 12 helmcharts(of imagestreams)being installed by Samples Operator. The skippedHelmCharts must be a valid Kubernetes resource name. May contain only lowercase alphanumeric characters, hyphens and periods, and each period separated segment must begin and end with an alphanumeric character. It must be non-empty and at most 253 characters in length", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "noProxy": { + "description": "noProxy is a comma-separated list of hostnames and/or CIDRs and/or IPs for which the proxy should not be used. Empty means unset and will not result in an env var.", + "type": "string" }, - "skippedImagestreams": { - "description": "skippedImagestreams specifies names of image streams that should NOT be created/updated. Admins can use this to allow them to delete content they don’t want. They will still have to manually delete the content but the operator will not recreate(or update) anything listed here.", + "readinessEndpoints": { + "description": "readinessEndpoints is a list of endpoints used to verify readiness of the proxy.", "type": "array", "items": { "type": "string", "default": "" } }, - "skippedTemplates": { - "description": "skippedTemplates specifies names of templates that should NOT be created/updated. Admins can use this to allow them to delete content they don’t want. They will still have to manually delete the content but the operator will not recreate(or update) anything listed here.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "trustedCA": { + "description": "trustedCA is a reference to a ConfigMap containing a CA certificate bundle. The trustedCA field should only be consumed by a proxy validator. The validator is responsible for reading the certificate bundle from the required key \"ca-bundle.crt\", merging it with the system default trust bundle, and writing the merged trust bundle to a ConfigMap named \"trusted-ca-bundle\" in the \"openshift-config-managed\" namespace. Clients that expect to make proxy connections must use the trusted-ca-bundle for all HTTPS requests to the proxy, and may use the trusted-ca-bundle for non-proxy HTTPS requests as well.\n\nThe namespace for the ConfigMap referenced by trustedCA is \"openshift-config\". Here is an example ConfigMap (in yaml):\n\napiVersion: v1 kind: ConfigMap metadata:\n name: user-ca-bundle\n namespace: openshift-config\n data:\n ca-bundle.crt: |\n -----BEGIN CERTIFICATE-----\n Custom CA certificate bundle.\n -----END CERTIFICATE-----", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" + } + } + }, + "com.github.openshift.api.config.v1.ProxyStatus": { + "description": "ProxyStatus shows current known state of the cluster proxy.", + "type": "object", + "properties": { + "httpProxy": { + "description": "httpProxy is the URL of the proxy for HTTP requests.", + "type": "string" + }, + "httpsProxy": { + "description": "httpsProxy is the URL of the proxy for HTTPS requests.", + "type": "string" + }, + "noProxy": { + "description": "noProxy is a comma-separated list of hostnames and/or CIDRs for which the proxy should not be used.", + "type": "string" + } + } + }, + "com.github.openshift.api.config.v1.RegistryLocation": { + "description": "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.", + "type": "object", + "required": [ + "domainName" + ], + "properties": { + "domainName": { + "description": "domainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.", + "type": "string", + "default": "" + }, + "insecure": { + "description": "insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.", + "type": "boolean" } } }, - "com.github.openshift.api.samples.v1.ConfigStatus": { - "description": "ConfigStatus contains the actual configuration in effect, as well as various details that describe the state of the Samples Operator.", + "com.github.openshift.api.config.v1.RegistrySources": { + "description": "RegistrySources holds cluster-wide information about how to handle the registries config.", "type": "object", "properties": { - "architectures": { - "description": "architectures determine which hardware architecture(s) to install, where x86_64 and ppc64le are the supported choices.", + "allowedRegistries": { + "description": "allowedRegistries are the only registries permitted for image pull and push actions. All other registries are denied. Each entry must be a valid registry scope in the format hostname[:port][/path], optionally prefixed with \"*.\" for wildcard subdomains (e.g., \"*.example.com\"). The hostname must consist of valid DNS labels separated by dots, where each label contains only alphanumeric characters and hyphens and does not start or end with a hyphen. Entries must not be empty, must not include tags (e.g., \":latest\") or digests (e.g., \"@sha256:...\"), and must be at most 256 characters in length. The list may contain at most 1024 entries.\n\nOnly one of BlockedRegistries or AllowedRegistries may be set.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "x-kubernetes-list-type": "atomic" }, - "conditions": { - "description": "conditions represents the available maintenance status of the sample imagestreams and templates.", + "blockedRegistries": { + "description": "blockedRegistries cannot be used for image pull and push actions. All other registries are permitted. Each entry must be a valid registry scope in the format hostname[:port][/path], optionally prefixed with \"*.\" for wildcard subdomains (e.g., \"*.example.com\"). The hostname must consist of valid DNS labels separated by dots, where each label contains only alphanumeric characters and hyphens and does not start or end with a hyphen. Entries must not be empty, must not include tags (e.g., \":latest\") or digests (e.g., \"@sha256:...\"), and must be at most 256 characters in length. The list may contain at most 1024 entries.\n\nOnly one of BlockedRegistries or AllowedRegistries may be set.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.samples.v1.ConfigCondition" + "type": "string", + "default": "" }, - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "managementState": { - "description": "managementState reflects the current operational status of the on/off switch for the operator. This operator compares the ManagementState as part of determining that we are turning the operator back on (i.e. \"Managed\") when it was previously \"Unmanaged\".", - "type": "string", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "samplesRegistry": { - "description": "samplesRegistry allows for the specification of which registry is accessed by the ImageStreams for their image content. Defaults on the content in https://github.com/openshift/library that are pulled into this github repository, but based on our pulling only ocp content it typically defaults to registry.redhat.io.", - "type": "string", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "x-kubernetes-list-type": "atomic" }, - "skippedImagestreams": { - "description": "skippedImagestreams specifies names of image streams that should NOT be created/updated. Admins can use this to allow them to delete content they don’t want. They will still have to manually delete the content but the operator will not recreate(or update) anything listed here.", + "containerRuntimeSearchRegistries": { + "description": "containerRuntimeSearchRegistries are registries that will be searched when pulling images that do not have fully qualified domains in their pull specs. Registries will be searched in the order provided in the list. Note: this search list only works with the container runtime, i.e CRI-O. Will NOT work with builds or imagestream imports.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "x-kubernetes-list-type": "set" }, - "skippedTemplates": { - "description": "skippedTemplates specifies names of templates that should NOT be created/updated. Admins can use this to allow them to delete content they don’t want. They will still have to manually delete the content but the operator will not recreate(or update) anything listed here.", + "insecureRegistries": { + "description": "insecureRegistries are registries which do not have a valid TLS certificates or only support HTTP connections. Each entry must be a valid registry scope in the format hostname[:port][/path], optionally prefixed with \"*.\" for wildcard subdomains (e.g., \"*.example.com\"). The hostname must consist of valid DNS labels separated by dots, where each label contains only alphanumeric characters and hyphens and does not start or end with a hyphen. Entries must not be empty, must not include tags (e.g., \":latest\") or digests (e.g., \"@sha256:...\"), and must be at most 256 characters in length. The list may contain at most 1024 entries.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "version": { - "description": "version is the value of the operator's payload based version indicator when it was last successfully processed", - "type": "string", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "x-kubernetes-list-type": "atomic" } } }, - "com.github.openshift.api.security.v1.AllowedFlexVolume": { - "description": "AllowedFlexVolume represents a single Flexvolume that is allowed to be used.", + "com.github.openshift.api.config.v1.Release": { + "description": "Release represents an OpenShift release image and associated metadata.", "type": "object", "required": [ - "driver" + "version", + "image" ], "properties": { - "driver": { - "description": "driver is the name of the Flexvolume driver.", - "type": "string", - "default": "" - } - } - }, - "com.github.openshift.api.security.v1.FSGroupStrategyOptions": { - "description": "FSGroupStrategyOptions defines the strategy type and options used to create the strategy.", - "type": "object", - "properties": { - "ranges": { - "description": "ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end.", + "architecture": { + "description": "architecture is an optional field that indicates the value of the cluster architecture. In this context cluster architecture means either a single architecture or a multi architecture. Valid values are 'Multi' and empty.", + "type": "string" + }, + "channels": { + "description": "channels is the set of Cincinnati channels to which the release currently belongs.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.security.v1.IDRange" + "type": "string", + "default": "" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-type": "set" }, - "type": { - "description": "type is the strategy that will dictate what FSGroup is used in the SecurityContext.", + "image": { + "description": "image is a container image location that contains the update. When this field is part of spec, image is optional if version is specified and the availableUpdates field contains a matching version.", + "type": "string", + "default": "" + }, + "url": { + "description": "url contains information about this release. This URL is set by the 'url' metadata property on a release or the metadata returned by the update API and should be displayed as a link in user interfaces. The URL field may not be set for test or nightly releases.", "type": "string" - } - } - }, - "com.github.openshift.api.security.v1.IDRange": { - "description": "IDRange provides a min/max of an allowed range of IDs.", - "type": "object", - "properties": { - "max": { - "description": "max is the end of the range, inclusive.", - "type": "integer", - "format": "int64" }, - "min": { - "description": "min is the start of the range, inclusive.", - "type": "integer", - "format": "int64" + "version": { + "description": "version is a semantic version identifying the update version. When this field is part of spec, version is optional if image is specified.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.security.v1.PodSecurityPolicyReview": { - "description": "PodSecurityPolicyReview checks which service accounts (not users, since that would be cluster-wide) can create the `PodTemplateSpec` in question.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.RemoteConnectionInfo": { + "description": "RemoteConnectionInfo holds information necessary for establishing a remote connection", "type": "object", "required": [ - "spec" + "url", + "ca", + "certFile", + "keyFile" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "ca": { + "description": "ca is the CA for verifying TLS connections", + "type": "string", + "default": "" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "certFile": { + "description": "certFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" }, - "spec": { - "description": "spec is the PodSecurityPolicy to check.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.security.v1.PodSecurityPolicyReviewSpec" + "keyFile": { + "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "type": "string", + "default": "" }, - "status": { - "description": "status represents the current information/status for the PodSecurityPolicyReview.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.security.v1.PodSecurityPolicyReviewStatus" + "url": { + "description": "url is the remote URL to connect to", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.security.v1.PodSecurityPolicyReviewSpec": { - "description": "PodSecurityPolicyReviewSpec defines specification for PodSecurityPolicyReview", + "com.github.openshift.api.config.v1.RepositoryDigestMirrors": { + "description": "RepositoryDigestMirrors holds cluster-wide information about how to handle mirrors in the registries config.", "type": "object", "required": [ - "template" + "source" ], "properties": { - "serviceAccountNames": { - "description": "serviceAccountNames is an optional set of ServiceAccounts to run the check with. If serviceAccountNames is empty, the template.spec.serviceAccountName is used, unless it's empty, in which case \"default\" is used instead. If serviceAccountNames is specified, template.spec.serviceAccountName is ignored.", + "allowMirrorByTags": { + "description": "allowMirrorByTags if true, the mirrors can be used to pull the images that are referenced by their tags. Default is false, the mirrors only work when pulling the images that are referenced by their digests. Pulling images by tag can potentially yield different images, depending on which endpoint we pull from. Forcing digest-pulls for mirrors avoids that issue.", + "type": "boolean" + }, + "mirrors": { + "description": "mirrors is zero or more repositories that may also contain the same images. If the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec. No mirror will be configured. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. Other cluster configuration, including (but not limited to) other repositoryDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering.", "type": "array", "items": { "type": "string", "default": "" - } + }, + "x-kubernetes-list-type": "set" }, - "template": { - "description": "template is the PodTemplateSpec to check. The template.spec.serviceAccountName field is used if serviceAccountNames is empty, unless the template.spec.serviceAccountName is empty, in which case \"default\" is used. If serviceAccountNames is specified, template.spec.serviceAccountName is ignored.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" - } - } - }, - "com.github.openshift.api.security.v1.PodSecurityPolicyReviewStatus": { - "description": "PodSecurityPolicyReviewStatus represents the status of PodSecurityPolicyReview.", - "type": "object", - "properties": { - "allowedServiceAccounts": { - "description": "allowedServiceAccounts returns the list of service accounts in *this* namespace that have the power to create the PodTemplateSpec.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.security.v1.ServiceAccountPodSecurityPolicyReviewStatus" - } + "source": { + "description": "source is the repository that users refer to, e.g. in image pull specifications.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.security.v1.PodSecurityPolicySelfSubjectReview": { - "description": "PodSecurityPolicySelfSubjectReview checks whether this user/SA tuple can create the PodTemplateSpec\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.RequestHeaderIdentityProvider": { + "description": "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials", "type": "object", "required": [ - "spec" + "loginURL", + "challengeURL", + "ca", + "headers", + "preferredUsernameHeaders", + "nameHeaders", + "emailHeaders" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "ca": { + "description": "ca is a required reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. Specifically, it allows verification of incoming requests to prevent header spoofing. The key \"ca.crt\" is used to locate the data. If the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. The namespace for this config map is openshift-config.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" }, - "spec": { - "description": "spec defines specification the PodSecurityPolicySelfSubjectReview.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.security.v1.PodSecurityPolicySelfSubjectReviewSpec" + "challengeURL": { + "description": "challengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here. ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}\nRequired when challenge is set to true.", + "type": "string", + "default": "" }, - "status": { - "description": "status represents the current information/status for the PodSecurityPolicySelfSubjectReview.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.security.v1.PodSecurityPolicySubjectReviewStatus" - } - } - }, - "com.github.openshift.api.security.v1.PodSecurityPolicySelfSubjectReviewSpec": { - "description": "PodSecurityPolicySelfSubjectReviewSpec contains specification for PodSecurityPolicySelfSubjectReview.", - "type": "object", - "required": [ - "template" - ], - "properties": { - "template": { - "description": "template is the PodTemplateSpec to check.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" - } - } - }, - "com.github.openshift.api.security.v1.PodSecurityPolicySubjectReview": { - "description": "PodSecurityPolicySubjectReview checks whether a particular user/SA tuple can create the PodTemplateSpec.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "clientCommonNames": { + "description": "clientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "emailHeaders": { + "description": "emailHeaders is the set of headers to check for the email address", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "headers": { + "description": "headers is the set of headers to check for identity information", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "spec": { - "description": "spec defines specification for the PodSecurityPolicySubjectReview.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.security.v1.PodSecurityPolicySubjectReviewSpec" + "loginURL": { + "description": "loginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}\nRequired when login is set to true.", + "type": "string", + "default": "" }, - "status": { - "description": "status represents the current information/status for the PodSecurityPolicySubjectReview.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.security.v1.PodSecurityPolicySubjectReviewStatus" + "nameHeaders": { + "description": "nameHeaders is the set of headers to check for the display name", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "preferredUsernameHeaders": { + "description": "preferredUsernameHeaders is the set of headers to check for the preferred username", + "type": "array", + "items": { + "type": "string", + "default": "" + } } } }, - "com.github.openshift.api.security.v1.PodSecurityPolicySubjectReviewSpec": { - "description": "PodSecurityPolicySubjectReviewSpec defines specification for PodSecurityPolicySubjectReview", + "com.github.openshift.api.config.v1.RequiredHSTSPolicy": { "type": "object", "required": [ - "template" + "domainPatterns", + "maxAge" ], "properties": { - "groups": { - "description": "groups is the groups you're testing for.", + "domainPatterns": { + "description": "domainPatterns is a list of domains for which the desired HSTS annotations are required. If domainPatterns is specified and a route is created with a spec.host matching one of the domains, the route must specify the HSTS Policy components described in the matching RequiredHSTSPolicy.\n\nThe use of wildcards is allowed like this: *.foo.com matches everything under foo.com. foo.com only matches foo.com, so to cover foo.com and everything under it, you must specify *both*.", "type": "array", "items": { "type": "string", "default": "" } }, - "template": { - "description": "template is the PodTemplateSpec to check. If template.spec.serviceAccountName is empty it will not be defaulted. If its non-empty, it will be checked.", + "includeSubDomainsPolicy": { + "description": "includeSubDomainsPolicy means the HSTS Policy should apply to any subdomains of the host's domain name. Thus, for the host bar.foo.com, if includeSubDomainsPolicy was set to RequireIncludeSubDomains: - the host app.bar.foo.com would inherit the HSTS Policy of bar.foo.com - the host bar.foo.com would inherit the HSTS Policy of bar.foo.com - the host foo.com would NOT inherit the HSTS Policy of bar.foo.com - the host def.foo.com would NOT inherit the HSTS Policy of bar.foo.com", + "type": "string" + }, + "maxAge": { + "description": "maxAge is the delta time range in seconds during which hosts are regarded as HSTS hosts. If set to 0, it negates the effect, and hosts are removed as HSTS hosts. If set to 0 and includeSubdomains is specified, all subdomains of the host are also removed as HSTS hosts. maxAge is a time-to-live value, and if this policy is not refreshed on a client, the HSTS policy will eventually expire on that client.", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" + "$ref": "#/definitions/com.github.openshift.api.config.v1.MaxAgePolicy" }, - "user": { - "description": "user is the user you're testing for. If you specify \"user\" but not \"group\", then is it interpreted as \"What if user were not a member of any groups. If user and groups are empty, then the check is performed using *only* the serviceAccountName in the template.", - "type": "string" - } - } - }, - "com.github.openshift.api.security.v1.PodSecurityPolicySubjectReviewStatus": { - "description": "PodSecurityPolicySubjectReviewStatus contains information/status for PodSecurityPolicySubjectReview.", - "type": "object", - "properties": { - "allowedBy": { - "description": "allowedBy is a reference to the rule that allows the PodTemplateSpec. A rule can be a SecurityContextConstraint or a PodSecurityPolicy A `nil`, indicates that it was denied.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "namespaceSelector": { + "description": "namespaceSelector specifies a label selector such that the policy applies only to those routes that are in namespaces with labels that match the selector, and are in one of the DomainPatterns. Defaults to the empty LabelSelector, which matches everything.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, - "reason": { - "description": "A machine-readable description of why this operation is in the \"Failure\" status. If this value is empty there is no information available.", + "preloadPolicy": { + "description": "preloadPolicy directs the client to include hosts in its host preload list so that it never needs to do an initial load to get the HSTS header (note that this is not defined in RFC 6797 and is therefore client implementation-dependent).", "type": "string" - }, - "template": { - "description": "template is the PodTemplateSpec after the defaulting is applied.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" } } }, - "com.github.openshift.api.security.v1.RangeAllocation": { - "description": "RangeAllocation is used so we can easily expose a RangeAllocation typed for security group\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.Scheduler": { + "description": "Scheduler holds cluster-wide config information to run the Kubernetes Scheduler and influence its placement decisions. The canonical name for this config is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "range", - "data" + "spec" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "data": { - "description": "data is a byte array representing the serialized state of a range allocation. It is a bitmap with each bit set to one to represent a range is taken.", - "type": "string", - "format": "byte" - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" @@ -41740,17 +7122,23 @@ "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "range": { - "description": "range is a string representing a unique label for a range of uids, \"1000000000-2000000000/10000\".", - "type": "string", - "default": "" + "spec": { + "description": "spec holds user settable values for configuration", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.SchedulerSpec" + }, + "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.SchedulerStatus" } } }, - "com.github.openshift.api.security.v1.RangeAllocationList": { - "description": "RangeAllocationList is a list of RangeAllocations objects\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.SchedulerList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ + "metadata", "items" ], "properties": { @@ -41759,11 +7147,10 @@ "type": "string" }, "items": { - "description": "List of RangeAllocations.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.security.v1.RangeAllocation" + "$ref": "#/definitions/com.github.openshift.api.config.v1.Scheduler" } }, "kind": { @@ -41777,525 +7164,352 @@ } } }, - "com.github.openshift.api.security.v1.RunAsUserStrategyOptions": { - "description": "RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.", + "com.github.openshift.api.config.v1.SchedulerSpec": { "type": "object", "properties": { - "type": { - "description": "type is the strategy that will dictate what RunAsUser is used in the SecurityContext.", + "defaultNodeSelector": { + "description": "defaultNodeSelector helps set the cluster-wide default node selector to restrict pod placement to specific nodes. This is applied to the pods created in all namespaces and creates an intersection with any existing nodeSelectors already set on a pod, additionally constraining that pod's selector. For example, defaultNodeSelector: \"type=user-node,region=east\" would set nodeSelector field in pod spec to \"type=user-node,region=east\" to all pods created in all namespaces. Namespaces having project-wide node selectors won't be impacted even if this field is set. This adds an annotation section to the namespace. For example, if a new namespace is created with node-selector='type=user-node,region=east', the annotation openshift.io/node-selector: type=user-node,region=east gets added to the project. When the openshift.io/node-selector annotation is set on the project the value is used in preference to the value we are setting for defaultNodeSelector field. For instance, openshift.io/node-selector: \"type=user-node,region=west\" means that the default of \"type=user-node,region=east\" set in defaultNodeSelector would not be applied.", "type": "string" }, - "uid": { - "description": "uid is the user id that containers must run as. Required for the MustRunAs strategy if not using namespace/service account allocated uids.", - "type": "integer", - "format": "int64" + "mastersSchedulable": { + "description": "mastersSchedulable allows masters nodes to be schedulable. When this flag is turned on, all the master nodes in the cluster will be made schedulable, so that workload pods can run on them. The default value for this field is false, meaning none of the master nodes are schedulable. Important Note: Once the workload pods start running on the master nodes, extreme care must be taken to ensure that cluster-critical control plane components are not impacted. Please turn on this field after doing due diligence.", + "type": "boolean", + "default": false }, - "uidRangeMax": { - "description": "uidRangeMax defines the max value for a strategy that allocates by range.", - "type": "integer", - "format": "int64" + "policy": { + "description": "DEPRECATED: the scheduler Policy API has been deprecated and will be removed in a future release. policy is a reference to a ConfigMap containing scheduler policy which has user specified predicates and priorities. If this ConfigMap is not available scheduler will default to use DefaultAlgorithmProvider. The namespace for this configmap is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" }, - "uidRangeMin": { - "description": "uidRangeMin defines the min value for a strategy that allocates by range.", - "type": "integer", - "format": "int64" + "profile": { + "description": "profile sets which scheduling profile should be set in order to configure scheduling decisions for new pods.\n\nValid values are \"LowNodeUtilization\", \"HighNodeUtilization\", \"NoScoring\" Defaults to \"LowNodeUtilization\"", + "type": "string" + }, + "profileCustomizations": { + "description": "profileCustomizations contains configuration for modifying the default behavior of existing scheduler profiles. Deprecated: no longer needed, since DRA is GA starting with 4.21, and is enabled by' default in the cluster, this field will be removed in 4.24.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ProfileCustomizations" } } }, - "com.github.openshift.api.security.v1.SELinuxContextStrategyOptions": { - "description": "SELinuxContextStrategyOptions defines the strategy type and any options used to create the strategy.", + "com.github.openshift.api.config.v1.SchedulerStatus": { + "type": "object" + }, + "com.github.openshift.api.config.v1.SecretNameReference": { + "description": "SecretNameReference references a secret in a specific namespace. The namespace must be specified at the point of use.", "type": "object", + "required": [ + "name" + ], "properties": { - "seLinuxOptions": { - "description": "seLinuxOptions required to run as; required for MustRunAs", - "$ref": "#/definitions/io.k8s.api.core.v1.SELinuxOptions" - }, - "type": { - "description": "type is the strategy that will dictate what SELinux context is used in the SecurityContext.", - "type": "string" + "name": { + "description": "name is the metadata.name of the referenced secret", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.security.v1.SecurityContextConstraints": { - "description": "SecurityContextConstraints governs the ability to make requests that affect the SecurityContext that will be applied to a container. For historical reasons SCC was exposed under the core Kubernetes API group. That exposure is deprecated and will be removed in a future release - users should instead use the security.openshift.io group to manage SecurityContextConstraints.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.ServingInfo": { + "description": "ServingInfo holds information about serving web pages", "type": "object", "required": [ - "priority", - "allowPrivilegedContainer", - "defaultAddCapabilities", - "requiredDropCapabilities", - "allowedCapabilities", - "allowHostDirVolumePlugin", - "volumes", - "allowHostNetwork", - "allowHostPorts", - "allowHostPID", - "allowHostIPC", - "readOnlyRootFilesystem" + "bindAddress", + "bindNetwork", + "certFile", + "keyFile" ], "properties": { - "allowHostDirVolumePlugin": { - "description": "allowHostDirVolumePlugin determines if the policy allow containers to use the HostDir volume plugin", - "type": "boolean", - "default": false - }, - "allowHostIPC": { - "description": "allowHostIPC determines if the policy allows host ipc in the containers.", - "type": "boolean", - "default": false - }, - "allowHostNetwork": { - "description": "allowHostNetwork determines if the policy allows the use of HostNetwork in the pod spec.", - "type": "boolean", - "default": false - }, - "allowHostPID": { - "description": "allowHostPID determines if the policy allows host pid in the containers.", - "type": "boolean", - "default": false - }, - "allowHostPorts": { - "description": "allowHostPorts determines if the policy allows host ports in the containers.", - "type": "boolean", - "default": false - }, - "allowPrivilegeEscalation": { - "description": "allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.", - "type": "boolean" - }, - "allowPrivilegedContainer": { - "description": "allowPrivilegedContainer determines if a container can request to be run as privileged.", - "type": "boolean", - "default": false - }, - "allowedCapabilities": { - "description": "allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field maybe added at the pod author's discretion. You must not list a capability in both AllowedCapabilities and RequiredDropCapabilities. To allow all capabilities you may use '*'.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "allowedFlexVolumes": { - "description": "allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the \"Volumes\" field.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.security.v1.AllowedFlexVolume" - }, - "x-kubernetes-list-type": "atomic" - }, - "allowedUnsafeSysctls": { - "description": "allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in \"*\" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.\n\nExamples: e.g. \"foo/*\" allows \"foo/bar\", \"foo/baz\", etc. e.g. \"foo.*\" allows \"foo.bar\", \"foo.baz\", etc.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "defaultAddCapabilities": { - "description": "defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both DefaultAddCapabilities and RequiredDropCapabilities.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "defaultAllowPrivilegeEscalation": { - "description": "defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.", - "type": "boolean" + "bindAddress": { + "description": "bindAddress is the ip:port to serve on", + "type": "string", + "default": "" }, - "forbiddenSysctls": { - "description": "forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in \"*\" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.\n\nExamples: e.g. \"foo/*\" forbids \"foo/bar\", \"foo/baz\", etc. e.g. \"foo.*\" forbids \"foo.bar\", \"foo.baz\", etc.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "bindNetwork": { + "description": "bindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", + "type": "string", + "default": "" }, - "fsGroup": { - "description": "fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.security.v1.FSGroupStrategyOptions" + "certFile": { + "description": "certFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" }, - "groups": { - "description": "The groups that have permission to use this security context constraints", + "cipherSuites": { + "description": "cipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", "type": "array", "items": { "type": "string", "default": "" - }, - "x-kubernetes-list-type": "atomic" + } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "clientCA": { + "description": "clientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", "type": "string" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "priority": { - "description": "priority influences the sort order of SCCs when evaluating which SCCs to try first for a given pod request based on access in the Users and Groups fields. The higher the int, the higher priority. An unset value is considered a 0 priority. If scores for multiple SCCs are equal they will be sorted from most restrictive to least restrictive. If both priorities and restrictions are equal the SCCs will be sorted by name.", - "type": "integer", - "format": "int32" - }, - "readOnlyRootFilesystem": { - "description": "readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the SCC should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.", - "type": "boolean", - "default": false - }, - "requiredDropCapabilities": { - "description": "requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "runAsUser": { - "description": "runAsUser is the strategy that will dictate what RunAsUser is used in the SecurityContext.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.security.v1.RunAsUserStrategyOptions" - }, - "seLinuxContext": { - "description": "seLinuxContext is the strategy that will dictate what labels will be set in the SecurityContext.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.security.v1.SELinuxContextStrategyOptions" - }, - "seccompProfiles": { - "description": "seccompProfiles lists the allowed profiles that may be set for the pod or container's seccomp annotations. An unset (nil) or empty value means that no profiles may be specified by the pod or container.\tThe wildcard '*' may be used to allow all profiles. When used to generate a value for a pod the first non-wildcard profile will be used as the default.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "supplementalGroups": { - "description": "supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.security.v1.SupplementalGroupsStrategyOptions" - }, - "userNamespaceLevel": { - "description": "userNamespaceLevel determines if the policy allows host users in containers. Valid values are \"AllowHostLevel\", \"RequirePodLevel\", and omitted. When \"AllowHostLevel\" is set, a pod author may set `hostUsers` to either `true` or `false`. When \"RequirePodLevel\" is set, a pod author must set `hostUsers` to `false`. When omitted, the default value is \"AllowHostLevel\".", + "keyFile": { + "description": "keyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", "type": "string", - "default": "AllowHostLevel" + "default": "" }, - "users": { - "description": "The users who have permissions to use this security context constraints", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "minTLSVersion": { + "description": "minTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", + "type": "string" }, - "volumes": { - "description": "volumes is a white list of allowed volume plugins. FSType corresponds directly with the field names of a VolumeSource (azureFile, configMap, emptyDir). To allow all volumes you may use \"*\". To allow no volumes, set to [\"none\"].", + "namedCertificates": { + "description": "namedCertificates is a list of certificates to use to secure requests to specific hostnames", "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.NamedCertificate" + } + } + } + }, + "com.github.openshift.api.config.v1.SignatureStore": { + "description": "SignatureStore represents the URL of custom Signature Store", + "type": "object", + "required": [ + "url" + ], + "properties": { + "ca": { + "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the signature store is not honored. If the specified ca data is not valid, the signature store is not honored. If empty, we fall back to the CA configured via Proxy, which is appended to the default system roots. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" + }, + "url": { + "description": "url contains the upstream custom signature store URL. url should be a valid absolute http/https URI of an upstream signature store as per rfc1738. This must be provided and cannot be empty.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.security.v1.SecurityContextConstraintsList": { - "description": "SecurityContextConstraintsList is a list of SecurityContextConstraints objects\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.SourceURL": { + "description": "SourceURL configures the options used to build the URL that is queried for external claims.", "type": "object", "required": [ - "items" + "hostname", + "pathExpression" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "hostname": { + "description": "hostname is a required hostname for which the external claims are located.\n\nIt must be a valid DNS subdomain name as per RFC1123.\n\nThis means that it must start and end with a lowercase alphanumeric character, must only consist of lowercase alphanumeric characters, '-', and '.'. hostname may optionally specify a port in the format ':{port}'. If a port is specified it must not exceed 65535.\n\nhostname must be at least 1 character in length. When specifying a port, hostname must not exceed 259 characters in length. When not specifying a port, hostname must not exceed 253 characters in length.", "type": "string" }, - "items": { - "description": "List of security context constraints.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.security.v1.SecurityContextConstraints" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "pathExpression": { + "description": "pathExpression is a required CEL expression that returns a list of string values used to construct the URL path. Claims from the token used for the request to the kube-apiserver are made available via the `claims` variable. expression must be at least 1 character in length and must not exceed 1024 characters in length.\n\nValues in the returned list will be joined with the hostname using a forward slash (`/`) as a separator. Values in the returned list do not need to include the forward slash. If a forward slash is included in a returned value, it will be encoded as `%2F`.\n\nExample of a static path configuration:\n\n pathExpression: ['realms', 'k8s', 'protocol', 'openid-connect', 'userinfo']\n\nThe above example would resolve to the path: '/realms/k8s/protocol/openid-connect/userinfo'\n\nExample of a dynamic path configuration:\n\n pathExpression: \"['admin', 'realms', 'k8s', 'users'] + [claims.sub] + ['groups']\"\n\nAssuming 'claims.sub' is set to '12345', the above example would resolve to the path: '/admin/realms/k8s/users/12345/groups'", "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } } }, - "com.github.openshift.api.security.v1.ServiceAccountPodSecurityPolicyReviewStatus": { - "description": "ServiceAccountPodSecurityPolicyReviewStatus represents ServiceAccount name and related review status", + "com.github.openshift.api.config.v1.SourcedClaimMapping": { + "description": "SourcedClaimMapping configures the mapping behavior for a single external claim from the response the apiserver received from the external claim source.", "type": "object", "required": [ - "name" + "name", + "expression" ], "properties": { - "allowedBy": { - "description": "allowedBy is a reference to the rule that allows the PodTemplateSpec. A rule can be a SecurityContextConstraint or a PodSecurityPolicy A `nil`, indicates that it was denied.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "expression": { + "description": "expression is a required CEL expression that will produce a value to be assigned to the claim. The full response body from the request to the external claim source is provided via the `response.body` variable.\n\nThe contents of the `response.body` variable varies based on the response received from the external source. It is the responsibility of those configuring this expression to understand what is returned from the external source.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length.", + "type": "string" }, "name": { - "description": "name contains the allowed and the denied ServiceAccount name", - "type": "string", - "default": "" - }, - "reason": { - "description": "A machine-readable description of why this operation is in the \"Failure\" status. If this value is empty there is no information available.", + "description": "name is a required name of the claim that will be produced and made available during the claim-to-identity mapping process. name must consist of only lowercase alpha characters and underscores ('_'). name must be at least 1 character and must not exceed 256 characters in length.", "type": "string" - }, - "template": { - "description": "template is the PodTemplateSpec after the defaulting is applied.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" } } }, - "com.github.openshift.api.security.v1.SupplementalGroupsStrategyOptions": { - "description": "SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.", + "com.github.openshift.api.config.v1.Storage": { + "description": "Storage provides persistent storage configuration options for gathering jobs. If the type is set to PersistentVolume, then the PersistentVolume must be defined. If the type is set to Ephemeral, then the PersistentVolume must not be defined.", "type": "object", + "required": [ + "type" + ], "properties": { - "ranges": { - "description": "ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.security.v1.IDRange" - }, - "x-kubernetes-list-type": "atomic" + "persistentVolume": { + "description": "persistentVolume is an optional field that specifies the PersistentVolume that will be used to store the Insights data archive. The PersistentVolume must be created in the openshift-insights namespace.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.PersistentVolumeConfig" }, "type": { - "description": "type is the strategy that will dictate what supplemental groups is used in the SecurityContext.", + "description": "type is a required field that specifies the type of storage that will be used to store the Insights data archive. Valid values are \"PersistentVolume\" and \"Ephemeral\". When set to Ephemeral, the Insights data archive is stored in the ephemeral storage of the gathering job. When set to PersistentVolume, the Insights data archive is stored in the PersistentVolume that is defined by the persistentVolume field.", "type": "string" } - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "persistentVolume": "PersistentVolume" + } + } + ] }, - "com.github.openshift.api.securityinternal.v1.RangeAllocation": { - "description": "RangeAllocation is used so we can easily expose a RangeAllocation typed for security group This is an internal API, not intended for external consumption.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.StringSource": { + "description": "StringSource allows specifying a string inline, or externally via env var or file. When it contains only a string value, it marshals to a simple JSON string.", "type": "object", "required": [ - "range", - "data" + "value", + "env", + "file", + "keyFile" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "data": { - "description": "data is a byte array representing the serialized state of a range allocation. It is a bitmap with each bit set to one to represent a range is taken.", + "env": { + "description": "env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", "type": "string", - "format": "byte" + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "file": { + "description": "file references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", + "type": "string", + "default": "" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "keyFile": { + "description": "keyFile references a file containing the key to use to decrypt the value.", + "type": "string", + "default": "" }, - "range": { - "description": "range is a string representing a unique label for a range of uids, \"1000000000-2000000000/10000\".", + "value": { + "description": "value specifies the cleartext value, or an encrypted value if keyFile is specified.", "type": "string", "default": "" } } }, - "com.github.openshift.api.securityinternal.v1.RangeAllocationList": { - "description": "RangeAllocationList is a list of RangeAllocations objects This is an internal API, not intended for external consumption.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.StringSourceSpec": { + "description": "StringSourceSpec specifies a string value, or external location", "type": "object", "required": [ - "items" + "value", + "env", + "file", + "keyFile" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "env": { + "description": "env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", + "type": "string", + "default": "" }, - "items": { - "description": "List of RangeAllocations.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.securityinternal.v1.RangeAllocation" - } + "file": { + "description": "file references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "keyFile": { + "description": "keyFile references a file containing the key to use to decrypt the value.", + "type": "string", + "default": "" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "value": { + "description": "value specifies the cleartext value, or an encrypted value if keyFile is specified.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfig": { - "description": "ServiceCertSignerOperatorConfig provides information to configure an operator to manage the service cert signing controllers\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.TLSProfileSpec": { + "description": "TLSProfileSpec is the desired behavior of a TLSSecurityProfile.", "type": "object", "required": [ - "metadata", - "spec", - "status" + "ciphers", + "minTLSVersion" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "ciphers": { + "description": "ciphers is used to specify the cipher algorithms that are negotiated during the TLS handshake. Operators may remove entries that their operands do not support. For example, to use only ECDHE-RSA-AES128-GCM-SHA256 (yaml):\n\n ciphers:\n - ECDHE-RSA-AES128-GCM-SHA256\n\nTLS 1.3 cipher suites (e.g. TLS_AES_128_GCM_SHA256) are not configurable and are always enabled when TLS 1.3 is negotiated.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "spec": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigSpec" + "groups": { + "description": "groups is an optional, ordered field used to specify the supported groups (formerly known as elliptic curves) that are used during the TLS handshake. The order of the groups represents a suggested preference, with the most preferred group first. Note that not all platform components honor the ordering: Go-based components use Go's internal preference order and treat this list as a filter of allowed groups rather than an ordered preference. Operators may remove entries their operands do not support.\n\nWhen omitted, this means no opinion and the platform is left to choose reasonable defaults which are subject to change over time and may be different per platform component depending on the underlying TLS libraries they use. If specified, the list must contain at least one and at most 7 groups, and each group must be unique.\n\nFor example, to use X25519 and secp256r1 (yaml):\n\n groups:\n - X25519\n - secp256r1", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "status": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigStatus" + "minTLSVersion": { + "description": "minTLSVersion is used to specify the minimal version of the TLS protocol that is negotiated during the TLS handshake. For example, to use TLS versions 1.1, 1.2 and 1.3 (yaml):\n\n minTLSVersion: VersionTLS11", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigList": { - "description": "ServiceCertSignerOperatorConfigList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.TLSSecurityProfile": { + "description": "TLSSecurityProfile defines the schema for a TLS security profile. This object is used by operators to apply TLS security settings to operands.", "type": "object", - "required": [ - "items" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "custom": { + "description": "custom is a user-defined TLS security profile. Be extremely careful using a custom profile as invalid configurations can be catastrophic.\n\nThe supported groups list for this profile is empty by default.\n\nAn example custom profile looks like this:\n\n minTLSVersion: VersionTLS11\n ciphers:\n - ECDHE-ECDSA-CHACHA20-POLY1305\n - ECDHE-RSA-CHACHA20-POLY1305\n - ECDHE-RSA-AES128-GCM-SHA256\n - ECDHE-ECDSA-AES128-GCM-SHA256", + "$ref": "#/definitions/com.github.openshift.api.config.v1.CustomTLSProfile" }, - "items": { - "description": "items contains the items", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfig" - } + "intermediate": { + "description": "intermediate is a TLS profile for use when you do not need compatibility with legacy clients and want to remain highly secure while being compatible with most clients currently in use.\n\nThe supported groups list includes by default the following groups in suggested preference order (ordering may not be honored by all implementations): X25519MLKEM768, X25519, secp256r1, secp384r1.\n\nThis profile is equivalent to a Custom profile specified as:\n minTLSVersion: VersionTLS12\n ciphers:\n - TLS_AES_128_GCM_SHA256\n - TLS_AES_256_GCM_SHA384\n - TLS_CHACHA20_POLY1305_SHA256\n - ECDHE-ECDSA-AES128-GCM-SHA256\n - ECDHE-RSA-AES128-GCM-SHA256\n - ECDHE-ECDSA-AES256-GCM-SHA384\n - ECDHE-RSA-AES256-GCM-SHA384\n - ECDHE-ECDSA-CHACHA20-POLY1305\n - ECDHE-RSA-CHACHA20-POLY1305", + "$ref": "#/definitions/com.github.openshift.api.config.v1.IntermediateTLSProfile" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "modern": { + "description": "modern is a TLS security profile for use with clients that support TLS 1.3 and do not need backward compatibility for older clients. The supported groups list includes by default the following groups in suggested preference order (ordering may not be honored by all implementations): X25519MLKEM768, X25519, secp256r1, secp384r1. This profile is equivalent to a Custom profile specified as:\n minTLSVersion: VersionTLS13\n ciphers:\n - TLS_AES_128_GCM_SHA256\n - TLS_AES_256_GCM_SHA384\n - TLS_CHACHA20_POLY1305_SHA256", + "$ref": "#/definitions/com.github.openshift.api.config.v1.ModernTLSProfile" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "old": { + "description": "old is a TLS profile for use when services need to be accessed by very old clients or libraries and should be used only as a last resort.\n\nThe supported groups list includes by default the following groups in suggested preference order (ordering may not be honored by all implementations): X25519MLKEM768, X25519, secp256r1, secp384r1.\n\nThis profile is equivalent to a Custom profile specified as:\n minTLSVersion: VersionTLS10\n ciphers:\n - TLS_AES_128_GCM_SHA256\n - TLS_AES_256_GCM_SHA384\n - TLS_CHACHA20_POLY1305_SHA256\n - ECDHE-ECDSA-AES128-GCM-SHA256\n - ECDHE-RSA-AES128-GCM-SHA256\n - ECDHE-ECDSA-AES256-GCM-SHA384\n - ECDHE-RSA-AES256-GCM-SHA384\n - ECDHE-ECDSA-CHACHA20-POLY1305\n - ECDHE-RSA-CHACHA20-POLY1305\n - ECDHE-ECDSA-AES128-SHA256\n - ECDHE-RSA-AES128-SHA256\n - ECDHE-ECDSA-AES128-SHA\n - ECDHE-RSA-AES128-SHA\n - ECDHE-ECDSA-AES256-SHA384\n - ECDHE-RSA-AES256-SHA384\n - ECDHE-ECDSA-AES256-SHA\n - ECDHE-RSA-AES256-SHA\n - AES128-GCM-SHA256\n - AES256-GCM-SHA384\n - AES128-SHA256\n - AES256-SHA256\n - AES128-SHA\n - AES256-SHA\n - DES-CBC3-SHA", + "$ref": "#/definitions/com.github.openshift.api.config.v1.OldTLSProfile" + }, + "type": { + "description": "type is one of Old, Intermediate, Modern or Custom. Custom provides the ability to specify individual TLS security profile parameters.\n\nThe cipher and groups lists in these profiles are based on version 5.8 of the Mozilla Server Side TLS configuration guidelines. See: https://ssl-config.mozilla.org/guidelines/5.8.json\n\nThe groups are listed in suggested preference order, with the most preferred group first. Note that not all platform components honor the ordering: Go-based components use Go's internal preference order and treat this list as a filter of allowed groups rather than an ordered preference. Note that X25519MLKEM768 is a post-quantum hybrid group that is not FIPS-approved and should be ignored by components running in FIPS mode.\n\nThe profiles are intent based, so they may change over time as new ciphers are developed and existing ciphers are found to be insecure. Depending on precisely which ciphers are available to a process, the list may be reduced.", + "type": "string", + "default": "" } - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "custom": "Custom", + "intermediate": "Intermediate", + "modern": "Modern", + "old": "Old" + } + } + ] }, - "com.github.openshift.api.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigSpec": { + "com.github.openshift.api.config.v1.TemplateReference": { + "description": "TemplateReference references a template in a specific namespace. The namespace must be specified at the point of use.", "type": "object", "required": [ - "managementState" + "name" ], "properties": { - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", + "name": { + "description": "name is the metadata.name of the referenced project request template", "type": "string", "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" } } }, - "com.github.openshift.api.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigStatus": { + "com.github.openshift.api.config.v1.TestDetails": { "type": "object", + "required": [ + "testName" + ], "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", - "type": "string" + "testName": { + "description": "testName is the name of the test as it appears in junit XMLs. It does not include the suite name since the same test can be executed in many suites.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.sharedresource.v1alpha1.SharedConfigMap": { - "description": "SharedConfigMap allows a ConfigMap to be shared across namespaces. Pods can mount the shared ConfigMap by adding a CSI volume to the pod specification using the \"csi.sharedresource.openshift.io\" CSI driver and a reference to the SharedConfigMap in the volume attributes:\n\nspec:\n\n\tvolumes:\n\t- name: shared-configmap\n\t csi:\n\t driver: csi.sharedresource.openshift.io\n\t volumeAttributes:\n\t sharedConfigMap: my-share\n\nFor the mount to be successful, the pod's service account must be granted permission to 'use' the named SharedConfigMap object within its namespace with an appropriate Role and RoleBinding. For compactness, here are example `oc` invocations for creating such Role and RoleBinding objects.\n\n\t`oc create role shared-resource-my-share --verb=use --resource=sharedconfigmaps.sharedresource.openshift.io --resource-name=my-share`\n\t`oc create rolebinding shared-resource-my-share --role=shared-resource-my-share --serviceaccount=my-namespace:default`\n\nShared resource objects, in this case ConfigMaps, have default permissions of list, get, and watch for system authenticated users.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.TestReporting": { + "description": "TestReporting is used for origin (and potentially others) to report the test names for a given FeatureGate into the payload for later analysis on a per-payload basis. This doesn't need any CRD because it's never stored in the cluster.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ "spec" @@ -42315,843 +7529,893 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec is the specification of the desired shared configmap", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.sharedresource.v1alpha1.SharedConfigMapSpec" + "$ref": "#/definitions/com.github.openshift.api.config.v1.TestReportingSpec" }, "status": { - "description": "status is the observed status of the shared configmap", + "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/com.github.openshift.api.sharedresource.v1alpha1.SharedConfigMapStatus" + "$ref": "#/definitions/com.github.openshift.api.config.v1.TestReportingStatus" } } }, - "com.github.openshift.api.sharedresource.v1alpha1.SharedConfigMapList": { - "description": "SharedConfigMapList contains a list of SharedConfigMap objects.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.TestReportingSpec": { "type": "object", "required": [ - "items" + "testsForFeatureGates" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { + "testsForFeatureGates": { + "description": "testsForFeatureGates is a list, indexed by FeatureGate and includes information about testing.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.sharedresource.v1alpha1.SharedConfigMap" + "$ref": "#/definitions/com.github.openshift.api.config.v1.FeatureGateTests" } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } } }, - "com.github.openshift.api.sharedresource.v1alpha1.SharedConfigMapReference": { - "description": "SharedConfigMapReference contains information about which ConfigMap to share", + "com.github.openshift.api.config.v1.TestReportingStatus": { + "type": "object" + }, + "com.github.openshift.api.config.v1.TokenClaimMapping": { + "description": "TokenClaimMapping allows specifying a JWT token claim to be used when mapping claims from an authentication token to cluster identities.", "type": "object", - "required": [ - "name", - "namespace" - ], "properties": { - "name": { - "description": "name represents the name of the ConfigMap that is being referenced.", + "claim": { + "description": "claim is an optional field for specifying the JWT token claim that is used in the mapping. The value of this claim will be assigned to the field in which this mapping is associated. claim must not exceed 256 characters in length. When set to the empty string `\"\"`, this means that no named claim should be used for the group mapping. claim is required when the ExternalOIDCWithUpstreamParity feature gate is not enabled.", "type": "string", "default": "" }, - "namespace": { - "description": "namespace represents the namespace where the referenced ConfigMap is located.", - "type": "string", - "default": "" + "expression": { + "description": "expression is an optional CEL expression used to derive group values from JWT claims.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length .\n\nWhen specified, claim must not be set or be explicitly set to the empty string (`\"\"`).", + "type": "string" } } }, - "com.github.openshift.api.sharedresource.v1alpha1.SharedConfigMapSpec": { - "description": "SharedConfigMapSpec defines the desired state of a SharedConfigMap", + "com.github.openshift.api.config.v1.TokenClaimMappings": { "type": "object", "required": [ - "configMapRef" + "username" ], "properties": { - "configMapRef": { - "description": "configMapRef is a reference to the ConfigMap to share", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.sharedresource.v1alpha1.SharedConfigMapReference" - }, - "description": { - "description": "description is a user readable explanation of what the backing resource provides.", - "type": "string" - } - } - }, - "com.github.openshift.api.sharedresource.v1alpha1.SharedConfigMapStatus": { - "description": "SharedSecretStatus contains the observed status of the shared resource", - "type": "object", - "properties": { - "conditions": { - "description": "conditions represents any observations made on this particular shared resource by the underlying CSI driver or Share controller.", + "extra": { + "description": "extra is an optional field for configuring the mappings used to construct the extra attribute for the cluster identity. When omitted, no extra attributes will be present on the cluster identity.\n\nkey values for extra mappings must be unique. A maximum of 32 extra attribute mappings may be provided.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ExtraMapping" }, "x-kubernetes-list-map-keys": [ - "type" + "key" ], "x-kubernetes-list-type": "map" + }, + "groups": { + "description": "groups is an optional field that configures how the groups of a cluster identity should be constructed from the claims in a JWT token issued by the identity provider.\n\nWhen referencing a claim, if the claim is present in the JWT token, its value must be a list of groups separated by a comma (',').\n\nFor example - '\"example\"' and '\"exampleOne\", \"exampleTwo\", \"exampleThree\"' are valid claim values.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.PrefixedClaimMapping" + }, + "uid": { + "description": "uid is an optional field for configuring the claim mapping used to construct the uid for the cluster identity.\n\nWhen using uid.claim to specify the claim it must be a single string value. When using uid.expression the expression must result in a single string value.\n\nWhen omitted, this means the user has no opinion and the platform is left to choose a default, which is subject to change over time.\n\nThe current default is to use the 'sub' claim.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.TokenClaimOrExpressionMapping" + }, + "username": { + "description": "username is a required field that configures how the username of a cluster identity should be constructed from the claims in a JWT token issued by the identity provider.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.UsernameClaimMapping" + } + } + }, + "com.github.openshift.api.config.v1.TokenClaimOrExpressionMapping": { + "description": "TokenClaimOrExpressionMapping allows specifying either a JWT token claim or CEL expression to be used when mapping claims from an authentication token to cluster identities.", + "type": "object", + "properties": { + "claim": { + "description": "claim is an optional field for specifying the JWT token claim that is used in the mapping. The value of this claim will be assigned to the field in which this mapping is associated.\n\nPrecisely one of claim or expression must be set. claim must not be specified when expression is set. When specified, claim must be at least 1 character in length and must not exceed 256 characters in length.", + "type": "string" + }, + "expression": { + "description": "expression is an optional field for specifying a CEL expression that produces a string value from JWT token claims.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'. 'claims' is a map of claim names to claim values. For example, the 'sub' claim value can be accessed as 'claims.sub'. Nested claims can be accessed using dot notation ('claims.foo.bar').\n\nPrecisely one of claim or expression must be set. expression must not be specified when claim is set. When specified, expression must be at least 1 character in length and must not exceed 1024 characters in length.", + "type": "string" } } }, - "com.github.openshift.api.sharedresource.v1alpha1.SharedSecret": { - "description": "SharedSecret allows a Secret to be shared across namespaces. Pods can mount the shared Secret by adding a CSI volume to the pod specification using the \"csi.sharedresource.openshift.io\" CSI driver and a reference to the SharedSecret in the volume attributes:\n\nspec:\n\n\tvolumes:\n\t- name: shared-secret\n\t csi:\n\t driver: csi.sharedresource.openshift.io\n\t volumeAttributes:\n\t sharedSecret: my-share\n\nFor the mount to be successful, the pod's service account must be granted permission to 'use' the named SharedSecret object within its namespace with an appropriate Role and RoleBinding. For compactness, here are example `oc` invocations for creating such Role and RoleBinding objects.\n\n\t`oc create role shared-resource-my-share --verb=use --resource=sharedsecrets.sharedresource.openshift.io --resource-name=my-share`\n\t`oc create rolebinding shared-resource-my-share --role=shared-resource-my-share --serviceaccount=my-namespace:default`\n\nShared resource objects, in this case Secrets, have default permissions of list, get, and watch for system authenticated users.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.TokenClaimValidationCELRule": { "type": "object", "required": [ - "spec" + "expression", + "message" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "expression": { + "description": "expression is a CEL expression evaluated against token claims. expression is required, must be at least 1 character in length and must not exceed 1024 characters. The expression must return a boolean value where 'true' signals a valid token and 'false' an invalid one.", "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "message": { + "description": "message is a required human-readable message to be logged by the Kubernetes API server if the CEL expression defined in 'expression' fails. message must be at least 1 character in length and must not exceed 256 characters.", "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + } + } + }, + "com.github.openshift.api.config.v1.TokenClaimValidationRule": { + "description": "TokenClaimValidationRule represents a validation rule based on token claims. If type is RequiredClaim, requiredClaim must be set. If Type is CEL, CEL must be set and RequiredClaim must be omitted.", + "type": "object", + "required": [ + "type" + ], + "properties": { + "cel": { + "description": "cel holds the CEL expression and message for validation. Must be set when Type is \"CEL\", and forbidden otherwise.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "$ref": "#/definitions/com.github.openshift.api.config.v1.TokenClaimValidationCELRule" }, - "spec": { - "description": "spec is the specification of the desired shared secret", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.sharedresource.v1alpha1.SharedSecretSpec" + "requiredClaim": { + "description": "requiredClaim allows configuring a required claim name and its expected value. This field is required when `type` is set to RequiredClaim, and must be omitted when `type` is set to any other value. The Kubernetes API server uses this field to validate if an incoming JWT is valid for this identity provider.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.TokenRequiredClaim" }, - "status": { - "description": "status is the observed status of the shared secret", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.sharedresource.v1alpha1.SharedSecretStatus" + "type": { + "description": "type is an optional field that configures the type of the validation rule.\n\nAllowed values are \"RequiredClaim\" and \"CEL\".\n\nWhen set to 'RequiredClaim', the Kubernetes API server will be configured to validate that the incoming JWT contains the required claim and that its value matches the required value.\n\nWhen set to 'CEL', the Kubernetes API server will be configured to validate the incoming JWT against the configured CEL expression.\n\nPossible enum values:\n - `\"CEL\"` indicates that the token validation is defined via a CEL expression. Used as a value for TokenValidationRuleType.\n - `\"RequiredClaim\"` indicates that the token must contain a specific claim. Used as a value for TokenValidationRuleType.", + "type": "string", + "default": "", + "enum": [ + "CEL", + "RequiredClaim" + ] + } + } + }, + "com.github.openshift.api.config.v1.TokenConfig": { + "description": "TokenConfig holds the necessary configuration options for authorization and access tokens", + "type": "object", + "properties": { + "accessTokenInactivityTimeout": { + "description": "accessTokenInactivityTimeout defines the token inactivity timeout for tokens granted by any client. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Takes valid time duration string such as \"5m\", \"1.5h\" or \"2h45m\". The minimum allowed value for duration is 300s (5 minutes). If the timeout is configured per client, then that value takes precedence. If the timeout value is not specified and the client does not override the value, then tokens are valid until their lifetime.\n\nWARNING: existing tokens' timeout will not be affected (lowered) by changing this value", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" + }, + "accessTokenInactivityTimeoutSeconds": { + "description": "accessTokenInactivityTimeoutSeconds - DEPRECATED: setting this field has no effect.", + "type": "integer", + "format": "int32" + }, + "accessTokenMaxAgeSeconds": { + "description": "accessTokenMaxAgeSeconds defines the maximum age of access tokens", + "type": "integer", + "format": "int32" } } }, - "com.github.openshift.api.sharedresource.v1alpha1.SharedSecretList": { - "description": "SharedSecretList contains a list of SharedSecret objects.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support. These capabilities should not be used by applications needing long term support.", + "com.github.openshift.api.config.v1.TokenIssuer": { "type": "object", "required": [ - "items" + "issuerURL", + "audiences" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { + "audiences": { + "description": "audiences is a required field that configures the acceptable audiences the JWT token, issued by the identity provider, must be issued to. At least one of the entries must match the 'aud' claim in the JWT token.\n\naudiences must contain at least one entry and must not exceed ten entries.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.sharedresource.v1alpha1.SharedSecret" - } + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "discoveryURL": { + "description": "discoveryURL is an optional field that, if specified, overrides the default discovery endpoint used to retrieve OIDC configuration metadata. By default, the discovery URL is derived from `issuerURL` as \"{issuerURL}/.well-known/openid-configuration\".\n\nThe discoveryURL must be a valid absolute HTTPS URL. It must not contain query parameters, user information, or fragments. Additionally, it must differ from the value of `issuerURL` (ignoring trailing slashes). The discoveryURL value must be at least 1 character long and no longer than 2048 characters.", "type": "string" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "issuerCertificateAuthority": { + "description": "issuerCertificateAuthority is an optional field that configures the certificate authority, used by the Kubernetes API server, to validate the connection to the identity provider when fetching discovery information.\n\nWhen not specified, the system trust is used.\n\nWhen specified, it must reference a ConfigMap in the openshift-config namespace containing the PEM-encoded CA certificates under the 'ca-bundle.crt' key in the data field of the ConfigMap.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/com.github.openshift.api.config.v1.ConfigMapNameReference" + }, + "issuerURL": { + "description": "issuerURL is a required field that configures the URL used to issue tokens by the identity provider. The Kubernetes API server determines how authentication tokens should be handled by matching the 'iss' claim in the JWT to the issuerURL of configured identity providers.\n\nMust be at least 1 character and must not exceed 512 characters in length. Must be a valid URL that uses the 'https' scheme and does not contain a query, fragment or user.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.sharedresource.v1alpha1.SharedSecretReference": { - "description": "SharedSecretReference contains information about which Secret to share", + "com.github.openshift.api.config.v1.TokenRequiredClaim": { "type": "object", "required": [ - "name", - "namespace" + "claim", + "requiredValue" ], "properties": { - "name": { - "description": "name represents the name of the Secret that is being referenced.", + "claim": { + "description": "claim is a required field that configures the name of the required claim. When taken from the JWT claims, claim must be a string value.\n\nclaim must not be an empty string (\"\").", "type": "string", "default": "" }, - "namespace": { - "description": "namespace represents the namespace where the referenced Secret is located.", + "requiredValue": { + "description": "requiredValue is a required field that configures the value that 'claim' must have when taken from the incoming JWT claims. If the value in the JWT claims does not match, the token will be rejected for authentication.\n\nrequiredValue must not be an empty string (\"\").", "type": "string", "default": "" } } }, - "com.github.openshift.api.sharedresource.v1alpha1.SharedSecretSpec": { - "description": "SharedSecretSpec defines the desired state of a SharedSecret", + "com.github.openshift.api.config.v1.TokenUserValidationRule": { + "description": "TokenUserValidationRule provides a CEL-based rule used to validate a token subject. Each rule contains a CEL expression that is evaluated against the token’s claims.", "type": "object", "required": [ - "secretRef" + "expression", + "message" ], "properties": { - "description": { - "description": "description is a user readable explanation of what the backing resource provides.", + "expression": { + "description": "expression is a required CEL expression that performs a validation on cluster user identity attributes like username, groups, etc.\n\nThe expression must evaluate to a boolean value. When the expression evaluates to 'true', the cluster user identity is considered valid. When the expression evaluates to 'false', the cluster user identity is not considered valid. expression must be at least 1 character in length and must not exceed 1024 characters.", "type": "string" }, - "secretRef": { - "description": "secretRef is a reference to the Secret to share", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.sharedresource.v1alpha1.SharedSecretReference" + "message": { + "description": "message is a required human-readable message to be logged by the Kubernetes API server if the CEL expression defined in 'expression' fails. message must be at least 1 character in length and must not exceed 256 characters.", + "type": "string" } } }, - "com.github.openshift.api.sharedresource.v1alpha1.SharedSecretStatus": { - "description": "SharedSecretStatus contains the observed status of the shared resource", + "com.github.openshift.api.config.v1.Update": { + "description": "Update represents an administrator update request.", "type": "object", "properties": { - "conditions": { - "description": "conditions represents any observations made on this particular shared resource by the underlying CSI driver or Share controller.", + "acceptRisks": { + "description": "acceptRisks is an optional set of names of conditional update risks that are considered acceptable. A conditional update is performed only if all of its risks are acceptable. This list may contain entries that apply to current, previous or future updates. The entries therefore may not map directly to a risk in .status.conditionalUpdateRisks. acceptRisks must not contain more than 1000 entries. Entries in this list must be unique.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + "$ref": "#/definitions/com.github.openshift.api.config.v1.AcceptRisk" }, "x-kubernetes-list-map-keys": [ - "type" + "name" ], "x-kubernetes-list-type": "map" + }, + "architecture": { + "description": "architecture is an optional field that indicates the desired value of the cluster architecture. In this context cluster architecture means either a single architecture or a multi architecture. architecture can only be set to Multi thereby only allowing updates from single to multi architecture. If architecture is set, image cannot be set and version must be set. Valid values are 'Multi' and empty.", + "type": "string", + "default": "" + }, + "force": { + "description": "force allows an administrator to update to an image that has failed verification or upgradeable checks that are designed to keep your cluster safe. Only use this if: * you are testing unsigned release images in short-lived test clusters or * you are working around a known bug in the cluster-version\n operator and you have verified the authenticity of the provided\n image yourself.\nThe provided image will run with full administrative access to the cluster. Do not use this flag with images that come from unknown or potentially malicious sources.", + "type": "boolean", + "default": false + }, + "image": { + "description": "image is a container image location that contains the update. image should be used when the desired version does not exist in availableUpdates or history. When image is set, architecture cannot be specified. If both version and image are set, the version extracted from the referenced image must match the specified version.", + "type": "string", + "default": "" + }, + "mode": { + "description": "mode determines how an update should be processed. The only valid value is \"Preflight\". When omitted, the cluster performs a normal update by applying the specified version or image to the cluster. This is the standard update behavior. When set to \"Preflight\", the cluster runs compatibility checks against the target release without performing an actual update. Compatibility results, including any detected risks, are reported in status.conditionalUpdates and status.conditionalUpdateRisks alongside risks from the update recommendation service. This allows administrators to assess update readiness and address issues before committing to the update. Preflight mode is particularly useful for skip-level updates where upgrade compatibility needs to be verified across multiple minor versions. When mode is set to \"Preflight\", the same rules for version, image, and architecture apply as for normal updates.\n\nPossible enum values:\n - `\"Preflight\"` allows an update to be checked for compatibility without committing to updating the cluster.", + "type": "string", + "enum": [ + "Preflight" + ] + }, + "version": { + "description": "version is a semantic version identifying the update version. version is required if architecture is specified. If both version and image are set, the version extracted from the referenced image must match the specified version.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.template.v1.BrokerTemplateInstance": { - "description": "BrokerTemplateInstance holds the service broker-related state associated with a TemplateInstance. BrokerTemplateInstance is part of an experimental API.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.UpdateHistory": { + "description": "UpdateHistory is a single attempted update to the cluster.", "type": "object", "required": [ - "spec" + "state", + "startedTime", + "completionTime", + "image", + "verified" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "acceptedRisks": { + "description": "acceptedRisks records risks which were accepted to initiate the update. For example, it may mention an Upgradeable=False or missing signature that was overridden via desiredUpdate.force, or an update that was initiated despite not being in the availableUpdates set of recommended update targets.", "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "completionTime": { + "description": "completionTime, if set, is when the update was fully applied. The update that is currently being applied will have a null completion time. Completion time will always be set for entries that are not the current update (usually to the started time of the next update).", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "image": { + "description": "image is a container image location that contains the update. This value is always populated.", + "type": "string", + "default": "" }, - "spec": { - "description": "spec describes the state of this BrokerTemplateInstance.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.template.v1.BrokerTemplateInstanceSpec" + "startedTime": { + "description": "startedTime is the time at which the update was started.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "state": { + "description": "state reflects whether the update was fully applied. The Partial state indicates the update is not fully applied, while the Completed state indicates the update was successfully rolled out at least once (all parts of the update successfully applied).", + "type": "string", + "default": "" + }, + "verified": { + "description": "verified indicates whether the provided update was properly verified before it was installed. If this is false the cluster may not be trusted. Verified does not cover upgradeable checks that depend on the cluster state at the time when the update target was accepted.", + "type": "boolean", + "default": false + }, + "version": { + "description": "version is a semantic version identifying the update version. If the requested image does not define a version, or if a failure occurs retrieving the image, this value may be empty.", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.template.v1.BrokerTemplateInstanceList": { - "description": "BrokerTemplateInstanceList is a list of BrokerTemplateInstance objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.UsernameClaimMapping": { "type": "object", - "required": [ - "items" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "claim": { + "description": "claim is an optional field that configures the JWT token claim whose value is assigned to the cluster identity field associated with this mapping. claim is required when the ExternalOIDCWithUpstreamParity feature gate is not enabled. When the ExternalOIDCWithUpstreamParity feature gate is enabled, claim must not be set when expression is set.\n\nclaim must not be an empty string (\"\") and must not exceed 256 characters.", "type": "string" }, - "items": { - "description": "items is a list of BrokerTemplateInstances", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.template.v1.BrokerTemplateInstance" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "expression": { + "description": "expression is an optional CEL expression used to derive the username from JWT claims.\n\nCEL expressions have access to the token claims through a CEL variable, 'claims'.\n\nexpression must be at least 1 character and must not exceed 1024 characters in length. expression must not be set when claim is set.", "type": "string" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "prefix": { + "description": "prefix configures the prefix that should be prepended to the value of the JWT claim.\n\nprefix must be set when prefixPolicy is set to 'Prefix' and must be unset otherwise.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.UsernamePrefix" + }, + "prefixPolicy": { + "description": "prefixPolicy is an optional field that configures how a prefix should be applied to the value of the JWT claim specified in the 'claim' field.\n\nAllowed values are 'Prefix', 'NoPrefix', and omitted (not provided or an empty string).\n\nWhen set to 'Prefix', the value specified in the prefix field will be prepended to the value of the JWT claim. The prefix field must be set when prefixPolicy is 'Prefix'. Must not be set to 'Prefix' when expression is set. When set to 'NoPrefix', no prefix will be prepended to the value of the JWT claim. When omitted, this means no opinion and the platform is left to choose any prefixes that are applied which is subject to change over time. Currently, the platform prepends `{issuerURL}#` to the value of the JWT claim when the claim is not 'email'.\n\nAs an example, consider the following scenario:\n\n `prefix` is unset, `issuerURL` is set to `https://myoidc.tld`,\n the JWT claims include \"username\":\"userA\" and \"email\":\"userA@myoidc.tld\",\n and `claim` is set to:\n - \"username\": the mapped value will be \"https://myoidc.tld#userA\"\n - \"email\": the mapped value will be \"userA@myoidc.tld\"\n\n\nPossible enum values:\n - `\"\"` let's the cluster assign prefixes. If the username claim is email, there is no prefix If the username claim is anything else, it is prefixed by the issuerURL\n - `\"NoPrefix\"` means the username claim value will not have any prefix\n - `\"Prefix\"` means the prefix value must be specified. It cannot be empty", + "type": "string", + "default": "", + "enum": [ + "", + "NoPrefix", + "Prefix" + ] } - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "prefixPolicy", + "fields-to-discriminateBy": { + "claim": "Claim", + "expression": "Expression", + "prefix": "Prefix" + } + } + ] }, - "com.github.openshift.api.template.v1.BrokerTemplateInstanceSpec": { - "description": "BrokerTemplateInstanceSpec describes the state of a BrokerTemplateInstance.", + "com.github.openshift.api.config.v1.UsernamePrefix": { + "description": "UsernamePrefix configures the string that should be used as a prefix for username claim mappings.", "type": "object", "required": [ - "templateInstance", - "secret" + "prefixString" ], "properties": { - "bindingIDs": { - "description": "bindingIDs is a list of 'binding_id's provided during successive bind calls to the template service broker.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "secret": { - "description": "secret is a reference to a Secret object residing in a namespace, containing the necessary template parameters.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "templateInstance": { - "description": "templateInstance is a reference to a TemplateInstance object residing in a namespace.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "prefixString": { + "description": "prefixString is a required field that configures the prefix that will be applied to cluster identity username attribute during the process of mapping JWT claims to cluster identity attributes.\n\nprefixString must not be an empty string (\"\").", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.template.v1.Parameter": { - "description": "Parameter defines a name/value variable that is to be processed during the Template to Config transformation.", + "com.github.openshift.api.config.v1.VSphereFailureDomainHostGroup": { + "description": "VSphereFailureDomainHostGroup holds the vmGroup and the hostGroup names in vCenter corresponds to a vm-host group of type Virtual Machine and Host respectively. Is also contains the vmHostRule which is an affinity vm-host rule in vCenter.", "type": "object", "required": [ - "name" + "vmGroup", + "hostGroup", + "vmHostRule" ], "properties": { - "description": { - "description": "description of a parameter. Optional.", - "type": "string" - }, - "displayName": { - "description": "Optional: The name that will show in UI instead of parameter 'Name'", - "type": "string" - }, - "from": { - "description": "from is an input value for the generator. Optional.", - "type": "string" - }, - "generate": { - "description": "generate specifies the generator to be used to generate random string from an input value specified by From field. The result string is stored into Value field. If empty, no generator is being used, leaving the result Value untouched. Optional.\n\nThe only supported generator is \"expression\", which accepts a \"from\" value in the form of a simple regular expression containing the range expression \"[a-zA-Z0-9]\", and the length expression \"a{length}\".\n\nExamples:\n\nfrom | value ----------------------------- \"test[0-9]{1}x\" | \"test7x\" \"[0-1]{8}\" | \"01001100\" \"0x[A-F0-9]{4}\" | \"0xB3AF\" \"[a-zA-Z0-9]{8}\" | \"hW4yQU5i\"", - "type": "string" - }, - "name": { - "description": "name must be set and it can be referenced in Template Items using ${PARAMETER_NAME}. Required.", + "hostGroup": { + "description": "hostGroup is the name of the vm-host group of type host within vCenter for this failure domain. hostGroup is limited to 80 characters. This field is required when the VSphereFailureDomain ZoneType is HostGroup", "type": "string", "default": "" }, - "required": { - "description": "Optional: Indicates the parameter must have a value. Defaults to false.", - "type": "boolean" + "vmGroup": { + "description": "vmGroup is the name of the vm-host group of type virtual machine within vCenter for this failure domain. vmGroup is limited to 80 characters. This field is required when the VSphereFailureDomain ZoneType is HostGroup", + "type": "string", + "default": "" }, - "value": { - "description": "value holds the Parameter data. If specified, the generator will be ignored. The value replaces all occurrences of the Parameter ${Name} expression during the Template to Config transformation. Optional.", - "type": "string" + "vmHostRule": { + "description": "vmHostRule is the name of the affinity vm-host rule within vCenter for this failure domain. vmHostRule is limited to 80 characters. This field is required when the VSphereFailureDomain ZoneType is HostGroup", + "type": "string", + "default": "" } } }, - "com.github.openshift.api.template.v1.Template": { - "description": "Template contains the inputs needed to produce a Config.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.VSphereFailureDomainRegionAffinity": { + "description": "VSphereFailureDomainRegionAffinity contains the region type which is the string representation of the VSphereFailureDomainRegionType with available options of Datacenter and ComputeCluster.", "type": "object", "required": [ - "objects" + "type" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "labels": { - "description": "labels is a optional set of labels that are applied to every object during the Template to Config transformation.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "message": { - "description": "message is an optional instructional message that will be displayed when this template is instantiated. This field should inform the user how to utilize the newly created resources. Parameter substitution will be performed on the message before being displayed so that generated credentials and other parameters can be included in the output.", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "objects": { - "description": "objects is an array of resources to include in this template. If a namespace value is hardcoded in the object, it will be removed during template instantiation, however if the namespace value is, or contains, a ${PARAMETER_REFERENCE}, the resolved value after parameter substitution will be respected and the object will be created in that namespace.", - "type": "array", - "items": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } - }, - "parameters": { - "description": "parameters is an optional array of Parameters used during the Template to Config transformation.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.template.v1.Parameter" - } + "type": { + "description": "type determines the vSphere object type for a region within this failure domain. Available types are Datacenter and ComputeCluster. When set to Datacenter, this means the vCenter Datacenter defined is the region. When set to ComputeCluster, this means the vCenter cluster defined is the region.\n\nPossible enum values:\n - `\"ComputeCluster\"` is a failure domain region for a vCenter compute cluster.\n - `\"Datacenter\"` is a failure domain region for a vCenter datacenter.", + "type": "string", + "default": "", + "enum": [ + "ComputeCluster", + "Datacenter" + ] } - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": {} + } + ] }, - "com.github.openshift.api.template.v1.TemplateInstance": { - "description": "TemplateInstance requests and records the instantiation of a Template. TemplateInstance is part of an experimental API.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.VSphereFailureDomainZoneAffinity": { + "description": "VSphereFailureDomainZoneAffinity contains the vCenter cluster vm-host group (virtual machine and host types) and the vm-host affinity rule that together creates an affinity configuration for vm-host based zonal. This configuration within vCenter creates the required association between a failure domain, virtual machines and ESXi hosts to create a vm-host based zone.", "type": "object", "required": [ - "spec" + "type" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec describes the desired state of this TemplateInstance.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.template.v1.TemplateInstanceSpec" + "hostGroup": { + "description": "hostGroup holds the vmGroup and the hostGroup names in vCenter corresponds to a vm-host group of type Virtual Machine and Host respectively. Is also contains the vmHostRule which is an affinity vm-host rule in vCenter.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.VSphereFailureDomainHostGroup" }, - "status": { - "description": "status describes the current state of this TemplateInstance.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.template.v1.TemplateInstanceStatus" + "type": { + "description": "type determines the vSphere object type for a zone within this failure domain. Available types are ComputeCluster and HostGroup. When set to ComputeCluster, this means the vCenter cluster defined is the zone. When set to HostGroup, hostGroup must be configured with hostGroup, vmGroup and vmHostRule and this means the zone is defined by the grouping of those fields.\n\nPossible enum values:\n - `\"ComputeCluster\"` is a failure domain zone for a vCenter compute cluster.\n - `\"HostGroup\"` is a failure domain zone for a vCenter vm-host group.", + "type": "string", + "default": "", + "enum": [ + "ComputeCluster", + "HostGroup" + ] } - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "hostGroup": "HostGroup" + } + } + ] }, - "com.github.openshift.api.template.v1.TemplateInstanceCondition": { - "description": "TemplateInstanceCondition contains condition information for a TemplateInstance.", + "com.github.openshift.api.config.v1.VSpherePlatformFailureDomainSpec": { + "description": "VSpherePlatformFailureDomainSpec holds the region and zone failure domain and the vCenter topology of that failure domain.", "type": "object", "required": [ - "type", - "status", - "lastTransitionTime", - "reason", - "message" + "name", + "region", + "zone", + "server", + "topology" ], "properties": { - "lastTransitionTime": { - "description": "lastTransitionTime is the last time a condition status transitioned from one state to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "message is a human readable description of the details of the last transition, complementing reason.", + "name": { + "description": "name defines the arbitrary but unique name of a failure domain.", "type": "string", "default": "" }, - "reason": { - "description": "reason is a brief machine readable explanation for the condition's last transition.", + "region": { + "description": "region defines the name of a region tag that will be attached to a vCenter datacenter. The tag category in vCenter must be named openshift-region.", "type": "string", "default": "" }, - "status": { - "description": "status of the condition, one of True, False or Unknown.", + "regionAffinity": { + "description": "regionAffinity holds the type of region, Datacenter or ComputeCluster. When set to Datacenter, this means the region is a vCenter Datacenter as defined in topology. When set to ComputeCluster, this means the region is a vCenter Cluster as defined in topology.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.VSphereFailureDomainRegionAffinity" + }, + "server": { + "description": "server is the fully-qualified domain name or the IP address of the vCenter server. This must match the server field of an entry in the vcenters list. The match is case-sensitive; the value must be specified exactly as it appears in the vcenters entry. The value must be between 1 and 255 characters long.", "type": "string", "default": "" }, - "type": { - "description": "type of the condition, currently Ready or InstantiateFailure.", + "topology": { + "description": "topology describes a given failure domain using vSphere constructs", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.VSpherePlatformTopology" + }, + "zone": { + "description": "zone defines the name of a zone tag that will be attached to a vCenter cluster. The tag category in vCenter must be named openshift-zone.", "type": "string", "default": "" + }, + "zoneAffinity": { + "description": "zoneAffinity holds the type of the zone and the hostGroup which vmGroup and the hostGroup names in vCenter corresponds to a vm-host group of type Virtual Machine and Host respectively. Is also contains the vmHostRule which is an affinity vm-host rule in vCenter.", + "$ref": "#/definitions/com.github.openshift.api.config.v1.VSphereFailureDomainZoneAffinity" } } }, - "com.github.openshift.api.template.v1.TemplateInstanceList": { - "description": "TemplateInstanceList is a list of TemplateInstance objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.VSpherePlatformLoadBalancer": { + "description": "VSpherePlatformLoadBalancer defines the load balancer used by the cluster on VSphere platform.", "type": "object", - "required": [ - "items" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of Templateinstances", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.template.v1.TemplateInstance" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "type": { + "description": "type defines the type of load balancer used by the cluster on VSphere platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", + "type": "string", + "default": "OpenShiftManagedDefault" } - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": {} + } + ] }, - "com.github.openshift.api.template.v1.TemplateInstanceObject": { - "description": "TemplateInstanceObject references an object created by a TemplateInstance.", + "com.github.openshift.api.config.v1.VSpherePlatformNodeNetworking": { + "description": "VSpherePlatformNodeNetworking holds the external and internal node networking spec.", "type": "object", "properties": { - "ref": { - "description": "ref is a reference to the created object. When used under .spec, only name and namespace are used; these can contain references to parameters which will be substituted following the usual rules.", + "external": { + "description": "external represents the network configuration of the node that is externally routable.", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "$ref": "#/definitions/com.github.openshift.api.config.v1.VSpherePlatformNodeNetworkingSpec" + }, + "internal": { + "description": "internal represents the network configuration of the node that is routable only within the cluster.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.VSpherePlatformNodeNetworkingSpec" } } }, - "com.github.openshift.api.template.v1.TemplateInstanceRequester": { - "description": "TemplateInstanceRequester holds the identity of an agent requesting a template instantiation.", + "com.github.openshift.api.config.v1.VSpherePlatformNodeNetworkingSpec": { + "description": "VSpherePlatformNodeNetworkingSpec holds the network CIDR(s) and port group name for including and excluding IP ranges in the cloud provider. This would be used for example when multiple network adapters are attached to a guest to help determine which IP address the cloud config manager should use for the external and internal node networking.", "type": "object", "properties": { - "extra": { - "description": "extra holds additional information provided by the authenticator.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "groups": { - "description": "groups represent the groups this user is a part of.", + "excludeNetworkSubnetCidr": { + "description": "excludeNetworkSubnetCidr IP addresses in subnet ranges will be excluded when selecting the IP address from the VirtualMachine's VM for use in the status.addresses fields.", "type": "array", "items": { "type": "string", "default": "" - } + }, + "x-kubernetes-list-type": "atomic" }, - "uid": { - "description": "uid is a unique value that identifies this user across time; if this user is deleted and another user by the same name is added, they will have different UIDs.", + "network": { + "description": "network VirtualMachine's VM Network names that will be used to when searching for status.addresses fields. Note that if internal.networkSubnetCIDR and external.networkSubnetCIDR are not set, then the vNIC associated to this network must only have a single IP address assigned to it. The available networks (port groups) can be listed using `govc ls 'network/*'`", "type": "string" }, - "username": { - "description": "username uniquely identifies this user among all active users.", - "type": "string" + "networkSubnetCidr": { + "description": "networkSubnetCidr IP address on VirtualMachine's network interfaces included in the fields' CIDRs that will be used in respective status.addresses fields.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" } } }, - "com.github.openshift.api.template.v1.TemplateInstanceSpec": { - "description": "TemplateInstanceSpec describes the desired state of a TemplateInstance.", + "com.github.openshift.api.config.v1.VSpherePlatformSpec": { + "description": "VSpherePlatformSpec holds the desired state of the vSphere infrastructure provider. In the future the cloud provider operator, storage operator and machine operator will use these fields for configuration.", "type": "object", - "required": [ - "template" - ], "properties": { - "requester": { - "description": "requester holds the identity of the agent requesting the template instantiation.", - "$ref": "#/definitions/com.github.openshift.api.template.v1.TemplateInstanceRequester" - }, - "secret": { - "description": "secret is a reference to a Secret object containing the necessary template parameters.", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + "apiServerInternalIPs": { + "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "template": { - "description": "template is a full copy of the template for instantiation.", - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.template.v1.Template" - } - } - }, - "com.github.openshift.api.template.v1.TemplateInstanceStatus": { - "description": "TemplateInstanceStatus describes the current state of a TemplateInstance.", - "type": "object", - "properties": { - "conditions": { - "description": "conditions represent the latest available observations of a TemplateInstance's current state.", + "failureDomains": { + "description": "failureDomains contains the definition of region, zone and the vCenter topology. If this is omitted failure domains (regions and zones) will not be used. Each failure domain's server must match the server field of an entry in the vcenters list.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.template.v1.TemplateInstanceCondition" - } + "$ref": "#/definitions/com.github.openshift.api.config.v1.VSpherePlatformFailureDomainSpec" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map" + }, + "ingressIPs": { + "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "machineNetworks": { + "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "nodeNetworking": { + "description": "nodeNetworking contains the definition of internal and external network constraints for assigning the node's networking. If this field is omitted, networking defaults to the legacy address selection behavior which is to only support a single address and return the first one found.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.VSpherePlatformNodeNetworking" }, - "objects": { - "description": "objects references the objects created by the TemplateInstance.", + "vcenters": { + "description": "vcenters holds the connection details for services to communicate with vCenter. Up to 3 vCenters are supported. Once the cluster has been installed, you are unable to change the current number of defined vCenters except when 1.) the cluster has been upgraded from a version of OpenShift where the vsphere platform spec was not present or 2.) in TechPreview you are able to add and remove vCenters but may not remove all vCenters. You may make modifications to the existing vCenters that are defined in the vcenters list in order to match with any added or modified failure domains.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/com.github.openshift.api.template.v1.TemplateInstanceObject" - } + "$ref": "#/definitions/com.github.openshift.api.config.v1.VSpherePlatformVCenterSpec" + }, + "x-kubernetes-list-type": "atomic" } } }, - "com.github.openshift.api.template.v1.TemplateList": { - "description": "TemplateList is a list of Template objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.VSpherePlatformStatus": { + "description": "VSpherePlatformStatus holds the current status of the vSphere infrastructure provider.", "type": "object", "required": [ - "items" + "apiServerInternalIPs", + "ingressIPs" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "apiServerInternalIP": { + "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", "type": "string" }, - "items": { - "description": "items is a list of templates", + "apiServerInternalIPs": { + "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.template.v1.Template" - } + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "dnsRecordsType": { + "description": "dnsRecordsType determines whether records for api, api-int, and ingress are provided by the internal DNS service or externally. Allowed values are `Internal`, `External`, and omitted. When set to `Internal`, records are provided by the internal infrastructure and no additional user configuration is required for the cluster to function. When set to `External`, records are not provided by the internal infrastructure and must be configured by the user on a DNS server outside the cluster. Cluster nodes must use this external server for their upstream DNS requests. This value may only be set when loadBalancer.type is set to UserManaged. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `Internal`.\n\nPossible enum values:\n - `\"External\"`\n - `\"Internal\"`", + "type": "string", + "enum": [ + "External", + "Internal" + ] }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - } - }, - "com.github.openshift.api.user.v1.Group": { - "description": "Group represents a referenceable set of Users\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "users" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "ingressIP": { + "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "ingressIPs": { + "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "loadBalancer": { + "description": "loadBalancer defines how the load balancer used by the cluster is configured.", + "default": { + "type": "OpenShiftManagedDefault" + }, + "$ref": "#/definitions/com.github.openshift.api.config.v1.VSpherePlatformLoadBalancer" }, - "users": { - "description": "users is the list of users in this group.", + "machineNetworks": { + "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.", "type": "array", "items": { "type": "string", "default": "" - } + }, + "x-kubernetes-list-type": "atomic" + }, + "nodeDNSIP": { + "description": "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for vSphere deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.", + "type": "string" } } }, - "com.github.openshift.api.user.v1.GroupList": { - "description": "GroupList is a collection of Groups\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.VSpherePlatformTopology": { + "description": "VSpherePlatformTopology holds the required and optional vCenter objects - datacenter, computeCluster, networks, datastore and resourcePool - to provision virtual machines.", "type": "object", "required": [ - "items" + "datacenter", + "computeCluster", + "networks", + "datastore" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "computeCluster": { + "description": "computeCluster the absolute path of the vCenter cluster in which virtual machine will be located. The absolute path is of the form //host/. The maximum length of the path is 2048 characters.", + "type": "string", + "default": "" + }, + "datacenter": { + "description": "datacenter is the name of vCenter datacenter in which virtual machines will be located. The maximum length of the datacenter name is 80 characters.", + "type": "string", + "default": "" + }, + "datastore": { + "description": "datastore is the absolute path of the datastore in which the virtual machine is located. The absolute path is of the form //datastore/ The maximum length of the path is 2048 characters.", + "type": "string", + "default": "" + }, + "folder": { + "description": "folder is the absolute path of the folder where virtual machines are located. The absolute path is of the form //vm/. The maximum length of the path is 2048 characters.", "type": "string" }, - "items": { - "description": "items is the list of groups", + "networks": { + "description": "networks is the list of port group network names within this failure domain. If feature gate VSphereMultiNetworks is enabled, up to 10 network adapters may be defined. 10 is the maximum number of virtual network devices which may be attached to a VM as defined by: https://configmax.esp.vmware.com/guest?vmwareproduct=vSphere&release=vSphere%208.0&categories=1-0 The available networks (port groups) can be listed using `govc ls 'network/*'` Networks should be in the form of an absolute path: //network/.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.user.v1.Group" - } + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "resourcePool": { + "description": "resourcePool is the absolute path of the resource pool where virtual machines will be created. The absolute path is of the form //host//Resources/. The maximum length of the path is 2048 characters.", "type": "string" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "template": { + "description": "template is the full inventory path of the virtual machine or template that will be cloned when creating new machines in this failure domain. The maximum length of the path is 2048 characters.\n\nWhen omitted, the template will be calculated by the control plane machineset operator based on the region and zone defined in VSpherePlatformFailureDomainSpec. For example, for zone=zonea, region=region1, and infrastructure name=test, the template path would be calculated as //vm/test-rhcos-region1-zonea.", + "type": "string" } } }, - "com.github.openshift.api.user.v1.Identity": { - "description": "Identity records a successful authentication of a user with an identity provider. The information about the source of authentication is stored on the identity, and the identity is then associated with a single user object. Multiple identities can reference a single user. Information retrieved from the authentication provider is stored in the extra field using a schema determined by the provider.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.VSpherePlatformVCenterSpec": { + "description": "VSpherePlatformVCenterSpec stores the vCenter connection fields. This is used by the vSphere CCM.", "type": "object", "required": [ - "providerName", - "providerUserName", - "user" + "server", + "datacenters" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "extra": { - "description": "extra holds extra information about this identity", - "type": "object", - "additionalProperties": { + "datacenters": { + "description": "The vCenter Datacenters in which the RHCOS vm guests are located. This field will be used by the Cloud Controller Manager. Each datacenter listed here should be used within a topology.", + "type": "array", + "items": { "type": "string", "default": "" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "x-kubernetes-list-type": "set" }, - "providerName": { - "description": "providerName is the source of identity information", - "type": "string", - "default": "" + "port": { + "description": "port is the TCP port that will be used to communicate to the vCenter endpoint. When omitted, this means the user has no opinion and it is up to the platform to choose a sensible default, which is subject to change over time.", + "type": "integer", + "format": "int32" }, - "providerUserName": { - "description": "providerUserName uniquely represents this identity in the scope of the provider", + "server": { + "description": "server is the fully-qualified domain name or the IP address of the vCenter server.", "type": "string", "default": "" - }, - "user": { - "description": "user is a reference to the user this identity is associated with Both Name and UID must be set", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" } } }, - "com.github.openshift.api.user.v1.IdentityList": { - "description": "IdentityList is a collection of Identities\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.VaultAppRoleAuthentication": { + "description": "VaultAppRoleAuthentication defines the configuration for AppRole authentication with Vault.", "type": "object", "required": [ - "items" + "secret" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is the list of identities", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.user.v1.Identity" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "secret": { + "description": "secret references a secret in the openshift-config namespace containing the AppRole credentials used to authenticate with Vault. The referenced Secret must contain two keys: \"role-id\" for the AppRole Role ID and \"secret-id\" for the AppRole Secret ID.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/com.github.openshift.api.config.v1.VaultSecretReference" } } }, - "com.github.openshift.api.user.v1.User": { - "description": "Upon log in, every user of the system receives a User and Identity resource. Administrators may directly manipulate the attributes of the users for their own tracking, or set groups via the API. The user name is unique and is chosen based on the value provided by the identity provider - if a user already exists with the incoming name, the user name may have a number appended to it depending on the configuration of the system.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.VaultAuthentication": { + "description": "VaultAuthentication defines the authentication method used to authenticate with Vault.", "type": "object", "required": [ - "groups" + "type" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "appRole": { + "description": "appRole defines the configuration for AppRole authentication. This field must be set when type is AppRole, and must be unset otherwise.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.VaultAppRoleAuthentication" }, - "fullName": { - "description": "fullName is the full name of user", + "type": { + "description": "type defines the authentication method used to authenticate with Vault. Allowed values are AppRole. When set to AppRole, the plugin uses AppRole credentials to authenticate with Vault.", "type": "string" - }, - "groups": { - "description": "groups specifies group names this user is a member of. This field is deprecated and will be removed in a future release. Instead, create a Group object containing the name of this User.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "identities": { - "description": "identities are the identities associated with this user", - "type": "array", - "items": { - "type": "string", - "default": "" + } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "appRole": "AppRole" } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + } + ] + }, + "com.github.openshift.api.config.v1.VaultConfigMapReference": { + "description": "VaultConfigMapReference references a ConfigMap in the openshift-config namespace.", + "type": "object", + "required": [ + "name" + ], + "properties": { + "name": { + "description": "name is the metadata.name of the referenced ConfigMap in the openshift-config namespace. The name must be a valid DNS subdomain name: it must contain no more than 253 characters, contain only lowercase alphanumeric characters, '-' or '.', and start and end with an alphanumeric character.", "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" } } }, - "com.github.openshift.api.user.v1.UserIdentityMapping": { - "description": "UserIdentityMapping maps a user to an identity\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.VaultKMSPluginConfig": { + "description": "VaultKMSPluginConfig defines the KMS plugin configuration specific to Vault KMS", "type": "object", + "required": [ + "kmsPluginImage", + "vaultAddress", + "authentication", + "vaultKeyPath" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "authentication": { + "description": "authentication defines the authentication method used to authenticate with Vault.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.VaultAuthentication" + }, + "kmsPluginImage": { + "description": "kmsPluginImage specifies the container image for the HashiCorp Vault KMS plugin.\n\nThe image must be a fully qualified OCI image pull spec with a SHA256 digest. The format is: host[:port][/namespace]/name@sha256: where the digest must be 64 characters long and consist only of lowercase hexadecimal characters, a-f and 0-9. The total length must be between 75 and 447 characters.\n\nShort names (e.g., \"vault-plugin\" or \"hashicorp/vault-plugin\") are not allowed. The registry hostname must be included and must contain at least one dot. Image tags (e.g., \":latest\", \":v1.0.0\") are not allowed.\n\nConsult the OpenShift documentation for compatible plugin versions with your cluster version, then obtain the image digest for that version from HashiCorp's container registry.\n\nFor disconnected environments, mirror the plugin image to an accessible registry and reference the mirrored location with its digest.", "type": "string" }, - "identity": { - "description": "identity is a reference to an identity", + "tls": { + "description": "tls contains the TLS configuration for connecting to the Vault server. When this field is not set, system default TLS settings are used.", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "$ref": "#/definitions/com.github.openshift.api.config.v1.VaultTLSConfig" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "vaultAddress": { + "description": "vaultAddress specifies the address of the HashiCorp Vault instance. The value must be a valid HTTPS URL containing only scheme, host, and optional port. Paths, user info, query parameters, and fragments are not allowed.\n\nFormat: https://hostname[:port] Example: https://vault.example.com:8200\n\nThe value must be between 1 and 512 characters.", "type": "string" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "vaultAuthNamespace": { + "description": "vaultAuthNamespace specifies the Vault namespace to use for authentication. This is only applicable for Vault Enterprise installations where authentication and Transit operations may be in different namespaces. When this field is not set, the value of vaultNamespace is used for both authentication and Transit key operations.\n\nThe value must be between 1 and 4096 characters. The namespace cannot end with a forward slash, cannot contain spaces, and cannot be one of the reserved strings: root, sys, audit, auth, cubbyhole, or identity.", + "type": "string" }, - "user": { - "description": "user is a reference to a user", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "vaultKeyPath": { + "description": "vaultKeyPath specifies the full path to the encryption key in Vault's Transit secrets engine, combining the Transit engine mount path and the key name separated by \"/keys/\". Format: /keys/ (e.g., transit/keys/my-key, myteam/transit/keys/production-key).\n\nThe total path length must be between 8 and 1542 characters. The path cannot start or end with a forward slash, cannot contain consecutive forward slashes, must only contain RFC 3986 unreserved characters (alphanumeric, hyphen, period, underscore, tilde) and forward slashes as path separators, and must not contain \".\" or \"..\" path segments. The key name must start and end with an alphanumeric character or underscore, and may contain alphanumeric characters, underscores, hyphens, and periods in the middle.", + "type": "string" + }, + "vaultNamespace": { + "description": "vaultNamespace specifies the Vault namespace where the Transit secrets engine is mounted. This is only applicable for Vault Enterprise installations. When this field is not set, no namespace is used.\n\nThe value must be between 1 and 4096 characters. The namespace cannot end with a forward slash, cannot contain spaces, and cannot be one of the reserved strings: root, sys, audit, auth, cubbyhole, or identity.", + "type": "string" } } }, - "com.github.openshift.api.user.v1.UserList": { - "description": "UserList is a collection of Users\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "com.github.openshift.api.config.v1.VaultSecretReference": { + "description": "VaultSecretReference references a secret in the openshift-config namespace.", "type": "object", "required": [ - "items" + "name" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "name": { + "description": "name is the metadata.name of the referenced secret in the openshift-config namespace. The name must be a valid DNS subdomain name: it must contain no more than 253 characters, contain only lowercase alphanumeric characters, '-' or '.', and start and end with an alphanumeric character.", "type": "string" + } + } + }, + "com.github.openshift.api.config.v1.VaultTLSConfig": { + "description": "VaultTLSConfig contains TLS configuration for connecting to Vault.", + "type": "object", + "properties": { + "caBundle": { + "description": "caBundle references a ConfigMap in the openshift-config namespace containing the CA certificate bundle used to verify the TLS connection to the Vault server. The referenced ConfigMap must contain the CA bundle in the key \"ca-bundle.crt\". When this field is not set, the system's trusted CA certificates are used.\n\nThe namespace for the ConfigMap is openshift-config.\n\nExample ConfigMap:\n apiVersion: v1\n kind: ConfigMap\n metadata:\n name: vault-ca-bundle\n namespace: openshift-config\n data:\n ca-bundle.crt: |\n -----BEGIN CERTIFICATE-----\n ...\n -----END CERTIFICATE-----", + "default": {}, + "$ref": "#/definitions/com.github.openshift.api.config.v1.VaultConfigMapReference" }, - "items": { - "description": "items is the list of users", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/com.github.openshift.api.user.v1.User" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "serverName": { + "description": "serverName specifies the Server Name Indication (SNI) to use when connecting to Vault via TLS. This is useful when the Vault server's hostname doesn't match its TLS certificate. When this field is not set, the hostname from vaultAddress is used for SNI.\n\nThe value must be a valid DNS hostname: it must contain no more than 253 characters, contain only lowercase alphanumeric characters, '-' or '.', and start and end with an alphanumeric character.", "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + } + } + }, + "com.github.openshift.api.config.v1.WebhookTokenAuthenticator": { + "description": "webhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator", + "type": "object", + "required": [ + "kubeConfig" + ], + "properties": { + "kubeConfig": { + "description": "kubeConfig references a secret that contains kube config file data which describes how to access the remote webhook service. The namespace for the referenced secret is openshift-config.\n\nFor further details, see:\n\nhttps://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication\n\nThe key \"kubeConfig\" is used to locate the data. If the secret or expected key is not found, the webhook is not honored. If the specified kube config data is not valid, the webhook is not honored.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/com.github.openshift.api.config.v1.SecretNameReference" } } }, diff --git a/payload-manifests/featuregates/featureGate-4-10-Hypershift-Default.yaml b/payload-manifests/featuregates/featureGate-4-10-Hypershift-Default.yaml index 9145cc230f8..68bc9a1dedf 100644 --- a/payload-manifests/featuregates/featureGate-4-10-Hypershift-Default.yaml +++ b/payload-manifests/featuregates/featureGate-4-10-Hypershift-Default.yaml @@ -20,15 +20,9 @@ { "name": "AWSDedicatedHosts" }, - { - "name": "AWSDualStackInstall" - }, { "name": "AWSEuropeanSovereignCloudInstall" }, - { - "name": "AdditionalStorageConfig" - }, { "name": "AuthenticationComponentProxy" }, @@ -159,13 +153,10 @@ "name": "GCPSovereignCloudInstall" }, { - "name": "ImageModeStatusReporting" - }, - { - "name": "IngressControllerMultipleHAProxyVersions" + "name": "GatewayAPIManagementMode" }, { - "name": "IrreconcilableMachineConfig" + "name": "ImageModeStatusReporting" }, { "name": "KMSEncryption" @@ -239,9 +230,6 @@ { "name": "NewOLMOwnSingleNamespace" }, - { - "name": "NewOLMPreflightPermissionChecks" - }, { "name": "NewOLMWebhookProviderOpenshiftServiceCA" }, @@ -301,9 +289,15 @@ { "name": "AWSClusterHostedDNSInstall" }, + { + "name": "AWSDualStackInstall" + }, { "name": "AWSServiceLBNetworkSecurityGroup" }, + { + "name": "AdditionalStorageConfig" + }, { "name": "AzureWorkloadIdentity" }, @@ -343,12 +337,18 @@ { "name": "IngressControllerDynamicConfigurationManager" }, + { + "name": "IngressControllerMultipleHAProxyVersions" + }, { "name": "InsightsConfig" }, { "name": "InsightsOnDemandDataGather" }, + { + "name": "IrreconcilableMachineConfig" + }, { "name": "KMSv1" }, @@ -367,9 +367,6 @@ { "name": "OpenShiftPodSecurityAdmission" }, - { - "name": "RouteExternalCertificate" - }, { "name": "ServiceAccountTokenNodeBinding" }, diff --git a/payload-manifests/featuregates/featureGate-4-10-Hypershift-OKD.yaml b/payload-manifests/featuregates/featureGate-4-10-Hypershift-OKD.yaml index a3106fe9c67..d9017d42f93 100644 --- a/payload-manifests/featuregates/featureGate-4-10-Hypershift-OKD.yaml +++ b/payload-manifests/featuregates/featureGate-4-10-Hypershift-OKD.yaml @@ -22,15 +22,9 @@ { "name": "AWSDedicatedHosts" }, - { - "name": "AWSDualStackInstall" - }, { "name": "AWSEuropeanSovereignCloudInstall" }, - { - "name": "AdditionalStorageConfig" - }, { "name": "AuthenticationComponentProxy" }, @@ -161,13 +155,10 @@ "name": "GCPSovereignCloudInstall" }, { - "name": "ImageModeStatusReporting" - }, - { - "name": "IngressControllerMultipleHAProxyVersions" + "name": "GatewayAPIManagementMode" }, { - "name": "IrreconcilableMachineConfig" + "name": "ImageModeStatusReporting" }, { "name": "KMSEncryption" @@ -241,9 +232,6 @@ { "name": "NewOLMOwnSingleNamespace" }, - { - "name": "NewOLMPreflightPermissionChecks" - }, { "name": "NewOLMWebhookProviderOpenshiftServiceCA" }, @@ -303,9 +291,15 @@ { "name": "AWSClusterHostedDNSInstall" }, + { + "name": "AWSDualStackInstall" + }, { "name": "AWSServiceLBNetworkSecurityGroup" }, + { + "name": "AdditionalStorageConfig" + }, { "name": "AzureWorkloadIdentity" }, @@ -345,12 +339,18 @@ { "name": "IngressControllerDynamicConfigurationManager" }, + { + "name": "IngressControllerMultipleHAProxyVersions" + }, { "name": "InsightsConfig" }, { "name": "InsightsOnDemandDataGather" }, + { + "name": "IrreconcilableMachineConfig" + }, { "name": "KMSv1" }, @@ -369,9 +369,6 @@ { "name": "OpenShiftPodSecurityAdmission" }, - { - "name": "RouteExternalCertificate" - }, { "name": "ServiceAccountTokenNodeBinding" }, diff --git a/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-Default.yaml b/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-Default.yaml index 9abe667dc62..85d82f548d7 100644 --- a/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-Default.yaml +++ b/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-Default.yaml @@ -20,15 +20,9 @@ { "name": "AWSDedicatedHosts" }, - { - "name": "AWSDualStackInstall" - }, { "name": "AWSEuropeanSovereignCloudInstall" }, - { - "name": "AdditionalStorageConfig" - }, { "name": "AuthenticationComponentProxy" }, @@ -56,9 +50,6 @@ { "name": "CRDCompatibilityRequirementOperator" }, - { - "name": "CRIOCredentialProviderConfig" - }, { "name": "ClientsAllowCBOR" }, @@ -159,16 +150,13 @@ "name": "GCPSovereignCloudInstall" }, { - "name": "HyperShiftOnlyDynamicResourceAllocation" + "name": "GatewayAPIManagementMode" }, { - "name": "ImageModeStatusReporting" - }, - { - "name": "IngressControllerMultipleHAProxyVersions" + "name": "HyperShiftOnlyDynamicResourceAllocation" }, { - "name": "IrreconcilableMachineConfig" + "name": "ImageModeStatusReporting" }, { "name": "KMSEncryption" @@ -239,15 +227,9 @@ { "name": "NewOLMOwnSingleNamespace" }, - { - "name": "NewOLMPreflightPermissionChecks" - }, { "name": "NoOverlayMode" }, - { - "name": "NoRegistryClusterInstall" - }, { "name": "NutanixMultiSubnets" }, @@ -292,9 +274,15 @@ { "name": "AWSClusterHostedDNSInstall" }, + { + "name": "AWSDualStackInstall" + }, { "name": "AWSServiceLBNetworkSecurityGroup" }, + { + "name": "AdditionalStorageConfig" + }, { "name": "AzureWorkloadIdentity" }, @@ -304,6 +292,9 @@ { "name": "BuildCSIVolumes" }, + { + "name": "CRIOCredentialProviderConfig" + }, { "name": "DualReplica" }, @@ -331,12 +322,18 @@ { "name": "IngressControllerDynamicConfigurationManager" }, + { + "name": "IngressControllerMultipleHAProxyVersions" + }, { "name": "InsightsConfig" }, { "name": "InsightsOnDemandDataGather" }, + { + "name": "IrreconcilableMachineConfig" + }, { "name": "KMSv1" }, @@ -358,6 +355,9 @@ { "name": "NewOLMWebhookProviderOpenshiftServiceCA" }, + { + "name": "NoRegistryClusterInstall" + }, { "name": "OLMLifecycleAndCompatibility" }, @@ -367,9 +367,6 @@ { "name": "OpenShiftPodSecurityAdmission" }, - { - "name": "RouteExternalCertificate" - }, { "name": "ServiceAccountTokenNodeBinding" }, diff --git a/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-OKD.yaml b/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-OKD.yaml index 1f335499ed8..bc9a7583c6b 100644 --- a/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-OKD.yaml +++ b/payload-manifests/featuregates/featureGate-4-10-SelfManagedHA-OKD.yaml @@ -22,15 +22,9 @@ { "name": "AWSDedicatedHosts" }, - { - "name": "AWSDualStackInstall" - }, { "name": "AWSEuropeanSovereignCloudInstall" }, - { - "name": "AdditionalStorageConfig" - }, { "name": "AuthenticationComponentProxy" }, @@ -58,9 +52,6 @@ { "name": "CRDCompatibilityRequirementOperator" }, - { - "name": "CRIOCredentialProviderConfig" - }, { "name": "ClientsAllowCBOR" }, @@ -161,16 +152,13 @@ "name": "GCPSovereignCloudInstall" }, { - "name": "HyperShiftOnlyDynamicResourceAllocation" + "name": "GatewayAPIManagementMode" }, { - "name": "ImageModeStatusReporting" - }, - { - "name": "IngressControllerMultipleHAProxyVersions" + "name": "HyperShiftOnlyDynamicResourceAllocation" }, { - "name": "IrreconcilableMachineConfig" + "name": "ImageModeStatusReporting" }, { "name": "KMSEncryption" @@ -241,15 +229,9 @@ { "name": "NewOLMOwnSingleNamespace" }, - { - "name": "NewOLMPreflightPermissionChecks" - }, { "name": "NoOverlayMode" }, - { - "name": "NoRegistryClusterInstall" - }, { "name": "NutanixMultiSubnets" }, @@ -294,9 +276,15 @@ { "name": "AWSClusterHostedDNSInstall" }, + { + "name": "AWSDualStackInstall" + }, { "name": "AWSServiceLBNetworkSecurityGroup" }, + { + "name": "AdditionalStorageConfig" + }, { "name": "AzureWorkloadIdentity" }, @@ -306,6 +294,9 @@ { "name": "BuildCSIVolumes" }, + { + "name": "CRIOCredentialProviderConfig" + }, { "name": "DualReplica" }, @@ -333,12 +324,18 @@ { "name": "IngressControllerDynamicConfigurationManager" }, + { + "name": "IngressControllerMultipleHAProxyVersions" + }, { "name": "InsightsConfig" }, { "name": "InsightsOnDemandDataGather" }, + { + "name": "IrreconcilableMachineConfig" + }, { "name": "KMSv1" }, @@ -360,6 +357,9 @@ { "name": "NewOLMWebhookProviderOpenshiftServiceCA" }, + { + "name": "NoRegistryClusterInstall" + }, { "name": "OLMLifecycleAndCompatibility" }, @@ -369,9 +369,6 @@ { "name": "OpenShiftPodSecurityAdmission" }, - { - "name": "RouteExternalCertificate" - }, { "name": "ServiceAccountTokenNodeBinding" },